$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft File: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft (raw, json) Hash identifier: H3DRP4sINrTLUWKP9fjAuMHD52nLpuZwjjESCF3tecA= Subject key identifier: 06:FB:76:BA:36:7E:65:B7:33:02:39:CE:90:51:E0:37:09:2F:65:F6 Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Certificate serial: 1FC7A81300E1C9759CCEE56EC15EAC81B7EF6E5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft Manifest number: 030F Signing time: Mon 21 Jul 2025 04:51:19 +0000 Manifest this update: Mon 21 Jul 2025 04:46:19 +0000 Manifest next update: Thu 24 Jul 2025 07:27:19 +0000 Files and hashes: 1: AS147168.roa (hash: e20CGZZgjTyz3kNZT3WXZXnYEX1ApqROokbLe+6uHIA=) 2: AS10217.roa (hash: JJQedycT2rxuZ0WKBIVY+WZbOwVugUFQzwOutSTR+VY=) 3: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl (hash: 60jNOdx6p0igtKptLt9XRK+fthOfkgKZhYhwrzI40LQ=) 4: AS45700.roa (hash: BXkE0BXqN50iJBAlAe18i/nlvwrKk+4GRFc684uKAn8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 07:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:c7:a8:13:00:e1:c9:75:9c:ce:e5:6e:c1:5e:ac:81:b7:ef:6e:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Validity Not Before: Jul 21 04:46:19 2025 GMT Not After : Jul 24 07:27:19 2025 GMT Subject: CN=06FB76BA367E65B7330239CE9051E037092F65F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7b:c5:3f:c4:c3:34:f4:e8:4f:97:d8:18:24: 97:da:c0:81:e5:c5:8a:11:1b:46:e5:39:0c:10:ec: b4:ca:6f:b0:80:f7:dc:33:9a:5c:6c:8f:c4:c2:a7: fe:ca:d6:f7:24:d2:ab:94:5a:79:8e:02:fb:0f:2d: 1c:4b:9f:e7:5b:ca:d5:3e:75:13:9f:d0:e6:ab:6b: bb:52:88:c1:19:a9:0f:a8:b1:24:0f:55:65:2f:a2: da:b2:32:40:43:70:3e:5c:01:f2:c0:44:60:8f:ac: e3:bb:8a:88:47:9e:b6:22:fc:0c:0c:f6:42:45:0c: 1b:85:45:f3:e9:6f:af:11:5f:35:d8:8d:f2:7e:83: 85:76:a4:63:72:dd:a6:d4:7e:7b:42:62:99:90:bc: dc:5f:0f:f5:1d:64:ad:1a:2c:44:af:28:fb:ed:02: a4:df:af:3f:0d:d5:ef:80:da:e8:11:51:45:33:04: ff:18:74:54:56:07:d2:aa:97:9b:9d:61:7f:82:bb: f2:ce:8b:b3:5e:cc:03:5f:b4:7b:48:3c:f7:4e:8b: 73:e0:7b:f1:d0:22:2f:d8:09:6b:f7:06:7e:bc:3a: 04:e5:45:65:7f:db:f6:13:13:37:b3:86:07:f8:53: 1e:c6:31:cb:1e:54:c0:17:83:ed:41:a2:db:f2:3c: 2e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FB:76:BA:36:7E:65:B7:33:02:39:CE:90:51:E0:37:09:2F:65:F6 X509v3 Authority Key Identifier: keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:58:2e:ed:49:bf:70:d8:5a:12:e4:85:83:1c:16:98:b4:88: 30:58:41:f6:4c:c2:d0:02:a3:66:77:7f:1f:d0:ea:48:b9:f3: 82:f5:9e:2a:1a:cd:a9:9a:45:ed:f7:f9:29:2e:c7:e5:8e:9c: 2a:7c:88:8d:3e:2e:0f:57:f7:21:8f:f3:0e:04:1d:84:ce:15: 6a:09:89:5b:bd:94:f6:34:1f:9b:e2:87:29:71:6b:22:23:46: 92:61:78:2c:44:31:da:d7:77:c0:2e:c0:bb:00:8b:ed:6a:5f: 4f:84:5b:db:60:4e:8f:49:30:6f:b5:ba:70:91:48:af:64:e0: de:ad:50:f2:6b:b9:10:1f:31:d9:d5:af:19:7f:4c:2f:c6:e5: ae:d8:d1:a5:b9:9b:9f:8f:0f:af:8e:8a:c1:0a:f8:c3:c9:66: 4f:62:7d:f7:23:84:0e:a9:37:e7:cc:64:70:50:70:85:ee:c7: a3:8b:ff:9d:af:43:95:be:2d:5f:73:53:f3:db:97:92:17:c3: 7d:93:25:93:a9:46:35:cf:86:ee:cd:0b:2d:e1:30:16:c6:29: 71:a8:c0:be:d8:ab:ae:af:ac:61:01:18:01:0f:2b:bf:7a:85: 4a:ca:b1:20:f6:df:0c:44:25:82:df:cd:2a:f3:17:9e:22:b9: 8d:2c:0c:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH8eoEwDhyXWczuVuwV6sgbfvbl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF MkMzQjUxMjAeFw0yNTA3MjEwNDQ2MTlaFw0yNTA3MjQwNzI3MTlaMDMxMTAvBgNV BAMTKDA2RkI3NkJBMzY3RTY1QjczMzAyMzlDRTkwNTFFMDM3MDkyRjY1RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDae8U/xMM09OhPl9gYJJfawIHl xYoRG0blOQwQ7LTKb7CA99wzmlxsj8TCp/7K1vck0quUWnmOAvsPLRxLn+dbytU+ dROf0Oara7tSiMEZqQ+osSQPVWUvotqyMkBDcD5cAfLARGCPrOO7iohHnrYi/AwM 9kJFDBuFRfPpb68RXzXYjfJ+g4V2pGNy3abUfntCYpmQvNxfD/UdZK0aLESvKPvt AqTfrz8N1e+A2ugRUUUzBP8YdFRWB9Kql5udYX+Cu/LOi7NezANftHtIPPdOi3Pg e/HQIi/YCWv3Bn68OgTlRWV/2/YTEzezhgf4Ux7GMcseVMAXg+1BotvyPC6VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBvt2ujZ+ZbczAjnOkFHgNwkvZfYwHwYDVR0j BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz QjUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk YmQtMjU0MzgxMDY5ZTU3LzAvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4 MkFFMkMzQjUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBYLu1Jv3DYWhLkhYMcFpi0iDBYQfZMwtAC o2Z3fx/Q6ki584L1nioazamaRe33+Skux+WOnCp8iI0+Lg9X9yGP8w4EHYTOFWoJ iVu9lPY0H5vihylxayIjRpJheCxEMdrXd8AuwLsAi+1qX0+EW9tgTo9JMG+1unCR SK9k4N6tUPJruRAfMdnVrxl/TC/G5a7Y0aW5m5+PD6+OisEK+MPJZk9iffcjhA6p N+fMZHBQcIXux6OL/52vQ5W+LV9zU/Pbl5IXw32TJZOpRjXPhu7NCy3hMBbGKXGo wL7Yq66vrGEBGAEPK796hUrKsSD23wxEJYLfzSrzF54iuY0sDKQ= -----END CERTIFICATE-----Generated at Mon Jul 21 18:25:49 2025 by rpki-client