$ rpki-client -vvf repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft File: 22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft (raw, json) Hash identifier: QMBEx6lno6Np2N1jEPoG+VPawl4uVw+5OPBGoc6t9GU= Subject key identifier: 68:21:D6:6D:44:0C:13:FF:A4:22:36:D3:74:8E:CD:77:EC:30:B5:3A Authority key identifier: 22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F Certificate issuer: /CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F Certificate serial: 4D2C2C72F8D0275454CBE7621FE40C8D61444E2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft Manifest number: 0198 Signing time: Fri 08 Aug 2025 05:50:45 +0000 Manifest this update: Fri 08 Aug 2025 05:45:45 +0000 Manifest next update: Mon 11 Aug 2025 08:45:45 +0000 Files and hashes: 1: 3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (hash: 78DN2BPh6IHHpt4Dc66YUFfEPJk7diyDFp9pfSN9LXE=) 2: 22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl (hash: 6X0Y/KtKI66BYAi3zUnJ5VvcovFCmid74vQh48M/jGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 08:45:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:2c:2c:72:f8:d0:27:54:54:cb:e7:62:1f:e4:0c:8d:61:44:4e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F Validity Not Before: Aug 8 05:45:45 2025 GMT Not After : Aug 11 08:45:45 2025 GMT Subject: CN=6821D66D440C13FFA42236D3748ECD77EC30B53A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f9:88:4d:22:e1:8e:ef:98:4a:8b:79:10:8e: 23:f3:a6:4f:87:3e:00:dd:c6:d4:da:68:85:30:54: 5d:cd:c1:0a:35:65:82:c2:76:9c:b8:c2:16:7d:36: 1d:39:3c:c1:d7:32:35:06:14:c2:9b:4a:5b:93:04: 77:67:e8:c7:2e:83:cb:f8:52:48:17:f6:fd:52:db: 8e:13:75:3c:d9:7b:42:bf:59:09:79:4b:40:07:91: 24:a2:7f:14:80:eb:3f:5b:42:f7:30:28:a8:ba:3b: 2b:de:13:5a:79:14:08:11:3a:57:ec:f6:e2:bf:77: 70:83:bc:2f:2d:60:91:19:c6:d4:d2:54:32:78:be: 65:ba:1d:ac:40:9b:61:af:aa:24:59:5d:ca:8b:3e: 65:13:be:9c:99:e9:9f:83:df:63:3d:65:c3:92:ea: 1e:c0:88:76:fb:7d:cc:00:2b:84:c5:3d:79:c0:3d: a8:2c:09:2e:07:71:0c:fd:4f:ac:b4:11:99:5d:27: 57:1a:1a:5e:88:f7:d6:1e:05:cb:72:dd:2c:b0:57: 88:66:3b:a1:3d:e3:0a:02:cb:80:04:c4:49:be:65: 5d:9e:03:e5:af:d6:2d:57:73:9e:fb:ea:4d:26:07: 29:0c:6b:5b:35:37:cf:a7:fe:e2:26:ef:05:8d:e2: 55:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:21:D6:6D:44:0C:13:FF:A4:22:36:D3:74:8E:CD:77:EC:30:B5:3A X509v3 Authority Key Identifier: keyid:22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:83:f7:68:c0:ba:2b:13:0b:b6:51:a2:db:1f:df:d1:99:eb: 42:2f:54:0f:25:e7:8c:cc:ac:b4:fe:91:20:46:95:d7:ab:12: 64:89:b1:79:63:1e:70:2c:3b:63:05:7f:71:4f:0b:5a:d6:03: f6:ec:c8:dd:8a:eb:9c:45:b4:02:82:59:c7:cb:d5:4c:e4:fd: a9:85:8f:e4:b4:27:46:72:4f:ea:c5:72:1c:64:05:7c:7b:2d: 23:8b:17:04:f3:58:d2:6a:57:2d:38:1f:fc:65:48:44:62:cc: 8e:8d:f1:9c:46:0d:6d:72:b9:9c:5d:8f:55:a2:3b:e1:50:cf: da:8b:67:58:06:ac:82:75:cd:ef:1f:f6:c3:0d:4d:d6:c2:74: 68:6f:3d:83:4a:fd:bd:89:c4:45:0f:8e:f7:55:02:07:f4:cc: 20:32:43:21:61:cb:49:bb:17:51:28:25:85:71:c3:fb:c6:fe: d5:a1:33:82:6d:35:ac:a1:0e:40:cc:11:b2:17:41:df:23:f3: 0d:43:e4:a1:0f:84:64:df:8f:53:09:79:48:23:65:7e:15:f9: da:6a:2b:72:34:46:a4:28:46:df:b3:cc:8d:a3:0a:58:9e:09: 04:a7:a0:13:ee:52:2c:70:a8:e7:e1:e3:b7:34:8b:50:15:5c: 7e:fa:50:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTSwscvjQJ1RUy+diH+QMjWFETiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1QUY4 QzFDMjI4RjAeFw0yNTA4MDgwNTQ1NDVaFw0yNTA4MTEwODQ1NDVaMDMxMTAvBgNV BAMTKDY4MjFENjZENDQwQzEzRkZBNDIyMzZEMzc0OEVDRDc3RUMzMEI1M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX+YhNIuGO75hKi3kQjiPzpk+H PgDdxtTaaIUwVF3NwQo1ZYLCdpy4whZ9Nh05PMHXMjUGFMKbSluTBHdn6Mcug8v4 UkgX9v1S244TdTzZe0K/WQl5S0AHkSSifxSA6z9bQvcwKKi6OyveE1p5FAgROlfs 9uK/d3CDvC8tYJEZxtTSVDJ4vmW6HaxAm2GvqiRZXcqLPmUTvpyZ6Z+D32M9ZcOS 6h7AiHb7fcwAK4TFPXnAPagsCS4HcQz9T6y0EZldJ1caGl6I99YeBcty3SywV4hm O6E94woCy4AExEm+ZV2eA+Wv1i1Xc5776k0mBykMa1s1N8+n/uIm7wWN4lVzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaCHWbUQME/+kIjbTdI7Nd+wwtTowHwYDVR0j BBgwFoAUIoJaC+6SZoOsQaBIau9Vr4wcIo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTAwMjA4Yi0zMmFjLTRhMjYtOWQ5Mi02MDlhZDc2MTgzYzEvMC8yMjgyNUEwQkVF OTI2NjgzQUM0MUEwNDg2QUVGNTVBRjhDMUMyMjhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1QUY4QzFD MjI4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzkwMDIwOGItMzJhYy00YTI2LTlk OTItNjA5YWQ3NjE4M2MxLzAvMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1 QUY4QzFDMjI4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKuD92jAuisTC7ZRotsf39GZ60IvVA8l54zM rLT+kSBGlderEmSJsXljHnAsO2MFf3FPC1rWA/bsyN2K65xFtAKCWcfL1Uzk/amF j+S0J0ZyT+rFchxkBXx7LSOLFwTzWNJqVy04H/xlSERizI6N8ZxGDW1yuZxdj1Wi O+FQz9qLZ1gGrIJ1ze8f9sMNTdbCdGhvPYNK/b2JxEUPjvdVAgf0zCAyQyFhy0m7 F1EoJYVxw/vG/tWhM4JtNayhDkDMEbIXQd8j8w1D5KEPhGTfj1MJeUgjZX4V+dpq K3I0RqQoRt+zzI2jClieCQSnoBPuUixwqOfh47c0i1AVXH76UJc= -----END CERTIFICATE-----Generated at Sat Aug 9 01:03:07 2025 by rpki-client