$ rpki-client -vvf repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft File: 2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft (raw, json) Hash identifier: 4/92l07RJIplDFscAsZz8a7k6F4PcrXyyE0cOERWcac= Subject key identifier: 25:A9:DA:C7:4D:43:86:F3:41:9C:BC:A5:76:E8:22:7E:C1:55:D8:20 Authority key identifier: 22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F Certificate issuer: /CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Certificate serial: 4CBC84E55D5295CEDFFD0BC578DC65AB915FAF63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft Manifest number: DB Signing time: Fri 22 Aug 2025 17:32:05 +0000 Manifest this update: Fri 22 Aug 2025 17:27:05 +0000 Manifest next update: Mon 25 Aug 2025 21:12:05 +0000 Files and hashes: 1: 3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa (hash: bbNh5IhzL1rNJLyhy7hiFZkFXcVeHuBdSs69IB8xXPA=) 2: 2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl (hash: 6ugJk37NPn8HJdFrgERXQPD5VOtHoZ4iezoboN4GCo0=) 3: 3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa (hash: SBNjwJJYCJHvL2QmCRz+yZ8PvTB10n4BHiXO1+hrRxM=) 4: 3135372e31352e3134342e302f32332d3233203d3e20313532333736.roa (hash: cWyOKWctYlbVooNMHms1H1vDLL9MPLPoRH1H2TKVIAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:12:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:bc:84:e5:5d:52:95:ce:df:fd:0b:c5:78:dc:65:ab:91:5f:af:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Validity Not Before: Aug 22 17:27:05 2025 GMT Not After : Aug 25 21:12:05 2025 GMT Subject: CN=25A9DAC74D4386F3419CBCA576E8227EC155D820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:70:77:38:66:9b:13:01:ed:ee:77:3a:f7: 5e:5d:3a:87:d5:e0:42:92:bd:11:91:f6:14:77:56: 25:dd:45:24:13:7f:d3:cb:ec:0f:e3:fd:ef:40:c9: 60:e4:4e:6e:d8:29:77:67:66:d8:88:10:0c:92:3e: 8b:c0:64:20:29:a4:2f:9f:92:b6:ea:95:35:d1:cd: 00:aa:4e:2e:99:80:1e:94:2e:9b:42:29:de:22:5b: 9a:1e:b0:92:71:69:49:ee:14:28:38:89:46:5d:aa: b5:3e:7a:d8:f1:e9:24:5b:87:4a:27:03:fd:58:02: 20:43:35:f3:4d:88:1a:8f:e3:f7:4e:f2:3d:17:1e: 3d:3f:bf:2e:ca:f1:f9:20:26:c5:24:05:7d:1c:46: 37:ac:c0:d3:95:d0:96:27:16:e0:cd:d8:04:0d:70: d2:cc:2d:ff:96:97:cf:29:e4:e6:73:24:a7:9b:88: 80:1c:5a:d4:b5:ca:96:89:3b:58:da:92:1b:65:f1: 8f:39:c4:ef:9b:4c:54:9a:9b:f1:39:33:c5:91:44: bf:d9:8a:27:0f:cc:86:23:62:1c:d5:d5:a7:aa:2b: 74:3f:4a:4a:0c:f1:4a:5c:15:f3:11:18:e2:27:a4: 22:09:bb:0f:5b:0a:8e:ad:51:07:76:c9:ba:c5:85: 18:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A9:DA:C7:4D:43:86:F3:41:9C:BC:A5:76:E8:22:7E:C1:55:D8:20 X509v3 Authority Key Identifier: keyid:22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:fe:64:4e:55:f5:81:24:6d:50:ed:45:01:f9:7b:54:a1:03: f1:7a:53:e7:6c:b9:9a:99:8a:1a:95:90:63:d1:d2:99:19:99: 17:16:00:80:53:28:a9:51:db:64:bd:09:0c:01:70:ad:dd:fe: ee:16:b4:cc:87:e6:27:df:3a:ce:e0:23:07:ab:48:54:62:a5: a8:45:4a:4a:50:95:66:15:1e:13:8f:02:60:23:1c:01:01:9a: b0:c5:05:9b:9e:d2:cb:e8:38:a4:27:67:de:a1:64:ab:52:eb: 90:95:7a:59:cb:e7:67:70:d0:23:92:8e:89:e6:92:64:34:01: 6b:57:e3:87:af:95:8f:be:72:6f:da:ca:5a:a6:4c:9a:4b:b0: d5:d9:5c:82:8b:e6:5f:65:9b:71:bb:a5:ef:90:48:a5:8e:2a: bf:68:b7:bf:b4:48:0e:d4:5c:49:56:85:89:41:a0:c9:39:bc: 75:25:15:56:c5:49:be:ab:82:24:73:10:0a:f7:85:56:e5:06: cf:a7:49:df:69:8c:b9:60:f0:1f:e6:9b:fc:bf:59:90:65:83: e6:71:07:b2:61:f9:9a:ca:61:62:9c:fb:14:cb:e3:ef:f4:3f: b1:3d:99:9f:09:8b:4e:1f:6f:52:60:d4:47:09:07:a4:26:ac: 9b:d1:3c:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTLyE5V1Slc7f/QvFeNxlq5Ffr2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1 RkE1RTczRjAeFw0yNTA4MjIxNzI3MDVaFw0yNTA4MjUyMTEyMDVaMDMxMTAvBgNV BAMTKDI1QTlEQUM3NEQ0Mzg2RjM0MTlDQkNBNTc2RTgyMjdFQzE1NUQ4MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwrHB3OGabEwHt7nc6915dOofV 4EKSvRGR9hR3ViXdRSQTf9PL7A/j/e9AyWDkTm7YKXdnZtiIEAySPovAZCAppC+f krbqlTXRzQCqTi6ZgB6ULptCKd4iW5oesJJxaUnuFCg4iUZdqrU+etjx6SRbh0on A/1YAiBDNfNNiBqP4/dO8j0XHj0/vy7K8fkgJsUkBX0cRjeswNOV0JYnFuDN2AQN cNLMLf+Wl88p5OZzJKebiIAcWtS1ypaJO1jakhtl8Y85xO+bTFSam/E5M8WRRL/Z iicPzIYjYhzV1aeqK3Q/SkoM8UpcFfMRGOInpCIJuw9bCo6tUQd2ybrFhRiLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJanax01DhvNBnLyldugifsFV2CAwHwYDVR0j BBgwFoAUIkYBX/8vxV/vucRKitQWtV+l5z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTZlY2NiNy1lOTE3LTQwZjUtYWNlZS0wM2Q2OGJlNWZkOTcvMC8yMjQ2MDE1RkZG MkZDNTVGRUZCOUM0NEE4QUQ0MTZCNTVGQTVFNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1RkE1 RTczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU2ZWNjYjctZTkxNy00MGY1LWFj ZWUtMDNkNjhiZTVmZDk3LzAvMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2 QjU1RkE1RTczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADr+ZE5V9YEkbVDtRQH5e1ShA/F6U+dsuZqZ ihqVkGPR0pkZmRcWAIBTKKlR22S9CQwBcK3d/u4WtMyH5iffOs7gIwerSFRipahF SkpQlWYVHhOPAmAjHAEBmrDFBZue0svoOKQnZ96hZKtS65CVelnL52dw0COSjonm kmQ0AWtX44evlY++cm/aylqmTJpLsNXZXIKL5l9lm3G7pe+QSKWOKr9ot7+0SA7U XElWhYlBoMk5vHUlFVbFSb6rgiRzEAr3hVblBs+nSd9pjLlg8B/mm/y/WZBlg+Zx B7Jh+ZrKYWKc+xTL4+/0P7E9mZ8Ji04fb1Jg1EcJB6QmrJvRPC4= -----END CERTIFICATE-----Generated at Sun Aug 24 03:42:13 2025 by rpki-client