$ rpki-client -vvf repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft File: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft (raw, json) Hash identifier: DuzjjVpCQsHxVKctBoa2nbgAGCiFh/sq/bxzgdEEjOY= Subject key identifier: 0D:DF:52:63:E5:06:95:2B:BE:95:C5:62:3B:1B:69:B4:B7:A1:32:36 Authority key identifier: 22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C Certificate issuer: /CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Certificate serial: 48E4E10FB4C6C8E661284F834D7BC5D7FE22B711 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft Manifest number: B7 Signing time: Wed 09 Apr 2025 18:31:01 +0000 Manifest this update: Wed 09 Apr 2025 18:26:01 +0000 Manifest next update: Sun 13 Apr 2025 01:25:01 +0000 Files and hashes: 1: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl (hash: nthDkgpQzTCDNHQAtMG9H885OKaNqdhwObrDmym8xXU=) 2: 3130332e32332e3130302e302f32322d3234203d3e203538343030.roa (hash: X1zuW7ewqOs7galNtjkQMnHEEBdiMyZOmIpDqdwYj+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 01:25:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e4:e1:0f:b4:c6:c8:e6:61:28:4f:83:4d:7b:c5:d7:fe:22:b7:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Validity Not Before: Apr 9 18:26:01 2025 GMT Not After : Apr 13 01:25:01 2025 GMT Subject: CN=0DDF5263E506952BBE95C5623B1B69B4B7A13236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2d:54:37:a8:0b:02:39:a1:9e:79:bf:73:80: f3:fc:ab:35:2f:7e:84:b8:1f:f1:52:29:36:eb:2b: 95:ac:d2:04:7f:bd:29:21:ad:ac:c7:22:34:20:10: b9:76:74:d4:f7:91:8f:c7:02:7f:d6:e7:f6:f1:f8: f7:ec:a5:83:37:9c:a1:d8:18:65:8c:1a:98:00:d2: 70:2d:bf:e6:57:b7:ac:e0:92:fc:6f:a8:9c:2c:ce: 40:18:7a:58:a7:06:50:5d:dd:5d:4d:5a:ca:7e:ae: 87:c5:bd:e1:68:99:c8:2b:48:aa:ee:a1:d6:ec:03: d9:63:6b:61:2b:15:47:c4:5f:53:b3:32:4d:31:8a: 6e:8a:91:b9:59:79:4c:d4:9f:35:4e:c1:a0:28:ab: 6c:cd:50:1c:aa:01:dc:a6:19:a9:1f:b4:8e:95:51: 85:05:d3:46:9a:1a:dc:5f:91:d1:c3:12:4b:0e:a8: 69:6f:94:6b:51:2f:99:06:0c:e4:93:67:33:fe:9f: 1f:5a:95:e0:2b:77:a5:20:cd:1e:b7:2b:9e:bf:e8: ac:cb:c0:e2:0f:c8:06:62:97:32:83:69:c2:ec:b4: db:bd:cd:fb:c0:00:b7:ad:da:d9:b2:ed:cd:c5:34: bc:3a:c0:2a:26:02:98:32:a3:d2:28:15:09:96:df: 35:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DF:52:63:E5:06:95:2B:BE:95:C5:62:3B:1B:69:B4:B7:A1:32:36 X509v3 Authority Key Identifier: keyid:22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d9:7b:25:cb:3e:92:a5:4a:a2:7b:92:03:82:9d:50:66:7f: 5a:1f:a6:7a:31:2b:23:19:41:cf:03:53:15:65:d7:75:fc:63: 8c:77:6d:0b:a7:09:06:22:00:83:60:46:a5:cb:ef:95:26:e6: e5:48:ca:42:97:ad:7f:11:ba:98:2d:f0:f6:1b:7c:26:17:fa: b4:de:63:c2:74:e3:b5:89:02:6a:8e:7b:84:e4:ea:1d:04:04: 10:ed:75:d8:a1:d0:22:59:6a:97:5b:96:b4:25:77:91:ba:b0: 1d:d1:1f:ae:06:73:1d:d4:1c:bc:2d:e4:0c:63:40:13:76:43: ca:bc:c3:1a:dc:ea:14:f6:bb:8b:c8:1d:a0:a5:bc:32:5e:1d: e3:37:8e:6d:96:91:ef:5f:3b:92:56:3f:c5:47:47:f0:06:57: ce:2a:66:db:02:3b:a8:c7:cb:23:bd:35:3a:83:19:fc:c8:14: 26:21:05:21:f0:6c:f6:0f:75:93:12:43:cc:4d:d8:82:55:c8: c0:67:00:cb:bd:c4:c2:a4:da:18:30:cd:23:12:59:36:cc:55: 94:c4:41:c1:6e:aa:3c:9e:c0:94:73:fd:4d:a4:45:3c:27:c6: 37:79:e1:2c:aa:15:c2:71:53:0e:ab:1d:46:3e:6f:f7:0d:da: 27:15:73:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSOThD7TGyOZhKE+DTXvF1/4itxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlD MEE5Q0UyQzAeFw0yNTA0MDkxODI2MDFaFw0yNTA0MTMwMTI1MDFaMDMxMTAvBgNV BAMTKDBEREY1MjYzRTUwNjk1MkJCRTk1QzU2MjNCMUI2OUI0QjdBMTMyMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7LVQ3qAsCOaGeeb9zgPP8qzUv foS4H/FSKTbrK5Ws0gR/vSkhrazHIjQgELl2dNT3kY/HAn/W5/bx+PfspYM3nKHY GGWMGpgA0nAtv+ZXt6zgkvxvqJwszkAYelinBlBd3V1NWsp+rofFveFomcgrSKru odbsA9lja2ErFUfEX1OzMk0xim6KkblZeUzUnzVOwaAoq2zNUByqAdymGakftI6V UYUF00aaGtxfkdHDEksOqGlvlGtRL5kGDOSTZzP+nx9aleArd6UgzR63K56/6KzL wOIPyAZilzKDacLstNu9zfvAALet2tmy7c3FNLw6wComApgyo9IoFQmW3zWRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDd9SY+UGlSu+lcViOxtptLehMjYwHwYDVR0j BBgwFoAUIs06IM9iGlsLmeQoyOVzGcCpziwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzE4MDcwNC02YjY0LTRhNDAtOGYzZC1mZmRmZDVlMzdkZWYvMC8yMkNEM0EyMENG NjIxQTVCMEI5OUU0MjhDOEU1NzMxOUMwQTlDRTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlDMEE5 Q0UyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjcxODA3MDQtNmI2NC00YTQwLThm M2QtZmZkZmQ1ZTM3ZGVmLzAvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTcz MTlDMEE5Q0UyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/ZeyXLPpKlSqJ7kgOCnVBmf1ofpnoxKyMZ Qc8DUxVl13X8Y4x3bQunCQYiAINgRqXL75Um5uVIykKXrX8Rupgt8PYbfCYX+rTe Y8J047WJAmqOe4Tk6h0EBBDtddih0CJZapdblrQld5G6sB3RH64Gcx3UHLwt5Axj QBN2Q8q8wxrc6hT2u4vIHaClvDJeHeM3jm2Wke9fO5JWP8VHR/AGV84qZtsCO6jH yyO9NTqDGfzIFCYhBSHwbPYPdZMSQ8xN2IJVyMBnAMu9xMKk2hgwzSMSWTbMVZTE QcFuqjyewJRz/U2kRTwnxjd54SyqFcJxUw6rHUY+b/cN2icVc80= -----END CERTIFICATE-----Generated at Thu Apr 10 11:15:25 2025 by rpki-client