$ rpki-client -vvf repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft File: 22476F90C7B08131974F5B19834906C325ABEF12.mft (raw, json) Hash identifier: cOCheNCbfsF3Xs08hfOoD0bdK8rIpmJZ7PMpx7J8LNo= Subject key identifier: FD:7A:81:01:63:6D:71:11:A3:E0:00:80:47:CF:D4:9C:77:52:B3:55 Authority key identifier: 22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 Certificate issuer: /CN=22476F90C7B08131974F5B19834906C325ABEF12 Certificate serial: 034608224C479D64E82FEEF86CCEA3419717CE85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft Manifest number: 8D Signing time: Sun 29 Jun 2025 19:01:34 +0000 Manifest this update: Sun 29 Jun 2025 18:56:34 +0000 Manifest next update: Thu 03 Jul 2025 01:17:34 +0000 Files and hashes: 1: 3136302e32352e36382e302f32332d3234203d3e20313532383430.roa (hash: 4i8FjKHuMJZs9ehASRTTzzbmgJaF3lnGvx5voJ5RPxk=) 2: 22476F90C7B08131974F5B19834906C325ABEF12.crl (hash: nFUtjPZ5IRTrU/MonESRkr9RxtKPvnePyiW7BNxrDJ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 01:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:46:08:22:4c:47:9d:64:e8:2f:ee:f8:6c:ce:a3:41:97:17:ce:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22476F90C7B08131974F5B19834906C325ABEF12 Validity Not Before: Jun 29 18:56:34 2025 GMT Not After : Jul 3 01:17:34 2025 GMT Subject: CN=FD7A8101636D7111A3E0008047CFD49C7752B355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:88:8c:0a:86:b2:9e:b8:05:45:af:c1:d1:93: 20:77:ee:9d:be:ec:c0:9a:4e:de:2d:e3:6f:5e:c1: 20:70:0c:cc:33:ac:a4:96:1a:8a:31:e3:f3:22:8d: 29:ab:3f:17:47:1c:2b:f4:8b:a1:5a:ad:e8:97:0b: 01:d7:99:77:22:f9:9c:4a:88:59:f0:be:1d:d2:7c: 86:a9:31:1b:2e:50:25:d2:99:bb:7e:47:ed:cc:90: d6:8f:f1:da:4b:6e:8b:ca:ab:47:e1:54:2b:b5:74: 17:6d:6f:e5:ef:3d:b5:5b:2e:66:aa:67:ac:f9:dd: aa:0e:37:30:6d:3a:fd:67:10:96:0e:b1:ca:03:80: 92:57:2a:5a:f9:ca:75:45:2b:ac:da:9f:af:9b:7c: 5f:ba:96:b0:36:e4:ea:c8:1c:8e:a6:c1:d0:9b:eb: 69:19:db:7a:fd:50:e9:05:32:3a:b3:6b:db:f8:c6: d0:00:60:3f:8a:5c:81:7d:de:6b:72:35:9f:5a:25: c6:ea:b6:96:1b:28:8f:ae:cf:56:8e:5a:cf:bd:59: a7:60:81:ea:b8:08:5f:0f:e9:89:2f:64:fa:8b:73: d3:2d:da:46:37:99:f2:7d:cf:ae:c1:bd:b1:97:b9: 6d:3e:03:92:35:d3:b2:ac:23:ec:8f:db:a8:45:dc: d2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7A:81:01:63:6D:71:11:A3:E0:00:80:47:CF:D4:9C:77:52:B3:55 X509v3 Authority Key Identifier: keyid:22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:41:b4:5d:d7:24:30:79:b3:38:df:bf:d8:04:ba:24:53:66: 02:ed:0d:5b:21:d2:1d:2d:15:61:a0:97:44:97:4f:cb:a2:3b: 51:9a:39:74:b6:55:72:f0:6c:ce:a3:bb:2c:b1:6b:0d:ac:50: f8:44:f1:1c:f3:d2:d2:90:7c:56:25:3c:ee:3d:e6:ae:33:db: 63:48:e5:53:e0:3f:47:c9:94:40:38:56:b6:5a:16:d8:a5:74: 55:84:4b:f9:b3:13:80:cf:7d:ca:04:7d:de:71:e1:5d:7f:06: ab:96:fa:07:26:36:90:b0:f4:83:57:cf:2e:54:6a:0b:e6:15: 92:51:93:40:33:12:d4:b8:ce:ff:69:38:8d:19:22:5e:89:55: 56:30:55:29:0b:25:80:cb:a1:47:f5:d1:d2:3d:a4:9d:ce:09: 55:52:30:1d:9f:30:90:05:2e:25:3e:a7:de:69:00:ef:91:59: 67:77:85:d6:76:e5:84:1b:f1:6c:29:6f:59:aa:51:98:dc:07: ac:b7:53:32:fc:d0:14:ca:dd:f2:f5:1f:f1:36:51:7d:64:26: 46:4e:b2:ba:40:58:f4:c4:6c:a1:76:19:7f:9c:9a:5e:ae:59: 2e:76:b9:77:e1:25:a8:e0:1a:94:65:08:fa:04:2a:ff:7c:07: 05:88:7c:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA0YIIkxHnWToL+74bM6jQZcXzoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMy NUFCRUYxMjAeFw0yNTA2MjkxODU2MzRaFw0yNTA3MDMwMTE3MzRaMDMxMTAvBgNV BAMTKEZEN0E4MTAxNjM2RDcxMTFBM0UwMDA4MDQ3Q0ZENDlDNzc1MkIzNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXiIwKhrKeuAVFr8HRkyB37p2+ 7MCaTt4t429ewSBwDMwzrKSWGoox4/MijSmrPxdHHCv0i6FareiXCwHXmXci+ZxK iFnwvh3SfIapMRsuUCXSmbt+R+3MkNaP8dpLbovKq0fhVCu1dBdtb+XvPbVbLmaq Z6z53aoONzBtOv1nEJYOscoDgJJXKlr5ynVFK6zan6+bfF+6lrA25OrIHI6mwdCb 62kZ23r9UOkFMjqza9v4xtAAYD+KXIF93mtyNZ9aJcbqtpYbKI+uz1aOWs+9Wadg geq4CF8P6YkvZPqLc9Mt2kY3mfJ9z67BvbGXuW0+A5I107KsI+yP26hF3NJrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/XqBAWNtcRGj4ACAR8/UnHdSs1UwHwYDVR0j BBgwFoAUIkdvkMewgTGXT1sZg0kGwyWr7xIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmZiYWFmYy00ZGIyLTRmYzQtYTFhOC0yZDhlNGM4YjJjZTAvMC8yMjQ3NkY5MEM3 QjA4MTMxOTc0RjVCMTk4MzQ5MDZDMzI1QUJFRjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMyNUFC RUYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2 QzMyNUFCRUYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtBtF3XJDB5szjfv9gEuiRTZgLtDVsh0h0t FWGgl0SXT8uiO1GaOXS2VXLwbM6juyyxaw2sUPhE8Rzz0tKQfFYlPO495q4z22NI 5VPgP0fJlEA4VrZaFtildFWES/mzE4DPfcoEfd5x4V1/BquW+gcmNpCw9INXzy5U agvmFZJRk0AzEtS4zv9pOI0ZIl6JVVYwVSkLJYDLoUf10dI9pJ3OCVVSMB2fMJAF LiU+p95pAO+RWWd3hdZ25YQb8Wwpb1mqUZjcB6y3UzL80BTK3fL1H/E2UX1kJkZO srpAWPTEbKF2GX+cml6uWS52uXfhJajgGpRlCPoEKv98BwWIfL4= -----END CERTIFICATE-----Generated at Mon Jun 30 21:50:27 2025 by rpki-client