$ rpki-client -vvf repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft File: 22476F90C7B08131974F5B19834906C325ABEF12.mft (raw, json) Hash identifier: QOLGd85xmdn9gG0jy1lFOzAD1a5OFP/y9Nt/HvM1Z88= Subject key identifier: 7B:59:02:D4:E0:8E:7C:3E:2F:92:B4:26:F4:62:93:3A:47:8A:BC:A9 Authority key identifier: 22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 Certificate issuer: /CN=22476F90C7B08131974F5B19834906C325ABEF12 Certificate serial: 59587DE9FF85DCD51DB32FE58BD8C1422B3881E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft Manifest number: 86 Signing time: Fri 13 Jun 2025 23:51:22 +0000 Manifest this update: Fri 13 Jun 2025 23:46:22 +0000 Manifest next update: Tue 17 Jun 2025 05:55:22 +0000 Files and hashes: 1: 22476F90C7B08131974F5B19834906C325ABEF12.crl (hash: E9/0GxrMwLLsBBiYYwkQdpVhq297EJeoDKSCqG6/eZw=) 2: 3136302e32352e36382e302f32332d3234203d3e20313532383430.roa (hash: 4i8FjKHuMJZs9ehASRTTzzbmgJaF3lnGvx5voJ5RPxk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 05:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:58:7d:e9:ff:85:dc:d5:1d:b3:2f:e5:8b:d8:c1:42:2b:38:81:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22476F90C7B08131974F5B19834906C325ABEF12 Validity Not Before: Jun 13 23:46:22 2025 GMT Not After : Jun 17 05:55:22 2025 GMT Subject: CN=7B5902D4E08E7C3E2F92B426F462933A478ABCA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:db:4a:32:e5:f7:62:74:e7:64:72:b2:61:38: 45:9f:35:d3:b7:19:50:f1:1c:de:20:bd:12:c8:f8: a4:56:f0:0b:53:e8:77:ee:2c:fe:b7:4b:fa:0e:3a: 90:18:a0:f2:a5:dc:59:6c:c0:83:2e:1b:70:2b:66: e8:f2:d0:ad:53:a7:12:33:6d:5a:f2:bc:47:38:b5: c3:86:6a:12:38:52:a5:a2:a9:14:88:eb:19:45:24: 9c:81:41:56:d9:02:b4:dd:95:1c:57:36:45:70:78: 8f:54:a6:be:27:2b:ee:38:19:2b:89:eb:64:1d:e4: 97:26:92:34:4f:e9:7f:61:31:99:da:9c:9f:35:d6: fe:94:87:06:cf:71:fd:6f:9a:fa:48:62:a0:24:e1: 80:44:33:dc:d1:61:28:a3:a8:e8:64:aa:c4:fd:5a: 44:3c:a5:a9:20:ef:72:9c:9c:63:91:ba:54:ac:a7: cc:ec:53:16:6f:d7:1d:16:47:67:24:a4:98:c8:dc: 15:91:1d:75:d7:6a:d6:83:8a:5b:f4:03:71:8e:39: d6:72:91:4a:d8:33:16:aa:84:a7:b4:81:97:05:65: 57:9c:b1:fd:57:54:01:fe:38:53:18:26:49:1a:8e: cc:a3:ff:f3:29:55:10:d8:e7:89:15:da:d4:3e:ec: d8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:59:02:D4:E0:8E:7C:3E:2F:92:B4:26:F4:62:93:3A:47:8A:BC:A9 X509v3 Authority Key Identifier: keyid:22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:a6:01:9e:a8:20:76:16:b6:05:cc:48:d8:c3:95:f1:c3:b3: 6f:5f:55:17:65:6a:4a:1a:2f:9e:8a:7e:2a:c5:1d:14:0a:c6: ac:35:93:89:a8:7a:04:ff:d2:3d:2f:1a:9a:f3:07:2e:42:bf: 56:ed:bc:39:8c:3d:b7:0a:d6:06:73:84:76:fd:d8:9c:ff:53: 9b:c4:02:1a:19:6c:18:59:5e:6b:23:3e:6c:a2:73:8d:3f:6a: a7:4b:60:00:9a:3c:51:61:bf:8f:55:db:66:cb:7d:06:92:4a: 1f:38:0b:0f:45:e6:44:07:59:1b:68:7e:2a:cf:e9:45:8f:4b: 59:74:d7:db:c2:5c:34:7f:67:79:db:ec:ca:38:87:cc:ba:d1: 80:ab:82:99:c3:db:d4:79:b8:42:7a:6d:95:d9:0d:5c:ad:e1: 42:1a:ed:87:fc:0c:02:38:06:dc:f8:ab:99:c4:21:63:ba:ac: d9:34:dc:89:7c:0e:bd:25:c9:5c:5e:b7:94:d6:29:01:78:12: a6:63:55:1e:aa:8d:f5:ad:ea:b9:23:9c:db:7f:12:b6:f5:47: 4f:81:e8:13:53:4b:b8:37:a9:31:59:f1:b8:d0:e0:0d:b0:8b: be:d8:05:0c:a9:ba:65:f2:51:0e:fa:51:01:de:ad:4e:b0:2a: e6:f7:0b:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWVh96f+F3NUdsy/li9jBQis4geQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMy NUFCRUYxMjAeFw0yNTA2MTMyMzQ2MjJaFw0yNTA2MTcwNTU1MjJaMDMxMTAvBgNV BAMTKDdCNTkwMkQ0RTA4RTdDM0UyRjkyQjQyNkY0NjI5MzNBNDc4QUJDQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo20oy5fdidOdkcrJhOEWfNdO3 GVDxHN4gvRLI+KRW8AtT6HfuLP63S/oOOpAYoPKl3FlswIMuG3ArZujy0K1TpxIz bVryvEc4tcOGahI4UqWiqRSI6xlFJJyBQVbZArTdlRxXNkVweI9Upr4nK+44GSuJ 62Qd5JcmkjRP6X9hMZnanJ811v6UhwbPcf1vmvpIYqAk4YBEM9zRYSijqOhkqsT9 WkQ8pakg73KcnGORulSsp8zsUxZv1x0WR2ckpJjI3BWRHXXXataDilv0A3GOOdZy kUrYMxaqhKe0gZcFZVecsf1XVAH+OFMYJkkajsyj//MpVRDY54kV2tQ+7NhLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe1kC1OCOfD4vkrQm9GKTOkeKvKkwHwYDVR0j BBgwFoAUIkdvkMewgTGXT1sZg0kGwyWr7xIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmZiYWFmYy00ZGIyLTRmYzQtYTFhOC0yZDhlNGM4YjJjZTAvMC8yMjQ3NkY5MEM3 QjA4MTMxOTc0RjVCMTk4MzQ5MDZDMzI1QUJFRjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMyNUFC RUYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2 QzMyNUFCRUYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCmAZ6oIHYWtgXMSNjDlfHDs29fVRdlakoa L56KfirFHRQKxqw1k4moegT/0j0vGprzBy5Cv1btvDmMPbcK1gZzhHb92Jz/U5vE AhoZbBhZXmsjPmyic40/aqdLYACaPFFhv49V22bLfQaSSh84Cw9F5kQHWRtofirP 6UWPS1l019vCXDR/Z3nb7Mo4h8y60YCrgpnD29R5uEJ6bZXZDVyt4UIa7Yf8DAI4 Btz4q5nEIWO6rNk03Il8Dr0lyVxet5TWKQF4EqZjVR6qjfWt6rkjnNt/Erb1R0+B 6BNTS7g3qTFZ8bjQ4A2wi77YBQypumXyUQ76UQHerU6wKub3C6I= -----END CERTIFICATE-----Generated at Sun Jun 15 15:21:02 2025 by rpki-client