$ rpki-client -vvf repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft File: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft (raw, json) Hash identifier: 1SoXZOkmssUWeoSKlf+cmzjx7eZ55tic3Su0g4oc6DA= Subject key identifier: 02:DC:74:FC:E6:51:1D:1B:3C:A8:B1:6D:AF:3A:19:CA:17:38:DC:49 Authority key identifier: C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF Certificate issuer: /CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Certificate serial: 3FD6D6EF5DFF4E0BB3F235AF5C67709CF25C8073 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft Manifest number: AC Signing time: Thu 21 Aug 2025 19:51:18 +0000 Manifest this update: Thu 21 Aug 2025 19:46:18 +0000 Manifest next update: Mon 25 Aug 2025 04:25:18 +0000 Files and hashes: 1: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl (hash: zwQ963t3mxgGOTzDu9u+clNhIeKnPyiAtUQIWqZy7Ac=) 2: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: hxLgZVEmgK6Q9Qorix7qtcxFffjQzl54opLxUmCvE+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 04:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d6:d6:ef:5d:ff:4e:0b:b3:f2:35:af:5c:67:70:9c:f2:5c:80:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Validity Not Before: Aug 21 19:46:18 2025 GMT Not After : Aug 25 04:25:18 2025 GMT Subject: CN=02DC74FCE6511D1B3CA8B16DAF3A19CA1738DC49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:02:85:2c:c8:38:84:f8:7b:e2:5f:13:3c:56: 27:80:c5:c6:1c:c2:a1:2a:b7:b4:52:72:38:8f:71: e2:38:51:b8:fc:03:11:bc:48:67:2a:a7:1e:5c:49: c1:81:d1:73:f1:a1:f5:85:65:9b:3a:9e:b3:a5:6c: 3e:70:48:96:ed:50:5a:3c:59:18:38:01:8c:a1:a7: ad:12:82:a9:22:1b:6a:df:ab:f4:0d:7c:39:a1:ce: 2e:4d:45:ad:13:fd:b1:89:42:65:6a:b4:de:92:4d: 41:b8:55:f4:9b:ce:9f:24:e3:02:a6:d4:53:e1:7f: 03:cf:ec:17:a7:bd:5a:cc:ad:58:1c:ce:b5:08:4f: 88:a0:f6:78:3f:06:b7:c8:7d:f6:be:56:c6:a4:5c: f8:bb:ad:88:23:2a:e5:d3:76:dc:df:da:54:7a:78: 92:88:5b:72:7b:4e:91:b9:ef:d1:79:80:e1:11:82: e0:88:09:35:60:b9:ac:bb:b7:e3:64:79:f6:00:fa: 7b:94:d4:13:2e:b9:52:ca:bb:9e:07:79:4a:af:17: 72:48:21:5c:c7:7e:ee:81:d7:da:71:a9:c7:ab:56: 55:a8:b6:7a:ae:89:8a:0f:41:5b:d7:73:2c:c6:f1: 60:d5:10:6d:b6:8b:8d:57:76:52:4f:c1:16:54:82: 40:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DC:74:FC:E6:51:1D:1B:3C:A8:B1:6D:AF:3A:19:CA:17:38:DC:49 X509v3 Authority Key Identifier: keyid:C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:7e:71:ba:d5:bb:13:e8:7b:4c:81:49:0b:19:6a:8e:11:0a: bf:15:57:01:fb:af:37:58:b4:f7:33:3e:37:5a:54:d2:8c:23: 4c:a3:1d:6a:69:bb:df:a5:b1:bb:55:38:9f:c5:12:f5:48:5d: 35:53:95:f3:d2:28:86:2e:7c:71:08:2d:67:98:0a:5e:1c:9c: 43:14:db:58:73:e4:94:9e:66:9a:29:aa:f7:73:46:85:1c:ff: 52:67:a8:6b:69:c5:ce:f6:e4:f4:1d:aa:d9:03:c2:cf:55:66: 43:e9:e4:9d:92:b4:71:37:cb:f0:11:e9:cb:02:05:1b:2e:b3: 26:b0:9e:3d:2b:2d:0f:5e:31:b6:30:b5:c3:9b:c3:f6:fd:7a: 33:d4:2c:9e:04:f6:38:9b:11:61:f1:dd:6b:7d:6c:b3:9f:55: c5:7e:85:09:f2:ac:41:92:09:e1:20:d9:f3:4a:21:8a:6e:6c: a3:da:66:a0:00:1a:64:b3:e6:02:0e:75:2a:10:78:de:e2:37: a7:92:1d:da:43:c4:3e:86:6c:4e:f6:45:c8:59:72:51:e2:82: 4b:eb:a1:b8:ac:01:93:1c:38:98:b6:43:ec:37:ae:8d:cb:20: 1a:94:2b:df:7b:b5:25:1f:2a:42:4f:27:46:2f:ad:e7:c7:b1: 6c:b3:6a:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP9bW713/Tguz8jWvXGdwnPJcgHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIz RTNBNENCRjAeFw0yNTA4MjExOTQ2MThaFw0yNTA4MjUwNDI1MThaMDMxMTAvBgNV BAMTKDAyREM3NEZDRTY1MTFEMUIzQ0E4QjE2REFGM0ExOUNBMTczOERDNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIAoUsyDiE+HviXxM8VieAxcYc wqEqt7RScjiPceI4Ubj8AxG8SGcqpx5cScGB0XPxofWFZZs6nrOlbD5wSJbtUFo8 WRg4AYyhp60SgqkiG2rfq/QNfDmhzi5NRa0T/bGJQmVqtN6STUG4VfSbzp8k4wKm 1FPhfwPP7BenvVrMrVgczrUIT4ig9ng/BrfIffa+VsakXPi7rYgjKuXTdtzf2lR6 eJKIW3J7TpG579F5gOERguCICTVguay7t+NkefYA+nuU1BMuuVLKu54HeUqvF3JI IVzHfu6B19pxqcerVlWotnquiYoPQVvXcyzG8WDVEG22i41XdlJPwRZUgkBXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAtx0/OZRHRs8qLFtrzoZyhc43EkwHwYDVR0j BBgwFoAUwj+DLyfbiLi8WHZpMv2hmz46TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjc5ZWU5Yy1hZDJiLTRiZWQtODY0MS0yM2JmMmQzYjE2ZGIvMC9DMjNGODMyRjI3 REI4OEI4QkM1ODc2NjkzMkZEQTE5QjNFM0E0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIzRTNB NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI3OWVlOWMtYWQyYi00YmVkLTg2 NDEtMjNiZjJkM2IxNmRiLzAvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREEx OUIzRTNBNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJ+cbrVuxPoe0yBSQsZao4RCr8VVwH7rzdY tPczPjdaVNKMI0yjHWppu9+lsbtVOJ/FEvVIXTVTlfPSKIYufHEILWeYCl4cnEMU 21hz5JSeZpopqvdzRoUc/1JnqGtpxc725PQdqtkDws9VZkPp5J2StHE3y/AR6csC BRsusyawnj0rLQ9eMbYwtcObw/b9ejPULJ4E9jibEWHx3Wt9bLOfVcV+hQnyrEGS CeEg2fNKIYpubKPaZqAAGmSz5gIOdSoQeN7iN6eSHdpDxD6GbE72RchZclHigkvr obisAZMcOJi2Q+w3ro3LIBqUK997tSUfKkJPJ0YvrefHsWyzajk= -----END CERTIFICATE-----Generated at Sat Aug 23 21:53:50 2025 by rpki-client