$ rpki-client -vvf repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft File: 9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft (raw, json) Hash identifier: BGK0wVx3GeEN//QFXB3J/NN+foVSOwvqTqur+r9AShQ= Subject key identifier: 16:6F:30:7E:9E:2C:FE:7B:93:B0:C4:FE:8F:C7:40:FB:B7:4A:34:DE Authority key identifier: 9E:22:CC:CB:20:89:8F:95:64:7D:9A:55:FA:11:2A:BE:8C:E5:8E:EC Certificate issuer: /CN=9E22CCCB20898F95647D9A55FA112ABE8CE58EEC Certificate serial: 2C2B7AB73B8752A46F19DC78ACBAD736E1C478B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft Manifest number: 043C Signing time: Tue 05 Aug 2025 16:12:02 +0000 Manifest this update: Tue 05 Aug 2025 16:07:02 +0000 Manifest next update: Sat 09 Aug 2025 02:59:02 +0000 Files and hashes: 1: 3130332e3136332e3133382e302f32332d3234203d3e203535363838.roa (hash: SleQnUegZrn9t/Esz5KijLNSBfhEPCbzYWCC+8Yfuac=) 2: 9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.crl (hash: 3iB+iywc9CIfczOSWvcUK/A/xBTZqZWtzk12dMPhYDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.crl rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 02:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:2b:7a:b7:3b:87:52:a4:6f:19:dc:78:ac:ba:d7:36:e1:c4:78:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E22CCCB20898F95647D9A55FA112ABE8CE58EEC Validity Not Before: Aug 5 16:07:02 2025 GMT Not After : Aug 9 02:59:02 2025 GMT Subject: CN=166F307E9E2CFE7B93B0C4FE8FC740FBB74A34DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b9:4f:ef:a2:e9:ae:65:19:c8:1b:cf:12:93: 26:0f:00:e3:f5:6e:cf:bb:77:85:d9:c5:ef:05:f6: 78:33:82:e0:b6:31:29:1f:b1:2f:36:8a:e8:96:bd: 53:c7:4d:0a:c5:70:7c:6c:ce:e9:3f:df:76:76:2c: 5f:76:c3:dc:19:b3:4b:cb:71:80:58:d8:76:8c:2c: 78:d6:1f:93:9a:63:ff:8d:0e:d1:38:09:59:e4:70: 98:de:11:59:ce:3e:30:c2:2d:1b:ec:17:d2:3b:b0: ba:b5:6f:ac:d2:61:70:c9:be:2f:43:85:c7:89:e6: d2:3a:c1:a6:d3:0b:85:3c:07:c6:b2:1d:04:52:52: 2c:ee:e6:db:47:97:e4:a2:f4:87:fb:76:b6:7e:0d: 3e:a0:d9:c6:fe:aa:40:a9:d1:57:ad:fd:e7:99:ca: 05:23:7d:f9:00:bf:a9:2a:23:70:ee:61:20:f1:2b: a0:15:0e:b3:a4:e5:78:dc:a2:ab:59:a9:d7:95:52: d1:3f:48:e0:ca:88:9c:20:cb:93:9e:49:f9:ba:83: d3:48:30:b4:79:f6:3a:4d:6e:74:aa:28:2e:1a:32: 5d:3b:c0:fe:07:88:d1:19:de:38:6f:97:22:12:14: c6:9d:3c:80:7d:28:02:4c:b6:bc:5b:aa:f3:6c:f1: f8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6F:30:7E:9E:2C:FE:7B:93:B0:C4:FE:8F:C7:40:FB:B7:4A:34:DE X509v3 Authority Key Identifier: keyid:9E:22:CC:CB:20:89:8F:95:64:7D:9A:55:FA:11:2A:BE:8C:E5:8E:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:d3:ca:ff:e0:80:ae:fe:72:2d:4d:68:43:56:4e:5c:9f:0e: ec:f3:fe:de:e0:b0:4e:74:0c:e1:9a:77:22:a6:f4:24:0a:88: ec:9e:9b:12:5a:79:ad:ff:93:53:11:b7:6e:e9:1d:dd:0e:f3: ec:8e:0b:36:4c:28:bb:03:80:0a:aa:e4:d5:3e:58:ac:e3:70: d3:2a:36:cc:ee:4d:91:a5:e9:52:79:dc:b4:07:94:3b:2c:af: bd:cd:b1:e5:3b:b0:9a:20:d1:17:fe:09:52:e6:16:b6:ad:3d: 6a:0c:9d:d7:03:2f:7e:b2:f0:75:a9:11:d0:fc:b9:34:5b:a4: b8:a0:6d:8b:dd:a7:e5:42:6e:99:9d:18:24:e1:d8:10:e6:9d: a5:77:46:ef:5f:3f:5c:cf:d2:6a:3a:94:54:a5:46:9c:6b:f7: b1:a5:e2:f8:4d:ab:93:2c:b8:3d:66:80:ca:81:f9:62:ed:1b: 81:48:64:e2:79:9e:07:b9:48:3d:c2:2d:3b:8a:5d:98:41:d5: bf:f4:a8:74:36:60:79:2a:40:1f:90:6d:57:04:48:49:1b:64: c5:db:d1:57:be:d2:0c:33:f9:c6:18:1d:0f:44:db:8f:2d:75: e1:42:ca:fb:ab:8b:a4:1e:62:eb:9f:55:50:8c:cd:fd:b4:f4: a5:9c:2f:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULCt6tzuHUqRvGdx4rLrXNuHEeLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUyMkNDQ0IyMDg5OEY5NTY0N0Q5QTU1RkExMTJBQkU4 Q0U1OEVFQzAeFw0yNTA4MDUxNjA3MDJaFw0yNTA4MDkwMjU5MDJaMDMxMTAvBgNV BAMTKDE2NkYzMDdFOUUyQ0ZFN0I5M0IwQzRGRThGQzc0MEZCQjc0QTM0REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXuU/voumuZRnIG88SkyYPAOP1 bs+7d4XZxe8F9ngzguC2MSkfsS82iuiWvVPHTQrFcHxszuk/33Z2LF92w9wZs0vL cYBY2HaMLHjWH5OaY/+NDtE4CVnkcJjeEVnOPjDCLRvsF9I7sLq1b6zSYXDJvi9D hceJ5tI6wabTC4U8B8ayHQRSUizu5ttHl+Si9If7drZ+DT6g2cb+qkCp0Vet/eeZ ygUjffkAv6kqI3DuYSDxK6AVDrOk5XjcoqtZqdeVUtE/SODKiJwgy5OeSfm6g9NI MLR59jpNbnSqKC4aMl07wP4HiNEZ3jhvlyISFMadPIB9KAJMtrxbqvNs8fhTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFm8wfp4s/nuTsMT+j8dA+7dKNN4wHwYDVR0j BBgwFoAUniLMyyCJj5VkfZpV+hEqvozljuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZmUyMWM2OS03Yjc3LTQzYTAtOTJhNi1mNTU1YjZlZDFmZmMvMC85RTIyQ0NDQjIw ODk4Rjk1NjQ3RDlBNTVGQTExMkFCRThDRTU4RUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUUyMkNDQ0IyMDg5OEY5NTY0N0Q5QTU1RkExMTJBQkU4Q0U1 OEVFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWZlMjFjNjktN2I3Ny00M2EwLTky YTYtZjU1NWI2ZWQxZmZjLzAvOUUyMkNDQ0IyMDg5OEY5NTY0N0Q5QTU1RkExMTJB QkU4Q0U1OEVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDTyv/ggK7+ci1NaENWTlyfDuzz/t7gsE50 DOGadyKm9CQKiOyemxJaea3/k1MRt27pHd0O8+yOCzZMKLsDgAqq5NU+WKzjcNMq NszuTZGl6VJ53LQHlDssr73NseU7sJog0Rf+CVLmFratPWoMndcDL36y8HWpEdD8 uTRbpLigbYvdp+VCbpmdGCTh2BDmnaV3Ru9fP1zP0mo6lFSlRpxr97Gl4vhNq5Ms uD1mgMqB+WLtG4FIZOJ5nge5SD3CLTuKXZhB1b/0qHQ2YHkqQB+QbVcESEkbZMXb 0Ve+0gwz+cYYHQ9E248tdeFCyvuri6QeYuufVVCMzf209KWcL/s= -----END CERTIFICATE-----Generated at Thu Aug 7 01:03:28 2025 by rpki-client