$ rpki-client -vvf repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft File: 9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft (raw, json) Hash identifier: hte0C3m5Z3q2FJ/ZyXj2mbuR02I40+GEWPAEkEMbq0c= Subject key identifier: 3B:CF:B6:F1:D8:9B:64:50:AB:96:72:E1:CD:62:2E:56:52:BB:CF:D3 Authority key identifier: 9E:22:CC:CB:20:89:8F:95:64:7D:9A:55:FA:11:2A:BE:8C:E5:8E:EC Certificate issuer: /CN=9E22CCCB20898F95647D9A55FA112ABE8CE58EEC Certificate serial: 619FE559E44A52A20ADEAFE48356057B4274B49E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft Manifest number: 0434 Signing time: Fri 18 Jul 2025 09:22:01 +0000 Manifest this update: Fri 18 Jul 2025 09:17:01 +0000 Manifest next update: Mon 21 Jul 2025 21:11:01 +0000 Files and hashes: 1: 9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.crl (hash: Os8Dw2ieZqWwYSyr/GT7j+yfQVpI+F44JRIuA2DtGi4=) 2: 3130332e3136332e3133382e302f32332d3234203d3e203535363838.roa (hash: SleQnUegZrn9t/Esz5KijLNSBfhEPCbzYWCC+8Yfuac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.crl rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 21:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:9f:e5:59:e4:4a:52:a2:0a:de:af:e4:83:56:05:7b:42:74:b4:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E22CCCB20898F95647D9A55FA112ABE8CE58EEC Validity Not Before: Jul 18 09:17:01 2025 GMT Not After : Jul 21 21:11:01 2025 GMT Subject: CN=3BCFB6F1D89B6450AB9672E1CD622E5652BBCFD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1c:d1:df:0f:dd:0e:6c:60:f7:70:72:80:7d: 3f:83:ec:70:5c:4a:7b:4b:a2:cf:ff:38:38:51:75: 24:96:32:c3:8b:67:8b:1d:79:6c:4b:a0:70:51:fc: 18:2d:05:fa:26:41:a2:67:e7:48:95:02:54:3e:f0: 9e:8e:c9:f1:04:b6:ee:f0:64:f0:2e:63:17:33:7b: e7:6a:bb:c4:4f:c0:70:d6:6a:14:66:01:13:9f:17: dd:c3:33:dd:16:ab:f0:f5:72:bf:b8:81:68:c4:c1: e7:fe:51:68:33:9a:a9:28:a6:fb:8b:2b:77:24:26: 99:7d:b7:19:e5:04:cb:4b:70:99:05:4d:b4:a6:00: 4c:62:bb:4e:d2:6f:d1:c8:8d:7e:e6:54:c4:ec:7b: dc:98:f1:ca:b9:d6:d3:22:5f:1b:fb:89:fb:b1:77: b8:31:03:1a:be:b8:d9:28:3a:66:57:96:1f:d2:59: fd:ca:81:ce:c4:6b:1b:3f:6a:d0:a6:8d:b8:a1:62: 4b:dc:18:b9:8f:d1:53:18:af:d7:76:2a:f7:7b:fb: e8:be:cd:89:9b:e7:0e:42:a1:90:ec:d4:41:49:07: 51:24:35:05:d5:3e:d0:12:56:38:0b:4d:84:81:a7: 65:08:49:0e:73:32:4b:94:ca:a1:42:3c:8a:91:9c: 62:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CF:B6:F1:D8:9B:64:50:AB:96:72:E1:CD:62:2E:56:52:BB:CF:D3 X509v3 Authority Key Identifier: keyid:9E:22:CC:CB:20:89:8F:95:64:7D:9A:55:FA:11:2A:BE:8C:E5:8E:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:22:50:ac:19:7b:14:c0:39:c3:2e:4f:50:44:e4:99:77:3c: e5:3a:77:a8:21:31:d3:fd:47:a6:48:56:48:4d:c3:5b:2c:a5: b5:fa:4a:e9:86:eb:7b:e1:18:73:23:05:66:8f:fb:00:e9:5f: e7:b6:7a:41:f3:e6:c5:ec:6a:26:60:61:86:f2:ac:d1:54:02: 4b:2c:40:0d:ee:ad:c9:98:04:b1:d3:b6:65:ff:22:29:8e:8f: 89:1d:63:63:24:68:c8:91:50:5f:8c:3d:98:c8:52:12:4c:2f: 3f:16:4e:a6:57:fa:77:fe:d2:bd:30:b9:f1:ae:43:2a:7d:ba: 97:fe:b3:22:a8:a6:4c:86:af:c8:d1:20:48:f0:e5:b2:f7:a2: 0a:1a:c5:33:f4:f3:77:9d:c7:1f:b4:45:b6:24:29:b9:b4:d3: 6e:df:d8:b3:0d:8a:4f:ee:5f:bc:c4:96:5d:8d:a2:5e:17:2f: bb:56:5f:f9:f7:6b:18:43:85:3e:c9:a1:7c:6a:3a:f9:5d:48: 36:68:da:d3:c3:b0:97:5f:a8:bb:d9:02:f4:b9:ac:20:e4:7e: 78:2c:c3:53:b8:01:b0:92:93:ef:c1:51:6c:c6:b5:1a:ca:a6: 36:2d:a3:3a:50:a6:d3:b6:5e:8f:8e:0a:8d:7d:9f:7d:8e:be: 28:7a:f1:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYZ/lWeRKUqIK3q/kg1YFe0J0tJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUyMkNDQ0IyMDg5OEY5NTY0N0Q5QTU1RkExMTJBQkU4 Q0U1OEVFQzAeFw0yNTA3MTgwOTE3MDFaFw0yNTA3MjEyMTExMDFaMDMxMTAvBgNV BAMTKDNCQ0ZCNkYxRDg5QjY0NTBBQjk2NzJFMUNENjIyRTU2NTJCQkNGRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHNHfD90ObGD3cHKAfT+D7HBc SntLos//ODhRdSSWMsOLZ4sdeWxLoHBR/BgtBfomQaJn50iVAlQ+8J6OyfEEtu7w ZPAuYxcze+dqu8RPwHDWahRmAROfF93DM90Wq/D1cr+4gWjEwef+UWgzmqkopvuL K3ckJpl9txnlBMtLcJkFTbSmAExiu07Sb9HIjX7mVMTse9yY8cq51tMiXxv7ifux d7gxAxq+uNkoOmZXlh/SWf3Kgc7Eaxs/atCmjbihYkvcGLmP0VMYr9d2Kvd7++i+ zYmb5w5CoZDs1EFJB1EkNQXVPtASVjgLTYSBp2UISQ5zMkuUyqFCPIqRnGKlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO8+28dibZFCrlnLhzWIuVlK7z9MwHwYDVR0j BBgwFoAUniLMyyCJj5VkfZpV+hEqvozljuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZmUyMWM2OS03Yjc3LTQzYTAtOTJhNi1mNTU1YjZlZDFmZmMvMC85RTIyQ0NDQjIw ODk4Rjk1NjQ3RDlBNTVGQTExMkFCRThDRTU4RUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUUyMkNDQ0IyMDg5OEY5NTY0N0Q5QTU1RkExMTJBQkU4Q0U1 OEVFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWZlMjFjNjktN2I3Ny00M2EwLTky YTYtZjU1NWI2ZWQxZmZjLzAvOUUyMkNDQ0IyMDg5OEY5NTY0N0Q5QTU1RkExMTJB QkU4Q0U1OEVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoiUKwZexTAOcMuT1BE5Jl3POU6d6ghMdP9 R6ZIVkhNw1sspbX6SumG63vhGHMjBWaP+wDpX+e2ekHz5sXsaiZgYYbyrNFUAkss QA3urcmYBLHTtmX/IimOj4kdY2MkaMiRUF+MPZjIUhJMLz8WTqZX+nf+0r0wufGu Qyp9upf+syKopkyGr8jRIEjw5bL3ogoaxTP083edxx+0RbYkKbm0027f2LMNik/u X7zEll2Nol4XL7tWX/n3axhDhT7JoXxqOvldSDZo2tPDsJdfqLvZAvS5rCDkfngs w1O4AbCSk+/BUWzGtRrKpjYtozpQptO2Xo+OCo19n32Ovih68TA= -----END CERTIFICATE-----Generated at Sun Jul 20 21:23:19 2025 by rpki-client