$ rpki-client -vvf repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft File: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft (raw, json) Hash identifier: ZW9tfwo7PexaDzJZNHA7csntPa/4hIcGmI05Nw/7mwU= Subject key identifier: 83:B7:44:7A:0D:F4:F6:A9:8F:68:9F:18:86:1C:32:67:BA:38:EB:BD Authority key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 Certificate issuer: /CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Certificate serial: 21FCF44AFB871B30DD6ABCF4463FEDE0CCDABED3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft Manifest number: 0508 Signing time: Sat 06 Sep 2025 03:40:40 +0000 Manifest this update: Sat 06 Sep 2025 03:35:40 +0000 Manifest next update: Tue 09 Sep 2025 08:19:40 +0000 Files and hashes: 1: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: 2H5831uY9aR1OjDn1Uun2zJ8vaTAjB4BokOjcc3Moq4=) 2: 3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa (hash: vjgtOZ549YGHCxNz1PUrDo34FNB9oleC45Iwzg+kYuo=) 3: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: XJya992fgeumEsyzLHSliCXeCsu4l890cLRsCVZbrLE=) 4: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: kS4p5t1GMvH/jM8YbFoB1ZVwKWJDCBblcchgAgj/oBk=) 5: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: pEqfltHiO5idL1uFxEX2uQGcaapU/AOZ2PUbYVPk40Y=) 6: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl (hash: 3MRmdDo49EjxXrZW7ut3jfW7anuyk1mXrSLZhg0Psk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 08:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:fc:f4:4a:fb:87:1b:30:dd:6a:bc:f4:46:3f:ed:e0:cc:da:be:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Validity Not Before: Sep 6 03:35:40 2025 GMT Not After : Sep 9 08:19:40 2025 GMT Subject: CN=83B7447A0DF4F6A98F689F18861C3267BA38EBBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:05:98:ea:66:50:f8:ee:e3:0c:c8:5f:15:21: cb:58:83:7d:c1:66:af:4a:63:6e:f9:da:a3:d7:84: 8c:d3:9a:de:ca:5c:8c:7e:09:89:7b:74:47:e2:5c: 64:6e:3f:dd:2a:39:19:b3:27:27:9c:44:4a:e5:52: 32:fb:96:76:db:2f:9f:7b:31:95:a9:74:43:86:75: 32:ab:94:4e:6c:94:64:93:f7:33:fa:80:96:93:ff: ec:6c:28:f1:b9:39:22:19:2c:d6:1f:1a:3d:2f:70: 5c:7d:fb:49:b4:9c:0e:fd:ec:d8:ca:3a:d3:45:f1: ec:7a:3a:59:a0:0c:ac:ae:fd:a2:e2:9f:39:19:34: ed:99:55:ad:71:f0:a4:32:ac:c6:24:c0:55:71:e6: e0:0d:19:52:49:b2:08:3c:82:34:49:2e:05:18:93: c5:fe:08:78:14:96:b6:d4:4b:34:0b:9c:9d:16:31: 52:2c:c9:02:69:e6:f8:0f:40:4e:20:b0:8b:93:1f: 04:8c:07:49:79:67:f3:08:0e:30:89:ba:6d:5c:e9: 47:a7:71:43:0e:5a:66:64:a3:5d:27:bc:f9:78:18: 13:45:24:4c:1a:d8:19:dc:b3:fc:46:9b:eb:42:6e: 2c:b4:75:d0:4e:b2:c4:67:30:46:b5:fc:a6:95:88: b2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B7:44:7A:0D:F4:F6:A9:8F:68:9F:18:86:1C:32:67:BA:38:EB:BD X509v3 Authority Key Identifier: keyid:22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:9d:87:e6:b2:5e:87:b1:78:af:36:b6:06:58:c2:76:83:a3: c6:9b:89:cf:0b:ad:7c:ea:c3:8c:00:6e:01:99:d7:62:30:dd: aa:10:4a:4c:41:aa:93:6d:5b:8e:6a:4e:52:96:6e:b3:e9:50: ce:0a:38:7a:06:25:a7:40:cf:05:9f:6d:8a:73:2a:86:ea:57: 09:0c:0e:92:56:77:fe:75:15:00:a8:24:31:30:42:52:64:b2: 8e:f1:0c:d3:f9:99:8e:29:b8:ab:1c:65:88:09:32:ad:e3:e8: 65:28:20:e6:68:b4:95:12:30:dd:d9:39:a0:16:bb:67:f9:16: d8:89:c7:5e:63:a4:4a:30:6d:7c:73:5a:c6:04:c2:e9:8f:6b: 3e:58:87:f9:4f:1f:4b:65:c8:c5:21:e6:f0:e5:0d:0e:20:76: 6f:ea:b3:8d:27:eb:16:89:f5:3e:64:6a:79:4a:b0:7d:a7:6f: bb:00:59:e6:95:aa:96:50:e3:97:e0:55:56:86:b8:63:f8:e7: d0:6a:a3:9f:2e:c5:d9:23:8f:95:3c:2b:9a:9e:1d:82:36:84: fa:3c:b7:68:4e:1e:e6:04:82:69:e9:81:6e:71:73:50:5e:41: a8:72:00:2f:2f:ce:66:a3:fd:e6:bf:15:0f:87:dd:fb:8e:c0: 68:25:74:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIfz0SvuHGzDdarz0Rj/t4MzavtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVD NjJDREVCMTAeFw0yNTA5MDYwMzM1NDBaFw0yNTA5MDkwODE5NDBaMDMxMTAvBgNV BAMTKDgzQjc0NDdBMERGNEY2QTk4RjY4OUYxODg2MUMzMjY3QkEzOEVCQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1BZjqZlD47uMMyF8VIctYg33B Zq9KY2752qPXhIzTmt7KXIx+CYl7dEfiXGRuP90qORmzJyecRErlUjL7lnbbL597 MZWpdEOGdTKrlE5slGST9zP6gJaT/+xsKPG5OSIZLNYfGj0vcFx9+0m0nA797NjK OtNF8ex6OlmgDKyu/aLinzkZNO2ZVa1x8KQyrMYkwFVx5uANGVJJsgg8gjRJLgUY k8X+CHgUlrbUSzQLnJ0WMVIsyQJp5vgPQE4gsIuTHwSMB0l5Z/MIDjCJum1c6Uen cUMOWmZko10nvPl4GBNFJEwa2Bncs/xGm+tCbiy0ddBOssRnMEa1/KaViLLdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg7dEeg309qmPaJ8YhhwyZ7o4670wHwYDVR0j BBgwFoAUIkdSDxIIyNmsM7MDUBbcTsYs3rEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZGRmMTgxZi0xZTg5LTQwMjItODJmOC1lMGRiYTg1OWVlMmUvMC8yMjQ3NTIwRjEy MDhDOEQ5QUMzM0IzMDM1MDE2REM0RUM2MkNERUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVDNjJD REVCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWRkZjE4MWYtMWU4OS00MDIyLTgy ZjgtZTBkYmE4NTllZTJlLzAvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRD NEVDNjJDREVCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqdh+ayXoexeK82tgZYwnaDo8abic8LrXzq w4wAbgGZ12Iw3aoQSkxBqpNtW45qTlKWbrPpUM4KOHoGJadAzwWfbYpzKobqVwkM DpJWd/51FQCoJDEwQlJkso7xDNP5mY4puKscZYgJMq3j6GUoIOZotJUSMN3ZOaAW u2f5FtiJx15jpEowbXxzWsYEwumPaz5Yh/lPH0tlyMUh5vDlDQ4gdm/qs40n6xaJ 9T5kanlKsH2nb7sAWeaVqpZQ45fgVVaGuGP459Bqo58uxdkjj5U8K5qeHYI2hPo8 t2hOHuYEgmnpgW5xc1BeQahyAC8vzmaj/ea/FQ+H3fuOwGgldFw= -----END CERTIFICATE-----Generated at Sun Sep 7 13:57:26 2025 by rpki-client