$ rpki-client -vvf repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft File: 9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft (raw, json) Hash identifier: UECIhoz+B3P6wGvs/FVoeLoQ2aPDeklyyNltMRSq3jY= Subject key identifier: 5A:15:E6:AB:C9:45:72:81:31:E1:16:A0:B9:8E:BE:E6:00:60:A6:48 Authority key identifier: 9E:22:CC:CB:20:89:8F:95:64:7D:9A:55:FA:11:2A:BE:8C:E5:8E:EC Certificate issuer: /CN=9E22CCCB20898F95647D9A55FA112ABE8CE58EEC Certificate serial: 394A71C3C5807C689BBD7671657FA67625B018F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft Manifest number: 042C Signing time: Sun 29 Jun 2025 16:02:00 +0000 Manifest this update: Sun 29 Jun 2025 15:57:00 +0000 Manifest next update: Wed 02 Jul 2025 21:49:00 +0000 Files and hashes: 1: 9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.crl (hash: gEJSmp5CMe/rsr/++o240PB2zxdNGCAv/yCyTkLwMhI=) 2: 3130332e3136332e3133382e302f32332d3234203d3e203535363838.roa (hash: SleQnUegZrn9t/Esz5KijLNSBfhEPCbzYWCC+8Yfuac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.crl rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:4a:71:c3:c5:80:7c:68:9b:bd:76:71:65:7f:a6:76:25:b0:18:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E22CCCB20898F95647D9A55FA112ABE8CE58EEC Validity Not Before: Jun 29 15:57:00 2025 GMT Not After : Jul 2 21:49:00 2025 GMT Subject: CN=5A15E6ABC945728131E116A0B98EBEE60060A648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6f:63:55:9a:c4:f8:f4:0e:16:7d:fa:d2:0e: a5:53:eb:27:ab:86:a4:62:24:23:2a:44:22:09:ff: 6c:3e:3d:74:43:e4:6b:f1:f7:bf:a4:9d:17:01:bc: bc:a1:0b:38:30:94:6b:6f:4a:5f:30:3f:30:68:c2: 0f:98:e1:cb:85:7c:34:3b:59:57:ce:c1:c6:27:a0: 04:89:74:8c:b2:57:10:04:d1:c5:b3:5b:5a:7e:9b: 02:2f:00:c9:e5:2d:6f:aa:ef:96:80:ea:46:62:ee: ed:7e:74:ae:53:4f:3a:74:45:0a:17:3b:8c:1e:95: 19:c2:4a:d2:dc:c9:15:b7:44:e9:2e:b2:ad:90:bc: 64:4f:e2:9e:4a:d2:55:71:69:b7:8c:c6:32:57:6e: fc:d0:10:2c:1d:48:32:78:ef:21:41:a9:15:ad:54: 93:9e:ec:e5:db:4f:22:98:7f:65:2a:f6:3b:70:c0: 49:e8:57:40:6e:3c:2d:06:91:8d:02:40:87:47:2b: cc:d9:a5:a3:3b:bd:53:7b:bb:8d:af:27:60:e3:ab: 84:c7:09:e4:7c:75:14:f1:43:23:1b:ed:5a:5b:55: 3a:2b:3e:ef:54:b2:07:b0:bc:ce:9b:39:50:f4:24: 27:6d:fb:64:52:c3:26:bf:c1:9f:88:94:fd:4a:05: c1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:15:E6:AB:C9:45:72:81:31:E1:16:A0:B9:8E:BE:E6:00:60:A6:48 X509v3 Authority Key Identifier: keyid:9E:22:CC:CB:20:89:8F:95:64:7D:9A:55:FA:11:2A:BE:8C:E5:8E:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:83:6b:ba:64:22:e0:d6:02:ec:3d:cd:35:b7:47:2c:9c:9c: 68:c4:8e:01:8a:17:7b:2f:2f:88:3a:2a:ea:a8:d3:ac:6d:17: 54:ea:ec:9a:7d:db:45:fc:4f:5c:7d:ed:0f:55:28:c6:4b:4d: c0:5a:33:53:ca:58:6a:d5:c0:7f:8c:9e:2d:96:3c:1d:a4:6f: a5:2b:89:f0:aa:a9:b4:01:9c:f7:7d:6d:df:42:88:50:c1:70: 58:37:26:64:6d:2c:55:34:4c:c3:49:33:c7:eb:92:b0:53:bd: fd:cb:7e:d5:4b:f1:0e:e0:cc:ab:21:13:8f:8e:15:39:7e:41: 24:ae:1a:ab:b3:61:ef:61:fc:cc:2e:69:20:f2:ea:f0:75:03: e2:96:9e:70:d6:75:e1:bd:9c:2d:fc:9d:6f:47:93:2a:67:55: 82:db:f5:4e:00:88:7a:c9:93:59:2d:3f:df:1e:7b:f8:57:84: 34:d9:87:35:ea:e1:05:b6:79:52:8e:13:77:86:5f:a7:fb:d9: 79:a7:39:09:5e:b8:43:0c:7b:95:ca:70:a4:42:3a:2d:23:d0: 2c:35:1c:50:d3:ad:a3:fb:40:70:92:20:13:58:08:3e:5d:22: 0b:6c:7c:9f:fc:ad:63:be:85:9c:fb:cd:66:5b:e2:cc:97:71: 58:3f:fd:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOUpxw8WAfGibvXZxZX+mdiWwGPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUyMkNDQ0IyMDg5OEY5NTY0N0Q5QTU1RkExMTJBQkU4 Q0U1OEVFQzAeFw0yNTA2MjkxNTU3MDBaFw0yNTA3MDIyMTQ5MDBaMDMxMTAvBgNV BAMTKDVBMTVFNkFCQzk0NTcyODEzMUUxMTZBMEI5OEVCRUU2MDA2MEE2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFb2NVmsT49A4WffrSDqVT6yer hqRiJCMqRCIJ/2w+PXRD5Gvx97+knRcBvLyhCzgwlGtvSl8wPzBowg+Y4cuFfDQ7 WVfOwcYnoASJdIyyVxAE0cWzW1p+mwIvAMnlLW+q75aA6kZi7u1+dK5TTzp0RQoX O4welRnCStLcyRW3ROkusq2QvGRP4p5K0lVxabeMxjJXbvzQECwdSDJ47yFBqRWt VJOe7OXbTyKYf2Uq9jtwwEnoV0BuPC0GkY0CQIdHK8zZpaM7vVN7u42vJ2Djq4TH CeR8dRTxQyMb7VpbVTorPu9UsgewvM6bOVD0JCdt+2RSwya/wZ+IlP1KBcEXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWhXmq8lFcoEx4RaguY6+5gBgpkgwHwYDVR0j BBgwFoAUniLMyyCJj5VkfZpV+hEqvozljuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZmUyMWM2OS03Yjc3LTQzYTAtOTJhNi1mNTU1YjZlZDFmZmMvMC85RTIyQ0NDQjIw ODk4Rjk1NjQ3RDlBNTVGQTExMkFCRThDRTU4RUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUUyMkNDQ0IyMDg5OEY5NTY0N0Q5QTU1RkExMTJBQkU4Q0U1 OEVFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWZlMjFjNjktN2I3Ny00M2EwLTky YTYtZjU1NWI2ZWQxZmZjLzAvOUUyMkNDQ0IyMDg5OEY5NTY0N0Q5QTU1RkExMTJB QkU4Q0U1OEVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHODa7pkIuDWAuw9zTW3RyycnGjEjgGKF3sv L4g6Kuqo06xtF1Tq7Jp920X8T1x97Q9VKMZLTcBaM1PKWGrVwH+Mni2WPB2kb6Ur ifCqqbQBnPd9bd9CiFDBcFg3JmRtLFU0TMNJM8frkrBTvf3LftVL8Q7gzKshE4+O FTl+QSSuGquzYe9h/MwuaSDy6vB1A+KWnnDWdeG9nC38nW9HkypnVYLb9U4AiHrJ k1ktP98ee/hXhDTZhzXq4QW2eVKOE3eGX6f72XmnOQleuEMMe5XKcKRCOi0j0Cw1 HFDTraP7QHCSIBNYCD5dIgtsfJ/8rWO+hZz7zWZb4syXcVg//Y8= -----END CERTIFICATE-----Generated at Sun Jun 29 18:10:33 2025 by rpki-client