$ rpki-client -vvf repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft File: 22476F90C7B08131974F5B19834906C325ABEF12.mft (raw, json) Hash identifier: sHyhfu5ZZYpqN4U5EPW9b1QdMjYvNOwMP2CeCKDNecA= Subject key identifier: A6:7F:47:AF:62:2B:8D:6B:55:0D:A7:A8:ED:3C:B2:59:7C:45:FC:43 Authority key identifier: 22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 Certificate issuer: /CN=22476F90C7B08131974F5B19834906C325ABEF12 Certificate serial: 736E19C4821852B16347966CCA698C3A579CB185 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft Manifest number: AF Signing time: Sun 07 Sep 2025 01:51:23 +0000 Manifest this update: Sun 07 Sep 2025 01:46:23 +0000 Manifest next update: Wed 10 Sep 2025 05:38:23 +0000 Files and hashes: 1: 3136302e32352e36382e302f32342d3234203d3e20313532383430.roa (hash: 4w2+kmxxLlJwHRO1aqXjBz7ml3HwCrINsFeyiZehHq0=) 2: 3136302e32352e36392e302f32342d3234203d3e20313531353736.roa (hash: 80wPKmKJkybnq5BlobX/HktrEHR2US0xr2aBNpv/zlA=) 3: 22476F90C7B08131974F5B19834906C325ABEF12.crl (hash: siRU8z4/PMeLuAgpSu9OfESaehibFJbu/9fXR+dXd9k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 05:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:6e:19:c4:82:18:52:b1:63:47:96:6c:ca:69:8c:3a:57:9c:b1:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22476F90C7B08131974F5B19834906C325ABEF12 Validity Not Before: Sep 7 01:46:23 2025 GMT Not After : Sep 10 05:38:23 2025 GMT Subject: CN=A67F47AF622B8D6B550DA7A8ED3CB2597C45FC43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ed:11:2e:e9:5f:7b:dd:c6:76:0e:81:29:f0: 49:67:43:48:48:16:33:85:e5:72:f2:78:86:80:af: ea:2a:b9:32:97:65:6c:0f:a7:19:bb:46:ec:85:bc: fd:c3:6a:55:98:92:8f:bd:a1:35:89:6e:1c:97:ec: 6a:67:b7:81:80:81:f4:ea:7a:06:94:67:51:49:6c: 69:d7:18:4c:93:2a:80:2b:25:11:b1:1a:ba:a0:bb: 19:4f:18:e7:9b:2b:9f:ae:4d:80:5f:3b:90:9b:8c: 8b:1d:d4:95:d8:d1:5b:c3:9a:d8:7f:c0:a7:80:dd: e5:6c:03:52:a3:35:35:f6:96:ef:ed:17:e4:5c:d4: 37:db:91:ba:58:43:74:17:97:f8:16:12:7e:52:1a: 1e:f0:b2:ec:7f:86:3f:d0:53:c5:3b:46:80:cd:be: 4a:c4:bb:d7:46:89:69:14:8c:9c:ed:cf:35:37:76: 9e:a2:a9:6e:32:dd:b3:b1:d9:36:6a:68:ae:2d:fb: 00:cb:5d:1b:e5:5d:60:c3:fb:5c:cd:e1:fc:4f:a2: 59:76:fc:73:9f:a4:aa:f8:13:8c:c0:98:01:e7:67: 3e:bb:25:ff:92:4f:73:a8:ea:21:49:44:96:ad:60: 86:72:8c:6c:c0:e4:a5:6b:6f:a8:74:86:29:20:b1: 88:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7F:47:AF:62:2B:8D:6B:55:0D:A7:A8:ED:3C:B2:59:7C:45:FC:43 X509v3 Authority Key Identifier: keyid:22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:49:a5:b2:e9:29:a1:d6:2b:40:fa:f8:41:89:75:35:33:b7: 0f:68:6c:dd:61:55:90:33:ed:dd:a7:b4:59:fe:81:c9:57:6a: ec:97:b2:77:22:5b:63:7e:06:5f:52:97:06:dc:4a:99:94:07: 21:f3:35:61:32:62:1b:d1:6b:02:0b:41:5a:c2:01:af:9b:44: 44:02:45:30:f7:b2:d5:16:e0:33:aa:35:4b:d4:94:e1:15:41: dd:b8:e6:c6:83:54:d4:f7:93:04:a0:be:b7:11:a7:bf:22:71: 89:d8:fd:20:07:a5:1d:47:76:22:ab:65:b2:6e:33:76:67:96: 1d:37:f8:f3:17:6a:f2:0b:f3:8c:07:4e:23:f3:04:ca:52:ff: 53:e6:2f:ee:a3:10:8f:b2:7a:fd:f2:57:22:ec:d6:0d:f8:9e: ae:6c:fc:3e:d3:72:2c:5d:2e:01:99:b2:b1:d5:3c:df:1f:b2: dc:d9:ad:46:f1:42:96:73:10:6c:1b:58:5c:70:37:e5:b0:f0: 62:03:72:7b:e4:44:71:52:4a:c9:df:70:ee:eb:c1:5a:72:da: cf:41:6a:8e:e4:3d:5a:be:52:75:b4:38:2f:99:c8:29:3e:99: e3:86:f1:23:ff:3b:e3:2f:17:ab:5e:52:77:3f:43:38:70:dd: 11:d1:df:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc24ZxIIYUrFjR5ZsymmMOlecsYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMy NUFCRUYxMjAeFw0yNTA5MDcwMTQ2MjNaFw0yNTA5MTAwNTM4MjNaMDMxMTAvBgNV BAMTKEE2N0Y0N0FGNjIyQjhENkI1NTBEQTdBOEVEM0NCMjU5N0M0NUZDNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy7REu6V973cZ2DoEp8ElnQ0hI FjOF5XLyeIaAr+oquTKXZWwPpxm7RuyFvP3DalWYko+9oTWJbhyX7Gpnt4GAgfTq egaUZ1FJbGnXGEyTKoArJRGxGrqguxlPGOebK5+uTYBfO5CbjIsd1JXY0VvDmth/ wKeA3eVsA1KjNTX2lu/tF+Rc1DfbkbpYQ3QXl/gWEn5SGh7wsux/hj/QU8U7RoDN vkrEu9dGiWkUjJztzzU3dp6iqW4y3bOx2TZqaK4t+wDLXRvlXWDD+1zN4fxPoll2 /HOfpKr4E4zAmAHnZz67Jf+ST3Oo6iFJRJatYIZyjGzA5KVrb6h0hikgsYj7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpn9Hr2IrjWtVDaeo7TyyWXxF/EMwHwYDVR0j BBgwFoAUIkdvkMewgTGXT1sZg0kGwyWr7xIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmZiYWFmYy00ZGIyLTRmYzQtYTFhOC0yZDhlNGM4YjJjZTAvMC8yMjQ3NkY5MEM3 QjA4MTMxOTc0RjVCMTk4MzQ5MDZDMzI1QUJFRjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMyNUFC RUYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2 QzMyNUFCRUYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1JpbLpKaHWK0D6+EGJdTUztw9obN1hVZAz 7d2ntFn+gclXauyXsnciW2N+Bl9SlwbcSpmUByHzNWEyYhvRawILQVrCAa+bREQC RTD3stUW4DOqNUvUlOEVQd245saDVNT3kwSgvrcRp78icYnY/SAHpR1HdiKrZbJu M3Znlh03+PMXavIL84wHTiPzBMpS/1PmL+6jEI+yev3yVyLs1g34nq5s/D7Tcixd LgGZsrHVPN8fstzZrUbxQpZzEGwbWFxwN+Ww8GIDcnvkRHFSSsnfcO7rwVpy2s9B ao7kPVq+UnW0OC+ZyCk+meOG8SP/O+MvF6teUnc/Qzhw3RHR3/s= -----END CERTIFICATE-----Generated at Mon Sep 8 08:42:47 2025 by rpki-client