$ rpki-client -vvf repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft File: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft (raw, json) Hash identifier: oR07JFX3OAbpDi3RgeoMMceeOecM9VhIDEClec8DZ0w= Subject key identifier: 7D:D1:B3:36:CF:5A:B2:5F:EB:F4:1A:94:7B:DD:69:1D:74:8B:C9:CC Authority key identifier: 32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA Certificate issuer: /CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Certificate serial: 5519A29DC5A6C0452F0344D2B05E4311E9E7E73B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft Manifest number: 01CC Signing time: Tue 03 Jun 2025 00:03:56 +0000 Manifest this update: Mon 02 Jun 2025 23:58:56 +0000 Manifest next update: Fri 06 Jun 2025 11:05:56 +0000 Files and hashes: 1: 3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa (hash: XbN3LxifTwY+vVTUMpMOqOr29jBN2u/bmUS0N8LyhH0=) 2: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl (hash: VWWo3LRykir5mg9qy67aNqV/FgESp9twLZdWs0363+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 11:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:19:a2:9d:c5:a6:c0:45:2f:03:44:d2:b0:5e:43:11:e9:e7:e7:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Validity Not Before: Jun 2 23:58:56 2025 GMT Not After : Jun 6 11:05:56 2025 GMT Subject: CN=7DD1B336CF5AB25FEBF41A947BDD691D748BC9CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:15:9a:13:40:bb:8f:ca:32:b0:50:87:2a:b8: bc:1e:2c:4f:b2:cb:9a:02:19:e1:44:97:1e:50:a3: 14:78:e8:71:0a:eb:ee:a7:99:ea:be:83:1c:55:fe: 25:e2:b6:c5:32:01:09:ff:41:01:99:02:84:4b:d6: 4e:db:2e:56:6b:43:91:99:be:5a:02:0a:8e:b9:f8: 21:39:0a:1d:49:69:5e:87:dd:36:70:84:9e:5e:31: d4:42:6c:36:cb:93:85:74:98:f6:f3:8b:f8:1b:59: 49:0b:e8:31:2d:e2:d5:1f:78:84:52:fc:46:74:65: 5f:1e:96:62:47:8a:8d:a9:57:13:31:9a:2e:0c:2b: a7:b9:58:00:0e:85:ed:e3:8a:09:b7:09:f8:6e:0a: 2e:0f:ca:ae:7b:fd:5f:36:ea:02:92:0c:42:18:35: 70:d8:c2:df:6e:23:f8:fd:1c:5f:44:10:41:ef:00: 4b:eb:be:cc:d6:e0:ff:8f:eb:a8:37:36:c5:29:e7: 95:24:94:23:b5:84:58:3f:b0:3d:37:b3:08:60:8c: 85:72:55:7e:9a:33:37:a4:60:b9:77:09:c5:8c:bf: 40:28:4e:f2:22:ce:f6:16:c3:f0:bb:a6:93:50:21: 6d:c6:61:95:bf:ad:ad:05:aa:e8:5f:de:21:e6:d3: d2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D1:B3:36:CF:5A:B2:5F:EB:F4:1A:94:7B:DD:69:1D:74:8B:C9:CC X509v3 Authority Key Identifier: keyid:32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:64:2a:22:76:10:f7:12:ee:d7:f7:cf:ae:5b:d8:7f:b6:79: 48:b9:7a:2b:48:3f:ee:cc:17:6e:c6:42:55:52:55:a0:fb:a6: 68:99:ed:fb:e5:8f:7e:74:dc:ed:0b:92:89:31:d9:c0:16:f2: 57:f0:fb:d9:7b:bc:31:d6:ea:c3:88:96:76:00:5a:9a:2a:ed: af:b5:ea:23:af:1d:cb:fb:0e:fc:d1:35:3f:db:43:21:f2:ed: 9c:79:39:79:31:a4:61:31:d4:87:18:1c:63:e1:a6:60:60:fe: c2:6b:32:ea:bd:ce:b2:13:78:1f:e4:50:d8:a9:ce:73:d5:1a: ef:d4:9f:f2:85:4f:99:4a:9f:3f:6a:b0:3d:cf:76:5b:6f:76: 09:04:51:1b:d8:b0:97:7b:eb:c2:af:90:e1:63:e5:32:e6:29: c6:77:a4:a7:5c:db:6a:3c:83:4c:5c:d6:14:97:34:e4:04:f2: 19:cb:e8:62:1e:87:d4:d6:61:3d:74:fc:fe:d5:c7:40:4a:2b: f8:0c:49:e6:ab:fd:c6:ab:df:7c:46:b0:24:1c:9d:3e:36:41: ea:30:ff:e0:f2:c5:86:c1:ee:4e:d8:d3:5f:e9:9a:74:d1:e2: a6:c5:dd:1b:85:a2:6a:a3:d3:6f:c1:44:f5:f0:c5:a6:6d:cb: 81:aa:06:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVRmincWmwEUvA0TSsF5DEenn5zswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1 MTdDQUZGQTAeFw0yNTA2MDIyMzU4NTZaFw0yNTA2MDYxMTA1NTZaMDMxMTAvBgNV BAMTKDdERDFCMzM2Q0Y1QUIyNUZFQkY0MUE5NDdCREQ2OTFENzQ4QkM5Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5FZoTQLuPyjKwUIcquLweLE+y y5oCGeFElx5QoxR46HEK6+6nmeq+gxxV/iXitsUyAQn/QQGZAoRL1k7bLlZrQ5GZ vloCCo65+CE5Ch1JaV6H3TZwhJ5eMdRCbDbLk4V0mPbzi/gbWUkL6DEt4tUfeIRS /EZ0ZV8elmJHio2pVxMxmi4MK6e5WAAOhe3jigm3CfhuCi4Pyq57/V826gKSDEIY NXDYwt9uI/j9HF9EEEHvAEvrvszW4P+P66g3NsUp55UklCO1hFg/sD03swhgjIVy VX6aMzekYLl3CcWMv0AoTvIizvYWw/C7ppNQIW3GYZW/ra0Fquhf3iHm09LrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfdGzNs9asl/r9BqUe91pHXSLycwwHwYDVR0j BBgwFoAUMit7vHviqE2NZEpraDM5Y1F8r/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDUwZjBmNS1iODgzLTRiMjQtOTc5Mi03ZTk1N2FmODhiZjgvMC8zMjJCN0JCQzdC RTJBODREOEQ2NDRBNkI2ODMzMzk2MzUxN0NBRkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1MTdD QUZGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1MGYwZjUtYjg4My00YjI0LTk3 OTItN2U5NTdhZjg4YmY4LzAvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5 NjM1MTdDQUZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKtkKiJ2EPcS7tf3z65b2H+2eUi5eitIP+7M F27GQlVSVaD7pmiZ7fvlj3503O0Lkokx2cAW8lfw+9l7vDHW6sOIlnYAWpoq7a+1 6iOvHcv7DvzRNT/bQyHy7Zx5OXkxpGEx1IcYHGPhpmBg/sJrMuq9zrITeB/kUNip znPVGu/Un/KFT5lKnz9qsD3PdltvdgkEURvYsJd768KvkOFj5TLmKcZ3pKdc22o8 g0xc1hSXNOQE8hnL6GIeh9TWYT10/P7Vx0BKK/gMSear/car33xGsCQcnT42Qeow /+DyxYbB7k7Y01/pmnTR4qbF3RuFomqj02/BRPXwxaZty4GqBig= -----END CERTIFICATE-----Generated at Tue Jun 3 23:26:29 2025 by rpki-client