$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft File: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft (raw, json) Hash identifier: jxaIbrn3chDvawFDi9QZLpmZbyWD9EQTHuEP9gzfi0w= Subject key identifier: 4D:57:05:99:06:3A:5C:7A:73:91:A4:57:E3:6A:5E:CF:C9:1C:CB:18 Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Certificate serial: 437F1F12CE7F322E1F180F777EC10FDEAEF35165 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft Manifest number: 01A7 Signing time: Fri 09 May 2025 17:51:21 +0000 Manifest this update: Fri 09 May 2025 17:46:21 +0000 Manifest next update: Mon 12 May 2025 21:49:21 +0000 Files and hashes: 1: 3132342e3130392e32312e302f32342d3234203d3e203338353237.roa (hash: JF25GsZLyzVMqdMpnO1WYlSsjR6hM621Mtm2BRDUvVE=) 2: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: 2N3BwgIjWHFbTQKqljv/UDzpCDNCSry44iBQjllcOAY=) 3: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: gaK9TNDkDAX6rLbicLT8NaMu8dPZqEuVmgkAb8uim8M=) 4: 3130332e32352e3130382e302f32342d3234203d3e20313339393439.roa (hash: tDryOwBTBVZxPeCJINJ19f1hs1r6uQY2drXPiyvQ7m8=) 5: 3131392e34372e39302e302f32342d3234203d3e203338353237.roa (hash: 2gYjkNpQS7rIhX41LQ5E9ZRuFubPcLm5+1qbHYEWbNU=) 6: 3132342e3130392e32322e302f32342d3234203d3e20313339393439.roa (hash: nFcoITtIiJ8OFT6DwBHGCFY6SRcCiphSoQyOwQxbdew=) 7: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl (hash: nFGcLWu6j8ANsdLgqm4de7YgYf5mF9LihtK8kXySpUE=) 8: 3131392e34372e39352e302f32342d3234203d3e20313530323438.roa (hash: nIrbzR22XSry4Jrw3LIPGv150kbPZD6HPRMENEZHMHw=) 9: 3132342e3130392e32302e302f32342d3234203d3e203338353237.roa (hash: ETJz1GlN0xqgrI/TiDRe3oL2wRqZlR8gI6HL/idn2yc=) 10: 32372e3132342e38332e302f32342d3234203d3e20313439343039.roa (hash: ArbJjYu5thYVcTZlpxbtFWhvtqqsI4lH8rKC1gB8oNc=) 11: 3132342e3130392e32332e302f32342d3234203d3e203338353237.roa (hash: hSmHQriBgEB6G8euGPo5okmMfhhllZ1AqyrcnX9VlJE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 21:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:7f:1f:12:ce:7f:32:2e:1f:18:0f:77:7e:c1:0f:de:ae:f3:51:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Validity Not Before: May 9 17:46:21 2025 GMT Not After : May 12 21:49:21 2025 GMT Subject: CN=4D570599063A5C7A7391A457E36A5ECFC91CCB18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:49:67:c7:bf:bf:7a:fe:61:e8:3b:65:55:b6: 72:ec:5f:a8:10:af:2e:3c:c1:82:bc:90:a2:4e:99: d5:8d:b3:db:cd:92:ea:cf:03:74:30:cf:eb:3d:67: 07:18:f9:02:ec:bc:c4:71:ca:e4:05:b7:8f:e6:3a: d2:f6:e3:98:97:b3:bf:f5:c3:2b:76:77:56:34:84: e1:8a:8f:da:ee:a5:df:d3:1c:38:d4:e9:96:43:e1: b6:4f:0a:13:e6:4f:94:b8:13:47:2e:26:ce:62:97: 8e:af:16:70:69:25:6b:9f:7d:ec:d9:ee:ba:6f:9a: 4d:a4:85:5c:0d:3f:cb:8e:ee:f9:8d:6b:c8:e8:3f: 83:ae:9d:a3:1e:f7:91:9e:74:57:1d:63:ae:58:67: dc:bc:2b:5e:77:e0:c0:90:16:b2:28:78:a9:35:73: ea:0e:64:26:ba:75:b3:9e:eb:4d:1e:84:f9:86:ee: 19:98:3f:4e:56:3c:a4:ab:15:d2:59:fb:f9:48:8e: 16:d8:4c:10:56:e4:5c:7e:27:a4:e5:6e:25:45:40: 59:a5:b5:64:fb:0f:35:9f:da:b6:39:9c:38:08:a5: ca:11:e3:9b:50:8e:25:dd:7a:4d:b2:0c:a3:e7:b1: e6:5a:61:62:7a:7b:42:d4:83:50:3c:3b:a8:a1:8a: 27:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:57:05:99:06:3A:5C:7A:73:91:A4:57:E3:6A:5E:CF:C9:1C:CB:18 X509v3 Authority Key Identifier: keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:ff:48:e7:ce:8a:43:f5:aa:7a:2b:ad:0c:11:3f:82:e3:b0: 8d:5c:90:a3:27:d7:96:b1:fd:27:a4:90:c1:6e:de:c3:24:25: 9e:6e:5c:30:05:3a:e0:22:27:c3:45:7f:a5:1b:1c:c1:6b:63: 01:c6:ae:1a:e4:f7:90:7a:ea:aa:20:60:75:73:9e:81:f9:3d: b9:b3:1e:b5:0e:f7:ae:6a:03:b4:bd:c0:ca:ee:63:47:b3:13: ef:78:87:eb:5f:94:db:e7:e7:e4:31:4a:f5:c8:ec:e2:e0:bc: c9:72:ba:7f:f0:01:2f:45:1d:b8:9d:07:0e:b2:e4:8c:e9:2c: ae:a9:34:74:1d:0b:a9:16:7d:40:d1:cd:a0:76:0f:ab:ac:1e: 6e:8f:2e:a9:7f:55:5d:77:bf:fd:51:92:16:07:34:17:ff:f4: f2:49:10:c2:68:c4:52:42:4f:a7:82:db:78:b6:80:16:24:db: f2:b0:e8:ea:93:78:01:b0:34:e1:f8:b2:c7:0d:93:2c:52:1e: d3:c5:88:69:20:cb:a3:ae:bb:16:30:40:7c:37:8c:35:2b:43: f7:a7:84:4b:70:41:55:ca:b7:10:3a:86:ad:03:d3:af:7a:94: 06:13:09:48:d2:f9:7f:59:54:7f:ff:09:55:f8:b3:0a:c7:8a: 80:ea:37:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ38fEs5/Mi4fGA93fsEP3q7zUWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD RjlBNjQ3MzAeFw0yNTA1MDkxNzQ2MjFaFw0yNTA1MTIyMTQ5MjFaMDMxMTAvBgNV BAMTKDRENTcwNTk5MDYzQTVDN0E3MzkxQTQ1N0UzNkE1RUNGQzkxQ0NCMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzSWfHv796/mHoO2VVtnLsX6gQ ry48wYK8kKJOmdWNs9vNkurPA3Qwz+s9ZwcY+QLsvMRxyuQFt4/mOtL245iXs7/1 wyt2d1Y0hOGKj9rupd/THDjU6ZZD4bZPChPmT5S4E0cuJs5il46vFnBpJWuffezZ 7rpvmk2khVwNP8uO7vmNa8joP4OunaMe95GedFcdY65YZ9y8K1534MCQFrIoeKk1 c+oOZCa6dbOe600ehPmG7hmYP05WPKSrFdJZ+/lIjhbYTBBW5Fx+J6TlbiVFQFml tWT7DzWf2rY5nDgIpcoR45tQjiXdek2yDKPnseZaYWJ6e0LUg1A8O6ihiifrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTVcFmQY6XHpzkaRX42pez8kcyxgwHwYDVR0j BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB NjQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE3ZWZkMmEtMDJhYi00MjAyLTk3 MGYtZjY5OWRmZjk3ZGU1LzAvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VE NTBDRjlBNjQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANT/SOfOikP1qnorrQwRP4LjsI1ckKMn15ax /SekkMFu3sMkJZ5uXDAFOuAiJ8NFf6UbHMFrYwHGrhrk95B66qogYHVznoH5Pbmz HrUO965qA7S9wMruY0ezE+94h+tflNvn5+QxSvXI7OLgvMlyun/wAS9FHbidBw6y 5IzpLK6pNHQdC6kWfUDRzaB2D6usHm6PLql/VV13v/1RkhYHNBf/9PJJEMJoxFJC T6eC23i2gBYk2/Kw6OqTeAGwNOH4sscNkyxSHtPFiGkgy6OuuxYwQHw3jDUrQ/en hEtwQVXKtxA6hq0D0696lAYTCUjS+X9ZVH//CVX4swrHioDqN4U= -----END CERTIFICATE-----Generated at Sat May 10 01:02:33 2025 by rpki-client