$ rpki-client -vvf repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft File: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft (raw, json) Hash identifier: PXMfNR42MrjXF5y1mCJvMe/AYRhWhRn1rvRLamt62Yk= Subject key identifier: AD:63:B9:CA:4C:F3:3D:C1:72:F8:45:A2:EB:E5:90:72:97:3C:A5:8E Authority key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 Certificate issuer: /CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Certificate serial: 7BC58E7D09368E0D84F9FA11AF14B3663F2AB6D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft Manifest number: 04E9 Signing time: Fri 27 Jun 2025 09:40:41 +0000 Manifest this update: Fri 27 Jun 2025 09:35:41 +0000 Manifest next update: Mon 30 Jun 2025 21:34:41 +0000 Files and hashes: 1: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: pEqfltHiO5idL1uFxEX2uQGcaapU/AOZ2PUbYVPk40Y=) 2: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl (hash: Oe6NchukGzFrumeHdkHrcqO1w5DuQthwWTSDiq5ZEZo=) 3: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: XJya992fgeumEsyzLHSliCXeCsu4l890cLRsCVZbrLE=) 4: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: 2H5831uY9aR1OjDn1Uun2zJ8vaTAjB4BokOjcc3Moq4=) 5: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: kS4p5t1GMvH/jM8YbFoB1ZVwKWJDCBblcchgAgj/oBk=) 6: 3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa (hash: vjgtOZ549YGHCxNz1PUrDo34FNB9oleC45Iwzg+kYuo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 21:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c5:8e:7d:09:36:8e:0d:84:f9:fa:11:af:14:b3:66:3f:2a:b6:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Validity Not Before: Jun 27 09:35:41 2025 GMT Not After : Jun 30 21:34:41 2025 GMT Subject: CN=AD63B9CA4CF33DC172F845A2EBE59072973CA58E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fd:b1:04:83:87:0c:b1:34:c1:6b:bb:68:aa: 78:11:6e:50:5d:37:dc:c5:84:fa:4f:58:2f:7a:ac: 01:6b:e9:01:5e:08:e4:a5:4b:1a:12:c2:0b:04:2a: 4d:27:51:7c:e1:cc:8b:1a:43:c1:9b:ac:2b:36:43: fb:02:1e:12:b1:f3:94:e9:07:95:a6:d6:f5:79:94: 9a:d7:6b:b4:ca:6e:83:b8:e7:1a:c6:c9:12:7a:3b: 6e:ff:5d:1e:f3:7f:e4:64:1a:d2:2b:a2:81:92:b4: 5b:55:b4:aa:c1:61:ac:4c:f6:81:76:65:c0:93:c4: 49:04:9e:4f:9a:6f:97:c3:69:72:de:aa:62:dc:c6: dc:96:41:7a:91:2d:9b:f6:fe:28:13:3f:ea:6e:02: a5:92:5e:99:e0:51:92:1a:24:09:4c:cd:b3:e0:f3: b1:f8:41:0c:a6:7d:6f:83:d0:56:1f:ed:b7:6d:c4: 4d:e1:24:f7:2f:40:8e:03:2d:05:e7:77:57:1b:78: 1f:4d:ca:0f:93:3f:11:c8:e4:72:a7:aa:a5:f7:b2: a2:0c:6a:2b:89:ab:3e:52:6c:c6:c4:2f:54:14:31: 2e:ed:60:60:50:74:23:11:b8:f2:08:dd:5d:c3:30: a3:78:a5:63:64:c2:52:91:5c:cf:db:e7:a3:17:08: 4e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:63:B9:CA:4C:F3:3D:C1:72:F8:45:A2:EB:E5:90:72:97:3C:A5:8E X509v3 Authority Key Identifier: keyid:22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:4f:ae:41:9d:c3:db:49:bb:4a:e2:7f:ff:cb:9b:35:0a:ef: 3c:55:20:c2:81:f7:9c:4c:5b:3d:3f:74:8e:a0:3e:50:21:9d: bd:a7:9f:18:74:4d:be:ba:13:32:f4:68:91:35:3d:67:7c:54: 4a:08:7c:d9:3c:ab:2a:aa:1e:bb:0d:ce:bb:52:8d:4b:29:75: 69:8f:f9:43:33:51:3c:fd:90:b5:52:3b:63:8b:41:51:3f:b2: e5:7a:e4:e6:4a:d0:01:e4:75:cc:5d:a1:31:2f:cd:7a:e6:c4: 2d:2a:eb:88:83:23:9a:73:0b:af:1c:11:41:cd:3f:1d:bd:81: 8f:c2:ba:da:07:06:da:8a:73:fb:28:39:b5:52:74:ea:fb:85: 6b:d2:95:4a:3d:ef:b4:4b:2e:05:05:d8:65:fd:63:de:97:86: f4:11:7d:e6:ab:f5:19:57:d8:e6:47:72:87:57:7a:34:4a:5f: 56:70:c9:7a:a6:83:ea:68:46:da:ce:1a:07:57:6b:ec:23:86: 30:28:d2:86:1d:93:5d:98:b6:a7:4f:ac:d6:14:46:ba:40:79: a5:3d:5a:2b:68:6e:48:fe:03:fa:7c:4f:db:1a:0b:44:0d:7a: 66:ee:92:e9:66:8f:52:7a:92:98:03:80:e2:47:fc:cc:d6:50: 43:e9:94:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe8WOfQk2jg2E+foRrxSzZj8qttkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVD NjJDREVCMTAeFw0yNTA2MjcwOTM1NDFaFw0yNTA2MzAyMTM0NDFaMDMxMTAvBgNV BAMTKEFENjNCOUNBNENGMzNEQzE3MkY4NDVBMkVCRTU5MDcyOTczQ0E1OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt/bEEg4cMsTTBa7toqngRblBd N9zFhPpPWC96rAFr6QFeCOSlSxoSwgsEKk0nUXzhzIsaQ8GbrCs2Q/sCHhKx85Tp B5Wm1vV5lJrXa7TKboO45xrGyRJ6O27/XR7zf+RkGtIrooGStFtVtKrBYaxM9oF2 ZcCTxEkEnk+ab5fDaXLeqmLcxtyWQXqRLZv2/igTP+puAqWSXpngUZIaJAlMzbPg 87H4QQymfW+D0FYf7bdtxE3hJPcvQI4DLQXnd1cbeB9Nyg+TPxHI5HKnqqX3sqIM aiuJqz5SbMbEL1QUMS7tYGBQdCMRuPII3V3DMKN4pWNkwlKRXM/b56MXCE4VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrWO5ykzzPcFy+EWi6+WQcpc8pY4wHwYDVR0j BBgwFoAUIkdSDxIIyNmsM7MDUBbcTsYs3rEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZGRmMTgxZi0xZTg5LTQwMjItODJmOC1lMGRiYTg1OWVlMmUvMC8yMjQ3NTIwRjEy MDhDOEQ5QUMzM0IzMDM1MDE2REM0RUM2MkNERUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVDNjJD REVCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWRkZjE4MWYtMWU4OS00MDIyLTgy ZjgtZTBkYmE4NTllZTJlLzAvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRD NEVDNjJDREVCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFPrkGdw9tJu0rif//LmzUK7zxVIMKB95xM Wz0/dI6gPlAhnb2nnxh0Tb66EzL0aJE1PWd8VEoIfNk8qyqqHrsNzrtSjUspdWmP +UMzUTz9kLVSO2OLQVE/suV65OZK0AHkdcxdoTEvzXrmxC0q64iDI5pzC68cEUHN Px29gY/CutoHBtqKc/soObVSdOr7hWvSlUo977RLLgUF2GX9Y96XhvQRfear9RlX 2OZHcodXejRKX1ZwyXqmg+poRtrOGgdXa+wjhjAo0oYdk12YtqdPrNYURrpAeaU9 Witobkj+A/p8T9saC0QNembukulmj1J6kpgDgOJH/MzWUEPplJE= -----END CERTIFICATE-----Generated at Sun Jun 29 21:37:04 2025 by rpki-client