$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft File: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft (raw, json) Hash identifier: NwWxUSkWKGFrCEHSKE8YcoxuPGtjj2dzmnTRzvrSgrE= Subject key identifier: B4:3C:03:B6:35:5A:9C:71:79:80:DB:05:95:6D:F6:BD:18:DE:09:96 Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Certificate serial: 48408418CC7A2D6F7E9F39319D94200126309001 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft Manifest number: 01BF Signing time: Mon 30 Jun 2025 11:01:19 +0000 Manifest this update: Mon 30 Jun 2025 10:56:19 +0000 Manifest next update: Thu 03 Jul 2025 11:18:19 +0000 Files and hashes: 1: 3132342e3130392e32322e302f32342d3234203d3e20313339393439.roa (hash: nFcoITtIiJ8OFT6DwBHGCFY6SRcCiphSoQyOwQxbdew=) 2: 32372e3132342e38332e302f32342d3234203d3e203338353237.roa (hash: L5InqyKvyWP9tFezdM+9rBpde1AjX1HCs7qP97HZ0mU=) 3: 3131392e34372e39352e302f32342d3234203d3e20313530323438.roa (hash: nIrbzR22XSry4Jrw3LIPGv150kbPZD6HPRMENEZHMHw=) 4: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: 2N3BwgIjWHFbTQKqljv/UDzpCDNCSry44iBQjllcOAY=) 5: 3132342e3130392e32332e302f32342d3234203d3e203338353237.roa (hash: hSmHQriBgEB6G8euGPo5okmMfhhllZ1AqyrcnX9VlJE=) 6: 3132342e3130392e32312e302f32342d3234203d3e203338353237.roa (hash: JF25GsZLyzVMqdMpnO1WYlSsjR6hM621Mtm2BRDUvVE=) 7: 3132342e3130392e32302e302f32342d3234203d3e203338353237.roa (hash: ETJz1GlN0xqgrI/TiDRe3oL2wRqZlR8gI6HL/idn2yc=) 8: 3130332e32352e3130382e302f32342d3234203d3e20313339393439.roa (hash: qqfzsjlYqjPxNhzC0UkUL2m+zHonm3K6iD+8hUdOJig=) 9: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl (hash: vZNwC9LBax1HyrPT1lQnUEFi08qaTBR7qNH6+/46e/8=) 10: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: gaK9TNDkDAX6rLbicLT8NaMu8dPZqEuVmgkAb8uim8M=) 11: 3131392e34372e39302e302f32342d3234203d3e203338353237.roa (hash: 2gYjkNpQS7rIhX41LQ5E9ZRuFubPcLm5+1qbHYEWbNU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 11:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:40:84:18:cc:7a:2d:6f:7e:9f:39:31:9d:94:20:01:26:30:90:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Validity Not Before: Jun 30 10:56:19 2025 GMT Not After : Jul 3 11:18:19 2025 GMT Subject: CN=B43C03B6355A9C717980DB05956DF6BD18DE0996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6b:06:1f:cf:14:08:92:e8:3f:fa:14:fd:23: 9e:bc:27:ef:5b:ed:2f:24:c1:55:c6:22:dc:c4:0e: 31:1e:a7:ac:21:f7:d6:2d:b5:6a:28:80:52:e1:50: 57:96:c2:62:7d:d2:8e:85:13:82:b9:ee:d6:08:a3: 06:a1:c0:c6:dd:78:f3:18:88:e8:cc:b3:b8:3e:83: 04:58:79:45:c9:21:9f:76:61:f0:51:f6:07:bc:07: e4:1f:b6:e3:c2:38:e0:08:40:20:3c:c7:23:67:a9: 3e:40:0c:7d:2f:92:75:63:7b:a7:19:f6:28:fe:9b: bc:41:3b:4f:3a:11:7e:eb:dd:96:02:07:92:3b:aa: ca:5b:9b:b4:cf:02:48:f4:80:30:cc:c9:ed:52:d2: d0:5c:09:39:81:46:46:9f:a8:f3:25:6b:22:29:59: 1c:ba:38:63:23:7b:00:9a:7e:2d:23:d8:17:c8:a8: 03:af:4b:cf:47:99:8c:e2:7a:59:78:c1:35:b1:95: 3a:e5:da:fb:c3:77:c2:1b:20:40:c6:58:ea:f1:cd: fc:2e:09:6c:dd:d3:b3:d8:4b:b8:14:a3:ee:5c:5b: d9:96:e0:e8:b2:03:a8:9e:ec:f7:bb:8b:a6:f8:81: 4b:f2:cf:d3:c7:53:e5:4d:ec:cd:d1:25:82:97:29: 8b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3C:03:B6:35:5A:9C:71:79:80:DB:05:95:6D:F6:BD:18:DE:09:96 X509v3 Authority Key Identifier: keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:d3:f5:83:76:f8:aa:5c:66:3f:19:57:31:93:0d:c9:18:9b: db:53:48:73:93:dd:11:28:e0:fa:8e:77:5b:e3:b8:d0:45:a3: 5e:d7:f3:ba:af:d3:9a:7c:17:67:5b:d4:11:32:b2:6f:08:77: fd:3a:fe:6a:ac:d1:12:bd:a6:76:24:c2:19:87:b6:ac:db:89: ee:3f:c0:b9:ce:2e:fb:c5:87:3d:15:13:80:2f:fc:45:83:96: ed:3e:e0:16:35:c8:83:76:1e:d2:20:60:f2:40:ea:f0:ce:7c: 91:51:4e:07:35:47:64:92:d6:63:3c:10:9d:84:d3:d7:24:e8: c1:c1:c6:3f:b4:df:12:84:2a:55:70:21:7f:83:fa:aa:8a:b0: bb:34:3e:74:df:cb:aa:e5:ed:b8:cb:8a:55:2d:f0:69:f4:8e: 79:a5:68:fb:7e:a6:b8:b7:cb:ed:e7:e1:da:23:3f:4d:3c:63: b1:38:32:76:dd:24:69:1c:76:c7:f5:ed:ee:19:ee:12:52:0b: 53:b7:d9:6e:50:97:8d:78:3b:78:2d:30:68:29:76:dc:ba:3f: 63:d3:3d:67:87:5a:fb:a7:f3:e1:2c:b9:0a:cf:d9:1c:55:41: 07:a1:8f:f1:2a:6f:e7:01:c9:f2:3a:31:bc:06:c3:02:df:de: d9:17:fd:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSECEGMx6LW9+nzkxnZQgASYwkAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD RjlBNjQ3MzAeFw0yNTA2MzAxMDU2MTlaFw0yNTA3MDMxMTE4MTlaMDMxMTAvBgNV BAMTKEI0M0MwM0I2MzU1QTlDNzE3OTgwREIwNTk1NkRGNkJEMThERTA5OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClawYfzxQIkug/+hT9I568J+9b 7S8kwVXGItzEDjEep6wh99YttWoogFLhUFeWwmJ90o6FE4K57tYIowahwMbdePMY iOjMs7g+gwRYeUXJIZ92YfBR9ge8B+QftuPCOOAIQCA8xyNnqT5ADH0vknVje6cZ 9ij+m7xBO086EX7r3ZYCB5I7qspbm7TPAkj0gDDMye1S0tBcCTmBRkafqPMlayIp WRy6OGMjewCafi0j2BfIqAOvS89HmYziell4wTWxlTrl2vvDd8IbIEDGWOrxzfwu CWzd07PYS7gUo+5cW9mW4OiyA6ie7Pe7i6b4gUvyz9PHU+VN7M3RJYKXKYuhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtDwDtjVanHF5gNsFlW32vRjeCZYwHwYDVR0j BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB NjQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE3ZWZkMmEtMDJhYi00MjAyLTk3 MGYtZjY5OWRmZjk3ZGU1LzAvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VE NTBDRjlBNjQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfT9YN2+KpcZj8ZVzGTDckYm9tTSHOT3REo 4PqOd1vjuNBFo17X87qv05p8F2db1BEysm8Id/06/mqs0RK9pnYkwhmHtqzbie4/ wLnOLvvFhz0VE4Av/EWDlu0+4BY1yIN2HtIgYPJA6vDOfJFRTgc1R2SS1mM8EJ2E 09ck6MHBxj+03xKEKlVwIX+D+qqKsLs0PnTfy6rl7bjLilUt8Gn0jnmlaPt+pri3 y+3n4dojP008Y7E4MnbdJGkcdsf17e4Z7hJSC1O32W5Ql414O3gtMGgpdty6P2PT PWeHWvun8+EsuQrP2RxVQQehj/Eqb+cByfI6MbwGwwLf3tkX/eM= -----END CERTIFICATE-----Generated at Tue Jul 1 05:10:24 2025 by rpki-client