$ rpki-client -vvf repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft File: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft (raw, json) Hash identifier: GznSExzyhEvIHlbbHTTBjI97NrPNCqMNqYwscD7PapM= Subject key identifier: 3B:CA:8D:EF:88:AA:B3:53:87:9D:F2:5C:5C:0D:49:FA:41:45:2E:61 Authority key identifier: 32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA Certificate issuer: /CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Certificate serial: 72FAB286AF85F3001393BF0F5831DF16EB69362A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft Manifest number: 01E8 Signing time: Wed 06 Aug 2025 01:52:26 +0000 Manifest this update: Wed 06 Aug 2025 01:47:26 +0000 Manifest next update: Sat 09 Aug 2025 06:23:26 +0000 Files and hashes: 1: 3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa (hash: XbN3LxifTwY+vVTUMpMOqOr29jBN2u/bmUS0N8LyhH0=) 2: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl (hash: G21SiCMzGcA9aXje7VEijykozFBd90xE9YxcSwPCvIM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 06:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:fa:b2:86:af:85:f3:00:13:93:bf:0f:58:31:df:16:eb:69:36:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Validity Not Before: Aug 6 01:47:26 2025 GMT Not After : Aug 9 06:23:26 2025 GMT Subject: CN=3BCA8DEF88AAB353879DF25C5C0D49FA41452E61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e7:56:08:30:42:c0:12:00:28:10:6e:2e:01: cf:16:3d:a2:28:d4:fe:da:cd:4c:ea:8c:ec:c0:e4: fb:88:f5:e9:0e:74:a0:b0:b9:03:be:ac:8a:ee:3e: d8:34:95:49:9f:9d:af:87:0c:60:bf:d2:7b:bb:ae: 1e:3b:e3:72:9c:43:00:e9:e6:db:7e:10:5b:22:8e: 47:b6:84:2f:5c:4e:3a:f5:80:9b:5b:48:09:23:57: 5a:44:4a:8d:85:ae:37:41:08:2d:48:9a:b1:48:f2: 35:d8:21:07:da:c3:e7:f1:f1:1c:80:78:33:78:c0: 5d:3d:39:6b:c4:ec:76:75:46:f6:ec:61:c1:55:6d: 64:ef:b0:70:ee:a3:cf:2b:a4:d3:44:89:8d:e7:fc: 27:62:32:34:46:a6:6f:9a:10:30:92:9f:35:e4:d7: 8b:0c:2e:52:c9:d5:9d:e1:f2:81:01:1a:9d:28:80: 11:8e:3d:41:af:9e:3f:14:94:7e:de:b6:c8:b3:57: fb:9c:f5:e4:7e:11:61:fc:2e:e8:14:f4:67:cb:5c: 31:e5:2e:6b:cf:ac:bd:8e:b6:43:72:66:0a:14:73: 75:eb:ee:73:87:84:f2:73:f6:4d:b7:54:8e:f2:38: 6e:da:52:d9:89:02:b9:50:2f:3c:45:c3:b8:4c:46: a6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CA:8D:EF:88:AA:B3:53:87:9D:F2:5C:5C:0D:49:FA:41:45:2E:61 X509v3 Authority Key Identifier: keyid:32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:fd:00:0b:4b:cf:d9:3a:90:26:94:46:6f:88:14:6b:31:03: 67:2a:71:4f:c0:a6:45:09:bb:07:49:67:07:01:ae:42:45:0b: df:c7:c1:8f:71:4c:11:11:35:ce:ad:d1:89:dc:5e:85:2b:51: c4:5f:67:8e:11:ed:45:20:e4:43:5e:b0:3a:56:77:c4:43:c9: 03:fe:b7:8b:15:eb:10:30:53:90:ab:f1:90:5a:e7:a7:28:ce: 45:a5:5e:93:9f:0d:b0:a3:1d:75:c9:b8:ea:c1:d3:2a:30:ca: 13:be:4b:ef:b3:ec:6b:87:62:24:eb:c8:4c:07:48:91:2b:84: d1:b9:cd:65:f9:05:93:d3:32:ea:24:1f:30:4c:4d:75:9e:7e: c4:1e:e0:a4:33:0f:05:6e:9d:f7:f1:9f:1f:c5:4f:85:de:3d: dd:39:52:a5:ae:c7:2e:a7:79:65:ef:e1:8a:a3:4e:b2:2b:07: b9:a3:c0:db:2b:b2:3f:85:d3:51:5d:12:f9:d6:73:b4:04:d6: 7c:d6:16:ed:ec:ac:6f:1b:d0:a0:18:22:8f:2e:30:8a:91:38: 5b:77:9c:6b:f6:88:b9:c2:b6:66:54:b2:3d:ee:d8:3d:0d:8b: a2:6f:b6:6d:ea:b7:a0:78:14:1d:2a:a3:08:d5:2b:3d:69:48: 1e:62:d2:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcvqyhq+F8wATk78PWDHfFutpNiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1 MTdDQUZGQTAeFw0yNTA4MDYwMTQ3MjZaFw0yNTA4MDkwNjIzMjZaMDMxMTAvBgNV BAMTKDNCQ0E4REVGODhBQUIzNTM4NzlERjI1QzVDMEQ0OUZBNDE0NTJFNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ51YIMELAEgAoEG4uAc8WPaIo 1P7azUzqjOzA5PuI9ekOdKCwuQO+rIruPtg0lUmfna+HDGC/0nu7rh4743KcQwDp 5tt+EFsijke2hC9cTjr1gJtbSAkjV1pESo2FrjdBCC1ImrFI8jXYIQfaw+fx8RyA eDN4wF09OWvE7HZ1RvbsYcFVbWTvsHDuo88rpNNEiY3n/CdiMjRGpm+aEDCSnzXk 14sMLlLJ1Z3h8oEBGp0ogBGOPUGvnj8UlH7etsizV/uc9eR+EWH8LugU9GfLXDHl LmvPrL2OtkNyZgoUc3Xr7nOHhPJz9k23VI7yOG7aUtmJArlQLzxFw7hMRqYPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO8qN74iqs1OHnfJcXA1J+kFFLmEwHwYDVR0j BBgwFoAUMit7vHviqE2NZEpraDM5Y1F8r/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDUwZjBmNS1iODgzLTRiMjQtOTc5Mi03ZTk1N2FmODhiZjgvMC8zMjJCN0JCQzdC RTJBODREOEQ2NDRBNkI2ODMzMzk2MzUxN0NBRkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1MTdD QUZGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1MGYwZjUtYjg4My00YjI0LTk3 OTItN2U5NTdhZjg4YmY4LzAvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5 NjM1MTdDQUZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEb9AAtLz9k6kCaURm+IFGsxA2cqcU/ApkUJ uwdJZwcBrkJFC9/HwY9xTBERNc6t0YncXoUrUcRfZ44R7UUg5ENesDpWd8RDyQP+ t4sV6xAwU5Cr8ZBa56cozkWlXpOfDbCjHXXJuOrB0yowyhO+S++z7GuHYiTryEwH SJErhNG5zWX5BZPTMuokHzBMTXWefsQe4KQzDwVunffxnx/FT4XePd05UqWuxy6n eWXv4YqjTrIrB7mjwNsrsj+F01FdEvnWc7QE1nzWFu3srG8b0KAYIo8uMIqROFt3 nGv2iLnCtmZUsj3u2D0Ni6Jvtm3qt6B4FB0qowjVKz1pSB5i0hI= -----END CERTIFICATE-----Generated at Thu Aug 7 07:18:40 2025 by rpki-client