$ rpki-client -vvf repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft File: D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft (raw, json) Hash identifier: tyJGGT1XZHQrYHbC4F94dlN6sp2geEHC9ksto6QNm5Q= Subject key identifier: 3F:73:DD:41:EC:DF:29:79:47:21:0C:12:79:D6:E0:D4:BD:D0:09:5B Authority key identifier: D2:24:8A:04:D9:94:A2:56:9A:8F:F6:45:D4:B0:25:A9:F7:CB:2F:E7 Certificate issuer: /CN=D2248A04D994A2569A8FF645D4B025A9F7CB2FE7 Certificate serial: 01A4C3B4EF2C9F329909A39E7B94C8448993FACF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft Manifest number: 022F Signing time: Mon 21 Jul 2025 03:51:22 +0000 Manifest this update: Mon 21 Jul 2025 03:46:22 +0000 Manifest next update: Thu 24 Jul 2025 03:56:22 +0000 Files and hashes: 1: D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl (hash: p/z2iEvbWpYYMBYBP8JC4JE2331rauPv+wJ3SE1UB2c=) 2: 3130332e3136392e302e302f32342d3234203d3e20313432333235.roa (hash: BHsnMPpdFZL0d9XOfOmW0tnCHE686u/F/UGOnWHulsY=) 3: 3130332e3136392e312e302f32342d3234203d3e20313432333235.roa (hash: QVwXZiEUDkzJTFJTP2kak0B1PFcbgFpWZtYiCacvLzc=) 4: 3130332e3136392e302e302f32332d3234203d3e20313432333235.roa (hash: kS5BqB0fQsybN4YzA6LLybAUUgYhEkwegd5mZxZdL2I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 03:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a4:c3:b4:ef:2c:9f:32:99:09:a3:9e:7b:94:c8:44:89:93:fa:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2248A04D994A2569A8FF645D4B025A9F7CB2FE7 Validity Not Before: Jul 21 03:46:22 2025 GMT Not After : Jul 24 03:56:22 2025 GMT Subject: CN=3F73DD41ECDF297947210C1279D6E0D4BDD0095B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2d:6f:6a:99:22:4f:41:c6:60:e9:f7:10:b8: cc:13:1c:62:c7:42:64:1a:a9:08:ff:a0:10:c8:b0: 34:b2:7e:e3:e9:f3:3c:75:e2:f3:f6:a8:08:41:a7: b5:90:27:4d:e2:c4:87:87:0f:f7:86:24:b2:11:0b: 1f:bb:10:83:9e:70:c4:f8:80:e3:9b:73:40:19:0a: 54:73:91:cf:ab:6d:e3:af:c5:93:6e:d3:54:55:a8: 84:ef:55:31:25:b7:60:a7:f7:c1:25:e1:3d:56:ab: 61:68:97:cd:42:1c:01:22:48:0b:14:e1:ec:28:a8: c6:83:e6:f8:5e:d8:06:fc:ce:c2:fd:02:fc:e0:a2: 1f:93:35:5b:65:f1:ca:04:a7:73:ea:97:f2:92:51: 85:d1:1d:70:52:22:4e:67:f2:88:ee:9f:84:04:e3: d6:50:93:d4:47:88:ed:1b:89:b9:39:f3:35:ba:88: 66:85:0b:be:39:31:58:2c:18:83:7b:5a:91:3f:3b: 3a:6f:b6:55:bc:81:57:f5:71:08:d6:a2:a5:1d:42: 8a:cd:53:84:11:7d:94:b2:99:e8:c6:19:02:83:2d: 84:b4:1d:a5:2a:14:7a:30:e0:0e:90:38:fa:69:56: 48:a6:59:8a:f9:37:41:42:fd:6e:82:93:8b:b5:cd: 7b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:73:DD:41:EC:DF:29:79:47:21:0C:12:79:D6:E0:D4:BD:D0:09:5B X509v3 Authority Key Identifier: keyid:D2:24:8A:04:D9:94:A2:56:9A:8F:F6:45:D4:B0:25:A9:F7:CB:2F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:f0:29:f7:18:b5:82:e4:12:c4:49:dc:91:3b:48:f0:9a:74: 8f:91:b2:57:a6:f6:bd:35:e2:93:97:fc:af:c4:1e:82:69:26: 5a:d4:5e:70:b9:3a:cc:79:38:0f:71:8c:a8:4f:25:8a:eb:f8: 5b:43:09:4f:a4:5e:4c:e2:e4:95:6e:5f:de:b3:f4:57:7e:89: 1b:54:69:59:b6:6e:4b:97:fa:18:7b:b7:55:89:cd:7b:cd:fe: 18:3b:84:3a:44:0d:52:54:f9:99:76:5e:e7:05:7e:54:d7:20: dd:21:bb:af:ff:20:76:98:3f:d6:4c:48:a4:da:ae:cf:f9:3e: bb:df:fc:3e:41:03:dd:6d:6c:38:59:67:d3:47:b7:3e:a3:8d: 1e:43:94:1d:93:5f:db:4d:a8:45:aa:12:c3:0a:3d:41:34:74: 56:78:91:6d:c4:d9:fd:ad:3d:7f:4a:c6:b2:0e:9e:ee:c0:0c: b3:fa:28:35:cb:8d:34:90:50:2e:c8:56:7d:0c:37:fa:8f:a8: 23:26:68:41:54:07:cb:5a:e4:43:f7:d7:81:ac:e0:c7:44:2c: d0:04:94:cb:a2:6f:ea:e7:56:26:9d:6a:3a:81:aa:a2:8d:31: 59:89:c6:1a:db:b6:ff:2f:11:b6:62:ee:aa:b9:a1:54:9a:e5: d9:da:59:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAaTDtO8snzKZCaOee5TIRImT+s8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1QTlG N0NCMkZFNzAeFw0yNTA3MjEwMzQ2MjJaFw0yNTA3MjQwMzU2MjJaMDMxMTAvBgNV BAMTKDNGNzNERDQxRUNERjI5Nzk0NzIxMEMxMjc5RDZFMEQ0QkREMDA5NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2LW9qmSJPQcZg6fcQuMwTHGLH QmQaqQj/oBDIsDSyfuPp8zx14vP2qAhBp7WQJ03ixIeHD/eGJLIRCx+7EIOecMT4 gOObc0AZClRzkc+rbeOvxZNu01RVqITvVTElt2Cn98El4T1Wq2Fol81CHAEiSAsU 4ewoqMaD5vhe2Ab8zsL9Avzgoh+TNVtl8coEp3Pql/KSUYXRHXBSIk5n8ojun4QE 49ZQk9RHiO0bibk58zW6iGaFC745MVgsGIN7WpE/OzpvtlW8gVf1cQjWoqUdQorN U4QRfZSymejGGQKDLYS0HaUqFHow4A6QOPppVkimWYr5N0FC/W6Ck4u1zXtxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP3PdQezfKXlHIQwSedbg1L3QCVswHwYDVR0j BBgwFoAU0iSKBNmUolaaj/ZF1LAlqffLL+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YTNjYzJjMS0xNDZjLTQ4YTktYjAwMy03YmQ4MzgyMjA4NGQvMC9EMjI0OEEwNEQ5 OTRBMjU2OUE4RkY2NDVENEIwMjVBOUY3Q0IyRkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1QTlGN0NC MkZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWEzY2MyYzEtMTQ2Yy00OGE5LWIw MDMtN2JkODM4MjIwODRkLzAvRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1 QTlGN0NCMkZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANPwKfcYtYLkEsRJ3JE7SPCadI+Rslem9r01 4pOX/K/EHoJpJlrUXnC5Osx5OA9xjKhPJYrr+FtDCU+kXkzi5JVuX96z9Fd+iRtU aVm2bkuX+hh7t1WJzXvN/hg7hDpEDVJU+Zl2XucFflTXIN0hu6//IHaYP9ZMSKTa rs/5Prvf/D5BA91tbDhZZ9NHtz6jjR5DlB2TX9tNqEWqEsMKPUE0dFZ4kW3E2f2t PX9KxrIOnu7ADLP6KDXLjTSQUC7IVn0MN/qPqCMmaEFUB8ta5EP314Gs4MdELNAE lMuib+rnViadajqBqqKNMVmJxhrbtv8vEbZi7qq5oVSa5dnaWX0= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:57 2025 by rpki-client