$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft File: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft (raw, json) Hash identifier: pehiLAQixGsCYUOrnfE04IsF4wIzdRUkLNH5QiMuMFc= Subject key identifier: 08:DC:AE:33:35:3F:64:A5:1F:79:C4:B7:92:69:27:F6:91:F8:18:A1 Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Certificate serial: 746088F8930E417DDA24D9B6D97D3236E8A27020 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft Manifest number: 01C8 Signing time: Mon 21 Jul 2025 09:41:19 +0000 Manifest this update: Mon 21 Jul 2025 09:36:19 +0000 Manifest next update: Thu 24 Jul 2025 20:38:19 +0000 Files and hashes: 1: 3131392e34372e39302e302f32342d3234203d3e203338353237.roa (hash: 2gYjkNpQS7rIhX41LQ5E9ZRuFubPcLm5+1qbHYEWbNU=) 2: 3131392e34372e39352e302f32342d3234203d3e20313530323438.roa (hash: nIrbzR22XSry4Jrw3LIPGv150kbPZD6HPRMENEZHMHw=) 3: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: 2N3BwgIjWHFbTQKqljv/UDzpCDNCSry44iBQjllcOAY=) 4: 3132342e3130392e32312e302f32342d3234203d3e203338353237.roa (hash: JF25GsZLyzVMqdMpnO1WYlSsjR6hM621Mtm2BRDUvVE=) 5: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: gaK9TNDkDAX6rLbicLT8NaMu8dPZqEuVmgkAb8uim8M=) 6: 3132342e3130392e32302e302f32342d3234203d3e203338353237.roa (hash: ETJz1GlN0xqgrI/TiDRe3oL2wRqZlR8gI6HL/idn2yc=) 7: 32372e3132342e38332e302f32342d3234203d3e203338353237.roa (hash: L5InqyKvyWP9tFezdM+9rBpde1AjX1HCs7qP97HZ0mU=) 8: 3132342e3130392e32322e302f32342d3234203d3e20313339393439.roa (hash: nFcoITtIiJ8OFT6DwBHGCFY6SRcCiphSoQyOwQxbdew=) 9: 3130332e32352e3130382e302f32342d3234203d3e20313339393439.roa (hash: qqfzsjlYqjPxNhzC0UkUL2m+zHonm3K6iD+8hUdOJig=) 10: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl (hash: iC+Ekk+N6z2S5rvKb82su6EGpP7iv1DqLSsQ+tp0AZ8=) 11: 3132342e3130392e32332e302f32342d3234203d3e203338353237.roa (hash: hSmHQriBgEB6G8euGPo5okmMfhhllZ1AqyrcnX9VlJE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 20:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:60:88:f8:93:0e:41:7d:da:24:d9:b6:d9:7d:32:36:e8:a2:70:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Validity Not Before: Jul 21 09:36:19 2025 GMT Not After : Jul 24 20:38:19 2025 GMT Subject: CN=08DCAE33353F64A51F79C4B7926927F691F818A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:46:59:9e:b2:77:22:04:fd:f8:6f:69:fc:9c: 5d:5a:e9:66:93:68:8d:39:70:0a:dd:ca:1a:ff:79: 4e:89:b9:87:ed:03:cd:4c:20:03:3d:f6:b3:0a:f7: b9:f2:56:26:e7:0c:44:36:61:82:c7:a4:f6:e9:91: e1:04:dc:41:ab:1f:6d:0c:36:cd:f1:87:24:89:ad: 15:b8:cb:1f:63:fa:23:ec:56:cd:d6:96:67:ae:1e: 25:69:91:84:9b:41:91:b6:03:0d:9b:70:63:4e:bf: c9:19:35:e1:05:ec:44:44:a4:36:87:c8:50:ad:99: 2f:7c:7b:de:58:66:34:3b:5d:fa:63:e2:bf:de:40: d2:40:a8:9c:58:8b:9e:e4:b8:f1:5b:57:db:7d:21: ee:36:4e:59:6e:a1:20:01:24:04:c1:b7:f1:e8:5f: e0:7d:11:08:e7:e5:e5:78:5a:c3:15:a1:50:f5:88: 77:c6:42:db:0f:bb:e4:b6:a0:3d:ac:c7:7f:33:9a: c3:c6:f7:b3:52:19:ef:ea:5c:00:1b:29:48:d0:ef: ce:de:d7:2a:6a:6f:71:23:40:24:07:c8:a5:59:da: 0b:c1:84:15:f9:33:df:f3:b0:6e:3d:2b:6f:d9:4a: 49:6c:80:57:63:e5:5c:db:09:2f:9b:5f:a5:48:6d: 12:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DC:AE:33:35:3F:64:A5:1F:79:C4:B7:92:69:27:F6:91:F8:18:A1 X509v3 Authority Key Identifier: keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:33:70:a4:33:97:2d:57:b6:93:16:cf:42:02:be:af:a8:2f: ad:d0:76:f9:00:01:05:f4:82:a6:34:b3:02:5a:e3:e1:03:4f: 98:0f:b3:7b:0b:4d:1a:46:ed:50:7b:3a:64:af:71:38:30:c3: 23:b2:44:b4:9a:e8:d6:fd:e6:ad:b9:c0:72:20:bc:09:72:d4: a0:c6:32:2f:5d:d2:7a:78:20:b5:93:84:74:fd:5d:62:c2:de: 46:e7:35:a6:24:0a:96:7e:f4:ba:37:fa:8a:2b:49:a5:22:6f: 36:cf:9f:6f:79:cd:26:ba:39:5f:ca:1c:75:3d:fa:04:02:82: d3:ed:e3:3c:ee:10:90:3c:4e:5e:6f:97:88:56:be:0c:a6:76: 52:15:6a:7f:a0:51:a9:2c:dc:81:d0:c4:af:39:de:18:82:a2: dd:88:e3:59:c2:38:a1:83:fa:00:bd:28:6a:e4:e8:87:69:0a: d7:90:00:82:9d:94:1d:25:97:87:4a:45:8f:50:97:d7:f9:37: 36:b4:06:9d:aa:b0:58:c7:5a:22:b7:6e:cd:43:a7:82:e6:a2: bb:39:95:f9:8a:85:9c:d6:f1:1b:26:d2:1d:45:ba:d0:fc:bb: b9:ed:f6:ef:68:29:69:f2:7a:01:30:b0:6f:ee:e2:dd:7b:f1: 9d:fb:91:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdGCI+JMOQX3aJNm22X0yNuiicCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD RjlBNjQ3MzAeFw0yNTA3MjEwOTM2MTlaFw0yNTA3MjQyMDM4MTlaMDMxMTAvBgNV BAMTKDA4RENBRTMzMzUzRjY0QTUxRjc5QzRCNzkyNjkyN0Y2OTFGODE4QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSRlmesnciBP34b2n8nF1a6WaT aI05cArdyhr/eU6JuYftA81MIAM99rMK97nyVibnDEQ2YYLHpPbpkeEE3EGrH20M Ns3xhySJrRW4yx9j+iPsVs3WlmeuHiVpkYSbQZG2Aw2bcGNOv8kZNeEF7EREpDaH yFCtmS98e95YZjQ7Xfpj4r/eQNJAqJxYi57kuPFbV9t9Ie42TlluoSABJATBt/Ho X+B9EQjn5eV4WsMVoVD1iHfGQtsPu+S2oD2sx38zmsPG97NSGe/qXAAbKUjQ787e 1ypqb3EjQCQHyKVZ2gvBhBX5M9/zsG49K2/ZSklsgFdj5VzbCS+bX6VIbRLdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCNyuMzU/ZKUfecS3kmkn9pH4GKEwHwYDVR0j BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB NjQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE3ZWZkMmEtMDJhYi00MjAyLTk3 MGYtZjY5OWRmZjk3ZGU1LzAvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VE NTBDRjlBNjQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAzcKQzly1XtpMWz0ICvq+oL63QdvkAAQX0 gqY0swJa4+EDT5gPs3sLTRpG7VB7OmSvcTgwwyOyRLSa6Nb95q25wHIgvAly1KDG Mi9d0np4ILWThHT9XWLC3kbnNaYkCpZ+9Lo3+oorSaUibzbPn295zSa6OV/KHHU9 +gQCgtPt4zzuEJA8Tl5vl4hWvgymdlIVan+gUaks3IHQxK853hiCot2I41nCOKGD +gC9KGrk6IdpCteQAIKdlB0ll4dKRY9Ql9f5Nza0Bp2qsFjHWiK3bs1Dp4Lmors5 lfmKhZzW8Rsm0h1FutD8u7nt9u9oKWnyegEwsG/u4t178Z37kZ0= -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:45 2025 by rpki-client