$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft File: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft (raw, json) Hash identifier: K8lwxE1jI2GkI/2wzCwigoeGaOoalTy02KKxHnVpzM8= Subject key identifier: C8:16:F8:98:CB:C7:5F:C0:DB:82:DE:46:DB:C7:0E:0D:11:EF:20:B4 Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Certificate serial: 19B5BF92D03AF7DCF0055763D15C73D6D2B90BA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft Manifest number: 0307 Signing time: Wed 02 Jul 2025 06:51:19 +0000 Manifest this update: Wed 02 Jul 2025 06:46:19 +0000 Manifest next update: Sat 05 Jul 2025 18:01:19 +0000 Files and hashes: 1: AS45700.roa (hash: BXkE0BXqN50iJBAlAe18i/nlvwrKk+4GRFc684uKAn8=) 2: AS147168.roa (hash: e20CGZZgjTyz3kNZT3WXZXnYEX1ApqROokbLe+6uHIA=) 3: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl (hash: /qO8PJEkgj44N074XvQalgncxrJuezG/vSQv7Dqb7zM=) 4: AS10217.roa (hash: JJQedycT2rxuZ0WKBIVY+WZbOwVugUFQzwOutSTR+VY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 18:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:b5:bf:92:d0:3a:f7:dc:f0:05:57:63:d1:5c:73:d6:d2:b9:0b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Validity Not Before: Jul 2 06:46:19 2025 GMT Not After : Jul 5 18:01:19 2025 GMT Subject: CN=C816F898CBC75FC0DB82DE46DBC70E0D11EF20B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:07:86:67:fa:9d:ad:33:05:64:db:65:fe:ed: cb:ff:fb:b3:f8:c5:af:fb:06:30:0a:b4:7f:a2:fd: da:cb:49:ff:ae:5f:24:57:38:f5:b6:c5:97:20:ff: 03:07:cd:b7:04:d0:f6:62:63:6b:c2:05:7b:1f:2e: b9:46:0e:d7:7a:07:ba:f0:6f:27:f0:f2:64:44:03: 41:32:75:5e:f7:3e:44:35:e9:c6:7f:87:fd:80:e2: b9:d3:60:1c:10:96:7e:11:39:55:bf:37:56:64:31: ed:5c:cd:52:c2:71:e2:a2:60:13:9d:5e:6e:08:3d: 4c:50:12:d0:79:2a:86:25:99:c9:34:50:58:db:0e: 2c:0b:e0:d1:f0:c5:30:71:db:f2:69:d9:19:cf:49: d5:73:3c:6f:a9:96:bd:28:54:5f:a2:83:15:31:61: 97:08:1a:34:f0:e7:89:58:53:c0:a5:f7:52:41:90: 0c:2d:a8:cb:6a:1d:a0:8d:4f:c9:c5:b3:46:76:91: d9:c2:b1:f9:2b:27:1b:8c:db:64:82:bc:ad:c9:4b: 8f:e7:07:01:5f:d8:e2:27:fd:08:bb:29:22:8c:bd: 94:3d:b0:9d:fc:4f:22:17:67:d7:85:54:d1:8d:a6: be:62:65:73:c8:29:55:d2:00:9d:f9:78:64:3e:0f: 29:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:16:F8:98:CB:C7:5F:C0:DB:82:DE:46:DB:C7:0E:0D:11:EF:20:B4 X509v3 Authority Key Identifier: keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:12:bf:b8:a2:02:63:8a:e8:f2:61:68:20:c2:f4:e8:14:eb: b9:f5:e0:c4:bc:7b:55:9e:9a:76:60:dc:ac:b5:6a:f6:41:a4: 10:62:bc:00:bd:a5:e7:58:bd:c7:8a:ae:2e:39:68:73:ca:68: 8e:84:42:92:0f:a3:59:40:5c:fe:04:59:01:9b:aa:91:c7:9f: d6:28:d5:8f:f2:7e:f9:0d:02:17:e1:dc:3c:9b:8a:07:95:83: 9e:50:9a:cc:94:0a:93:58:b6:46:3f:ec:69:9b:af:4c:19:54: 7b:2e:c1:a4:84:f8:e1:90:0e:4f:df:c5:25:ce:15:65:d8:70: 2b:cb:58:66:11:2a:cb:f9:f0:67:23:a3:e7:eb:12:21:fc:15: a1:96:95:90:e8:9d:77:76:78:58:50:b5:1e:6c:c0:69:b9:59: 2a:25:a2:28:17:67:b7:b7:38:39:45:84:7e:59:00:68:b9:a5: ee:82:d6:53:3d:7b:d2:21:f9:b3:e4:b6:81:a1:26:b8:1d:d0: 89:a9:fd:76:79:9f:18:8f:6b:69:a8:3e:b7:fa:51:16:99:50: 60:cb:43:78:aa:8d:8a:29:37:9a:45:0b:db:8a:8d:53:65:42: e7:8a:fd:00:b0:cb:27:9f:6d:eb:c9:0c:c1:29:41:98:6e:8c: 68:3b:a1:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGbW/ktA699zwBVdj0Vxz1tK5C6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF MkMzQjUxMjAeFw0yNTA3MDIwNjQ2MTlaFw0yNTA3MDUxODAxMTlaMDMxMTAvBgNV BAMTKEM4MTZGODk4Q0JDNzVGQzBEQjgyREU0NkRCQzcwRTBEMTFFRjIwQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAB4Zn+p2tMwVk22X+7cv/+7P4 xa/7BjAKtH+i/drLSf+uXyRXOPW2xZcg/wMHzbcE0PZiY2vCBXsfLrlGDtd6B7rw byfw8mREA0EydV73PkQ16cZ/h/2A4rnTYBwQln4ROVW/N1ZkMe1czVLCceKiYBOd Xm4IPUxQEtB5KoYlmck0UFjbDiwL4NHwxTBx2/Jp2RnPSdVzPG+plr0oVF+igxUx YZcIGjTw54lYU8Cl91JBkAwtqMtqHaCNT8nFs0Z2kdnCsfkrJxuM22SCvK3JS4/n BwFf2OIn/Qi7KSKMvZQ9sJ38TyIXZ9eFVNGNpr5iZXPIKVXSAJ35eGQ+DynVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyBb4mMvHX8Dbgt5G28cODRHvILQwHwYDVR0j BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz QjUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk YmQtMjU0MzgxMDY5ZTU3LzAvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4 MkFFMkMzQjUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4Sv7iiAmOK6PJhaCDC9OgU67n14MS8e1We mnZg3Ky1avZBpBBivAC9pedYvceKri45aHPKaI6EQpIPo1lAXP4EWQGbqpHHn9Yo 1Y/yfvkNAhfh3DybigeVg55QmsyUCpNYtkY/7Gmbr0wZVHsuwaSE+OGQDk/fxSXO FWXYcCvLWGYRKsv58Gcjo+frEiH8FaGWlZDonXd2eFhQtR5swGm5WSoloigXZ7e3 ODlFhH5ZAGi5pe6C1lM9e9Ih+bPktoGhJrgd0Imp/XZ5nxiPa2moPrf6URaZUGDL Q3iqjYopN5pFC9uKjVNlQueK/QCwyyefbevJDMEpQZhujGg7oQ8= -----END CERTIFICATE-----Generated at Thu Jul 3 05:53:24 2025 by rpki-client