$ rpki-client -vvf repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft File: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft (raw, json) Hash identifier: cPqozui2Q56sWKIxPZ3pP89/A7Fu5o47q9tS2whOG30= Subject key identifier: 17:F0:04:30:BD:74:87:BF:54:58:FB:E9:AF:DF:06:51:76:D6:DD:32 Authority key identifier: 22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C Certificate issuer: /CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Certificate serial: 1C6915FF039FCC4ABA4665E40D81B07159C4091B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft Manifest number: ED Signing time: Sat 09 Aug 2025 14:11:02 +0000 Manifest this update: Sat 09 Aug 2025 14:06:02 +0000 Manifest next update: Wed 13 Aug 2025 00:50:02 +0000 Files and hashes: 1: 3130332e32332e3130302e302f32322d3234203d3e203538343030.roa (hash: X1zuW7ewqOs7galNtjkQMnHEEBdiMyZOmIpDqdwYj+Q=) 2: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl (hash: 1Lsi4VHEUxbOJGAtEtkUaX0Idnf/YHcWzsQTrOqy12k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 00:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:69:15:ff:03:9f:cc:4a:ba:46:65:e4:0d:81:b0:71:59:c4:09:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Validity Not Before: Aug 9 14:06:02 2025 GMT Not After : Aug 13 00:50:02 2025 GMT Subject: CN=17F00430BD7487BF5458FBE9AFDF065176D6DD32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e4:d1:34:63:64:f3:e0:19:03:42:d0:ba:76: 7d:0a:5d:d7:9b:44:80:cd:3b:0a:f7:aa:17:74:52: df:71:4c:15:54:e7:41:49:1d:86:53:e6:ff:a9:b2: f3:20:d4:cc:3a:54:2a:5f:cc:9e:91:e9:94:a7:94: 14:10:ef:07:8e:db:19:bf:7e:e4:6c:59:6c:1b:e5: f3:24:16:d6:dd:42:1a:3c:94:b5:a6:0d:55:fe:85: c3:fe:a2:9e:13:1b:c2:a2:94:1b:4b:39:76:13:39: fb:25:0b:57:68:6f:c6:8b:8f:47:15:65:1d:f5:88: 2b:c2:18:af:a7:36:d9:d8:8b:86:47:8a:af:79:7f: db:de:de:39:82:96:e7:29:b9:df:c7:73:5f:38:80: 9e:5e:04:28:b5:f4:7c:62:1d:4a:2f:13:eb:29:09: 89:b7:b8:b9:c9:0c:ce:a1:02:d1:a7:73:31:b3:f0: 2c:fe:51:d7:f1:09:57:29:73:7b:ab:68:15:07:a2: 7d:67:ce:62:5c:c4:3f:4c:ec:a2:60:ce:86:6c:cc: c4:1e:ad:eb:80:18:0b:08:75:15:da:90:cb:11:8f: fa:8f:d2:44:0c:3b:1f:7b:c6:18:26:76:3b:85:a4: 1d:e9:dd:e5:f7:5e:63:de:ad:c1:3a:3d:e8:17:95: 53:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F0:04:30:BD:74:87:BF:54:58:FB:E9:AF:DF:06:51:76:D6:DD:32 X509v3 Authority Key Identifier: keyid:22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:0f:2d:e4:88:d4:2f:df:e7:97:11:0a:24:ca:f6:f8:4d:c9: a3:74:73:0c:f4:76:9c:96:1f:4f:92:99:1e:74:72:cf:10:22: a1:fe:8a:de:f4:fd:b0:62:ce:3e:f4:28:cc:11:92:ed:62:c7: d0:ed:3f:ab:5a:15:24:f7:0f:2a:0c:99:5c:2e:50:cd:7b:cb: e1:d1:7c:d3:4e:23:80:82:0e:85:85:f3:d8:22:82:05:29:8d: e7:a1:41:cb:47:a9:15:d3:5c:4d:d2:b5:f2:0e:ab:c0:41:44: 1f:53:18:8f:42:7d:70:67:40:b1:92:ee:67:1b:e1:10:ff:4c: 8c:4d:e6:f5:78:f8:89:e9:78:b7:29:d4:5a:b3:37:11:37:99: 23:b5:08:15:c1:97:ba:77:1c:c2:63:98:ec:09:9d:b3:ad:03: 41:5f:d1:b0:83:ef:c5:e3:14:c3:fd:b9:de:6d:70:10:8e:e4: 1f:d6:43:51:e8:90:31:1b:40:39:2e:34:ba:42:44:ab:5f:39: 3f:2d:e4:05:ed:88:66:71:bc:99:18:c1:dc:5d:02:5d:84:3e: 3c:c7:61:74:01:3a:b5:d0:6e:9e:12:c4:23:2c:97:57:66:d9: be:13:99:e9:90:fd:13:91:17:d3:6f:2a:43:3c:c9:9a:45:02: 17:90:36:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHGkV/wOfzEq6RmXkDYGwcVnECRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlD MEE5Q0UyQzAeFw0yNTA4MDkxNDA2MDJaFw0yNTA4MTMwMDUwMDJaMDMxMTAvBgNV BAMTKDE3RjAwNDMwQkQ3NDg3QkY1NDU4RkJFOUFGREYwNjUxNzZENkREMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW5NE0Y2Tz4BkDQtC6dn0KXdeb RIDNOwr3qhd0Ut9xTBVU50FJHYZT5v+psvMg1Mw6VCpfzJ6R6ZSnlBQQ7weO2xm/ fuRsWWwb5fMkFtbdQho8lLWmDVX+hcP+op4TG8KilBtLOXYTOfslC1dob8aLj0cV ZR31iCvCGK+nNtnYi4ZHiq95f9ve3jmClucpud/Hc184gJ5eBCi19HxiHUovE+sp CYm3uLnJDM6hAtGnczGz8Cz+UdfxCVcpc3uraBUHon1nzmJcxD9M7KJgzoZszMQe reuAGAsIdRXakMsRj/qP0kQMOx97xhgmdjuFpB3p3eX3XmPercE6PegXlVNZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF/AEML10h79UWPvpr98GUXbW3TIwHwYDVR0j BBgwFoAUIs06IM9iGlsLmeQoyOVzGcCpziwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzE4MDcwNC02YjY0LTRhNDAtOGYzZC1mZmRmZDVlMzdkZWYvMC8yMkNEM0EyMENG NjIxQTVCMEI5OUU0MjhDOEU1NzMxOUMwQTlDRTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlDMEE5 Q0UyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjcxODA3MDQtNmI2NC00YTQwLThm M2QtZmZkZmQ1ZTM3ZGVmLzAvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTcz MTlDMEE5Q0UyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgPLeSI1C/f55cRCiTK9vhNyaN0cwz0dpyW H0+SmR50cs8QIqH+it70/bBizj70KMwRku1ix9DtP6taFST3DyoMmVwuUM17y+HR fNNOI4CCDoWF89giggUpjeehQctHqRXTXE3StfIOq8BBRB9TGI9CfXBnQLGS7mcb 4RD/TIxN5vV4+InpeLcp1FqzNxE3mSO1CBXBl7p3HMJjmOwJnbOtA0Ff0bCD78Xj FMP9ud5tcBCO5B/WQ1HokDEbQDkuNLpCRKtfOT8t5AXtiGZxvJkYwdxdAl2EPjzH YXQBOrXQbp4SxCMsl1dm2b4TmemQ/RORF9NvKkM8yZpFAheQNsA= -----END CERTIFICATE-----Generated at Mon Aug 11 07:23:36 2025 by rpki-client