$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft File: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft (raw, json) Hash identifier: 2AJIxpI59R9ssSr0IWkVetvhUaelrmzEcTBhkF6d97I= Subject key identifier: 48:FC:1E:7E:1F:2B:51:91:1D:D6:F8:20:B4:AA:4A:F7:17:5B:04:DC Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Certificate serial: 7D651E6BBDB205C8D4ED7426ABDB9706109AD35C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft Manifest number: 0301 Signing time: Wed 18 Jun 2025 18:11:18 +0000 Manifest this update: Wed 18 Jun 2025 18:06:18 +0000 Manifest next update: Sun 22 Jun 2025 05:43:18 +0000 Files and hashes: 1: AS10217.roa (hash: JJQedycT2rxuZ0WKBIVY+WZbOwVugUFQzwOutSTR+VY=) 2: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl (hash: JV+YNaK45gSF4le8tRRjYgpXXE3QDoWRrzFdSAU2Y74=) 3: AS147168.roa (hash: e20CGZZgjTyz3kNZT3WXZXnYEX1ApqROokbLe+6uHIA=) 4: AS45700.roa (hash: BXkE0BXqN50iJBAlAe18i/nlvwrKk+4GRFc684uKAn8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 05:43:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:65:1e:6b:bd:b2:05:c8:d4:ed:74:26:ab:db:97:06:10:9a:d3:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Validity Not Before: Jun 18 18:06:18 2025 GMT Not After : Jun 22 05:43:18 2025 GMT Subject: CN=48FC1E7E1F2B51911DD6F820B4AA4AF7175B04DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:ce:7d:f0:22:bd:a0:1e:93:9a:eb:da:b4: c3:61:c3:2d:21:83:86:c2:a8:14:87:6f:50:08:06: 66:0f:8b:bd:b7:e1:8a:35:f2:d3:5f:4f:50:81:68: 8d:32:de:7d:be:cc:0a:23:ec:6c:43:ba:70:45:3a: 72:c2:ac:1f:88:59:52:0d:8a:e8:aa:34:93:26:66: a2:d7:c4:2b:d2:20:58:ab:b1:27:ad:ed:d0:a6:55: a8:ed:fd:6f:08:08:46:a0:c4:fc:54:e4:20:0f:f2: 12:58:9e:47:3f:c8:c2:f4:6e:60:15:25:fe:44:0d: 71:c2:48:ef:03:85:d4:dd:67:b4:02:1a:94:e8:08: 67:92:9f:0f:d4:67:c5:59:12:2d:42:de:73:3d:ae: 9e:38:dd:26:31:79:ba:a0:bc:72:96:ca:13:2f:d2: c8:d5:34:81:f8:bd:1d:bd:ae:23:bc:fd:c4:f9:f9: 08:b6:60:60:61:5b:7b:fa:42:96:03:85:63:77:0b: 11:42:1c:27:64:db:dc:68:d4:9c:11:cc:55:73:78: a5:24:39:00:17:9e:6a:a5:7f:38:18:ec:ce:a6:4e: e2:46:37:47:4c:75:1c:43:c0:de:0e:d5:bb:29:8c: 9d:c5:7d:55:c5:2c:42:e3:1d:ab:11:4c:9b:fb:50: 8e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FC:1E:7E:1F:2B:51:91:1D:D6:F8:20:B4:AA:4A:F7:17:5B:04:DC X509v3 Authority Key Identifier: keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:03:37:b2:6b:28:c4:57:f9:f2:a0:0a:a2:73:a7:23:ff:04: 06:aa:c6:28:7d:8a:0f:2f:ba:43:84:8a:f8:f2:c3:86:3e:42: 0e:17:12:28:17:fe:cd:fc:f2:dc:1a:1b:62:b5:b4:6f:b7:8f: 16:df:82:9f:6c:67:4f:7c:be:fc:a7:00:cd:ee:c4:67:9d:6f: 41:a5:8e:7d:8a:de:90:43:28:b9:6b:82:4a:f2:f1:c7:22:81: 72:f5:bd:fa:82:de:9e:90:ab:a2:1b:fc:cf:c6:8d:27:c0:8c: e2:53:9a:9f:95:4a:72:db:e9:bf:b4:8f:92:7a:5a:07:75:12: 92:82:23:f4:da:d0:a3:8c:72:c5:0f:07:d8:39:88:a5:ec:c2: 10:07:ca:89:e7:25:71:4f:00:37:49:0c:14:ad:60:d1:0f:66: 02:e8:57:ac:7c:50:ca:9f:3b:d5:d8:6e:ab:00:ff:4b:63:e1: c5:c4:f3:d6:74:28:43:e3:a9:8a:21:fb:f9:b0:46:0a:4d:ca: 1a:ca:28:96:ed:02:b1:9d:95:0c:7f:96:dc:4a:c2:88:2f:0a: 1e:d9:8a:da:dc:cc:91:87:bf:2e:78:e9:46:d4:ea:76:51:03: b3:b9:cd:23:36:a4:32:ca:66:9d:00:19:3a:bc:ad:d6:3b:c4: 03:0f:91:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfWUea72yBcjU7XQmq9uXBhCa01wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF MkMzQjUxMjAeFw0yNTA2MTgxODA2MThaFw0yNTA2MjIwNTQzMThaMDMxMTAvBgNV BAMTKDQ4RkMxRTdFMUYyQjUxOTExREQ2RjgyMEI0QUE0QUY3MTc1QjA0REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC34M598CK9oB6TmuvatMNhwy0h g4bCqBSHb1AIBmYPi7234Yo18tNfT1CBaI0y3n2+zAoj7GxDunBFOnLCrB+IWVIN iuiqNJMmZqLXxCvSIFirsSet7dCmVajt/W8ICEagxPxU5CAP8hJYnkc/yML0bmAV Jf5EDXHCSO8DhdTdZ7QCGpToCGeSnw/UZ8VZEi1C3nM9rp443SYxebqgvHKWyhMv 0sjVNIH4vR29riO8/cT5+Qi2YGBhW3v6QpYDhWN3CxFCHCdk29xo1JwRzFVzeKUk OQAXnmqlfzgY7M6mTuJGN0dMdRxDwN4O1bspjJ3FfVXFLELjHasRTJv7UI63AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSPwefh8rUZEd1vggtKpK9xdbBNwwHwYDVR0j BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz QjUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk YmQtMjU0MzgxMDY5ZTU3LzAvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4 MkFFMkMzQjUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQDN7JrKMRX+fKgCqJzpyP/BAaqxih9ig8v ukOEivjyw4Y+Qg4XEigX/s388twaG2K1tG+3jxbfgp9sZ098vvynAM3uxGedb0Gl jn2K3pBDKLlrgkry8ccigXL1vfqC3p6Qq6Ib/M/GjSfAjOJTmp+VSnLb6b+0j5J6 Wgd1EpKCI/Ta0KOMcsUPB9g5iKXswhAHyonnJXFPADdJDBStYNEPZgLoV6x8UMqf O9XYbqsA/0tj4cXE89Z0KEPjqYoh+/mwRgpNyhrKKJbtArGdlQx/ltxKwogvCh7Z itrczJGHvy546UbU6nZRA7O5zSM2pDLKZp0AGTq8rdY7xAMPkZk= -----END CERTIFICATE-----Generated at Fri Jun 20 06:14:08 2025 by rpki-client