$ rpki-client -vvf repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft File: 722D23AD0F959CE5CBFF927C152517F07060D195.mft (raw, json) Hash identifier: /i5bnSH2PtMilSji3ruJtTwrPCMp35KAS0a8IahR6Io= Subject key identifier: 22:BF:80:02:C5:C9:7A:00:06:0B:92:BB:9D:C6:B7:7B:AB:78:55:C4 Authority key identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 Certificate issuer: /CN=722D23AD0F959CE5CBFF927C152517F07060D195 Certificate serial: 1382032DA00AF14A8D0C5385B558DD8DDC6B39C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft Manifest number: 017E Signing time: Fri 04 Apr 2025 21:11:43 +0000 Manifest this update: Fri 04 Apr 2025 21:06:43 +0000 Manifest next update: Tue 08 Apr 2025 00:36:43 +0000 Files and hashes: 1: 3130332e34392e35312e302f32342d3234203d3e20313530343830.roa (hash: bai8drpp5Ou2lflIGmVUiQ7O559qS/qew2SdTRLBcyQ=) 2: 722D23AD0F959CE5CBFF927C152517F07060D195.crl (hash: 1Naw0DZJLvoQLUSWecpVJRZo39L/QvjLuaPQ7+ms+m0=) 3: 3130332e34392e35302e302f32342d3234203d3e20313530343830.roa (hash: +d+a4LcNz5DaR0KSjaxaW7ITfbOW0ZExk6wH6uzqtS4=) 4: 3130332e34392e35302e302f32332d3234203d3e20313530343830.roa (hash: t+BQy4JUViW5bGnyMPshrmJ8tbFXjMhec+0M2rNH2M0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:82:03:2d:a0:0a:f1:4a:8d:0c:53:85:b5:58:dd:8d:dc:6b:39:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722D23AD0F959CE5CBFF927C152517F07060D195 Validity Not Before: Apr 4 21:06:43 2025 GMT Not After : Apr 8 00:36:43 2025 GMT Subject: CN=22BF8002C5C97A00060B92BB9DC6B77BAB7855C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:53:40:4a:b7:92:e8:13:aa:84:e6:77:95:6d: b8:a4:0c:42:30:5e:e6:40:b9:c9:12:1d:0a:4b:76: 59:b0:45:66:c7:4a:f0:14:15:77:03:af:3e:a0:26: ca:58:ab:a0:ac:37:1a:68:91:4e:22:48:cc:8c:9a: d3:96:8c:ab:37:17:d5:ae:12:d8:26:8c:9a:77:ff: 48:b8:f6:88:f6:07:3e:73:4f:9c:02:d6:cb:f4:9c: 82:ed:a7:59:e9:4b:ca:3e:80:56:02:44:cd:b9:ea: 08:86:8f:09:28:30:09:c4:37:19:cc:27:63:a9:dc: f6:e3:e7:99:5b:b6:e5:65:27:36:59:7d:5c:77:13: 63:44:23:58:fc:03:8a:b4:b1:a2:21:fd:6a:fd:8f: f3:54:92:fc:c7:ff:86:38:67:7c:9d:fe:36:81:89: a3:9b:65:03:f7:24:68:a2:11:24:2c:f2:75:18:bf: 89:ba:4b:38:83:4b:c5:34:3a:34:a3:4d:5b:a5:f6: cf:4b:33:7c:9c:64:57:2c:27:17:2d:5c:f6:04:9b: f4:9b:93:b3:38:65:d8:ed:e8:91:91:12:b2:e0:6e: a2:76:4c:d8:a0:b8:d7:a4:4f:46:7f:51:34:25:96: d5:83:15:af:15:74:c8:d5:b4:1a:42:72:7d:1c:a4: 38:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BF:80:02:C5:C9:7A:00:06:0B:92:BB:9D:C6:B7:7B:AB:78:55:C4 X509v3 Authority Key Identifier: keyid:72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:bf:5e:ab:f1:64:cf:b5:7f:ef:3f:36:ca:87:87:49:3e:20: 3d:a5:8c:47:80:10:b4:6c:87:2b:97:87:70:ce:b8:df:92:24: 6f:78:d5:39:b2:2f:5c:25:8d:b9:52:85:30:37:6e:4e:d0:7f: 47:cf:48:c9:5c:43:56:06:13:c2:3a:33:11:e8:25:8d:79:e6: e7:fd:ad:5b:b9:74:41:91:cb:f7:87:fd:08:a8:28:f4:3d:ba: 1b:75:64:f8:97:13:4f:f2:fc:5b:b6:bb:4b:1e:c7:e6:b2:4e: ae:6a:16:01:25:36:b1:0e:be:e4:e4:a0:1d:bf:15:c9:66:38: 24:d0:29:07:78:f7:3f:74:e2:39:28:53:ad:0d:29:da:23:21: 55:e3:18:a9:f2:04:df:a9:b9:11:2a:9e:83:ca:10:58:17:36: ab:64:2b:af:75:61:5c:d8:1e:00:58:f8:5b:13:26:1a:37:95: f3:dc:98:10:26:d9:c0:a0:5f:92:88:57:8c:7d:f0:64:65:2b: c8:d4:56:17:57:81:6a:43:3e:85:0a:0b:c7:97:d4:23:a4:7e: 35:9b:b9:7d:d2:48:7a:a5:f8:2d:73:03:65:e7:b1:1a:aa:f2: ae:9b:85:4c:36:63:a3:96:5f:2c:87:c3:1d:28:7e:52:2e:d3: 09:4f:5c:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE4IDLaAK8UqNDFOFtVjdjdxrOcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3 MDYwRDE5NTAeFw0yNTA0MDQyMTA2NDNaFw0yNTA0MDgwMDM2NDNaMDMxMTAvBgNV BAMTKDIyQkY4MDAyQzVDOTdBMDAwNjBCOTJCQjlEQzZCNzdCQUI3ODU1QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7U0BKt5LoE6qE5neVbbikDEIw XuZAuckSHQpLdlmwRWbHSvAUFXcDrz6gJspYq6CsNxpokU4iSMyMmtOWjKs3F9Wu EtgmjJp3/0i49oj2Bz5zT5wC1sv0nILtp1npS8o+gFYCRM256giGjwkoMAnENxnM J2Op3Pbj55lbtuVlJzZZfVx3E2NEI1j8A4q0saIh/Wr9j/NUkvzH/4Y4Z3yd/jaB iaObZQP3JGiiESQs8nUYv4m6SziDS8U0OjSjTVul9s9LM3ycZFcsJxctXPYEm/Sb k7M4Zdjt6JGRErLgbqJ2TNiguNekT0Z/UTQlltWDFa8VdMjVtBpCcn0cpDg1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIr+AAsXJegAGC5K7nca3e6t4VcQwHwYDVR0j BBgwFoAUci0jrQ+VnOXL/5J8FSUX8HBg0ZUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2U4ZGE5Yy1iZGJkLTQ5MDgtYmE5Mi1kOTBmZWE5YzhmMDUvMC83MjJEMjNBRDBG OTU5Q0U1Q0JGRjkyN0MxNTI1MTdGMDcwNjBEMTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3MDYw RDE5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNlOGRhOWMtYmRiZC00OTA4LWJh OTItZDkwZmVhOWM4ZjA1LzAvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3 RjA3MDYwRDE5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALu/XqvxZM+1f+8/NsqHh0k+ID2ljEeAELRs hyuXh3DOuN+SJG941TmyL1wljblShTA3bk7Qf0fPSMlcQ1YGE8I6MxHoJY155uf9 rVu5dEGRy/eH/QioKPQ9uht1ZPiXE0/y/Fu2u0sex+ayTq5qFgElNrEOvuTkoB2/ FclmOCTQKQd49z904jkoU60NKdojIVXjGKnyBN+puREqnoPKEFgXNqtkK691YVzY HgBY+FsTJho3lfPcmBAm2cCgX5KIV4x98GRlK8jUVhdXgWpDPoUKC8eX1COkfjWb uX3SSHql+C1zA2XnsRqq8q6bhUw2Y6OWXyyHwx0oflIu0wlPXOI= -----END CERTIFICATE-----Generated at Sat Apr 5 23:15:22 2025 by rpki-client