$ rpki-client -vvf repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft File: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft (raw, json) Hash identifier: T90As8r11uode7ktMrpz9aT1SmBe3N8Mbm/z8qmlQFM= Subject key identifier: 05:F4:04:FB:DB:87:90:E3:7F:DA:16:84:5A:47:0C:95:80:88:96:BD Authority key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 Certificate issuer: /CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Certificate serial: 459D7085928FAD119C7F9E49EABCB5B89AC53B0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft Manifest number: 04FA Signing time: Tue 05 Aug 2025 17:10:41 +0000 Manifest this update: Tue 05 Aug 2025 17:05:41 +0000 Manifest next update: Fri 08 Aug 2025 23:41:41 +0000 Files and hashes: 1: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl (hash: uyRVEgnOIDQ5rCFBc1lB3mLqdM4X5179P99KmOSd3Q0=) 2: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: 2H5831uY9aR1OjDn1Uun2zJ8vaTAjB4BokOjcc3Moq4=) 3: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: XJya992fgeumEsyzLHSliCXeCsu4l890cLRsCVZbrLE=) 4: 3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa (hash: vjgtOZ549YGHCxNz1PUrDo34FNB9oleC45Iwzg+kYuo=) 5: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: kS4p5t1GMvH/jM8YbFoB1ZVwKWJDCBblcchgAgj/oBk=) 6: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: pEqfltHiO5idL1uFxEX2uQGcaapU/AOZ2PUbYVPk40Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 23:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:9d:70:85:92:8f:ad:11:9c:7f:9e:49:ea:bc:b5:b8:9a:c5:3b:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Validity Not Before: Aug 5 17:05:41 2025 GMT Not After : Aug 8 23:41:41 2025 GMT Subject: CN=05F404FBDB8790E37FDA16845A470C95808896BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2f:b8:5d:99:c5:3f:9c:50:59:67:57:df:0f: f0:ef:33:ac:05:9c:69:df:31:dd:5e:95:12:4e:5f: 80:f8:e7:77:8a:23:c4:29:c7:da:a0:54:c8:65:10: f4:b3:12:b6:49:17:88:5e:f2:42:b0:5c:20:23:73: 8b:1b:d6:e3:1e:b8:73:dc:de:b6:72:bd:25:43:d6: cf:43:94:a0:4e:85:19:6f:87:ca:1d:ef:17:e3:38: f7:31:da:1c:83:c4:8a:13:14:5e:fa:3d:6d:ad:a4: 1f:a2:35:47:35:50:4a:3b:42:68:51:3d:15:8f:cc: fc:e0:0c:78:f6:cf:2f:d3:13:0b:96:10:34:54:6e: f5:32:75:38:8b:62:ab:cf:b0:4d:36:aa:17:c0:47: 6d:44:75:5e:12:80:ba:31:78:e0:26:11:44:4d:49: 0d:62:cd:3f:f1:4b:ae:ae:e5:d1:2c:7f:84:61:f3: ca:5f:4b:62:f2:1f:a7:f6:b9:7f:6f:7b:44:bf:bd: 86:f2:49:58:03:df:9a:fa:e5:66:bb:62:17:dc:62: c4:f7:75:67:84:8a:fe:d7:6f:e9:a5:6f:4b:ed:1e: 51:3a:d0:a8:7e:4c:f4:b7:f3:0a:04:94:b3:d1:33: be:4e:99:ce:eb:2e:99:f7:2d:fd:c8:9a:3d:93:4d: a9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F4:04:FB:DB:87:90:E3:7F:DA:16:84:5A:47:0C:95:80:88:96:BD X509v3 Authority Key Identifier: keyid:22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:f2:f9:9a:c7:7b:d0:38:06:6d:94:62:1f:63:56:45:1d:7f: c2:a9:0f:02:78:e2:2c:b0:0a:82:62:f0:fa:c9:fa:88:68:0a: e6:1b:d6:31:a5:8e:3e:01:35:7b:f0:ea:73:c6:9c:26:34:f6: 3b:8d:9a:90:5b:59:9a:0d:16:bd:4f:20:a9:34:11:e4:cc:93: 4a:48:f3:cb:a3:be:4c:0b:13:48:09:45:06:aa:17:41:06:4e: 48:6f:c2:f0:b4:99:ce:14:a0:b3:a9:1f:e4:c1:f6:85:c9:cf: 07:61:b1:6f:49:66:3f:e8:ac:8d:21:7c:70:ca:a3:8d:04:1d: 0a:6f:87:c3:21:27:1a:17:6e:78:1b:41:32:71:26:b3:07:7b: 4a:78:fd:07:ae:34:c8:52:e2:f0:f6:d0:af:d1:41:63:c5:ef: 91:28:ef:78:1b:0f:5c:e4:1f:1a:72:63:9c:03:cc:1d:47:77: 62:48:17:49:dd:62:74:b4:3d:8d:b9:e1:3d:c2:c9:88:f3:93: 2f:bf:59:95:66:25:5f:d8:88:7b:cd:9b:bf:c0:a3:ec:45:aa: 93:3b:40:66:9e:f2:fd:8b:c5:ed:16:98:ab:a7:4e:05:3e:2a: f8:74:e2:10:2e:54:69:e0:1c:a6:97:cc:53:a7:84:d8:c1:4d: d5:f8:db:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURZ1whZKPrRGcf55J6ry1uJrFOwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVD NjJDREVCMTAeFw0yNTA4MDUxNzA1NDFaFw0yNTA4MDgyMzQxNDFaMDMxMTAvBgNV BAMTKDA1RjQwNEZCREI4NzkwRTM3RkRBMTY4NDVBNDcwQzk1ODA4ODk2QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRL7hdmcU/nFBZZ1ffD/DvM6wF nGnfMd1elRJOX4D453eKI8Qpx9qgVMhlEPSzErZJF4he8kKwXCAjc4sb1uMeuHPc 3rZyvSVD1s9DlKBOhRlvh8od7xfjOPcx2hyDxIoTFF76PW2tpB+iNUc1UEo7QmhR PRWPzPzgDHj2zy/TEwuWEDRUbvUydTiLYqvPsE02qhfAR21EdV4SgLoxeOAmEURN SQ1izT/xS66u5dEsf4Rh88pfS2LyH6f2uX9ve0S/vYbySVgD35r65Wa7YhfcYsT3 dWeEiv7Xb+mlb0vtHlE60Kh+TPS38woElLPRM75Omc7rLpn3Lf3Imj2TTalHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBfQE+9uHkON/2haEWkcMlYCIlr0wHwYDVR0j BBgwFoAUIkdSDxIIyNmsM7MDUBbcTsYs3rEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZGRmMTgxZi0xZTg5LTQwMjItODJmOC1lMGRiYTg1OWVlMmUvMC8yMjQ3NTIwRjEy MDhDOEQ5QUMzM0IzMDM1MDE2REM0RUM2MkNERUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVDNjJD REVCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWRkZjE4MWYtMWU4OS00MDIyLTgy ZjgtZTBkYmE4NTllZTJlLzAvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRD NEVDNjJDREVCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXy+ZrHe9A4Bm2UYh9jVkUdf8KpDwJ44iyw CoJi8PrJ+ohoCuYb1jGljj4BNXvw6nPGnCY09juNmpBbWZoNFr1PIKk0EeTMk0pI 88ujvkwLE0gJRQaqF0EGTkhvwvC0mc4UoLOpH+TB9oXJzwdhsW9JZj/orI0hfHDK o40EHQpvh8MhJxoXbngbQTJxJrMHe0p4/QeuNMhS4vD20K/RQWPF75Eo73gbD1zk HxpyY5wDzB1Hd2JIF0ndYnS0PY254T3CyYjzky+/WZVmJV/YiHvNm7/Ao+xFqpM7 QGae8v2Lxe0WmKunTgU+Kvh04hAuVGngHKaXzFOnhNjBTdX420M= -----END CERTIFICATE-----Generated at Thu Aug 7 01:02:38 2025 by rpki-client