$ rpki-client -vvf repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft File: 22476F90C7B08131974F5B19834906C325ABEF12.mft (raw, json) Hash identifier: OrCAD99IJhb0jwFnZGL1Sn8uWoezfsQdKIhTJzTDOIo= Subject key identifier: 7B:76:E1:38:21:F7:49:A1:44:B4:AF:03:65:EF:FD:E0:81:89:08:DA Authority key identifier: 22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 Certificate issuer: /CN=22476F90C7B08131974F5B19834906C325ABEF12 Certificate serial: 3D4C97086EBCE9162EEFB2167C437402E9152B43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft Manifest number: A8 Signing time: Fri 22 Aug 2025 17:51:26 +0000 Manifest this update: Fri 22 Aug 2025 17:46:26 +0000 Manifest next update: Mon 25 Aug 2025 21:17:26 +0000 Files and hashes: 1: 3136302e32352e36392e302f32342d3234203d3e20313531353736.roa (hash: 80wPKmKJkybnq5BlobX/HktrEHR2US0xr2aBNpv/zlA=) 2: 22476F90C7B08131974F5B19834906C325ABEF12.crl (hash: mkL+jloAxCQamM7CcyUz8QrRGLjB18TkNK+p7fQCdtE=) 3: 3136302e32352e36382e302f32342d3234203d3e20313532383430.roa (hash: 4w2+kmxxLlJwHRO1aqXjBz7ml3HwCrINsFeyiZehHq0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:4c:97:08:6e:bc:e9:16:2e:ef:b2:16:7c:43:74:02:e9:15:2b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22476F90C7B08131974F5B19834906C325ABEF12 Validity Not Before: Aug 22 17:46:26 2025 GMT Not After : Aug 25 21:17:26 2025 GMT Subject: CN=7B76E13821F749A144B4AF0365EFFDE0818908DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4d:26:01:d6:d8:0c:4b:6e:30:d9:11:18:fe: 00:6b:c8:c1:5d:af:b2:7d:63:a1:7e:80:95:de:ec: a3:17:d0:68:b7:43:9c:f3:26:c9:32:e1:86:aa:65: 50:e6:6d:bc:7b:79:45:2d:be:a6:a7:d3:e4:3e:24: 75:b2:9b:85:69:9f:c7:94:f7:13:02:24:96:41:1a: f6:8d:20:3b:de:d0:67:fb:3e:bd:c6:5b:e9:68:20: 05:7e:f3:e9:37:c3:b9:49:1c:d3:ac:9b:60:dd:29: 25:ac:fd:d5:26:dd:7e:d1:32:f0:bd:b3:6a:cc:9a: 21:1b:31:b2:d8:ef:3d:2e:18:27:39:57:28:ff:ef: e1:87:30:af:27:f6:4b:f0:c4:a3:b4:72:2d:e9:c5: 4b:03:8c:30:03:f3:86:21:57:30:bf:41:04:5d:b7: 59:46:da:e1:9c:70:73:18:3d:e1:4d:f6:fe:8f:0b: d5:b8:11:3f:a0:1b:99:d4:f7:b4:d4:bf:b8:f9:81: c0:d0:92:9b:34:de:83:e0:16:0b:bb:f1:3d:95:e5: 61:02:02:10:5c:62:3b:4c:1b:18:5e:72:2a:64:79: 71:ff:de:68:c2:c2:60:14:45:8f:9b:f9:bc:74:7f: 19:b5:88:36:00:3f:36:f6:6b:80:e5:8d:23:82:d9: 2d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:76:E1:38:21:F7:49:A1:44:B4:AF:03:65:EF:FD:E0:81:89:08:DA X509v3 Authority Key Identifier: keyid:22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:86:c7:14:77:e5:b8:d6:7f:c4:1b:0e:86:d2:49:4c:0a:de: 0f:9b:63:9e:14:31:51:3d:7d:aa:e8:f9:18:5c:f9:23:7c:9d: 11:e1:4a:d3:34:9a:cb:9d:b0:63:3e:28:13:77:78:bc:2d:e0: dd:ec:7d:eb:03:30:a0:93:66:f1:75:08:41:38:3c:51:66:c2: 5f:cb:da:08:c6:ef:63:18:91:fe:58:f0:1d:fd:3b:89:35:19: 6c:7f:23:14:5a:2d:2c:0e:b0:b5:f5:cc:57:69:df:9e:b0:13: 1c:28:99:9a:4a:03:89:07:4f:73:7a:35:b8:13:29:b4:09:2e: 5f:70:4d:24:33:33:be:27:16:3c:68:c3:00:a8:68:1a:5a:bc: 01:38:10:22:be:0b:25:2e:e0:57:fc:82:9b:b3:9c:73:8d:b4: c9:a4:27:0f:a2:10:33:c8:5a:af:5d:55:0c:6e:a8:ae:84:aa: 52:cd:ab:01:e7:0c:64:4d:26:75:0e:83:87:7a:b0:21:7b:fa: 6d:21:1c:73:20:3d:23:71:5f:2f:ab:38:9a:04:6e:a1:92:83: 88:e9:49:d2:c5:33:81:85:69:92:83:02:30:9c:25:39:fb:a3: 86:05:cb:99:16:d1:16:f4:02:10:27:37:03:f4:ed:e4:50:5a: e2:b7:fc:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPUyXCG686RYu77IWfEN0AukVK0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMy NUFCRUYxMjAeFw0yNTA4MjIxNzQ2MjZaFw0yNTA4MjUyMTE3MjZaMDMxMTAvBgNV BAMTKDdCNzZFMTM4MjFGNzQ5QTE0NEI0QUYwMzY1RUZGREUwODE4OTA4REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgTSYB1tgMS24w2REY/gBryMFd r7J9Y6F+gJXe7KMX0Gi3Q5zzJsky4YaqZVDmbbx7eUUtvqan0+Q+JHWym4Vpn8eU 9xMCJJZBGvaNIDve0Gf7Pr3GW+loIAV+8+k3w7lJHNOsm2DdKSWs/dUm3X7RMvC9 s2rMmiEbMbLY7z0uGCc5Vyj/7+GHMK8n9kvwxKO0ci3pxUsDjDAD84YhVzC/QQRd t1lG2uGccHMYPeFN9v6PC9W4ET+gG5nU97TUv7j5gcDQkps03oPgFgu78T2V5WEC AhBcYjtMGxhecipkeXH/3mjCwmAURY+b+bx0fxm1iDYAPzb2a4DljSOC2S0ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe3bhOCH3SaFEtK8DZe/94IGJCNowHwYDVR0j BBgwFoAUIkdvkMewgTGXT1sZg0kGwyWr7xIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmZiYWFmYy00ZGIyLTRmYzQtYTFhOC0yZDhlNGM4YjJjZTAvMC8yMjQ3NkY5MEM3 QjA4MTMxOTc0RjVCMTk4MzQ5MDZDMzI1QUJFRjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMyNUFC RUYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2 QzMyNUFCRUYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAByGxxR35bjWf8QbDobSSUwK3g+bY54UMVE9 faro+Rhc+SN8nRHhStM0msudsGM+KBN3eLwt4N3sfesDMKCTZvF1CEE4PFFmwl/L 2gjG72MYkf5Y8B39O4k1GWx/IxRaLSwOsLX1zFdp356wExwomZpKA4kHT3N6NbgT KbQJLl9wTSQzM74nFjxowwCoaBpavAE4ECK+CyUu4Ff8gpuznHONtMmkJw+iEDPI Wq9dVQxuqK6EqlLNqwHnDGRNJnUOg4d6sCF7+m0hHHMgPSNxXy+rOJoEbqGSg4jp SdLFM4GFaZKDAjCcJTn7o4YFy5kW0Rb0AhAnNwP07eRQWuK3/Jc= -----END CERTIFICATE-----Generated at Sat Aug 23 21:45:46 2025 by rpki-client