$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft File: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft (raw, json) Hash identifier: NhfVO6C6JivwoKabqVg0i/KDB+7jTrpl4C4v9RCkLdM= Subject key identifier: 7A:91:59:C2:ED:79:2D:02:00:20:CB:06:1D:76:AC:67:16:5C:B4:19 Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Certificate serial: 2DFCE87E95F07D36659826AB68B305968956F533 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft Manifest number: 031D Signing time: Fri 22 Aug 2025 01:21:20 +0000 Manifest this update: Fri 22 Aug 2025 01:16:20 +0000 Manifest next update: Mon 25 Aug 2025 11:40:20 +0000 Files and hashes: 1: AS45700.roa (hash: BXkE0BXqN50iJBAlAe18i/nlvwrKk+4GRFc684uKAn8=) 2: AS10217.roa (hash: JJQedycT2rxuZ0WKBIVY+WZbOwVugUFQzwOutSTR+VY=) 3: AS147168.roa (hash: e20CGZZgjTyz3kNZT3WXZXnYEX1ApqROokbLe+6uHIA=) 4: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl (hash: GyTU8F0HzsG27KZV4C3ZCl/W+mvZpQfUMmISZo9vSuU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:fc:e8:7e:95:f0:7d:36:65:98:26:ab:68:b3:05:96:89:56:f5:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Validity Not Before: Aug 22 01:16:20 2025 GMT Not After : Aug 25 11:40:20 2025 GMT Subject: CN=7A9159C2ED792D020020CB061D76AC67165CB419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5c:50:11:66:d1:2d:da:95:a1:cb:77:8d:26: 9e:8a:84:08:32:72:f7:33:5a:82:d6:40:04:7d:5f: d9:e0:b1:5b:4e:b8:c2:2d:54:01:c0:f3:22:10:86: 62:cd:7a:8b:ff:1e:c9:72:c9:08:3f:ba:a2:95:5e: a0:c2:3d:d1:20:a1:19:0e:24:05:33:cc:76:c8:3e: a6:24:66:90:12:19:e0:6b:37:ca:a1:4f:fa:69:a2: f6:00:06:e8:85:15:3f:fb:c5:37:22:3e:0e:e6:34: cf:d3:e4:53:47:73:a8:f8:6c:2c:ca:c2:61:3d:f5: 51:77:8e:60:bc:ac:a3:07:b8:ca:47:eb:a8:d8:d5: a8:41:2d:dc:03:9a:bd:3b:7c:48:e7:02:d7:10:fd: 4e:19:bc:8b:97:ee:88:a6:7b:86:91:39:9c:1e:0c: c8:c4:79:b7:a1:0e:db:54:c9:ba:4a:6b:be:49:59: eb:cb:60:f2:32:16:e3:d3:4a:b4:c7:eb:0c:29:a9: 46:a0:58:0f:63:4b:06:f5:e2:96:87:4d:3a:0d:bb: 25:e2:69:29:40:da:6d:ab:b5:2c:94:31:ce:f6:51: 6f:aa:50:9e:c6:af:50:b5:f5:71:09:e7:fc:e3:54: e9:55:d0:f9:5a:78:65:c0:68:0c:2a:de:f7:1c:af: 1a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:91:59:C2:ED:79:2D:02:00:20:CB:06:1D:76:AC:67:16:5C:B4:19 X509v3 Authority Key Identifier: keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b9:fc:7f:63:41:73:10:43:ac:bd:d3:62:94:f1:ef:33:78: fd:d0:92:0d:85:fa:3f:71:9d:94:f2:4f:78:7a:b8:d5:f1:32: 09:ec:82:dd:c0:9e:f1:a9:7e:82:02:0a:84:be:d1:73:63:00: f5:e0:6e:3c:12:c0:87:56:2a:6f:78:5b:61:41:88:23:31:82: 33:33:40:56:79:f2:da:c9:33:51:84:37:64:1a:1a:1e:c4:80: b5:e5:b1:c3:91:13:a8:21:76:47:01:6a:6d:68:e3:63:84:63: 2e:de:86:c4:b5:3d:8a:a7:51:ab:d3:30:c3:e1:c9:d6:4f:c8: 6a:d0:90:d9:cb:32:3e:66:87:21:be:24:a8:2c:5b:22:98:4c: 40:71:86:b8:60:23:94:b6:22:76:b7:82:08:ee:76:ff:ea:c1: 25:8b:16:2f:ce:dd:61:b1:1d:3b:d3:da:3c:45:1e:8c:81:f0: db:dc:bb:37:d8:9e:4a:08:9a:7e:73:04:57:fc:c4:72:05:e3: 95:6a:e9:07:50:0a:8f:75:7f:6e:84:62:34:0d:fc:bc:b7:e5: d4:6b:90:e6:93:00:51:00:25:20:71:6b:ce:45:00:ad:82:fb: 2a:2f:99:cb:d2:52:3e:2f:05:2d:8d:64:30:3a:97:f4:81:1c: 58:b0:b3:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULfzofpXwfTZlmCaraLMFlolW9TMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF MkMzQjUxMjAeFw0yNTA4MjIwMTE2MjBaFw0yNTA4MjUxMTQwMjBaMDMxMTAvBgNV BAMTKDdBOTE1OUMyRUQ3OTJEMDIwMDIwQ0IwNjFENzZBQzY3MTY1Q0I0MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKXFARZtEt2pWhy3eNJp6KhAgy cvczWoLWQAR9X9ngsVtOuMItVAHA8yIQhmLNeov/HslyyQg/uqKVXqDCPdEgoRkO JAUzzHbIPqYkZpASGeBrN8qhT/ppovYABuiFFT/7xTciPg7mNM/T5FNHc6j4bCzK wmE99VF3jmC8rKMHuMpH66jY1ahBLdwDmr07fEjnAtcQ/U4ZvIuX7oime4aROZwe DMjEebehDttUybpKa75JWevLYPIyFuPTSrTH6wwpqUagWA9jSwb14paHTToNuyXi aSlA2m2rtSyUMc72UW+qUJ7Gr1C19XEJ5/zjVOlV0PlaeGXAaAwq3vccrxo3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUepFZwu15LQIAIMsGHXasZxZctBkwHwYDVR0j BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz QjUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk YmQtMjU0MzgxMDY5ZTU3LzAvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4 MkFFMkMzQjUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACm5/H9jQXMQQ6y902KU8e8zeP3Qkg2F+j9x nZTyT3h6uNXxMgnsgt3AnvGpfoICCoS+0XNjAPXgbjwSwIdWKm94W2FBiCMxgjMz QFZ58trJM1GEN2QaGh7EgLXlscORE6ghdkcBam1o42OEYy7ehsS1PYqnUavTMMPh ydZPyGrQkNnLMj5mhyG+JKgsWyKYTEBxhrhgI5S2Ina3ggjudv/qwSWLFi/O3WGx HTvT2jxFHoyB8NvcuzfYnkoImn5zBFf8xHIF45Vq6QdQCo91f26EYjQN/Ly35dRr kOaTAFEAJSBxa85FAK2C+yovmcvSUj4vBS2NZDA6l/SBHFiws7U= -----END CERTIFICATE-----Generated at Sat Aug 23 10:43:03 2025 by rpki-client