$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft File: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft (raw, json) Hash identifier: cu02QtzhDJH+iNlEObmaz/aPeVlDFw5whNxM0CWoNQs= Subject key identifier: 59:35:39:26:F3:74:71:0C:A5:27:94:4D:88:70:93:E4:3D:70:C6:63 Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Certificate serial: 743FF3EBC56D0420BF5C174814CCB520276F88EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft Manifest number: 02FB Signing time: Thu 05 Jun 2025 15:51:19 +0000 Manifest this update: Thu 05 Jun 2025 15:46:19 +0000 Manifest next update: Sun 08 Jun 2025 17:07:19 +0000 Files and hashes: 1: AS147168.roa (hash: e20CGZZgjTyz3kNZT3WXZXnYEX1ApqROokbLe+6uHIA=) 2: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl (hash: +pbz4veUa548CuE+sXRRCn0rErqrnKv/A5fdotHELvk=) 3: AS45700.roa (hash: BXkE0BXqN50iJBAlAe18i/nlvwrKk+4GRFc684uKAn8=) 4: AS10217.roa (hash: JJQedycT2rxuZ0WKBIVY+WZbOwVugUFQzwOutSTR+VY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 17:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:3f:f3:eb:c5:6d:04:20:bf:5c:17:48:14:cc:b5:20:27:6f:88:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Validity Not Before: Jun 5 15:46:19 2025 GMT Not After : Jun 8 17:07:19 2025 GMT Subject: CN=59353926F374710CA527944D887093E43D70C663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:55:1a:11:48:3d:2b:dd:10:b2:f8:34:7d:c1: 24:d2:23:15:31:03:1e:16:f2:81:77:2b:22:be:79: 7d:78:3b:27:72:8a:65:7b:29:71:f7:65:53:47:91: d3:31:61:12:34:20:c4:62:0a:83:64:bb:cc:bb:fb: 9b:87:e0:35:ce:6b:2d:8a:5d:82:87:a8:7b:5e:c4: f2:be:17:1b:91:bf:52:b0:40:19:35:bc:c6:52:27: ce:d8:99:ad:c2:dc:91:59:7b:4e:6b:cd:0c:f8:0d: 4b:29:6e:a4:c7:d3:ca:9e:46:3d:4d:3b:ab:ef:47: cc:5a:68:8d:37:20:b9:53:0b:41:98:dc:58:10:59: 3d:86:e2:84:50:e9:c3:4b:ff:c0:67:5d:e8:b4:08: 5d:de:47:c1:58:45:81:48:31:af:ec:dd:65:bd:6a: 1b:47:1d:81:8a:b7:e5:11:d5:74:da:b5:7f:c4:06: 8b:93:23:b1:88:82:7e:73:3f:59:5b:b7:3c:e3:ac: dd:bb:41:a7:f1:1a:10:d8:f9:94:e0:8d:47:04:0e: d7:98:26:68:d1:be:0b:29:d8:ac:de:86:56:6a:04: a9:5a:26:6d:c4:e5:77:ee:a9:2d:56:f2:6f:79:d3: c8:0b:f6:d2:2d:55:a7:07:33:6f:23:a0:3f:37:fe: d4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:35:39:26:F3:74:71:0C:A5:27:94:4D:88:70:93:E4:3D:70:C6:63 X509v3 Authority Key Identifier: keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:99:37:88:eb:4c:52:fc:10:25:10:b7:53:6f:e9:b5:81:98: 5e:09:b6:b8:51:81:f1:02:8d:fa:5f:07:af:25:a0:74:de:74: 86:d3:d4:cb:d0:9c:dc:93:8d:f5:73:a3:4a:fc:56:10:85:70: d4:ea:b0:7d:d1:59:81:53:b8:31:7d:64:49:f7:53:8d:de:c9: 76:8e:7a:8d:80:80:d4:2d:70:50:cf:92:09:3d:86:0a:42:86: c8:e0:10:1a:18:63:5d:a0:71:b4:76:41:47:8c:b2:b1:87:df: 21:24:81:ca:cd:7a:2b:a4:c5:8b:61:96:1a:58:ff:ab:f0:b3: c1:80:68:94:46:d7:d9:bd:76:20:d6:ca:f2:cf:5b:9d:67:cd: 1c:01:04:78:c7:00:c3:6f:81:9f:09:18:f2:3c:91:78:3a:dd: 21:d2:d1:48:4e:3f:1f:cf:c0:67:89:0f:bf:10:60:75:be:ac: 9e:d2:9d:e0:8e:53:98:ad:b8:68:15:86:8c:d6:d5:b6:3f:8f: bb:19:00:ab:70:17:16:16:5a:ae:bb:52:dd:28:26:d0:e7:37: ef:31:54:1e:67:82:aa:b2:2c:90:05:8f:5a:3c:62:5e:51:c1: b4:5f:98:7d:84:da:a7:f4:13:de:48:c6:4c:57:b4:59:c6:13: 75:0e:99:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdD/z68VtBCC/XBdIFMy1ICdviOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF MkMzQjUxMjAeFw0yNTA2MDUxNTQ2MTlaFw0yNTA2MDgxNzA3MTlaMDMxMTAvBgNV BAMTKDU5MzUzOTI2RjM3NDcxMENBNTI3OTQ0RDg4NzA5M0U0M0Q3MEM2NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2VRoRSD0r3RCy+DR9wSTSIxUx Ax4W8oF3KyK+eX14OydyimV7KXH3ZVNHkdMxYRI0IMRiCoNku8y7+5uH4DXOay2K XYKHqHtexPK+FxuRv1KwQBk1vMZSJ87Yma3C3JFZe05rzQz4DUspbqTH08qeRj1N O6vvR8xaaI03ILlTC0GY3FgQWT2G4oRQ6cNL/8BnXei0CF3eR8FYRYFIMa/s3WW9 ahtHHYGKt+UR1XTatX/EBouTI7GIgn5zP1lbtzzjrN27QafxGhDY+ZTgjUcEDteY JmjRvgsp2KzehlZqBKlaJm3E5XfuqS1W8m9508gL9tItVacHM28joD83/tRrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWTU5JvN0cQylJ5RNiHCT5D1wxmMwHwYDVR0j BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz QjUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk YmQtMjU0MzgxMDY5ZTU3LzAvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4 MkFFMkMzQjUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+ZN4jrTFL8ECUQt1Nv6bWBmF4JtrhRgfEC jfpfB68loHTedIbT1MvQnNyTjfVzo0r8VhCFcNTqsH3RWYFTuDF9ZEn3U43eyXaO eo2AgNQtcFDPkgk9hgpChsjgEBoYY12gcbR2QUeMsrGH3yEkgcrNeiukxYthlhpY /6vws8GAaJRG19m9diDWyvLPW51nzRwBBHjHAMNvgZ8JGPI8kXg63SHS0UhOPx/P wGeJD78QYHW+rJ7SneCOU5ituGgVhozW1bY/j7sZAKtwFxYWWq67Ut0oJtDnN+8x VB5ngqqyLJAFj1o8Yl5RwbRfmH2E2qf0E95IxkxXtFnGE3UOmZA= -----END CERTIFICATE-----Generated at Thu Jun 5 19:20:13 2025 by rpki-client