$ rpki-client -vvf repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft File: 722D23AD0F959CE5CBFF927C152517F07060D195.mft (raw, json) Hash identifier: 2I3UXtQsPiXJPYYTWO5HG1mPfWyxGMGLhyQuXPOn30A= Subject key identifier: 7A:E7:7C:A7:0B:75:CA:FC:2A:C1:93:9C:27:81:80:0B:30:20:CA:FF Authority key identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 Certificate issuer: /CN=722D23AD0F959CE5CBFF927C152517F07060D195 Certificate serial: 45FF72311D306BDCF7D48D8C47B1ACC190F578AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft Manifest number: 019D Signing time: Sat 14 Jun 2025 06:21:45 +0000 Manifest this update: Sat 14 Jun 2025 06:16:45 +0000 Manifest next update: Tue 17 Jun 2025 09:57:45 +0000 Files and hashes: 1: 722D23AD0F959CE5CBFF927C152517F07060D195.crl (hash: 9oofY3hNN5ZysSluvhdDuUmS0VOfmRSqGLeaoR1bUkc=) 2: 3130332e34392e35312e302f32342d3234203d3e20313530343830.roa (hash: bai8drpp5Ou2lflIGmVUiQ7O559qS/qew2SdTRLBcyQ=) 3: 3130332e34392e35302e302f32342d3234203d3e20313530343830.roa (hash: +d+a4LcNz5DaR0KSjaxaW7ITfbOW0ZExk6wH6uzqtS4=) 4: 3130332e34392e35302e302f32332d3234203d3e20313530343830.roa (hash: t+BQy4JUViW5bGnyMPshrmJ8tbFXjMhec+0M2rNH2M0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 09:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ff:72:31:1d:30:6b:dc:f7:d4:8d:8c:47:b1:ac:c1:90:f5:78:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722D23AD0F959CE5CBFF927C152517F07060D195 Validity Not Before: Jun 14 06:16:45 2025 GMT Not After : Jun 17 09:57:45 2025 GMT Subject: CN=7AE77CA70B75CAFC2AC1939C2781800B3020CAFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ef:49:3b:1d:b9:cc:22:ce:fb:c4:9c:6b:7f: 68:ac:0f:0a:f6:83:42:10:f0:76:f2:fe:a2:99:b4: a7:d8:3d:fd:c9:b8:fa:60:1a:a9:44:99:25:c6:1f: b0:d4:e9:a6:97:a0:99:5d:8b:3d:b0:b7:a1:91:d2: c3:d9:a8:c8:db:4b:25:85:67:97:80:1d:2c:b4:27: cd:4b:68:05:c3:c5:e4:e6:6a:e9:16:f3:8b:aa:a3: b7:aa:21:4d:8e:40:5d:c4:84:bb:9a:54:ca:fb:2d: 44:fe:c5:fe:97:3a:3d:4c:4f:97:61:bd:66:69:88: bc:ac:24:bc:3a:5a:ff:5b:f7:47:05:c2:79:70:fb: e7:a6:df:27:ac:8d:8f:3d:33:8e:2b:e3:99:bd:e4: d9:a3:5c:e9:d7:c5:91:e3:c0:6b:01:8b:7f:68:a3: 2d:72:b3:7a:3e:0f:35:f1:d2:f2:2d:98:11:d4:74: 04:bc:67:82:ed:9d:2c:c0:8b:65:2b:55:78:2e:45: 2c:25:09:e1:73:3b:ba:a7:f2:ac:8a:57:95:5f:af: 59:c6:da:4c:2f:50:75:89:b4:3d:37:c3:57:85:ab: d8:d6:c1:c9:eb:18:2d:11:0b:98:65:b4:fe:96:bd: dc:58:0a:36:7a:88:56:20:ae:92:36:69:5f:21:79: 01:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E7:7C:A7:0B:75:CA:FC:2A:C1:93:9C:27:81:80:0B:30:20:CA:FF X509v3 Authority Key Identifier: keyid:72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:01:cc:5b:c8:ed:da:cb:6a:c6:ef:0d:a5:f2:ab:8a:41:5d: b8:5e:18:25:94:b9:c8:7b:ad:e4:29:ad:8d:1b:22:2b:77:60: 79:ab:79:87:64:14:29:e6:2f:35:d0:25:91:ef:10:43:19:c9: 3d:4f:5b:46:ca:b3:7d:87:93:d3:c9:14:37:5d:23:7d:0a:91: 52:22:1c:03:4e:7c:41:54:ad:ed:45:0f:a8:d4:d3:39:eb:38: a6:b6:8e:43:54:34:34:5d:d8:c8:ae:68:2a:86:61:3d:b6:8b: e7:0d:b2:8c:9f:4c:5a:22:05:89:61:cf:da:33:3f:51:d7:a3: 8a:35:33:6e:e2:50:3a:da:21:d8:1e:d0:12:99:5d:70:d8:ad: ae:14:ef:4c:54:fd:48:dc:6d:7d:38:a5:ae:2c:fc:a7:c7:5e: 4c:87:f2:f6:8b:6a:cc:4f:44:d5:f5:d1:f8:49:fd:97:d9:6a: 2c:e7:37:4b:8e:23:9f:65:46:4a:de:0a:f3:e2:6e:f7:6c:32: c6:e2:ab:ff:c1:d0:cb:8e:4d:d4:21:fa:4a:8e:50:c8:c4:da: da:da:0d:a6:c9:76:a7:d3:f0:da:35:89:a9:57:46:db:74:ab: 0b:c9:80:48:f6:f6:d4:93:d5:32:b9:0c:5c:58:ef:72:c3:9b: 80:4e:ec:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURf9yMR0wa9z31I2MR7GswZD1eK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3 MDYwRDE5NTAeFw0yNTA2MTQwNjE2NDVaFw0yNTA2MTcwOTU3NDVaMDMxMTAvBgNV BAMTKDdBRTc3Q0E3MEI3NUNBRkMyQUMxOTM5QzI3ODE4MDBCMzAyMENBRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC770k7HbnMIs77xJxrf2isDwr2 g0IQ8Hby/qKZtKfYPf3JuPpgGqlEmSXGH7DU6aaXoJldiz2wt6GR0sPZqMjbSyWF Z5eAHSy0J81LaAXDxeTmaukW84uqo7eqIU2OQF3EhLuaVMr7LUT+xf6XOj1MT5dh vWZpiLysJLw6Wv9b90cFwnlw++em3yesjY89M44r45m95NmjXOnXxZHjwGsBi39o oy1ys3o+DzXx0vItmBHUdAS8Z4LtnSzAi2UrVXguRSwlCeFzO7qn8qyKV5Vfr1nG 2kwvUHWJtD03w1eFq9jWwcnrGC0RC5hltP6WvdxYCjZ6iFYgrpI2aV8heQGHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeud8pwt1yvwqwZOcJ4GACzAgyv8wHwYDVR0j BBgwFoAUci0jrQ+VnOXL/5J8FSUX8HBg0ZUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2U4ZGE5Yy1iZGJkLTQ5MDgtYmE5Mi1kOTBmZWE5YzhmMDUvMC83MjJEMjNBRDBG OTU5Q0U1Q0JGRjkyN0MxNTI1MTdGMDcwNjBEMTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3MDYw RDE5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNlOGRhOWMtYmRiZC00OTA4LWJh OTItZDkwZmVhOWM4ZjA1LzAvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3 RjA3MDYwRDE5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0BzFvI7drLasbvDaXyq4pBXbheGCWUuch7 reQprY0bIit3YHmreYdkFCnmLzXQJZHvEEMZyT1PW0bKs32Hk9PJFDddI30KkVIi HANOfEFUre1FD6jU0znrOKa2jkNUNDRd2MiuaCqGYT22i+cNsoyfTFoiBYlhz9oz P1HXo4o1M27iUDraIdge0BKZXXDYra4U70xU/UjcbX04pa4s/KfHXkyH8vaLasxP RNX10fhJ/ZfZaiznN0uOI59lRkreCvPibvdsMsbiq//B0MuOTdQh+kqOUMjE2tra DabJdqfT8No1ialXRtt0qwvJgEj29tST1TK5DFxY73LDm4BO7DI= -----END CERTIFICATE-----Generated at Sun Jun 15 15:23:05 2025 by rpki-client