$ rpki-client -vvf repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft File: 22476F90C7B08131974F5B19834906C325ABEF12.mft (raw, json) Hash identifier: XTbkdYEJNIBlBvYcrv+1Mp0U+QgIjut0NRMy5eLjDsk= Subject key identifier: 50:3E:EF:71:3B:45:FE:83:44:33:0E:96:AC:E4:63:D7:90:D2:CC:C7 Authority key identifier: 22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 Certificate issuer: /CN=22476F90C7B08131974F5B19834906C325ABEF12 Certificate serial: 3F4CB0A0FBBF50A2B29EF17F80D2BA845AC86F5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft Manifest number: 82 Signing time: Thu 05 Jun 2025 00:51:24 +0000 Manifest this update: Thu 05 Jun 2025 00:46:24 +0000 Manifest next update: Sun 08 Jun 2025 06:19:24 +0000 Files and hashes: 1: 3136302e32352e36382e302f32332d3234203d3e20313532383430.roa (hash: 4i8FjKHuMJZs9ehASRTTzzbmgJaF3lnGvx5voJ5RPxk=) 2: 22476F90C7B08131974F5B19834906C325ABEF12.crl (hash: JLx9XtZiG0Mk7YOyOnaZjyvpRncKNz3M9L8gKdX9J9A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:19:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4c:b0:a0:fb:bf:50:a2:b2:9e:f1:7f:80:d2:ba:84:5a:c8:6f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22476F90C7B08131974F5B19834906C325ABEF12 Validity Not Before: Jun 5 00:46:24 2025 GMT Not After : Jun 8 06:19:24 2025 GMT Subject: CN=503EEF713B45FE8344330E96ACE463D790D2CCC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c4:94:e8:6a:f5:cd:de:19:8e:39:1e:a1:1f: b8:4a:66:88:e5:c0:ed:29:cf:70:f7:ab:68:7c:e6: 5a:8d:08:f6:3c:4e:4f:fd:02:33:8c:f6:2c:fe:8b: b5:f9:9f:d9:15:0a:48:63:64:04:09:36:f2:73:00: 9c:08:d7:7f:27:b6:cb:86:a7:f1:0f:40:e2:1a:96: 74:7d:94:61:c1:a6:98:80:8f:2c:9a:72:7c:55:35: a6:7d:8e:4a:d1:f5:83:0f:6d:91:84:d9:35:54:08: 79:dc:bb:59:f3:d3:b6:28:7b:e0:84:e6:a9:b1:66: 08:87:3c:4a:df:c9:82:fd:2b:ad:b2:e2:3d:63:6d: 40:31:23:77:63:16:1b:ca:3c:57:4f:d5:bf:aa:a4: f7:94:3a:99:d6:ed:6c:03:c5:9a:21:a5:6e:45:46: ee:7a:90:6f:b8:e4:06:a8:da:2e:34:3f:7b:3a:29: 34:2f:3e:47:f3:be:10:74:7e:c4:66:d4:73:c6:19: b1:c2:cd:d6:45:9c:76:e6:cc:d9:06:c4:f4:a2:be: 88:f6:cf:3f:1d:54:31:f9:aa:ef:a9:35:55:03:c2: 0f:a0:5a:ed:75:38:de:2e:80:41:fc:a1:52:0c:54: e6:0d:7d:e6:4b:46:13:ff:cb:89:3b:00:76:01:ee: 5d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3E:EF:71:3B:45:FE:83:44:33:0E:96:AC:E4:63:D7:90:D2:CC:C7 X509v3 Authority Key Identifier: keyid:22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d7:2c:47:4b:3f:ee:65:d6:67:95:80:71:96:5c:f6:21:64: b9:ea:00:0b:29:2e:4a:c6:8e:1a:f1:1a:20:8f:ca:4a:18:97: 5b:c8:69:01:1a:98:be:54:f8:eb:d1:89:27:2a:20:98:23:e3: 43:6e:3a:14:3e:81:73:de:8b:0e:30:5c:d4:20:e7:6a:cb:74: 77:1e:2d:52:9d:6c:a9:6b:42:1a:ea:db:ef:43:0b:58:c0:46: 69:e3:08:07:94:38:ad:ff:3d:6e:d4:05:c0:9f:f8:bf:41:bc: 97:97:c2:2c:61:fb:f8:96:2e:36:a3:c6:3f:ed:80:31:0b:bd: f5:f5:08:3e:6d:be:82:c2:b2:1a:56:7d:f2:c5:a4:50:fc:65: 8e:d7:4a:05:c7:a1:7a:47:6f:19:24:72:17:d3:2e:c3:b3:4a: ae:01:45:2b:c1:25:e8:da:aa:f4:c6:16:86:79:1f:4f:bb:e1: a5:1e:53:8c:bf:fc:27:43:55:22:5c:8b:22:d8:0c:03:81:59: 89:8a:df:b4:c2:69:af:36:ae:44:c7:2b:94:a7:c0:0f:9b:a2: 99:d2:92:a4:2a:1e:8c:f2:b8:5a:a6:67:b7:93:cf:b8:87:28: cf:59:d9:25:6e:52:8a:d7:df:9c:4a:cb:81:8a:dc:bd:b6:73: 13:7b:bf:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP0ywoPu/UKKynvF/gNK6hFrIb1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMy NUFCRUYxMjAeFw0yNTA2MDUwMDQ2MjRaFw0yNTA2MDgwNjE5MjRaMDMxMTAvBgNV BAMTKDUwM0VFRjcxM0I0NUZFODM0NDMzMEU5NkFDRTQ2M0Q3OTBEMkNDQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3xJToavXN3hmOOR6hH7hKZojl wO0pz3D3q2h85lqNCPY8Tk/9AjOM9iz+i7X5n9kVCkhjZAQJNvJzAJwI138ntsuG p/EPQOIalnR9lGHBppiAjyyacnxVNaZ9jkrR9YMPbZGE2TVUCHncu1nz07Yoe+CE 5qmxZgiHPErfyYL9K62y4j1jbUAxI3djFhvKPFdP1b+qpPeUOpnW7WwDxZohpW5F Ru56kG+45Aao2i40P3s6KTQvPkfzvhB0fsRm1HPGGbHCzdZFnHbmzNkGxPSivoj2 zz8dVDH5qu+pNVUDwg+gWu11ON4ugEH8oVIMVOYNfeZLRhP/y4k7AHYB7l07AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUD7vcTtF/oNEMw6WrORj15DSzMcwHwYDVR0j BBgwFoAUIkdvkMewgTGXT1sZg0kGwyWr7xIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmZiYWFmYy00ZGIyLTRmYzQtYTFhOC0yZDhlNGM4YjJjZTAvMC8yMjQ3NkY5MEM3 QjA4MTMxOTc0RjVCMTk4MzQ5MDZDMzI1QUJFRjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMyNUFC RUYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2 QzMyNUFCRUYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjXLEdLP+5l1meVgHGWXPYhZLnqAAspLkrG jhrxGiCPykoYl1vIaQEamL5U+OvRiScqIJgj40NuOhQ+gXPeiw4wXNQg52rLdHce LVKdbKlrQhrq2+9DC1jARmnjCAeUOK3/PW7UBcCf+L9BvJeXwixh+/iWLjajxj/t gDELvfX1CD5tvoLCshpWffLFpFD8ZY7XSgXHoXpHbxkkchfTLsOzSq4BRSvBJeja qvTGFoZ5H0+74aUeU4y//CdDVSJciyLYDAOBWYmK37TCaa82rkTHK5SnwA+bopnS kqQqHozyuFqmZ7eTz7iHKM9Z2SVuUorX35xKy4GK3L22cxN7vxc= -----END CERTIFICATE-----Generated at Fri Jun 6 04:57:09 2025 by rpki-client