$ rpki-client -vvf repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft File: 722D23AD0F959CE5CBFF927C152517F07060D195.mft (raw, json) Hash identifier: 09PSsarcNZJO7I4P5ilNNH2bS9Azbizc+AQw/KziumI= Subject key identifier: BD:B1:53:58:43:25:86:3C:3C:6F:29:75:C8:77:A0:85:6F:B8:5D:21 Authority key identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 Certificate issuer: /CN=722D23AD0F959CE5CBFF927C152517F07060D195 Certificate serial: 5D49150C25BD0D2390ECEBF548045522A1A2FDE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft Manifest number: 01B5 Signing time: Tue 05 Aug 2025 13:01:48 +0000 Manifest this update: Tue 05 Aug 2025 12:56:48 +0000 Manifest next update: Fri 08 Aug 2025 19:22:48 +0000 Files and hashes: 1: 722D23AD0F959CE5CBFF927C152517F07060D195.crl (hash: 4V7AIUZwH7kuFhKOvfmP3dXK99RCCDFRPqvboGlTjAs=) 2: 3130332e34392e35302e302f32342d3234203d3e20313530343830.roa (hash: +d+a4LcNz5DaR0KSjaxaW7ITfbOW0ZExk6wH6uzqtS4=) 3: 3130332e34392e35302e302f32332d3234203d3e20313530343830.roa (hash: t+BQy4JUViW5bGnyMPshrmJ8tbFXjMhec+0M2rNH2M0=) 4: 3130332e34392e35312e302f32342d3234203d3e20313530343830.roa (hash: bai8drpp5Ou2lflIGmVUiQ7O559qS/qew2SdTRLBcyQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 19:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:49:15:0c:25:bd:0d:23:90:ec:eb:f5:48:04:55:22:a1:a2:fd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722D23AD0F959CE5CBFF927C152517F07060D195 Validity Not Before: Aug 5 12:56:48 2025 GMT Not After : Aug 8 19:22:48 2025 GMT Subject: CN=BDB153584325863C3C6F2975C877A0856FB85D21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f3:8f:ec:0b:30:85:0e:5e:79:99:43:b8:74: c0:28:de:79:a6:a1:04:cd:de:dc:89:0e:87:9a:33: b3:b5:49:b1:75:1c:30:a5:16:08:e3:aa:bc:84:82: d6:52:a3:06:ed:83:13:34:21:91:04:74:e7:95:04: 6b:04:b4:c9:30:29:ef:8e:2b:a3:ba:05:3c:73:9a: 4d:75:ae:f4:5c:4c:8b:47:d0:11:54:27:2d:62:a9: 50:7b:1c:82:74:5c:d9:c1:08:c9:b5:b2:2f:2e:99: 6e:18:67:7d:d2:6a:50:4d:90:08:a8:4b:b0:96:1c: 3e:20:0d:96:dc:9c:ee:99:6f:53:02:46:32:30:39: 9f:86:12:43:e9:a9:36:0a:5c:23:9d:2f:d0:b0:30: cf:a2:42:40:37:15:86:12:f8:9a:f9:21:21:a3:6a: b1:ef:1e:37:f8:0b:e6:a9:40:fc:d0:c9:0f:d8:42: c8:eb:d5:c7:33:70:52:96:54:2e:80:4c:2e:20:30: 93:c1:92:9e:9c:2b:45:a4:26:36:8e:a0:f0:78:37: f7:78:e6:40:54:54:54:5d:e2:6d:da:65:21:93:89: 24:8b:3b:0d:a9:7f:5b:80:a6:68:ee:12:c1:82:b5: c2:e5:0d:90:70:fb:bf:69:09:9b:ca:8d:6b:ba:ab: e2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B1:53:58:43:25:86:3C:3C:6F:29:75:C8:77:A0:85:6F:B8:5D:21 X509v3 Authority Key Identifier: keyid:72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:e5:3c:64:f5:c6:f6:42:08:11:bc:3e:45:f4:bc:17:fb:cc: 4f:ec:4f:bb:27:b7:82:98:44:18:cc:e5:73:28:a9:d8:2a:b1: 28:95:f8:7d:f1:74:f9:fa:b1:85:5d:5c:c4:74:0b:2f:f4:aa: fc:07:ae:9e:f4:76:9a:a3:f1:de:3a:15:62:3e:06:17:7c:82: f5:8a:44:52:a4:02:18:8b:87:d8:97:46:e2:d9:9a:73:61:99: 70:b9:9e:d6:c7:8c:0a:77:8e:98:37:72:3e:0a:c5:cf:b3:b2: 2f:79:af:74:2e:b2:d2:b0:38:73:f0:f5:a6:80:41:5f:6e:f0: dd:34:79:26:77:43:1e:04:b9:13:60:17:d5:8f:10:91:81:1a: 22:3c:49:f2:70:b2:22:8b:61:27:cb:94:e2:0f:10:4b:a6:76: ef:66:1e:a5:76:67:67:c8:45:7b:1c:98:0c:3e:db:c4:93:92: 52:74:5d:97:57:5f:cf:61:42:6d:4f:32:db:aa:1b:3f:b6:60: 79:3f:3f:67:b2:7f:1a:3f:46:c5:c4:8f:95:60:8d:c6:fe:3e: 98:a6:34:76:be:1e:6b:a2:f6:c1:ec:57:38:f1:43:ba:bf:49: 32:78:cb:44:2c:93:20:cf:d3:89:68:5b:c7:a8:f6:ea:15:34: 13:f5:d1:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXUkVDCW9DSOQ7Ov1SARVIqGi/eAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3 MDYwRDE5NTAeFw0yNTA4MDUxMjU2NDhaFw0yNTA4MDgxOTIyNDhaMDMxMTAvBgNV BAMTKEJEQjE1MzU4NDMyNTg2M0MzQzZGMjk3NUM4NzdBMDg1NkZCODVEMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr84/sCzCFDl55mUO4dMAo3nmm oQTN3tyJDoeaM7O1SbF1HDClFgjjqryEgtZSowbtgxM0IZEEdOeVBGsEtMkwKe+O K6O6BTxzmk11rvRcTItH0BFUJy1iqVB7HIJ0XNnBCMm1si8umW4YZ33SalBNkAio S7CWHD4gDZbcnO6Zb1MCRjIwOZ+GEkPpqTYKXCOdL9CwMM+iQkA3FYYS+Jr5ISGj arHvHjf4C+apQPzQyQ/YQsjr1cczcFKWVC6ATC4gMJPBkp6cK0WkJjaOoPB4N/d4 5kBUVFRd4m3aZSGTiSSLOw2pf1uApmjuEsGCtcLlDZBw+79pCZvKjWu6q+JHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvbFTWEMlhjw8byl1yHeghW+4XSEwHwYDVR0j BBgwFoAUci0jrQ+VnOXL/5J8FSUX8HBg0ZUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2U4ZGE5Yy1iZGJkLTQ5MDgtYmE5Mi1kOTBmZWE5YzhmMDUvMC83MjJEMjNBRDBG OTU5Q0U1Q0JGRjkyN0MxNTI1MTdGMDcwNjBEMTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3MDYw RDE5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNlOGRhOWMtYmRiZC00OTA4LWJh OTItZDkwZmVhOWM4ZjA1LzAvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3 RjA3MDYwRDE5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDlPGT1xvZCCBG8PkX0vBf7zE/sT7snt4KY RBjM5XMoqdgqsSiV+H3xdPn6sYVdXMR0Cy/0qvwHrp70dpqj8d46FWI+Bhd8gvWK RFKkAhiLh9iXRuLZmnNhmXC5ntbHjAp3jpg3cj4Kxc+zsi95r3QustKwOHPw9aaA QV9u8N00eSZ3Qx4EuRNgF9WPEJGBGiI8SfJwsiKLYSfLlOIPEEumdu9mHqV2Z2fI RXscmAw+28STklJ0XZdXX89hQm1PMtuqGz+2YHk/P2eyfxo/RsXEj5Vgjcb+Ppim NHa+Hmui9sHsVzjxQ7q/STJ4y0QskyDP04loW8eo9uoVNBP10Rg= -----END CERTIFICATE-----Generated at Thu Aug 7 11:07:09 2025 by rpki-client