$ rpki-client -vvf repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft File: 722D23AD0F959CE5CBFF927C152517F07060D195.mft (raw, json) Hash identifier: +Fg2eV/vRjyPLFUzM/nTYzAbihwNJykq/GSAbRvIa34= Subject key identifier: 12:C6:1C:A6:3F:9C:E2:B7:F2:27:8A:1F:27:03:88:3B:D8:47:84:1F Authority key identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 Certificate issuer: /CN=722D23AD0F959CE5CBFF927C152517F07060D195 Certificate serial: 7989C5D3351CE43D167537441BF0E954DF71ECB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft Manifest number: 0198 Signing time: Mon 02 Jun 2025 21:11:46 +0000 Manifest this update: Mon 02 Jun 2025 21:06:46 +0000 Manifest next update: Fri 06 Jun 2025 06:26:46 +0000 Files and hashes: 1: 3130332e34392e35302e302f32332d3234203d3e20313530343830.roa (hash: t+BQy4JUViW5bGnyMPshrmJ8tbFXjMhec+0M2rNH2M0=) 2: 722D23AD0F959CE5CBFF927C152517F07060D195.crl (hash: 45o055huvm1rns33ntNxwLCRc6NxzG36oTajelNeN5I=) 3: 3130332e34392e35312e302f32342d3234203d3e20313530343830.roa (hash: bai8drpp5Ou2lflIGmVUiQ7O559qS/qew2SdTRLBcyQ=) 4: 3130332e34392e35302e302f32342d3234203d3e20313530343830.roa (hash: +d+a4LcNz5DaR0KSjaxaW7ITfbOW0ZExk6wH6uzqtS4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 06:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:89:c5:d3:35:1c:e4:3d:16:75:37:44:1b:f0:e9:54:df:71:ec:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722D23AD0F959CE5CBFF927C152517F07060D195 Validity Not Before: Jun 2 21:06:46 2025 GMT Not After : Jun 6 06:26:46 2025 GMT Subject: CN=12C61CA63F9CE2B7F2278A1F2703883BD847841F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a6:f2:2d:59:cb:32:93:c2:9e:44:7e:e4:eb: c6:c9:a7:9d:9c:8c:3d:c5:25:14:aa:91:c6:cc:e0: af:1a:d9:2b:cf:29:38:9a:57:4c:fa:40:2d:1c:a6: a9:5b:d5:2a:09:9f:dd:06:75:6b:25:b9:6a:b0:35: 9e:f5:e3:4e:ad:9c:d5:fa:bb:77:fc:b7:bf:1e:71: fe:ef:30:06:14:97:1f:c2:1f:2c:4e:42:10:21:26: 90:90:98:52:f3:13:78:8a:2c:83:9c:dd:82:10:ec: 05:9d:4b:06:3c:7b:dc:a9:48:cb:b8:7c:b9:58:70: 4a:6d:b0:f2:c7:d2:53:6c:0e:6c:36:4b:39:94:f2: c9:ae:e9:4b:9f:e0:16:74:5a:f7:d8:8b:da:2b:84: 14:2e:73:28:4b:3e:5c:90:f2:d5:44:b5:aa:1c:81: a6:fa:6c:4f:fc:21:6f:ac:b8:72:b6:f8:c8:00:ce: ca:7b:97:80:9d:af:e2:b0:80:cf:89:28:b3:41:0b: 70:7d:18:19:b6:a9:b9:4d:a9:b9:3d:ae:50:0c:c6: c3:b4:e7:cf:ec:50:66:83:04:fe:53:34:5b:9f:af: cb:4f:dd:18:3f:0f:a2:a0:e4:a2:c3:57:bb:3e:81: 85:23:b8:e8:6e:96:3b:28:fa:0f:d2:62:53:92:e9: 8a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C6:1C:A6:3F:9C:E2:B7:F2:27:8A:1F:27:03:88:3B:D8:47:84:1F X509v3 Authority Key Identifier: keyid:72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:6a:58:3f:0d:5e:47:86:e7:14:08:bb:5b:1b:5b:55:ff:05: 57:0a:aa:e0:1a:0c:7e:6e:81:a2:90:83:e2:a3:c9:e2:b4:44: 38:5d:45:5c:86:84:11:28:3b:a3:42:29:da:04:29:3f:36:ca: fe:9d:af:7a:b7:c7:18:4e:e0:ca:64:72:09:df:7c:86:2e:f6: ca:68:d9:29:e3:00:a9:95:b5:57:48:84:64:c2:2b:d2:ab:bc: 9b:39:35:95:f2:80:d7:31:3e:64:ab:6b:ce:9f:0b:64:ce:64: 6d:f7:13:b7:64:93:ce:51:bd:b9:3d:ae:fb:fb:ec:05:a3:76: 03:c9:9d:d3:d3:5d:27:eb:f7:54:80:15:b0:eb:ed:99:10:00: 59:4a:d9:f8:95:c4:e8:06:aa:98:13:85:57:6a:31:67:cf:15: 4d:8f:fa:42:1a:b9:74:68:e0:ec:54:44:de:31:ee:d7:21:53: ee:08:cb:dc:62:cf:9f:2b:4a:0b:cb:4b:b4:6d:b0:c2:13:03: 95:d4:fc:06:11:0a:5a:2b:92:12:f4:f0:c7:6d:b6:fa:93:d5: 3e:e5:af:01:3d:e3:8a:7f:77:00:05:78:21:11:7b:db:b0:e9: f6:00:9e:7a:41:50:83:2e:e1:e1:c5:4c:eb:49:1e:67:f5:6b: 77:fb:63:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeYnF0zUc5D0WdTdEG/DpVN9x7LYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3 MDYwRDE5NTAeFw0yNTA2MDIyMTA2NDZaFw0yNTA2MDYwNjI2NDZaMDMxMTAvBgNV BAMTKDEyQzYxQ0E2M0Y5Q0UyQjdGMjI3OEExRjI3MDM4ODNCRDg0Nzg0MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzpvItWcsyk8KeRH7k68bJp52c jD3FJRSqkcbM4K8a2SvPKTiaV0z6QC0cpqlb1SoJn90GdWsluWqwNZ71406tnNX6 u3f8t78ecf7vMAYUlx/CHyxOQhAhJpCQmFLzE3iKLIOc3YIQ7AWdSwY8e9ypSMu4 fLlYcEptsPLH0lNsDmw2SzmU8smu6Uuf4BZ0WvfYi9orhBQucyhLPlyQ8tVEtaoc gab6bE/8IW+suHK2+MgAzsp7l4Cdr+KwgM+JKLNBC3B9GBm2qblNqbk9rlAMxsO0 58/sUGaDBP5TNFufr8tP3Rg/D6Kg5KLDV7s+gYUjuOhuljso+g/SYlOS6YoJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEsYcpj+c4rfyJ4ofJwOIO9hHhB8wHwYDVR0j BBgwFoAUci0jrQ+VnOXL/5J8FSUX8HBg0ZUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2U4ZGE5Yy1iZGJkLTQ5MDgtYmE5Mi1kOTBmZWE5YzhmMDUvMC83MjJEMjNBRDBG OTU5Q0U1Q0JGRjkyN0MxNTI1MTdGMDcwNjBEMTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3MDYw RDE5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNlOGRhOWMtYmRiZC00OTA4LWJh OTItZDkwZmVhOWM4ZjA1LzAvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3 RjA3MDYwRDE5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxqWD8NXkeG5xQIu1sbW1X/BVcKquAaDH5u gaKQg+KjyeK0RDhdRVyGhBEoO6NCKdoEKT82yv6dr3q3xxhO4MpkcgnffIYu9spo 2SnjAKmVtVdIhGTCK9KrvJs5NZXygNcxPmSra86fC2TOZG33E7dkk85Rvbk9rvv7 7AWjdgPJndPTXSfr91SAFbDr7ZkQAFlK2fiVxOgGqpgThVdqMWfPFU2P+kIauXRo 4OxURN4x7tchU+4Iy9xiz58rSgvLS7RtsMITA5XU/AYRClorkhL08MdttvqT1T7l rwE944p/dwAFeCERe9uw6fYAnnpBUIMu4eHFTOtJHmf1a3f7Y/Y= -----END CERTIFICATE-----Generated at Tue Jun 3 23:15:06 2025 by rpki-client