$ rpki-client -vvf repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft File: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft (raw, json) Hash identifier: QJmUaYWyAXkNDdYrN/BUEYncCFyfpf9iG3NnQIQikOQ= Subject key identifier: F6:C1:09:77:2C:2E:41:73:65:0C:7E:53:0E:0D:A6:1C:5D:21:BE:6C Authority key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 Certificate issuer: /CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Certificate serial: 086869A2E7465F0EF33C8FA4DCBE338B203831D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft Manifest number: 04F3 Signing time: Sun 20 Jul 2025 21:40:41 +0000 Manifest this update: Sun 20 Jul 2025 21:35:41 +0000 Manifest next update: Thu 24 Jul 2025 03:48:41 +0000 Files and hashes: 1: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: pEqfltHiO5idL1uFxEX2uQGcaapU/AOZ2PUbYVPk40Y=) 2: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl (hash: pqQF5PXFjpj29ycKQbFf7f4jZ8gW6yhp7bU21I38S+A=) 3: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: kS4p5t1GMvH/jM8YbFoB1ZVwKWJDCBblcchgAgj/oBk=) 4: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: 2H5831uY9aR1OjDn1Uun2zJ8vaTAjB4BokOjcc3Moq4=) 5: 3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa (hash: vjgtOZ549YGHCxNz1PUrDo34FNB9oleC45Iwzg+kYuo=) 6: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: XJya992fgeumEsyzLHSliCXeCsu4l890cLRsCVZbrLE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 03:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:68:69:a2:e7:46:5f:0e:f3:3c:8f:a4:dc:be:33:8b:20:38:31:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Validity Not Before: Jul 20 21:35:41 2025 GMT Not After : Jul 24 03:48:41 2025 GMT Subject: CN=F6C109772C2E4173650C7E530E0DA61C5D21BE6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3b:24:d7:5c:cb:a9:59:60:73:58:ac:d1:82: 01:7b:5c:eb:33:5b:9c:14:e6:9b:70:21:33:4b:62: f6:46:4e:31:13:21:07:34:70:30:b8:81:59:22:6d: d7:68:e7:a0:d2:e5:51:e2:de:ee:09:3a:d0:85:15: 0a:a0:2a:0a:19:1c:09:91:d2:be:6d:c3:b7:8c:e6: 2d:49:31:2f:41:50:f5:b5:3a:e4:77:05:31:cf:6f: e6:4b:67:f4:0d:6c:85:ca:75:26:69:85:22:19:25: 45:a3:33:59:2d:62:41:77:92:65:d1:26:6d:fe:97: 8a:2d:8b:84:76:ab:11:ef:5c:c0:2f:0f:46:3d:b8: dc:92:f0:61:75:fa:f6:fd:f5:6f:c9:d2:b3:67:6d: a8:12:e6:8e:14:e9:fe:f2:f1:12:c8:cd:24:f5:28: 42:50:9d:31:0a:c1:b5:75:5e:c4:b4:14:87:08:7b: 86:37:44:a0:40:04:ef:d6:8e:bd:d6:46:5b:d9:2a: be:22:5a:3e:66:c3:1d:97:00:23:70:75:40:a6:ab: 08:64:39:7f:c0:ca:bf:ec:cb:b4:6c:a2:cf:4e:f6: c4:42:c2:03:0e:b5:f0:bf:34:c2:93:e1:26:4e:e5: 0d:8f:ab:11:d1:f5:7e:64:52:94:08:16:90:27:64: 84:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C1:09:77:2C:2E:41:73:65:0C:7E:53:0E:0D:A6:1C:5D:21:BE:6C X509v3 Authority Key Identifier: keyid:22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:68:cd:24:99:b3:ea:54:d9:ec:06:cf:4b:7f:90:30:eb:3d: a0:57:ff:03:74:5c:23:f1:e4:54:45:91:ab:87:e3:63:1b:aa: 3d:93:2e:e2:1f:16:8e:74:0f:f8:b4:57:e9:99:26:cd:10:06: 7e:d9:9c:9a:a0:03:32:c0:b8:f4:fd:3f:76:30:ac:ee:74:d4: cd:82:a6:56:09:6f:99:b3:37:cb:13:37:fb:7d:09:e2:ea:67: 2c:dc:dc:36:97:84:4d:d3:ed:93:2e:fa:cd:ec:db:2e:38:d4: d7:36:34:75:d6:db:7a:16:6a:5a:3b:0a:99:15:2c:b8:d0:48: 98:94:cb:b9:2b:f9:63:2c:06:a2:34:66:83:e3:9d:59:5d:1c: 95:11:5e:bb:ce:2f:f5:fc:90:3f:17:23:61:62:79:fe:46:85: e8:86:83:74:57:e2:dd:c9:d8:45:31:ea:31:cb:25:59:67:60: 3d:87:e5:ae:26:e5:d1:af:13:82:61:fa:07:fb:7f:1d:fd:fc: b0:bb:cb:37:3b:77:e5:95:84:65:a7:fd:b8:f4:60:e2:c4:96: d8:65:20:2a:e4:8d:a6:39:bc:6c:7a:35:23:a8:4c:94:72:6a: 99:8e:aa:d6:3d:80:06:82:23:98:33:01:6c:15:8c:e9:ac:e3: 99:ce:c1:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCGhpoudGXw7zPI+k3L4ziyA4MdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVD NjJDREVCMTAeFw0yNTA3MjAyMTM1NDFaFw0yNTA3MjQwMzQ4NDFaMDMxMTAvBgNV BAMTKEY2QzEwOTc3MkMyRTQxNzM2NTBDN0U1MzBFMERBNjFDNUQyMUJFNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8OyTXXMupWWBzWKzRggF7XOsz W5wU5ptwITNLYvZGTjETIQc0cDC4gVkibddo56DS5VHi3u4JOtCFFQqgKgoZHAmR 0r5tw7eM5i1JMS9BUPW1OuR3BTHPb+ZLZ/QNbIXKdSZphSIZJUWjM1ktYkF3kmXR Jm3+l4oti4R2qxHvXMAvD0Y9uNyS8GF1+vb99W/J0rNnbagS5o4U6f7y8RLIzST1 KEJQnTEKwbV1XsS0FIcIe4Y3RKBABO/Wjr3WRlvZKr4iWj5mwx2XACNwdUCmqwhk OX/Ayr/sy7Rsos9O9sRCwgMOtfC/NMKT4SZO5Q2PqxHR9X5kUpQIFpAnZISXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9sEJdywuQXNlDH5TDg2mHF0hvmwwHwYDVR0j BBgwFoAUIkdSDxIIyNmsM7MDUBbcTsYs3rEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZGRmMTgxZi0xZTg5LTQwMjItODJmOC1lMGRiYTg1OWVlMmUvMC8yMjQ3NTIwRjEy MDhDOEQ5QUMzM0IzMDM1MDE2REM0RUM2MkNERUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVDNjJD REVCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWRkZjE4MWYtMWU4OS00MDIyLTgy ZjgtZTBkYmE4NTllZTJlLzAvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRD NEVDNjJDREVCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlozSSZs+pU2ewGz0t/kDDrPaBX/wN0XCPx 5FRFkauH42Mbqj2TLuIfFo50D/i0V+mZJs0QBn7ZnJqgAzLAuPT9P3YwrO501M2C plYJb5mzN8sTN/t9CeLqZyzc3DaXhE3T7ZMu+s3s2y441Nc2NHXW23oWalo7CpkV LLjQSJiUy7kr+WMsBqI0ZoPjnVldHJURXrvOL/X8kD8XI2Fief5GheiGg3RX4t3J 2EUx6jHLJVlnYD2H5a4m5dGvE4Jh+gf7fx39/LC7yzc7d+WVhGWn/bj0YOLElthl ICrkjaY5vGx6NSOoTJRyapmOqtY9gAaCI5gzAWwVjOms45nOwfE= -----END CERTIFICATE-----Generated at Mon Jul 21 18:17:21 2025 by rpki-client