$ rpki-client -vvf repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft File: 22476F90C7B08131974F5B19834906C325ABEF12.mft (raw, json) Hash identifier: Fbb8UkYzGJWN7SyKjb42f6/EAcRluY5zp/fDKi+bJzE= Subject key identifier: 51:B2:37:75:3F:49:A1:D5:31:8B:AF:50:AF:37:5D:D2:37:E5:EC:D9 Authority key identifier: 22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 Certificate issuer: /CN=22476F90C7B08131974F5B19834906C325ABEF12 Certificate serial: 7577A5228BBDDFF2CF4256048D79533402939E7E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft Manifest number: 96 Signing time: Sun 20 Jul 2025 01:51:23 +0000 Manifest this update: Sun 20 Jul 2025 01:46:23 +0000 Manifest next update: Wed 23 Jul 2025 08:43:23 +0000 Files and hashes: 1: 22476F90C7B08131974F5B19834906C325ABEF12.crl (hash: lqF1aBYtMkwcS7TAwiNGC3WTK3eSv+9cIIEcrnI0Gt0=) 2: 3136302e32352e36382e302f32332d3234203d3e20313532383430.roa (hash: 4i8FjKHuMJZs9ehASRTTzzbmgJaF3lnGvx5voJ5RPxk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 08:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:77:a5:22:8b:bd:df:f2:cf:42:56:04:8d:79:53:34:02:93:9e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22476F90C7B08131974F5B19834906C325ABEF12 Validity Not Before: Jul 20 01:46:23 2025 GMT Not After : Jul 23 08:43:23 2025 GMT Subject: CN=51B237753F49A1D5318BAF50AF375DD237E5ECD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e9:ca:15:9e:85:00:f6:cc:81:08:15:ed:10: 2a:28:18:c4:0c:7f:e9:1a:02:73:74:f9:f8:04:36: 17:6a:b0:4f:e4:c6:65:74:88:4a:e8:3d:e8:a2:9b: 13:a7:5f:94:ea:96:6c:46:a1:ad:ec:ed:ca:26:51: f5:e6:ce:b7:24:9f:52:21:45:41:5d:52:b1:4e:66: e7:96:33:47:e0:46:b0:25:52:56:d0:47:d2:d6:70: 56:32:c1:26:96:fd:bc:1f:f4:cd:a6:2d:25:08:62: 46:03:c4:fc:1a:f6:c0:06:92:bc:4e:f6:1e:4d:58: 2a:28:6b:af:d8:23:f2:61:e1:d7:85:c8:5b:6c:8e: db:f5:b5:46:74:f0:f9:1d:b4:a1:e1:35:55:3d:08: 95:9e:01:a3:5b:d5:b3:ac:f1:e2:a4:de:76:60:1d: b3:76:bf:6e:12:b7:55:74:59:3a:d3:3d:55:8e:90: 8c:d7:d5:91:47:63:96:d5:33:f5:37:6c:74:0a:ca: 46:1d:b8:e0:09:e9:68:b6:2d:c5:ea:3e:aa:1d:51: bb:1f:be:30:52:cb:8d:ad:09:f8:3c:6b:98:1c:79: 71:c1:f5:1b:bc:1b:30:12:08:02:82:a2:27:d9:cf: 12:11:d9:d1:56:5b:2e:41:fe:3e:a7:5c:63:0e:f6: 95:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B2:37:75:3F:49:A1:D5:31:8B:AF:50:AF:37:5D:D2:37:E5:EC:D9 X509v3 Authority Key Identifier: keyid:22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:eb:ee:fb:8b:af:72:f5:60:b0:20:5c:4f:90:72:f9:01:f8: c8:3c:8a:31:05:df:01:51:6d:44:8a:73:3e:7d:36:03:e2:ee: 04:9b:50:2a:2e:b9:bb:c3:42:b0:8a:2f:64:5a:9c:6d:3a:15: cc:1a:6f:92:d4:77:36:c9:76:5b:cd:dd:1b:01:7b:66:e5:6e: ad:d8:23:73:4d:df:73:8a:69:e7:0e:5c:09:33:f4:f1:7e:ef: 58:d1:c6:d5:98:6b:12:af:b6:dc:d6:b1:55:0f:3b:a5:c7:fd: dd:b9:ae:07:be:75:0a:ce:ed:18:86:6f:8d:a6:1f:49:30:13: 30:44:60:f6:ab:7b:db:57:f7:d6:4a:f8:7f:b0:ba:1c:48:5e: 62:5f:e4:a7:4f:c7:36:99:30:70:a8:20:99:f8:02:0b:37:4c: 04:8e:42:ad:ed:82:97:5d:77:29:aa:dd:a3:d5:86:e0:cd:6a: ab:18:cf:16:b2:6d:cb:4d:22:0b:d5:0f:ba:b8:65:d8:a8:47: 01:1a:14:3c:d7:1e:e0:db:65:d7:8a:80:8c:5d:43:1e:6c:e7: 30:8a:9f:be:0d:99:85:64:c8:81:73:00:cd:bc:ef:5c:e5:2f: 9f:38:81:d1:16:e5:09:6f:b0:d8:2d:da:d8:6a:7e:fe:8c:e2: cf:41:5d:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdXelIou93/LPQlYEjXlTNAKTnn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMy NUFCRUYxMjAeFw0yNTA3MjAwMTQ2MjNaFw0yNTA3MjMwODQzMjNaMDMxMTAvBgNV BAMTKDUxQjIzNzc1M0Y0OUExRDUzMThCQUY1MEFGMzc1REQyMzdFNUVDRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw6coVnoUA9syBCBXtECooGMQM f+kaAnN0+fgENhdqsE/kxmV0iEroPeiimxOnX5TqlmxGoa3s7comUfXmzrckn1Ih RUFdUrFOZueWM0fgRrAlUlbQR9LWcFYywSaW/bwf9M2mLSUIYkYDxPwa9sAGkrxO 9h5NWCooa6/YI/Jh4deFyFtsjtv1tUZ08PkdtKHhNVU9CJWeAaNb1bOs8eKk3nZg HbN2v24St1V0WTrTPVWOkIzX1ZFHY5bVM/U3bHQKykYduOAJ6Wi2LcXqPqodUbsf vjBSy42tCfg8a5gceXHB9Ru8GzASCAKCoifZzxIR2dFWWy5B/j6nXGMO9pXbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUbI3dT9JodUxi69Qrzdd0jfl7NkwHwYDVR0j BBgwFoAUIkdvkMewgTGXT1sZg0kGwyWr7xIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmZiYWFmYy00ZGIyLTRmYzQtYTFhOC0yZDhlNGM4YjJjZTAvMC8yMjQ3NkY5MEM3 QjA4MTMxOTc0RjVCMTk4MzQ5MDZDMzI1QUJFRjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMyNUFC RUYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2 QzMyNUFCRUYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTr7vuLr3L1YLAgXE+QcvkB+Mg8ijEF3wFR bUSKcz59NgPi7gSbUCouubvDQrCKL2RanG06Fcwab5LUdzbJdlvN3RsBe2blbq3Y I3NN33OKaecOXAkz9PF+71jRxtWYaxKvttzWsVUPO6XH/d25rge+dQrO7RiGb42m H0kwEzBEYPare9tX99ZK+H+wuhxIXmJf5KdPxzaZMHCoIJn4Ags3TASOQq3tgpdd dymq3aPVhuDNaqsYzxaybctNIgvVD7q4ZdioRwEaFDzXHuDbZdeKgIxdQx5s5zCK n74NmYVkyIFzAM2871zlL584gdEW5QlvsNgt2thqfv6M4s9BXZs= -----END CERTIFICATE-----Generated at Mon Jul 21 10:31:59 2025 by rpki-client