$ rpki-client -vvf repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft File: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft (raw, json) Hash identifier: RYRAfHLoN40Q37bbMXQO/cwbAxK7vQoVIEqvhQ8D23M= Subject key identifier: 7C:94:CD:9B:51:20:96:25:F9:D4:2E:63:D2:BB:21:3A:DE:28:FE:DB Authority key identifier: 32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA Certificate issuer: /CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Certificate serial: 7ADD8DA5C5B0B5B6205B881D76209375F5082454 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft Manifest number: 01F6 Signing time: Sat 06 Sep 2025 18:22:20 +0000 Manifest this update: Sat 06 Sep 2025 18:17:20 +0000 Manifest next update: Wed 10 Sep 2025 04:12:20 +0000 Files and hashes: 1: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl (hash: L3YVtwS9z9g9DMSpRW1sZ9NTqBOAjW/USGhfTKlyTMQ=) 2: 3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa (hash: XbN3LxifTwY+vVTUMpMOqOr29jBN2u/bmUS0N8LyhH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 04:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:dd:8d:a5:c5:b0:b5:b6:20:5b:88:1d:76:20:93:75:f5:08:24:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Validity Not Before: Sep 6 18:17:20 2025 GMT Not After : Sep 10 04:12:20 2025 GMT Subject: CN=7C94CD9B51209625F9D42E63D2BB213ADE28FEDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:03:c1:6e:2d:81:90:62:ab:9c:ac:12:fd: fc:e1:fc:4b:51:a8:c6:fe:6e:53:bb:3c:df:f9:34: 0d:c6:b9:c8:e2:fc:70:07:6b:79:bd:62:ef:5f:79: 4e:5a:49:9e:b4:a4:3d:93:d5:a9:dc:05:bd:f6:b5: 45:b7:bc:73:99:27:d6:e2:64:bd:b6:00:a5:ce:c0: 5d:a5:53:5c:66:05:df:ad:0c:f2:f7:50:02:ea:b6: db:37:02:2f:83:64:57:dc:9f:e1:15:a9:d6:a5:f1: 7b:c5:fd:24:08:29:6d:f6:a4:40:03:63:71:82:6d: 7c:64:7f:2a:f8:2f:61:98:71:7e:e7:bd:b9:ec:04: 8e:2c:b1:5f:3e:b2:12:d4:e2:db:d8:03:80:5e:a0: 71:cb:42:79:b0:74:12:a5:23:5d:cf:9b:b6:2b:00: 03:36:37:81:d9:cd:a9:11:4b:e9:cf:5d:f4:ac:48: d2:c7:ab:6a:d4:77:28:3f:5e:1b:0f:c4:0b:15:c0: 0d:3c:61:5e:98:60:96:ac:7c:0d:76:6b:fe:a2:2d: 9f:36:47:8e:1d:cb:2b:5e:0f:63:2e:93:6d:c8:66: 66:7e:53:56:0c:24:4a:9d:58:c1:8e:68:5a:e2:1e: 7b:e0:42:cb:46:36:b4:4a:2f:35:01:5a:98:89:ea: 76:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:94:CD:9B:51:20:96:25:F9:D4:2E:63:D2:BB:21:3A:DE:28:FE:DB X509v3 Authority Key Identifier: keyid:32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:73:2b:e7:e2:01:b6:d6:a0:4c:41:0f:0e:c9:e6:ac:23:a5: 0b:e7:85:b7:c5:cf:e9:55:15:3a:21:c2:34:8d:e5:32:29:2a: 09:30:33:51:3c:44:49:c0:07:ee:06:13:44:a8:a1:33:50:5a: 72:a8:5f:6f:cf:2f:53:95:12:9e:20:22:a7:28:2e:11:cc:d8: 72:27:c0:87:30:6a:8b:91:52:eb:24:f3:7e:2e:a8:3b:70:ef: 96:f6:3c:bd:a4:78:20:e3:f2:7d:cf:66:42:27:99:7a:a1:83: 81:88:82:aa:af:79:88:c8:65:dc:f8:34:78:94:d9:79:8f:3f: 3a:7a:e5:b7:58:88:11:9e:5e:4d:64:96:53:f9:a3:a7:43:51: 31:e8:37:3d:be:d3:93:53:dc:40:6e:54:71:5d:ab:07:f6:f6: c4:1b:05:fc:50:e3:2b:b5:61:8b:fe:f8:45:b7:2f:d5:55:03: a7:67:b6:11:6a:3c:08:e6:73:5f:80:25:9a:76:e9:fe:a4:1c: 15:ec:bd:b6:d5:18:06:59:58:87:44:89:af:3b:64:59:b3:9e: 05:39:bb:7c:1c:e9:60:0d:5a:46:85:40:d4:03:17:e3:a1:dd: 19:87:3f:6a:d8:4e:8a:a7:3c:7e:b0:2b:17:b1:09:c2:67:66: 9b:09:2c:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUet2NpcWwtbYgW4gddiCTdfUIJFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1 MTdDQUZGQTAeFw0yNTA5MDYxODE3MjBaFw0yNTA5MTAwNDEyMjBaMDMxMTAvBgNV BAMTKDdDOTRDRDlCNTEyMDk2MjVGOUQ0MkU2M0QyQkIyMTNBREUyOEZFREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvFQPBbi2BkGKrnKwS/fzh/EtR qMb+blO7PN/5NA3Gucji/HAHa3m9Yu9feU5aSZ60pD2T1ancBb32tUW3vHOZJ9bi ZL22AKXOwF2lU1xmBd+tDPL3UALqtts3Ai+DZFfcn+EVqdal8XvF/SQIKW32pEAD Y3GCbXxkfyr4L2GYcX7nvbnsBI4ssV8+shLU4tvYA4BeoHHLQnmwdBKlI13Pm7Yr AAM2N4HZzakRS+nPXfSsSNLHq2rUdyg/XhsPxAsVwA08YV6YYJasfA12a/6iLZ82 R44dyyteD2Muk23IZmZ+U1YMJEqdWMGOaFriHnvgQstGNrRKLzUBWpiJ6naZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfJTNm1EgliX51C5j0rshOt4o/tswHwYDVR0j BBgwFoAUMit7vHviqE2NZEpraDM5Y1F8r/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDUwZjBmNS1iODgzLTRiMjQtOTc5Mi03ZTk1N2FmODhiZjgvMC8zMjJCN0JCQzdC RTJBODREOEQ2NDRBNkI2ODMzMzk2MzUxN0NBRkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1MTdD QUZGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1MGYwZjUtYjg4My00YjI0LTk3 OTItN2U5NTdhZjg4YmY4LzAvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5 NjM1MTdDQUZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpzK+fiAbbWoExBDw7J5qwjpQvnhbfFz+lV FTohwjSN5TIpKgkwM1E8REnAB+4GE0SooTNQWnKoX2/PL1OVEp4gIqcoLhHM2HIn wIcwaouRUusk834uqDtw75b2PL2keCDj8n3PZkInmXqhg4GIgqqveYjIZdz4NHiU 2XmPPzp65bdYiBGeXk1kllP5o6dDUTHoNz2+05NT3EBuVHFdqwf29sQbBfxQ4yu1 YYv++EW3L9VVA6dnthFqPAjmc1+AJZp26f6kHBXsvbbVGAZZWIdEia87ZFmzngU5 u3wc6WANWkaFQNQDF+Oh3RmHP2rYToqnPH6wKxexCcJnZpsJLBI= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:49 2025 by rpki-client