$ rpki-client -vvf repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft File: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft (raw, json) Hash identifier: T6d1z+uvEFKqG3NhNQFeyrwBjfafsHIG48lvAKZjfpA= Subject key identifier: 7C:BC:A0:AB:7E:DB:08:6A:AF:9F:4A:6E:B7:A8:0C:95:36:9C:E1:28 Authority key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 Certificate issuer: /CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Certificate serial: 1207628CD811B250C69349E14FEAB0F1FA9EC6E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft Manifest number: 0501 Signing time: Thu 21 Aug 2025 11:00:41 +0000 Manifest this update: Thu 21 Aug 2025 10:55:41 +0000 Manifest next update: Sun 24 Aug 2025 21:20:41 +0000 Files and hashes: 1: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: kS4p5t1GMvH/jM8YbFoB1ZVwKWJDCBblcchgAgj/oBk=) 2: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl (hash: OAfnLCJei6a70+pmsJropiq+HEz1z8P2KQ8IHtwnxUE=) 3: 3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa (hash: vjgtOZ549YGHCxNz1PUrDo34FNB9oleC45Iwzg+kYuo=) 4: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: pEqfltHiO5idL1uFxEX2uQGcaapU/AOZ2PUbYVPk40Y=) 5: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: 2H5831uY9aR1OjDn1Uun2zJ8vaTAjB4BokOjcc3Moq4=) 6: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: XJya992fgeumEsyzLHSliCXeCsu4l890cLRsCVZbrLE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:07:62:8c:d8:11:b2:50:c6:93:49:e1:4f:ea:b0:f1:fa:9e:c6:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Validity Not Before: Aug 21 10:55:41 2025 GMT Not After : Aug 24 21:20:41 2025 GMT Subject: CN=7CBCA0AB7EDB086AAF9F4A6EB7A80C95369CE128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3a:26:17:dc:fb:13:73:13:88:32:20:29:99: d2:1b:58:7c:65:64:23:32:84:56:f9:82:53:21:71: 08:61:db:7b:ed:d8:91:38:79:95:f1:b0:60:bd:34: 84:2a:44:95:06:fd:d4:5e:90:1a:a3:fd:e5:ef:7e: 6b:f1:52:74:6a:e5:36:1a:46:01:1c:24:9f:40:02: c6:35:a1:50:e6:4e:3a:a6:c7:2a:61:4f:ff:20:7a: fa:ae:1b:e7:20:5f:cc:e9:d2:27:f9:f6:3a:32:51: 1a:87:e6:e7:39:b5:3a:c9:c3:2f:a7:6a:ac:ad:b2: da:a3:10:da:e8:4e:bc:79:86:45:37:7b:3f:fe:5f: f1:1f:76:19:be:6e:20:39:54:8f:e1:8b:8c:e7:37: 39:16:fd:0d:c0:17:c0:71:de:78:28:8d:ce:eb:dc: d6:21:20:a8:63:a4:c4:17:9d:4b:02:d8:e8:75:22: b2:91:a3:c2:91:a5:1c:2a:44:7e:e0:d7:75:e6:e1: 56:4d:82:98:14:9d:51:fc:70:a0:d6:ee:6e:38:63: 74:b0:9c:aa:98:25:c2:58:3e:73:c7:61:8d:e3:b2: 58:59:44:bf:0b:77:1a:0b:29:e9:98:9e:70:f2:d7: 4a:5e:09:38:8c:8a:8f:a6:36:82:7f:af:de:45:ac: b6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BC:A0:AB:7E:DB:08:6A:AF:9F:4A:6E:B7:A8:0C:95:36:9C:E1:28 X509v3 Authority Key Identifier: keyid:22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:da:ad:8e:76:1d:c8:28:5f:b3:a0:77:04:a7:7a:53:f8:46: d4:29:e3:9b:71:ea:4c:4e:d3:a8:22:19:04:a1:ac:90:51:17: a9:84:44:09:84:9a:d0:94:80:33:6c:4b:d1:be:8b:59:34:72: 49:e4:59:59:62:6e:fd:e9:07:19:9f:85:68:85:d8:55:71:d7: 66:01:60:71:e5:8f:6a:b2:8a:84:72:97:16:6d:43:fb:37:64: 84:b7:57:bc:1a:19:28:8a:ae:40:cd:18:66:19:c4:e2:ad:18: ae:f4:98:d3:d9:16:55:c0:9a:20:60:4d:36:39:67:93:5e:66: a4:92:af:66:b4:93:98:7e:44:a7:c5:39:ee:bd:66:1c:85:63: d6:e9:94:60:61:39:6e:67:76:07:ab:94:0d:e3:5b:20:88:71: 0c:0d:80:4b:01:ae:18:75:d1:46:d9:9b:3a:22:fb:00:ad:5e: 15:98:b1:05:95:64:48:a6:27:4c:d4:f8:62:52:b7:b7:d5:0f: 71:bc:e3:88:5e:74:33:8b:58:9a:f7:40:bd:46:6f:68:87:f1: 41:69:e4:61:da:51:00:23:7c:84:12:f5:80:d4:31:3d:e6:64: 24:f6:40:8b:7b:a7:09:f5:f4:32:9f:54:0a:c5:66:68:4e:7d: 5e:70:36:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEgdijNgRslDGk0nhT+qw8fqexuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVD NjJDREVCMTAeFw0yNTA4MjExMDU1NDFaFw0yNTA4MjQyMTIwNDFaMDMxMTAvBgNV BAMTKDdDQkNBMEFCN0VEQjA4NkFBRjlGNEE2RUI3QTgwQzk1MzY5Q0UxMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtOiYX3PsTcxOIMiApmdIbWHxl ZCMyhFb5glMhcQhh23vt2JE4eZXxsGC9NIQqRJUG/dRekBqj/eXvfmvxUnRq5TYa RgEcJJ9AAsY1oVDmTjqmxyphT/8gevquG+cgX8zp0if59joyURqH5uc5tTrJwy+n aqytstqjENroTrx5hkU3ez/+X/Efdhm+biA5VI/hi4znNzkW/Q3AF8Bx3ngojc7r 3NYhIKhjpMQXnUsC2Oh1IrKRo8KRpRwqRH7g13Xm4VZNgpgUnVH8cKDW7m44Y3Sw nKqYJcJYPnPHYY3jslhZRL8LdxoLKemYnnDy10peCTiMio+mNoJ/r95FrLbfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfLygq37bCGqvn0put6gMlTac4SgwHwYDVR0j BBgwFoAUIkdSDxIIyNmsM7MDUBbcTsYs3rEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZGRmMTgxZi0xZTg5LTQwMjItODJmOC1lMGRiYTg1OWVlMmUvMC8yMjQ3NTIwRjEy MDhDOEQ5QUMzM0IzMDM1MDE2REM0RUM2MkNERUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVDNjJD REVCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWRkZjE4MWYtMWU4OS00MDIyLTgy ZjgtZTBkYmE4NTllZTJlLzAvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRD NEVDNjJDREVCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDarY52HcgoX7OgdwSnelP4RtQp45tx6kxO 06giGQShrJBRF6mERAmEmtCUgDNsS9G+i1k0cknkWVlibv3pBxmfhWiF2FVx12YB YHHlj2qyioRylxZtQ/s3ZIS3V7waGSiKrkDNGGYZxOKtGK70mNPZFlXAmiBgTTY5 Z5NeZqSSr2a0k5h+RKfFOe69ZhyFY9bplGBhOW5ndgerlA3jWyCIcQwNgEsBrhh1 0UbZmzoi+wCtXhWYsQWVZEimJ0zU+GJSt7fVD3G844hedDOLWJr3QL1Gb2iH8UFp 5GHaUQAjfIQS9YDUMT3mZCT2QIt7pwn19DKfVArFZmhOfV5wNiE= -----END CERTIFICATE-----Generated at Sat Aug 23 12:17:41 2025 by rpki-client