$ rpki-client -vvf repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft File: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft (raw, json) Hash identifier: rSBx+WUuPrWNeKvl0UjdvtxweEqHO0LB80hzJ7TNips= Subject key identifier: 85:9D:76:D9:4A:ED:D0:B1:EA:61:B9:DB:FC:5A:06:B1:F6:57:61:4B Authority key identifier: 22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C Certificate issuer: /CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Certificate serial: 05D63775857D88B4CC6A95DA74C75EB79134E570 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft Manifest number: E4 Signing time: Sun 20 Jul 2025 00:31:02 +0000 Manifest this update: Sun 20 Jul 2025 00:26:02 +0000 Manifest next update: Wed 23 Jul 2025 02:04:02 +0000 Files and hashes: 1: 3130332e32332e3130302e302f32322d3234203d3e203538343030.roa (hash: X1zuW7ewqOs7galNtjkQMnHEEBdiMyZOmIpDqdwYj+Q=) 2: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl (hash: gjeutcFIX7n/w69cRFMMi5FljJmdwdNJxJLRUyxwRig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 02:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d6:37:75:85:7d:88:b4:cc:6a:95:da:74:c7:5e:b7:91:34:e5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Validity Not Before: Jul 20 00:26:02 2025 GMT Not After : Jul 23 02:04:02 2025 GMT Subject: CN=859D76D94AEDD0B1EA61B9DBFC5A06B1F657614B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6d:c0:91:7f:93:48:93:9d:29:39:f0:06:7a: 6b:f5:01:64:b7:8b:49:88:2f:34:41:f6:22:7b:ad: 73:27:56:59:9f:53:f8:1f:68:8a:45:64:ca:cd:d4: 46:e9:c5:fe:ae:bd:73:41:4c:37:06:00:57:7a:49: 68:f0:c9:e0:02:c5:29:14:8a:a3:f6:5d:29:58:54: e6:87:83:51:d3:15:09:d8:b5:8c:1f:f2:70:c9:3c: 2c:e2:50:28:3c:0e:3c:22:25:ed:49:35:6f:93:ef: 12:f5:45:f7:7b:18:f8:2b:9a:d6:cc:6e:79:47:b1: ec:13:ad:f9:f3:a6:47:16:5e:77:38:f9:1d:8a:df: 49:39:cf:61:cd:96:e2:b1:8c:20:dd:04:dc:be:32: 24:58:bd:15:ab:bc:72:6f:ef:e0:fa:1a:7d:f7:8e: 92:ba:f8:98:78:6a:c5:4f:b1:e3:8b:e1:c1:51:69: 7c:7a:be:f9:68:48:81:0d:52:55:60:58:53:e7:42: c5:63:63:5c:ae:e7:a6:ae:ec:76:6c:26:3b:87:84: 72:c8:7e:1a:5f:10:a0:88:34:a1:45:41:cf:f2:5a: 44:d6:75:62:a1:36:0c:ca:43:94:3c:8e:5f:34:8d: 04:01:4c:1f:d0:b7:42:5c:54:e8:75:32:f6:4b:2e: 9f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9D:76:D9:4A:ED:D0:B1:EA:61:B9:DB:FC:5A:06:B1:F6:57:61:4B X509v3 Authority Key Identifier: keyid:22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:37:c0:68:76:4c:13:f2:46:ce:40:48:ed:2f:77:b8:8b:e0: 28:69:e8:87:61:88:28:f7:87:3c:04:53:cb:df:f3:24:19:96: 61:8f:f5:c7:f8:46:e4:f8:bd:b9:f6:39:1e:5d:15:13:a4:4a: 25:9c:b5:74:23:4e:5b:d9:30:32:77:17:85:32:c2:af:2f:89: dc:97:db:81:3a:99:d3:2f:a1:93:46:c4:ce:d0:45:f5:56:b4: 6c:f9:76:e3:1d:9b:66:3e:2f:44:46:74:b3:8a:85:c9:dc:6f: b9:1d:1b:e3:11:ad:79:3e:fb:d8:d2:fe:03:e4:16:6a:a5:9a: 32:ea:dd:9f:bf:75:60:51:72:33:92:89:25:5b:4a:8e:6f:a0: aa:94:58:38:a0:c9:6f:c1:31:b8:88:8d:5c:2d:f5:a2:6b:1c: 1c:87:7b:26:29:4f:52:81:33:92:80:07:a0:35:c5:ad:d5:d6: 85:2a:83:53:65:95:a1:ce:d5:5e:c7:40:c1:25:44:9f:3f:49: c2:21:84:91:ef:e2:6f:bf:66:64:8e:4a:3b:8f:85:f9:9b:38: 17:32:86:5e:97:8a:29:82:5f:db:b9:5a:8f:a6:42:c6:55:50: 36:e9:a8:17:59:6a:9d:22:3b:58:e3:74:02:56:c0:45:fb:40: 40:87:6a:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBdY3dYV9iLTMapXadMdet5E05XAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlD MEE5Q0UyQzAeFw0yNTA3MjAwMDI2MDJaFw0yNTA3MjMwMjA0MDJaMDMxMTAvBgNV BAMTKDg1OUQ3NkQ5NEFFREQwQjFFQTYxQjlEQkZDNUEwNkIxRjY1NzYxNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIbcCRf5NIk50pOfAGemv1AWS3 i0mILzRB9iJ7rXMnVlmfU/gfaIpFZMrN1Ebpxf6uvXNBTDcGAFd6SWjwyeACxSkU iqP2XSlYVOaHg1HTFQnYtYwf8nDJPCziUCg8DjwiJe1JNW+T7xL1Rfd7GPgrmtbM bnlHsewTrfnzpkcWXnc4+R2K30k5z2HNluKxjCDdBNy+MiRYvRWrvHJv7+D6Gn33 jpK6+Jh4asVPseOL4cFRaXx6vvloSIENUlVgWFPnQsVjY1yu56au7HZsJjuHhHLI fhpfEKCINKFFQc/yWkTWdWKhNgzKQ5Q8jl80jQQBTB/Qt0JcVOh1MvZLLp8fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhZ122Urt0LHqYbnb/FoGsfZXYUswHwYDVR0j BBgwFoAUIs06IM9iGlsLmeQoyOVzGcCpziwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzE4MDcwNC02YjY0LTRhNDAtOGYzZC1mZmRmZDVlMzdkZWYvMC8yMkNEM0EyMENG NjIxQTVCMEI5OUU0MjhDOEU1NzMxOUMwQTlDRTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlDMEE5 Q0UyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjcxODA3MDQtNmI2NC00YTQwLThm M2QtZmZkZmQ1ZTM3ZGVmLzAvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTcz MTlDMEE5Q0UyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKw3wGh2TBPyRs5ASO0vd7iL4Chp6IdhiCj3 hzwEU8vf8yQZlmGP9cf4RuT4vbn2OR5dFROkSiWctXQjTlvZMDJ3F4Uywq8vidyX 24E6mdMvoZNGxM7QRfVWtGz5duMdm2Y+L0RGdLOKhcncb7kdG+MRrXk++9jS/gPk FmqlmjLq3Z+/dWBRcjOSiSVbSo5voKqUWDigyW/BMbiIjVwt9aJrHByHeyYpT1KB M5KAB6A1xa3V1oUqg1NllaHO1V7HQMElRJ8/ScIhhJHv4m+/ZmSOSjuPhfmbOBcy hl6XiimCX9u5Wo+mQsZVUDbpqBdZap0iO1jjdAJWwEX7QECHagg= -----END CERTIFICATE-----Generated at Sun Jul 20 22:28:09 2025 by rpki-client