$ rpki-client -vvf repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft File: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft (raw, json) Hash identifier: IUgsxb/mJ070Eo4p828EFABRGjppg/THLPAj38EIEwg= Subject key identifier: 87:77:D5:ED:A1:E3:F7:90:76:83:36:AC:F0:78:8F:61:12:3E:47:5A Authority key identifier: 1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A Certificate issuer: /CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Certificate serial: 5863C8911D3FF23D89405B83AFCA23E3D9F0DD9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft Manifest number: 036E Signing time: Sun 20 Jul 2025 18:11:03 +0000 Manifest this update: Sun 20 Jul 2025 18:06:03 +0000 Manifest next update: Wed 23 Jul 2025 21:44:03 +0000 Files and hashes: 1: 3130332e3136342e3234382e302f32332d3234203d3e203137393935.roa (hash: LTBEQvAXAeuY0KH0kB6kKvzSEQh0r1sAqnbQ1uPtbW4=) 2: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl (hash: vTpopRwSHWykRIUuEZlzcYEs0p0+pRs55RK+S0xZQMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 21:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:63:c8:91:1d:3f:f2:3d:89:40:5b:83:af:ca:23:e3:d9:f0:dd:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Validity Not Before: Jul 20 18:06:03 2025 GMT Not After : Jul 23 21:44:03 2025 GMT Subject: CN=8777D5EDA1E3F790768336ACF0788F61123E475A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:32:35:b0:51:c2:97:df:9e:4d:a2:fb:fc:9a: ac:8e:25:92:fd:4f:fd:db:75:fa:aa:b9:70:6d:44: 57:a3:83:3c:b4:ca:50:6e:8a:a9:d1:3b:8e:08:8d: ff:c1:6f:52:8e:c9:91:f5:e6:43:a3:4f:6f:4e:d7: 43:d5:11:d5:13:03:cb:cf:d8:ba:41:1b:c4:ed:60: 0b:28:17:60:66:61:1b:b3:43:47:5f:5f:93:4a:44: 1a:44:c8:89:e9:44:9f:78:eb:31:93:17:80:df:a7: 7e:cd:a5:7d:9f:c4:a2:0a:60:64:a2:b2:ea:7a:3a: 7d:b2:22:78:55:d7:cc:17:95:84:79:93:0d:20:96: 70:04:20:6d:5e:20:e7:89:e4:2c:2f:f4:22:e5:c6: a1:99:4b:f9:7f:6c:30:c5:01:82:92:60:e7:2c:61: ca:c9:7a:07:7e:55:29:c0:dd:7a:75:ae:2a:9c:49: 08:df:17:92:62:af:17:6e:8f:c9:0a:23:22:65:d1: 1d:53:03:ab:7e:f6:0f:61:39:c6:51:84:b2:c3:37: d3:0f:8a:2a:b6:fe:df:cd:f6:4b:54:33:a0:45:76: 5a:99:d2:b1:c8:5c:3e:03:29:e9:83:9a:1c:a9:c3: 85:0c:1b:be:88:3d:e0:d7:38:c2:b9:03:10:e1:28: 76:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:77:D5:ED:A1:E3:F7:90:76:83:36:AC:F0:78:8F:61:12:3E:47:5A X509v3 Authority Key Identifier: keyid:1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:cf:9e:10:4f:02:d5:32:b1:ff:00:11:39:1f:71:04:37:0e: 36:3c:0c:01:f2:bb:07:5f:66:55:38:23:5a:67:8b:5b:ab:c2: 95:80:36:0f:e7:6c:43:5e:9a:57:43:74:38:95:53:05:c9:3e: 74:47:62:f3:d1:a0:60:8d:d5:3b:8a:3b:a3:eb:38:a2:aa:d3: 7c:dd:95:f6:e4:4d:bd:90:f6:39:6c:c0:94:dc:1f:01:d1:aa: 56:e1:6d:f3:4b:22:86:72:10:ee:1a:74:9b:72:68:4c:c3:af: 48:4b:57:ea:19:6c:4c:4b:ae:e2:0c:38:47:8d:a4:44:5d:9b: bd:29:7e:18:52:22:fa:7c:96:7f:e1:2c:96:ff:7d:90:e3:3a: 2a:33:b2:a8:d0:e5:2c:de:d7:09:55:c3:b7:88:e4:6b:a0:09: 3d:1e:aa:0f:df:00:e6:45:60:44:e0:f3:0c:89:9d:25:51:e4: fd:e4:9c:b7:27:1e:c6:b1:fe:ad:a0:4a:88:d7:00:70:7b:e9: 19:d2:c0:5f:77:1e:e0:52:a3:bb:9c:76:a6:d3:6d:b5:89:59: b7:2e:0f:b8:36:38:a9:43:a3:5c:ba:28:98:dd:ef:dd:0a:b0: 29:6f:26:4f:25:53:04:cb:68:3f:13:74:d3:d1:e5:3d:c2:ed: 55:a4:4c:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWGPIkR0/8j2JQFuDr8oj49nw3ZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVE NUU0NjQyQTAeFw0yNTA3MjAxODA2MDNaFw0yNTA3MjMyMTQ0MDNaMDMxMTAvBgNV BAMTKDg3NzdENUVEQTFFM0Y3OTA3NjgzMzZBQ0YwNzg4RjYxMTIzRTQ3NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDMjWwUcKX355Novv8mqyOJZL9 T/3bdfqquXBtRFejgzy0ylBuiqnRO44Ijf/Bb1KOyZH15kOjT29O10PVEdUTA8vP 2LpBG8TtYAsoF2BmYRuzQ0dfX5NKRBpEyInpRJ946zGTF4Dfp37NpX2fxKIKYGSi sup6On2yInhV18wXlYR5kw0glnAEIG1eIOeJ5Cwv9CLlxqGZS/l/bDDFAYKSYOcs YcrJegd+VSnA3Xp1riqcSQjfF5Jirxduj8kKIyJl0R1TA6t+9g9hOcZRhLLDN9MP iiq2/t/N9ktUM6BFdlqZ0rHIXD4DKemDmhypw4UMG76IPeDXOMK5AxDhKHYbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh3fV7aHj95B2gzas8HiPYRI+R1owHwYDVR0j BBgwFoAUHCLNPXeRp5GH2p0DTrS7XtXkZCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDQxYjQ4ZC03M2M0LTRjZGQtYmNhYy1hNTk2OTliY2JiYzEvMC8xQzIyQ0QzRDc3 OTFBNzkxODdEQTlEMDM0RUI0QkI1RUQ1RTQ2NDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVENUU0 NjQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA0MWI0OGQtNzNjNC00Y2RkLWJj YWMtYTU5Njk5YmNiYmMxLzAvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJC NUVENUU0NjQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzPnhBPAtUysf8AETkfcQQ3DjY8DAHyuwdf ZlU4I1pni1urwpWANg/nbENemldDdDiVUwXJPnRHYvPRoGCN1TuKO6PrOKKq03zd lfbkTb2Q9jlswJTcHwHRqlbhbfNLIoZyEO4adJtyaEzDr0hLV+oZbExLruIMOEeN pERdm70pfhhSIvp8ln/hLJb/fZDjOiozsqjQ5Sze1wlVw7eI5GugCT0eqg/fAOZF YETg8wyJnSVR5P3knLcnHsax/q2gSojXAHB76RnSwF93HuBSo7ucdqbTbbWJWbcu D7g2OKlDo1y6KJjd790KsClvJk8lUwTLaD8TdNPR5T3C7VWkTEE= -----END CERTIFICATE-----Generated at Mon Jul 21 05:41:37 2025 by rpki-client