$ rpki-client -vvf repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft File: 2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft (raw, json) Hash identifier: BZBcZWl8vflUyZ7RA3k3LifxUR4otpUzB5KjO/BtawY= Subject key identifier: 55:E2:12:B9:4F:B5:58:CA:CB:54:0A:47:41:B0:DC:2D:99:6D:74:AD Authority key identifier: 22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F Certificate issuer: /CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Certificate serial: 417F93CFBFF9844922B8589C1A99785F6357FB0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft Manifest number: CD Signing time: Mon 21 Jul 2025 08:32:05 +0000 Manifest this update: Mon 21 Jul 2025 08:27:05 +0000 Manifest next update: Thu 24 Jul 2025 20:16:05 +0000 Files and hashes: 1: 3135372e31352e3134342e302f32332d3233203d3e20313532333736.roa (hash: cWyOKWctYlbVooNMHms1H1vDLL9MPLPoRH1H2TKVIAo=) 2: 3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa (hash: SBNjwJJYCJHvL2QmCRz+yZ8PvTB10n4BHiXO1+hrRxM=) 3: 3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa (hash: bbNh5IhzL1rNJLyhy7hiFZkFXcVeHuBdSs69IB8xXPA=) 4: 2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl (hash: 6bQRnuSHCb6RvFl1ugu65MEJwuBbdu0HApDYG57qRwc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 20:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:7f:93:cf:bf:f9:84:49:22:b8:58:9c:1a:99:78:5f:63:57:fb:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Validity Not Before: Jul 21 08:27:05 2025 GMT Not After : Jul 24 20:16:05 2025 GMT Subject: CN=55E212B94FB558CACB540A4741B0DC2D996D74AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:88:17:6e:11:cd:e7:8a:51:4b:f6:e1:de:5a: 15:bc:34:ae:4e:77:e4:b3:dd:ff:99:e9:e9:e6:86: 4e:4d:9f:73:15:cb:83:ab:2f:d1:9b:56:38:96:b5: 7f:7e:d5:17:e4:17:fe:8c:58:c8:f6:8a:08:5e:5e: 7a:38:43:17:ad:1d:ec:c4:aa:f6:08:4e:b1:cc:41: 23:4d:03:62:55:7d:b5:2b:de:01:a7:f4:11:6b:6f: d4:91:7d:d2:e0:06:5b:d0:77:d3:52:ac:8b:f7:60: a0:fa:9d:04:8f:cb:63:ae:03:34:27:cd:14:c6:bd: 92:76:1a:9c:ce:b1:ba:15:d1:39:ff:16:8f:e9:6a: ca:d1:4c:6f:ba:0e:1c:29:f2:e6:75:24:e1:61:a4: ad:2d:7c:a0:79:ef:e8:10:db:77:4f:e5:ec:93:33: 5b:fd:94:cd:66:6b:cb:a5:b5:b8:ce:d3:75:60:31: ae:dd:23:24:fd:f0:b6:b9:49:44:47:a1:cd:0b:1a: a4:64:81:08:56:49:a7:ba:79:5f:86:59:3a:29:6a: 22:f3:c6:94:44:4b:7c:c2:f0:99:ea:66:45:8e:a3: b6:51:78:f6:90:29:85:4a:29:74:73:28:65:15:84: 31:2c:02:ef:06:8b:2e:98:0c:18:d8:43:67:2c:3a: 82:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E2:12:B9:4F:B5:58:CA:CB:54:0A:47:41:B0:DC:2D:99:6D:74:AD X509v3 Authority Key Identifier: keyid:22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:48:a9:07:a1:8d:b1:c2:7d:4f:c5:34:74:f8:7e:b6:8f:dd: 54:34:80:48:4a:8c:e5:d6:00:40:e0:a2:04:20:a0:cd:3d:ab: 8d:e2:57:89:01:58:a9:4d:8a:6f:d5:76:38:b3:9a:c3:b1:ec: e5:6e:29:33:2d:71:f4:5d:81:64:89:15:de:48:65:b2:65:ff: 23:6a:7c:90:ae:23:b6:7f:c4:b7:a3:d5:cb:c6:db:be:89:bc: e1:67:cf:32:db:fe:cc:f9:5e:a0:ab:c8:19:b3:b6:74:31:65: d8:ea:81:ae:dd:63:6f:1f:a6:27:2a:ac:0e:c0:90:8e:66:f9: 6d:86:83:13:61:b7:c5:02:f9:c9:f9:f7:39:35:5f:32:15:18: 6e:53:b6:a4:e2:c3:92:31:ac:e8:88:3d:7d:bb:d3:b3:5e:3b: 27:ce:d0:92:1c:a3:1e:9f:a9:c4:92:b1:49:13:fb:b8:44:f0: ac:13:25:08:53:38:dc:a3:7c:c5:66:b7:78:fc:ad:7c:20:23: e8:3a:37:17:41:64:50:3e:fd:60:20:ca:a2:1c:2d:2e:14:04: 1c:3c:0e:fd:57:81:db:93:5c:b9:b7:c8:a3:b4:47:91:8a:0d: 01:78:75:07:a3:ea:e4:55:a8:da:eb:c8:88:63:ba:8d:30:e9: 6c:de:76:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQX+Tz7/5hEkiuFicGpl4X2NX+w4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1 RkE1RTczRjAeFw0yNTA3MjEwODI3MDVaFw0yNTA3MjQyMDE2MDVaMDMxMTAvBgNV BAMTKDU1RTIxMkI5NEZCNTU4Q0FDQjU0MEE0NzQxQjBEQzJEOTk2RDc0QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDciBduEc3nilFL9uHeWhW8NK5O d+Sz3f+Z6enmhk5Nn3MVy4OrL9GbVjiWtX9+1RfkF/6MWMj2igheXno4QxetHezE qvYITrHMQSNNA2JVfbUr3gGn9BFrb9SRfdLgBlvQd9NSrIv3YKD6nQSPy2OuAzQn zRTGvZJ2GpzOsboV0Tn/Fo/pasrRTG+6Dhwp8uZ1JOFhpK0tfKB57+gQ23dP5eyT M1v9lM1ma8ultbjO03VgMa7dIyT98La5SURHoc0LGqRkgQhWSae6eV+GWTopaiLz xpRES3zC8JnqZkWOo7ZRePaQKYVKKXRzKGUVhDEsAu8Giy6YDBjYQ2csOoKpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVeISuU+1WMrLVApHQbDcLZltdK0wHwYDVR0j BBgwFoAUIkYBX/8vxV/vucRKitQWtV+l5z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTZlY2NiNy1lOTE3LTQwZjUtYWNlZS0wM2Q2OGJlNWZkOTcvMC8yMjQ2MDE1RkZG MkZDNTVGRUZCOUM0NEE4QUQ0MTZCNTVGQTVFNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1RkE1 RTczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU2ZWNjYjctZTkxNy00MGY1LWFj ZWUtMDNkNjhiZTVmZDk3LzAvMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2 QjU1RkE1RTczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdIqQehjbHCfU/FNHT4fraP3VQ0gEhKjOXW AEDgogQgoM09q43iV4kBWKlNim/VdjizmsOx7OVuKTMtcfRdgWSJFd5IZbJl/yNq fJCuI7Z/xLej1cvG276JvOFnzzLb/sz5XqCryBmztnQxZdjqga7dY28fpicqrA7A kI5m+W2GgxNht8UC+cn59zk1XzIVGG5TtqTiw5IxrOiIPX2707NeOyfO0JIcox6f qcSSsUkT+7hE8KwTJQhTONyjfMVmt3j8rXwgI+g6NxdBZFA+/WAgyqIcLS4UBBw8 Dv1XgduTXLm3yKO0R5GKDQF4dQej6uRVqNrryIhjuo0w6WzednY= -----END CERTIFICATE-----Generated at Wed Jul 23 05:59:50 2025 by rpki-client