$ rpki-client -vvf repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft File: 2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft (raw, json) Hash identifier: rNH2HKHxCjsXhRgjAVH/g4OPRdzG4njCgBQjoSCUE2A= Subject key identifier: 43:DB:F8:14:AF:99:4B:77:FA:4E:31:36:0F:C9:DF:22:60:82:7C:E0 Authority key identifier: 22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F Certificate issuer: /CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Certificate serial: 26B2F8FA57B4FE9943B9BFDF077CD86CF19F1EB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft Manifest number: BD Signing time: Sun 15 Jun 2025 04:52:01 +0000 Manifest this update: Sun 15 Jun 2025 04:47:01 +0000 Manifest next update: Wed 18 Jun 2025 10:17:01 +0000 Files and hashes: 1: 3135372e31352e3134342e302f32332d3233203d3e20313532333736.roa (hash: cWyOKWctYlbVooNMHms1H1vDLL9MPLPoRH1H2TKVIAo=) 2: 3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa (hash: bbNh5IhzL1rNJLyhy7hiFZkFXcVeHuBdSs69IB8xXPA=) 3: 3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa (hash: SBNjwJJYCJHvL2QmCRz+yZ8PvTB10n4BHiXO1+hrRxM=) 4: 2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl (hash: eKq5c1lfYq+qRTOHXHG7v7yaz4kZrtuEVwlf1P3YoAM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 10:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:b2:f8:fa:57:b4:fe:99:43:b9:bf:df:07:7c:d8:6c:f1:9f:1e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Validity Not Before: Jun 15 04:47:01 2025 GMT Not After : Jun 18 10:17:01 2025 GMT Subject: CN=43DBF814AF994B77FA4E31360FC9DF2260827CE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:58:7e:37:24:5e:9d:9d:ef:51:8c:3a:82:5c: 1f:e9:47:56:5a:ff:a9:83:ef:0c:9e:b7:f3:d4:3c: 06:6b:eb:f5:ad:03:b2:34:28:16:15:4b:5d:5d:4e: e9:12:1e:ac:be:4e:2d:41:15:39:eb:73:88:55:07: 4b:ff:60:4d:60:c2:d7:ca:70:a6:25:c7:05:9e:cb: 13:cd:0a:41:bf:36:58:8f:8f:ed:78:e2:12:df:8f: f4:07:c6:34:e7:a3:47:9d:36:95:8e:ca:d9:22:96: 63:47:98:18:4f:3b:d4:2b:22:46:a4:f9:36:17:cd: d6:08:40:a0:13:3d:69:0a:4b:c9:c3:9c:10:a0:a0: 5e:b9:f9:a6:d5:77:89:76:88:02:6f:a0:dc:5a:cc: 4c:95:5f:70:46:c2:33:cc:39:ef:4c:2e:81:99:f3: d7:a7:84:9c:ce:b0:4d:ec:c2:a4:9d:6b:81:b7:37: 38:d8:6b:72:06:6a:5c:f1:70:c9:0f:0c:d6:5e:83: 40:5b:89:9d:6c:6c:2c:b0:1c:70:40:80:18:8f:88: 07:68:75:5f:72:51:27:e0:e7:c5:6a:7d:91:95:b8: 57:ab:c8:2b:3c:d6:35:d3:55:a4:a8:95:df:87:47: 39:c5:03:1a:3e:da:76:c2:a1:d5:1c:f6:01:72:66: 1a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DB:F8:14:AF:99:4B:77:FA:4E:31:36:0F:C9:DF:22:60:82:7C:E0 X509v3 Authority Key Identifier: keyid:22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:86:11:e3:cd:f4:a3:2b:57:b8:73:d3:49:0b:c7:1e:78:03: eb:a8:3d:96:61:75:7a:46:44:4b:f7:17:6a:8a:fc:b0:3a:a5: e8:4e:a1:5d:cc:a1:77:cc:74:ea:7e:bc:be:c7:02:10:e4:18: 85:cc:78:fa:e8:49:b3:15:a9:d6:6c:aa:fd:81:5b:34:6d:64: 22:7d:fc:58:79:af:2f:70:d4:54:f4:44:94:63:96:bf:74:70: 2a:60:97:5a:d6:1b:9a:a4:e6:a9:cc:dc:81:77:b1:be:b9:a2: 49:ad:73:ea:4b:26:bd:15:a7:46:9c:53:a3:ce:de:57:7f:14: ee:0d:28:f3:40:32:0c:5b:4a:a2:a0:e4:76:70:2e:36:bd:6a: 2a:d5:53:18:4e:af:92:f9:62:6f:73:ce:ae:2f:47:9b:0e:44: ac:8e:de:73:b7:79:64:ba:1b:44:c2:26:7d:bb:07:4a:24:98: 03:d5:4c:31:a1:87:4c:83:0d:2f:fe:eb:78:74:7e:a1:21:ce: 95:26:92:98:94:ac:ba:36:a3:6c:a3:4d:37:27:22:0e:bd:93: 87:e0:80:43:1c:fa:52:1f:50:be:12:ad:60:46:47:24:de:17: 63:f6:f3:d1:d9:74:a0:e5:a8:eb:dd:94:de:31:58:b2:54:70: 1d:e2:9b:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJrL4+le0/plDub/fB3zYbPGfHrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1 RkE1RTczRjAeFw0yNTA2MTUwNDQ3MDFaFw0yNTA2MTgxMDE3MDFaMDMxMTAvBgNV BAMTKDQzREJGODE0QUY5OTRCNzdGQTRFMzEzNjBGQzlERjIyNjA4MjdDRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcWH43JF6dne9RjDqCXB/pR1Za /6mD7wyet/PUPAZr6/WtA7I0KBYVS11dTukSHqy+Ti1BFTnrc4hVB0v/YE1gwtfK cKYlxwWeyxPNCkG/NliPj+144hLfj/QHxjTno0edNpWOytkilmNHmBhPO9QrIkak +TYXzdYIQKATPWkKS8nDnBCgoF65+abVd4l2iAJvoNxazEyVX3BGwjPMOe9MLoGZ 89enhJzOsE3swqSda4G3NzjYa3IGalzxcMkPDNZeg0BbiZ1sbCywHHBAgBiPiAdo dV9yUSfg58VqfZGVuFeryCs81jXTVaSold+HRznFAxo+2nbCodUc9gFyZhq3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ9v4FK+ZS3f6TjE2D8nfImCCfOAwHwYDVR0j BBgwFoAUIkYBX/8vxV/vucRKitQWtV+l5z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTZlY2NiNy1lOTE3LTQwZjUtYWNlZS0wM2Q2OGJlNWZkOTcvMC8yMjQ2MDE1RkZG MkZDNTVGRUZCOUM0NEE4QUQ0MTZCNTVGQTVFNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1RkE1 RTczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU2ZWNjYjctZTkxNy00MGY1LWFj ZWUtMDNkNjhiZTVmZDk3LzAvMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2 QjU1RkE1RTczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyGEePN9KMrV7hz00kLxx54A+uoPZZhdXpG REv3F2qK/LA6pehOoV3MoXfMdOp+vL7HAhDkGIXMeProSbMVqdZsqv2BWzRtZCJ9 /Fh5ry9w1FT0RJRjlr90cCpgl1rWG5qk5qnM3IF3sb65okmtc+pLJr0Vp0acU6PO 3ld/FO4NKPNAMgxbSqKg5HZwLja9airVUxhOr5L5Ym9zzq4vR5sORKyO3nO3eWS6 G0TCJn27B0okmAPVTDGhh0yDDS/+63h0fqEhzpUmkpiUrLo2o2yjTTcnIg69k4fg gEMc+lIfUL4SrWBGRyTeF2P289HZdKDlqOvdlN4xWLJUcB3im+g= -----END CERTIFICATE-----Generated at Mon Jun 16 01:28:53 2025 by rpki-client