$ rpki-client -vvf repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft File: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft (raw, json) Hash identifier: 605UjIVaCLU27ThAdHtJ/fNZfMGAKzexjSH2gQH6aO4= Subject key identifier: DD:7C:DD:95:58:3D:42:63:9E:EE:99:21:AD:5B:26:F9:84:31:6B:1B Authority key identifier: 22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C Certificate issuer: /CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Certificate serial: 2085213FF034F3F175A0716DBECD38D9E002BEBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft Manifest number: D5 Signing time: Mon 16 Jun 2025 17:11:01 +0000 Manifest this update: Mon 16 Jun 2025 17:06:01 +0000 Manifest next update: Thu 19 Jun 2025 17:50:01 +0000 Files and hashes: 1: 3130332e32332e3130302e302f32322d3234203d3e203538343030.roa (hash: X1zuW7ewqOs7galNtjkQMnHEEBdiMyZOmIpDqdwYj+Q=) 2: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl (hash: AU57kortxRm7UIo65QlomIlZDkO+YiLmQEyVOqi/A2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:85:21:3f:f0:34:f3:f1:75:a0:71:6d:be:cd:38:d9:e0:02:be:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Validity Not Before: Jun 16 17:06:01 2025 GMT Not After : Jun 19 17:50:01 2025 GMT Subject: CN=DD7CDD95583D42639EEE9921AD5B26F984316B1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ec:85:1e:80:1f:41:42:18:98:da:44:53:e2: 51:af:47:b8:56:26:54:52:93:d8:09:92:7e:0f:d4: 82:85:ea:99:9e:5f:97:79:fa:a1:c0:12:f4:88:b8: 96:75:2d:05:0b:00:09:67:9f:ad:00:b2:f5:fe:1e: 1d:0d:e3:7c:ca:4c:24:b2:3b:3b:fd:ff:32:65:76: 23:2e:71:6a:d5:d1:e8:73:90:fd:df:67:35:0f:6e: f2:79:cb:bb:56:2b:37:9a:ac:a1:98:c3:c2:48:61: 41:77:f1:cf:02:2a:a5:cd:10:a2:93:3d:d9:76:7f: 08:fd:ec:61:dc:43:ea:93:2d:ca:46:69:47:e8:88: e0:aa:f1:b1:28:a2:70:d4:6f:47:da:53:d8:43:8d: 97:cc:21:d9:e5:ea:0e:67:4e:35:f4:2b:54:93:ad: 07:ae:70:2e:a2:8f:ad:0d:19:8e:75:9c:aa:96:0d: cd:c8:e8:ce:ef:f9:00:8b:c4:d4:ab:95:54:d5:80: f1:5e:16:1b:c3:b1:91:fe:fb:29:31:6c:7f:08:5a: cd:ce:f3:d1:d2:6a:37:2f:6b:09:f2:25:62:61:f8: 50:47:19:1c:b7:c9:c6:ae:01:66:f3:7a:4f:7d:c9: e4:58:15:00:80:97:0f:0d:7a:b2:20:35:db:e0:f6: 67:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7C:DD:95:58:3D:42:63:9E:EE:99:21:AD:5B:26:F9:84:31:6B:1B X509v3 Authority Key Identifier: keyid:22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:aa:fd:11:42:96:5d:c9:6d:4e:e8:05:b5:5f:61:e3:96:05: 1e:e3:d6:e0:96:9d:06:c3:2e:35:39:cf:08:70:08:2c:fd:b6: 7b:e1:12:d5:92:85:8b:fa:aa:02:95:a8:64:e2:e7:01:0c:9b: 3d:4b:cd:c2:93:9b:72:ed:4b:49:0e:72:e5:0e:a7:e1:db:a5: e6:c0:44:92:43:c3:15:11:8f:d9:3d:ff:21:b3:7e:b5:12:46: 3f:ab:cc:e4:71:39:ff:2c:29:d9:e9:70:90:56:e6:f2:f9:89: f9:a2:4f:48:61:a9:1f:7a:16:36:c4:e1:5d:94:50:02:cf:d8: 18:42:98:5c:0c:9d:6b:5b:76:44:d6:25:5a:b8:82:24:91:83: b3:29:1f:23:6d:ec:74:f7:19:22:d6:00:15:05:20:46:83:33: b2:ee:70:24:e6:ab:73:f8:14:42:81:26:aa:12:74:f2:fe:d6: 6f:80:04:f2:8f:74:90:4b:80:9c:7e:cd:45:5f:d8:0f:d4:48: ff:ae:13:df:03:6c:c7:77:cf:71:4f:a8:90:1c:a3:51:e8:9a: 28:1e:dc:6e:06:7c:d4:8b:2d:ca:6c:67:9c:3c:1a:c7:e2:58: ca:5b:a3:65:8c:f9:60:03:06:ed:49:df:51:fd:1a:56:ce:07: 5f:f0:75:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIIUhP/A08/F1oHFtvs042eACvr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlD MEE5Q0UyQzAeFw0yNTA2MTYxNzA2MDFaFw0yNTA2MTkxNzUwMDFaMDMxMTAvBgNV BAMTKEREN0NERDk1NTgzRDQyNjM5RUVFOTkyMUFENUIyNkY5ODQzMTZCMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG7IUegB9BQhiY2kRT4lGvR7hW JlRSk9gJkn4P1IKF6pmeX5d5+qHAEvSIuJZ1LQULAAlnn60AsvX+Hh0N43zKTCSy Ozv9/zJldiMucWrV0ehzkP3fZzUPbvJ5y7tWKzearKGYw8JIYUF38c8CKqXNEKKT Pdl2fwj97GHcQ+qTLcpGaUfoiOCq8bEoonDUb0faU9hDjZfMIdnl6g5nTjX0K1ST rQeucC6ij60NGY51nKqWDc3I6M7v+QCLxNSrlVTVgPFeFhvDsZH++ykxbH8IWs3O 89HSajcvawnyJWJh+FBHGRy3ycauAWbzek99yeRYFQCAlw8NerIgNdvg9mdtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3XzdlVg9QmOe7pkhrVsm+YQxaxswHwYDVR0j BBgwFoAUIs06IM9iGlsLmeQoyOVzGcCpziwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzE4MDcwNC02YjY0LTRhNDAtOGYzZC1mZmRmZDVlMzdkZWYvMC8yMkNEM0EyMENG NjIxQTVCMEI5OUU0MjhDOEU1NzMxOUMwQTlDRTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlDMEE5 Q0UyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjcxODA3MDQtNmI2NC00YTQwLThm M2QtZmZkZmQ1ZTM3ZGVmLzAvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTcz MTlDMEE5Q0UyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaq/RFCll3JbU7oBbVfYeOWBR7j1uCWnQbD LjU5zwhwCCz9tnvhEtWShYv6qgKVqGTi5wEMmz1LzcKTm3LtS0kOcuUOp+HbpebA RJJDwxURj9k9/yGzfrUSRj+rzORxOf8sKdnpcJBW5vL5ifmiT0hhqR96FjbE4V2U UALP2BhCmFwMnWtbdkTWJVq4giSRg7MpHyNt7HT3GSLWABUFIEaDM7LucCTmq3P4 FEKBJqoSdPL+1m+ABPKPdJBLgJx+zUVf2A/USP+uE98DbMd3z3FPqJAco1Homige 3G4GfNSLLcpsZ5w8GsfiWMpbo2WM+WADBu1J31H9GlbOB1/wdSM= -----END CERTIFICATE-----Generated at Tue Jun 17 16:17:25 2025 by rpki-client