$ rpki-client -vvf repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft File: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft (raw, json) Hash identifier: CfN0U+F/EQw4uhe3yqAF/Tkic+ArusqQjM808Oje7QI= Subject key identifier: 85:6B:EC:A3:5B:93:FA:E9:18:62:03:3B:F0:A0:C7:03:DA:AB:40:E7 Authority key identifier: 22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C Certificate issuer: /CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Certificate serial: 4759B66752789C152EA8E4B9BBBE0E89AB087161 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft Manifest number: F9 Signing time: Fri 05 Sep 2025 05:11:03 +0000 Manifest this update: Fri 05 Sep 2025 05:06:03 +0000 Manifest next update: Mon 08 Sep 2025 15:30:03 +0000 Files and hashes: 1: 3130332e32332e3130302e302f32322d3234203d3e203538343030.roa (hash: X1zuW7ewqOs7galNtjkQMnHEEBdiMyZOmIpDqdwYj+Q=) 2: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl (hash: 9rM1yQXS07oiYoDQzJ069XTy1mMC327bRH+lCE52xJw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:59:b6:67:52:78:9c:15:2e:a8:e4:b9:bb:be:0e:89:ab:08:71:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Validity Not Before: Sep 5 05:06:03 2025 GMT Not After : Sep 8 15:30:03 2025 GMT Subject: CN=856BECA35B93FAE91862033BF0A0C703DAAB40E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:da:7f:6e:7c:e1:1d:42:58:f7:bb:c0:08:dc: 28:47:fc:9f:51:e8:31:0b:94:02:91:6c:14:34:a2: 12:6b:9e:50:f8:e8:67:19:78:63:a0:3f:d2:3b:eb: 21:27:59:ba:6e:cf:3e:9c:50:76:cf:e4:95:59:24: 4d:0f:54:f3:e7:d9:c1:5e:1f:6a:d6:d4:05:97:4a: 89:ab:91:6c:01:71:c2:ba:aa:05:ec:fa:5d:17:af: 66:52:fa:3b:e7:b5:68:27:f9:df:06:d3:48:d9:2b: a3:4e:92:7e:7c:93:b9:79:39:11:88:55:4a:64:97: 0a:4e:92:11:19:4e:db:64:c8:dc:6d:c8:75:92:a3: 89:48:b5:c3:ee:63:1d:df:cc:09:6f:df:63:91:8a: dc:1e:9c:1c:93:64:a8:b4:d5:63:2b:bd:fa:a8:0d: 71:d2:6c:bb:7f:d2:4e:59:b6:e4:5a:5c:38:81:bd: a1:0e:6a:25:2c:93:e2:57:e3:29:93:de:96:d0:44: 70:1f:bc:72:c9:2e:43:c7:36:7d:2f:f8:cd:da:9b: a1:bc:c3:ad:64:bb:c7:4a:f6:1c:b9:27:3f:b3:d0: af:33:81:d3:e8:1b:53:20:16:5e:a9:a3:a8:66:f5: 86:48:91:87:61:43:3f:6c:fc:a9:1f:a4:6e:fc:99: db:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6B:EC:A3:5B:93:FA:E9:18:62:03:3B:F0:A0:C7:03:DA:AB:40:E7 X509v3 Authority Key Identifier: keyid:22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:7c:47:ef:fd:1a:2a:f9:8e:4b:c8:65:a4:0c:da:5b:c9:db: fe:67:c5:16:d2:c9:ab:d7:6b:5d:01:22:fb:22:7c:5a:8e:00: eb:27:16:65:ff:80:c6:c7:84:a0:2a:6e:bc:dd:b3:c8:c6:c7: b0:bf:7d:48:97:8d:c2:4e:81:8b:8d:f3:e5:60:41:06:66:0f: e4:9b:87:67:93:9b:ba:7c:34:e0:04:be:f9:9f:06:45:ec:b6: 5f:20:ee:4b:e9:f9:b0:91:d6:f2:9d:8c:16:2c:d8:f3:67:9b: e2:7c:5d:7f:24:2a:df:41:36:09:c4:81:65:1c:f0:86:bf:b8: d2:7b:f7:bc:dd:bc:21:d4:99:ab:75:cd:5b:d4:02:a8:5c:aa: 46:e9:3f:1e:db:33:63:51:3b:a1:72:d3:79:20:2f:43:5b:f8: b4:a2:07:7d:45:f9:a9:29:18:2c:04:bc:5a:9e:63:cc:96:0d: b3:a5:f1:61:e0:82:29:e4:f7:9b:0c:be:64:1b:f1:54:77:c0: 19:73:63:fe:73:fd:e2:5c:56:a8:69:05:bd:b1:1f:6e:d5:41: d8:bf:81:54:b0:2b:c3:74:0c:6c:12:c8:17:a7:f7:a9:97:93: 16:80:f1:c7:99:20:09:8a:60:74:3d:3c:63:0b:f2:5d:b9:c7: d6:47:e6:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR1m2Z1J4nBUuqOS5u74OiasIcWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlD MEE5Q0UyQzAeFw0yNTA5MDUwNTA2MDNaFw0yNTA5MDgxNTMwMDNaMDMxMTAvBgNV BAMTKDg1NkJFQ0EzNUI5M0ZBRTkxODYyMDMzQkYwQTBDNzAzREFBQjQwRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv2n9ufOEdQlj3u8AI3ChH/J9R 6DELlAKRbBQ0ohJrnlD46GcZeGOgP9I76yEnWbpuzz6cUHbP5JVZJE0PVPPn2cFe H2rW1AWXSomrkWwBccK6qgXs+l0Xr2ZS+jvntWgn+d8G00jZK6NOkn58k7l5ORGI VUpklwpOkhEZTttkyNxtyHWSo4lItcPuYx3fzAlv32ORitwenByTZKi01WMrvfqo DXHSbLt/0k5ZtuRaXDiBvaEOaiUsk+JX4ymT3pbQRHAfvHLJLkPHNn0v+M3am6G8 w61ku8dK9hy5Jz+z0K8zgdPoG1MgFl6po6hm9YZIkYdhQz9s/KkfpG78mdv3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhWvso1uT+ukYYgM78KDHA9qrQOcwHwYDVR0j BBgwFoAUIs06IM9iGlsLmeQoyOVzGcCpziwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzE4MDcwNC02YjY0LTRhNDAtOGYzZC1mZmRmZDVlMzdkZWYvMC8yMkNEM0EyMENG NjIxQTVCMEI5OUU0MjhDOEU1NzMxOUMwQTlDRTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlDMEE5 Q0UyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjcxODA3MDQtNmI2NC00YTQwLThm M2QtZmZkZmQ1ZTM3ZGVmLzAvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTcz MTlDMEE5Q0UyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHx8R+/9Gir5jkvIZaQM2lvJ2/5nxRbSyavX a10BIvsifFqOAOsnFmX/gMbHhKAqbrzds8jGx7C/fUiXjcJOgYuN8+VgQQZmD+Sb h2eTm7p8NOAEvvmfBkXstl8g7kvp+bCR1vKdjBYs2PNnm+J8XX8kKt9BNgnEgWUc 8Ia/uNJ797zdvCHUmat1zVvUAqhcqkbpPx7bM2NRO6Fy03kgL0Nb+LSiB31F+akp GCwEvFqeY8yWDbOl8WHggink95sMvmQb8VR3wBlzY/5z/eJcVqhpBb2xH27VQdi/ gVSwK8N0DGwSyBen96mXkxaA8ceZIAmKYHQ9PGML8l25x9ZH5g4= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:22 2025 by rpki-client