$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft File: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft (raw, json) Hash identifier: CAmQylE4Uo3ur2g/ivXewnezDSx9fbmkiyMCmXUKlVU= Subject key identifier: C7:A0:F7:FA:AF:76:B6:1F:57:39:B7:56:91:FA:16:AB:F2:61:09:2C Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Certificate serial: 6CAA0B09AB5055CB697CA8D4FF6C0156D141FF25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft Manifest number: 01D8 Signing time: Fri 22 Aug 2025 07:41:20 +0000 Manifest this update: Fri 22 Aug 2025 07:36:20 +0000 Manifest next update: Mon 25 Aug 2025 13:21:20 +0000 Files and hashes: 1: 3130332e32352e3130382e302f32342d3234203d3e20313339393439.roa (hash: qqfzsjlYqjPxNhzC0UkUL2m+zHonm3K6iD+8hUdOJig=) 2: 3131392e34372e39302e302f32342d3234203d3e203338353237.roa (hash: 2gYjkNpQS7rIhX41LQ5E9ZRuFubPcLm5+1qbHYEWbNU=) 3: 3131392e34372e39352e302f32342d3234203d3e203338353237.roa (hash: BqQhhrsqBYVQaOkGhTzanzYpE+3yxY19OwGCf/8TD+4=) 4: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl (hash: 2/POznNskXctqVelvgh8/KF4neqN8M5KNkVD6omzQa0=) 5: 3132342e3130392e32302e302f32342d3234203d3e203338353237.roa (hash: ETJz1GlN0xqgrI/TiDRe3oL2wRqZlR8gI6HL/idn2yc=) 6: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: gaK9TNDkDAX6rLbicLT8NaMu8dPZqEuVmgkAb8uim8M=) 7: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: 2N3BwgIjWHFbTQKqljv/UDzpCDNCSry44iBQjllcOAY=) 8: 3132342e3130392e32322e302f32342d3234203d3e20313339393439.roa (hash: HVWbk3IWKH+5JXE4MGQxsGy0csGyHkuWv0WX8uhGzdw=) 9: 3132342e3130392e32332e302f32342d3234203d3e203338353237.roa (hash: hSmHQriBgEB6G8euGPo5okmMfhhllZ1AqyrcnX9VlJE=) 10: 32372e3132342e38332e302f32342d3234203d3e203338353237.roa (hash: L5InqyKvyWP9tFezdM+9rBpde1AjX1HCs7qP97HZ0mU=) 11: 3132342e3130392e32312e302f32342d3234203d3e203338353237.roa (hash: JF25GsZLyzVMqdMpnO1WYlSsjR6hM621Mtm2BRDUvVE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 13:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:aa:0b:09:ab:50:55:cb:69:7c:a8:d4:ff:6c:01:56:d1:41:ff:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Validity Not Before: Aug 22 07:36:20 2025 GMT Not After : Aug 25 13:21:20 2025 GMT Subject: CN=C7A0F7FAAF76B61F5739B75691FA16ABF261092C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d4:54:ac:e2:f6:2d:d9:8e:0c:49:8e:3a:a0: e2:6e:5c:d2:87:c0:43:88:a1:fe:e3:c8:56:11:56: 14:b9:3b:db:13:5c:83:fe:e3:dc:90:da:8c:be:b1: e9:5c:a9:a7:0e:70:6c:dd:b8:d2:60:fe:72:4c:0d: 4a:4b:f4:a1:8d:75:b5:0d:b2:db:11:0d:09:48:5e: 52:22:dd:a5:38:d7:a1:a1:3c:d1:36:25:e6:ee:35: d1:cf:47:07:a4:6f:2b:d5:24:b5:0a:83:25:61:cd: 4f:15:ad:0a:66:fd:93:c2:a0:6b:ae:22:b7:1c:d9: 05:e1:14:0a:ad:cc:e8:72:9e:3f:47:c2:d8:3e:8d: be:a2:1b:0c:18:54:43:89:d2:26:2b:6a:66:5b:86: 1f:78:19:d2:ed:4b:4a:a1:af:ff:a3:c6:de:d3:0b: 61:3a:23:d0:c7:d3:dd:fe:0a:85:5d:f0:52:ff:db: 04:2e:06:31:8f:bc:c6:e8:ad:11:db:9b:32:48:84: 48:93:0b:b1:66:df:08:29:bd:9a:1c:60:e3:b0:c8: e3:e4:e7:71:7d:9c:a4:95:d1:28:7d:6f:b6:17:93: 62:62:8e:47:d6:f5:66:85:83:7c:92:10:d7:1d:ab: 44:6e:f1:78:b5:1f:91:62:d3:d9:dd:1f:62:53:7d: 7b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A0:F7:FA:AF:76:B6:1F:57:39:B7:56:91:FA:16:AB:F2:61:09:2C X509v3 Authority Key Identifier: keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:af:59:33:59:f2:9b:aa:a4:33:cd:74:c8:c4:3d:18:d0:cd: 02:fc:a0:d0:97:79:1f:58:8c:76:c4:0b:39:ac:3c:f9:51:68: d5:d7:8b:46:63:7c:d6:f0:e1:48:79:d0:b3:bb:5e:cd:6f:1c: f6:13:dd:3c:ac:f4:ad:e0:d5:7f:d0:01:c0:71:5a:e5:5d:14: 06:80:74:43:7b:2c:ee:2c:ca:db:8e:69:d9:5e:cd:a4:91:f0: 9d:79:c1:9c:33:f2:38:fd:3b:c2:09:5a:88:3e:bb:8c:e4:d0: e3:af:cc:a0:c7:32:c6:68:dc:fe:aa:c0:6c:ee:03:e2:65:31: 54:93:e9:8f:1a:12:8e:fe:48:30:a1:ed:a2:91:cb:9b:8f:86: b6:a2:a0:84:86:6b:fd:2a:b2:46:18:67:4d:6b:85:45:2e:fe: e0:96:85:a6:d3:17:97:67:7c:47:73:f7:e7:03:31:de:28:0c: c0:5f:23:6d:8c:3e:0a:a7:f2:1f:6d:98:4f:2e:72:e7:d2:f5: 4d:85:84:1c:77:92:0c:9b:06:91:a3:29:14:2a:5a:37:20:11: 2b:f5:0c:47:4a:1f:40:97:13:f3:c9:89:c9:db:30:3e:7f:d5: e5:b7:d1:10:35:d5:0a:81:33:96:1a:31:72:aa:7a:1d:0d:bb: 7c:12:0a:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbKoLCatQVctpfKjU/2wBVtFB/yUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD RjlBNjQ3MzAeFw0yNTA4MjIwNzM2MjBaFw0yNTA4MjUxMzIxMjBaMDMxMTAvBgNV BAMTKEM3QTBGN0ZBQUY3NkI2MUY1NzM5Qjc1NjkxRkExNkFCRjI2MTA5MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT1FSs4vYt2Y4MSY46oOJuXNKH wEOIof7jyFYRVhS5O9sTXIP+49yQ2oy+selcqacOcGzduNJg/nJMDUpL9KGNdbUN stsRDQlIXlIi3aU416GhPNE2JebuNdHPRwekbyvVJLUKgyVhzU8VrQpm/ZPCoGuu Ircc2QXhFAqtzOhynj9Hwtg+jb6iGwwYVEOJ0iYramZbhh94GdLtS0qhr/+jxt7T C2E6I9DH093+CoVd8FL/2wQuBjGPvMborRHbmzJIhEiTC7Fm3wgpvZocYOOwyOPk 53F9nKSV0Sh9b7YXk2JijkfW9WaFg3ySENcdq0Ru8Xi1H5Fi09ndH2JTfXsDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx6D3+q92th9XObdWkfoWq/JhCSwwHwYDVR0j BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB NjQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE3ZWZkMmEtMDJhYi00MjAyLTk3 MGYtZjY5OWRmZjk3ZGU1LzAvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VE NTBDRjlBNjQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMyvWTNZ8puqpDPNdMjEPRjQzQL8oNCXeR9Y jHbECzmsPPlRaNXXi0ZjfNbw4Uh50LO7Xs1vHPYT3Tys9K3g1X/QAcBxWuVdFAaA dEN7LO4sytuOadlezaSR8J15wZwz8jj9O8IJWog+u4zk0OOvzKDHMsZo3P6qwGzu A+JlMVST6Y8aEo7+SDCh7aKRy5uPhraioISGa/0qskYYZ01rhUUu/uCWhabTF5dn fEdz9+cDMd4oDMBfI22MPgqn8h9tmE8ucufS9U2FhBx3kgybBpGjKRQqWjcgESv1 DEdKH0CXE/PJicnbMD5/1eW30RA11QqBM5YaMXKqeh0Nu3wSCnc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:15:22 2025 by rpki-client