$ rpki-client -vvf repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft File: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft (raw, json) Hash identifier: MdSrPwSsDFOCwKmzpkd0SFE/4YBfBTB9m0r3BHTlw+I= Subject key identifier: 07:92:4D:BB:A4:8A:D4:04:72:80:66:BD:A2:EB:4C:8D:66:7E:08:5A Authority key identifier: 22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C Certificate issuer: /CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Certificate serial: 4211F81C148E12C0EAA094162802867E7C9689E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft Manifest number: C4 Signing time: Fri 09 May 2025 05:31:01 +0000 Manifest this update: Fri 09 May 2025 05:26:01 +0000 Manifest next update: Mon 12 May 2025 15:44:01 +0000 Files and hashes: 1: 3130332e32332e3130302e302f32322d3234203d3e203538343030.roa (hash: X1zuW7ewqOs7galNtjkQMnHEEBdiMyZOmIpDqdwYj+Q=) 2: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl (hash: 8p3Oqp2LJHwz1B0HhVZyyJNSSjG49XsPS/hUuD5HNWc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 15:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:11:f8:1c:14:8e:12:c0:ea:a0:94:16:28:02:86:7e:7c:96:89:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Validity Not Before: May 9 05:26:01 2025 GMT Not After : May 12 15:44:01 2025 GMT Subject: CN=07924DBBA48AD404728066BDA2EB4C8D667E085A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:63:46:be:5a:e1:ac:76:bb:81:b0:38:2c:ed: 92:a7:e4:72:5c:39:fc:0c:f7:62:33:31:7a:c3:a9: a0:03:cd:59:d6:a5:24:b2:42:f6:cc:82:b5:e2:9a: 81:ec:dd:49:7b:ae:25:26:37:61:e7:b1:a6:2e:52: 11:e7:8e:17:1a:d4:b0:0c:8c:3e:a9:ea:9c:bd:c3: 36:36:35:98:a4:29:af:e4:1e:55:70:44:0f:c4:3c: 82:50:4d:22:be:83:b3:78:05:c7:d6:fe:3f:02:82: 91:f7:44:26:6d:37:45:64:a4:e3:53:a6:95:b1:58: 78:e4:18:7f:4d:4b:65:39:64:13:2b:01:7e:5b:8b: 36:c2:b2:3a:7a:ee:86:23:e9:b9:74:95:1a:cb:99: 2f:19:38:7d:4a:fe:c1:5e:13:1b:21:8b:d7:d5:2c: cc:35:86:51:45:36:71:75:dc:23:a8:c2:ab:32:76: 5a:12:6d:e5:82:ea:00:8f:b8:7c:14:78:fc:a9:ea: 27:7e:78:51:5a:cb:c4:a6:45:e1:11:86:b1:78:e0: 38:96:d6:6f:43:2d:42:1e:2e:61:57:ca:82:e6:79: 50:d8:cb:34:56:8c:41:b6:58:e4:ec:ca:bc:f9:32: 91:8d:41:8b:2f:80:01:d3:be:39:cc:0f:b5:6d:ad: 8c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:92:4D:BB:A4:8A:D4:04:72:80:66:BD:A2:EB:4C:8D:66:7E:08:5A X509v3 Authority Key Identifier: keyid:22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:4b:2c:ed:bf:5d:ab:ef:3a:7f:be:93:90:81:7e:f3:a0:ad: 34:0d:a5:77:f3:dc:21:b3:8e:34:9e:6b:bc:3b:33:8b:8f:f5: 86:45:86:34:40:f8:80:14:44:ec:2a:fa:03:06:59:8c:44:f0: 2f:99:28:8e:20:e5:64:02:4c:9b:b3:7b:f9:24:9d:a6:64:fa: 31:40:a1:d6:e9:86:64:a6:b8:28:65:2c:87:33:dd:26:ee:73: f2:c3:a8:13:d3:7f:64:8c:bb:8c:55:e1:85:9f:7b:a1:89:9b: 52:3f:29:75:ab:24:0d:f8:13:37:27:b7:20:4d:8b:b3:6f:b9: 0c:5d:3e:d9:98:74:b8:6c:85:bb:de:fd:b3:bc:94:2b:9c:80: e3:bf:4d:3e:79:2e:89:8b:fc:ff:ae:3a:65:42:de:24:28:c0: f3:57:77:bd:20:88:b6:a2:d1:4f:96:b2:64:81:5e:c9:d9:3c: b8:ba:5d:fb:9f:9c:d6:74:e4:d2:a2:2a:9c:3e:73:41:08:42: d9:28:47:52:4f:77:f2:5a:9f:8f:08:ef:1c:8e:e2:e2:fb:6d: 19:4d:fa:21:61:d1:03:74:c5:95:5f:8e:cf:36:c9:58:25:ac: 95:2c:14:ab:4d:25:a0:85:ef:6b:80:b1:f6:9a:7e:ca:2a:75: 03:00:5b:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQhH4HBSOEsDqoJQWKAKGfnyWiegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlD MEE5Q0UyQzAeFw0yNTA1MDkwNTI2MDFaFw0yNTA1MTIxNTQ0MDFaMDMxMTAvBgNV BAMTKDA3OTI0REJCQTQ4QUQ0MDQ3MjgwNjZCREEyRUI0QzhENjY3RTA4NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaY0a+WuGsdruBsDgs7ZKn5HJc OfwM92IzMXrDqaADzVnWpSSyQvbMgrXimoHs3Ul7riUmN2HnsaYuUhHnjhca1LAM jD6p6py9wzY2NZikKa/kHlVwRA/EPIJQTSK+g7N4BcfW/j8CgpH3RCZtN0VkpONT ppWxWHjkGH9NS2U5ZBMrAX5bizbCsjp67oYj6bl0lRrLmS8ZOH1K/sFeExshi9fV LMw1hlFFNnF13COowqsydloSbeWC6gCPuHwUePyp6id+eFFay8SmReERhrF44DiW 1m9DLUIeLmFXyoLmeVDYyzRWjEG2WOTsyrz5MpGNQYsvgAHTvjnMD7VtrYyVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB5JNu6SK1ARygGa9outMjWZ+CFowHwYDVR0j BBgwFoAUIs06IM9iGlsLmeQoyOVzGcCpziwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzE4MDcwNC02YjY0LTRhNDAtOGYzZC1mZmRmZDVlMzdkZWYvMC8yMkNEM0EyMENG NjIxQTVCMEI5OUU0MjhDOEU1NzMxOUMwQTlDRTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlDMEE5 Q0UyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjcxODA3MDQtNmI2NC00YTQwLThm M2QtZmZkZmQ1ZTM3ZGVmLzAvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTcz MTlDMEE5Q0UyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVLLO2/XavvOn++k5CBfvOgrTQNpXfz3CGz jjSea7w7M4uP9YZFhjRA+IAUROwq+gMGWYxE8C+ZKI4g5WQCTJuze/kknaZk+jFA odbphmSmuChlLIcz3Sbuc/LDqBPTf2SMu4xV4YWfe6GJm1I/KXWrJA34EzcntyBN i7NvuQxdPtmYdLhshbve/bO8lCucgOO/TT55LomL/P+uOmVC3iQowPNXd70giLai 0U+WsmSBXsnZPLi6XfufnNZ05NKiKpw+c0EIQtkoR1JPd/Jan48I7xyO4uL7bRlN +iFh0QN0xZVfjs82yVglrJUsFKtNJaCF72uAsfaafsoqdQMAW4c= -----END CERTIFICATE-----Generated at Sun May 11 04:16:05 2025 by rpki-client