$ rpki-client -vvf repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft File: 22476F90C7B08131974F5B19834906C325ABEF12.mft (raw, json) Hash identifier: uykyaxP3cHHBU9YnCbR/olum9QqgH7aZvUkclOMAnuE= Subject key identifier: DB:6B:36:72:63:4D:1C:9E:20:DD:CC:04:75:BF:8A:71:48:05:3E:F2 Authority key identifier: 22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 Certificate issuer: /CN=22476F90C7B08131974F5B19834906C325ABEF12 Certificate serial: 050A6F3EF562CBB2D6EF786D6387889AAF9DB69D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft Manifest number: 68 Signing time: Tue 08 Apr 2025 04:41:20 +0000 Manifest this update: Tue 08 Apr 2025 04:36:20 +0000 Manifest next update: Fri 11 Apr 2025 09:28:20 +0000 Files and hashes: 1: 22476F90C7B08131974F5B19834906C325ABEF12.crl (hash: yakFx9ZrSYqhWXPQyiFKgeNYONbOPOncuEnYm8O9xfs=) 2: 3136302e32352e36382e302f32332d3234203d3e20313532383430.roa (hash: 4i8FjKHuMJZs9ehASRTTzzbmgJaF3lnGvx5voJ5RPxk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 09:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:0a:6f:3e:f5:62:cb:b2:d6:ef:78:6d:63:87:88:9a:af:9d:b6:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22476F90C7B08131974F5B19834906C325ABEF12 Validity Not Before: Apr 8 04:36:20 2025 GMT Not After : Apr 11 09:28:20 2025 GMT Subject: CN=DB6B3672634D1C9E20DDCC0475BF8A7148053EF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:21:78:17:c6:12:74:4e:0d:85:fe:d1:46:d6: df:ba:1a:8a:9d:f2:ad:79:a4:35:a7:e8:28:35:f7: be:3f:2a:09:0f:0a:57:1d:43:e4:70:b9:3b:5d:6e: 48:32:a7:b4:60:c9:33:87:62:f8:18:c3:bd:cb:28: f5:80:59:d1:ad:6d:57:df:d5:ec:29:7d:60:94:4c: 9b:f3:37:ef:c7:cb:cd:ea:61:93:24:41:76:60:20: 14:7b:9f:d8:db:a8:9c:a3:6e:8d:7f:3a:72:49:aa: 5d:94:67:25:ce:77:1a:85:46:ae:d9:45:a0:3b:f9: 79:6e:b3:5b:d4:56:8c:54:22:7c:02:1d:8b:ee:e4: e5:86:04:f2:48:ca:0f:b9:7d:15:49:fe:16:05:4c: 61:4b:fe:ca:67:a8:a0:a9:d7:cc:73:7a:5e:17:2b: 67:4a:05:94:99:45:57:c3:89:f4:77:55:89:1c:08: 2b:ff:80:a3:d0:49:ca:79:c8:2f:f7:82:72:4e:12: ef:f5:60:84:09:12:38:a9:4b:c1:64:d7:ce:f0:3f: 7f:9a:44:e2:98:20:f7:72:29:0f:6a:e3:fb:3f:d0: 6f:b8:1c:01:6d:ef:4b:47:0c:59:f4:06:81:aa:dc: db:5e:3c:3c:b9:0e:2a:01:c2:fc:fc:44:21:37:0a: e7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:6B:36:72:63:4D:1C:9E:20:DD:CC:04:75:BF:8A:71:48:05:3E:F2 X509v3 Authority Key Identifier: keyid:22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:4a:ac:60:e1:18:da:33:5b:bd:7a:37:46:74:73:f2:d6:5a: e2:8f:e5:e5:f6:29:f1:38:70:e0:c6:56:7a:a5:06:89:a9:ff: 8c:c2:e2:2b:95:b3:a2:2e:96:18:d5:09:d2:c5:49:1d:58:56: 55:b7:47:8f:db:48:35:cd:d0:31:a2:6a:5d:fd:b4:5a:d7:5b: 78:9e:97:b8:62:ae:b8:a3:69:4a:b5:d6:de:6d:49:ec:d8:7a: ad:50:91:9f:42:d9:c6:1c:fc:2b:11:54:79:a2:aa:e0:cd:6f: 06:0e:fe:ef:74:a2:68:50:3d:02:19:76:61:92:b9:26:63:e9: 9c:61:d5:69:33:69:ad:cb:d6:5e:2b:bf:c9:e5:ee:f6:07:ef: 54:d2:d4:a6:4b:2a:e3:09:01:92:f6:1f:24:df:91:7e:6c:70: 09:2e:81:cb:2f:5f:15:c8:b1:12:f2:a2:7b:12:ea:f8:5f:37: 1d:39:73:ae:f9:1e:ae:a4:a2:03:84:6c:93:ee:68:65:f5:f4: 7d:ba:4f:98:50:72:5e:23:a4:b7:e9:16:f7:df:92:bd:c4:e3: e8:21:5d:5b:6c:f3:bd:b8:b0:36:3a:f9:2a:95:d0:d1:a4:99: 1a:a1:ad:e0:75:7a:e4:8c:b6:62:84:7e:c3:de:82:77:9f:36: 5a:e1:ef:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBQpvPvViy7LW73htY4eImq+dtp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMy NUFCRUYxMjAeFw0yNTA0MDgwNDM2MjBaFw0yNTA0MTEwOTI4MjBaMDMxMTAvBgNV BAMTKERCNkIzNjcyNjM0RDFDOUUyMEREQ0MwNDc1QkY4QTcxNDgwNTNFRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4IXgXxhJ0Tg2F/tFG1t+6Goqd 8q15pDWn6Cg1974/KgkPClcdQ+RwuTtdbkgyp7RgyTOHYvgYw73LKPWAWdGtbVff 1ewpfWCUTJvzN+/Hy83qYZMkQXZgIBR7n9jbqJyjbo1/OnJJql2UZyXOdxqFRq7Z RaA7+Xlus1vUVoxUInwCHYvu5OWGBPJIyg+5fRVJ/hYFTGFL/spnqKCp18xzel4X K2dKBZSZRVfDifR3VYkcCCv/gKPQScp5yC/3gnJOEu/1YIQJEjipS8Fk187wP3+a ROKYIPdyKQ9q4/s/0G+4HAFt70tHDFn0BoGq3NtePDy5DioBwvz8RCE3CufVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU22s2cmNNHJ4g3cwEdb+KcUgFPvIwHwYDVR0j BBgwFoAUIkdvkMewgTGXT1sZg0kGwyWr7xIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmZiYWFmYy00ZGIyLTRmYzQtYTFhOC0yZDhlNGM4YjJjZTAvMC8yMjQ3NkY5MEM3 QjA4MTMxOTc0RjVCMTk4MzQ5MDZDMzI1QUJFRjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMyNUFC RUYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2 QzMyNUFCRUYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJKrGDhGNozW716N0Z0c/LWWuKP5eX2KfE4 cODGVnqlBomp/4zC4iuVs6IulhjVCdLFSR1YVlW3R4/bSDXN0DGial39tFrXW3ie l7hirrijaUq11t5tSezYeq1QkZ9C2cYc/CsRVHmiquDNbwYO/u90omhQPQIZdmGS uSZj6Zxh1Wkzaa3L1l4rv8nl7vYH71TS1KZLKuMJAZL2HyTfkX5scAkugcsvXxXI sRLyonsS6vhfNx05c675Hq6kogOEbJPuaGX19H26T5hQcl4jpLfpFvffkr3E4+gh XVts8724sDY6+SqV0NGkmRqhreB1euSMtmKEfsPegnefNlrh73A= -----END CERTIFICATE-----Generated at Wed Apr 9 16:41:09 2025 by rpki-client