$ rpki-client -vvf repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft File: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft (raw, json) Hash identifier: 9HJBO6yR3oVhf30BfEb+up/Scm5A3qf3zoYrlwEO7jw= Subject key identifier: 63:46:88:CC:48:34:11:DA:78:FF:B2:CC:A5:69:1B:22:2E:FF:37:A5 Authority key identifier: C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF Certificate issuer: /CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Certificate serial: 33A3626EE84F5696179FB61554251CC6983156AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft Manifest number: C6 Signing time: Sun 19 Oct 2025 13:41:10 +0000 Manifest this update: Sun 19 Oct 2025 13:36:10 +0000 Manifest next update: Wed 22 Oct 2025 17:46:10 +0000 Files and hashes: 1: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl (hash: 0eGz0YRsL+78biRENhNGKxJoWD/OsMwklSL7Q/wHPRY=) 2: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: hxLgZVEmgK6Q9Qorix7qtcxFffjQzl54opLxUmCvE+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a3:62:6e:e8:4f:56:96:17:9f:b6:15:54:25:1c:c6:98:31:56:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Validity Not Before: Oct 19 13:36:10 2025 GMT Not After : Oct 22 17:46:10 2025 GMT Subject: CN=634688CC483411DA78FFB2CCA5691B222EFF37A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:be:1c:26:7b:18:93:46:9f:da:65:b8:a2:2e: 04:b8:d8:95:be:bd:0a:f9:da:cd:43:3b:0f:f4:8f: bd:5f:af:2b:10:b1:d1:39:11:0e:66:7f:34:7f:c9: 92:0e:3a:dd:73:68:f3:0d:e7:83:20:8b:2d:3d:00: dd:8b:68:1f:ee:56:7e:6d:9d:d2:7b:8d:70:d8:10: 4e:1f:81:ff:f5:73:14:bb:95:77:0c:20:e0:87:fd: a9:45:9c:71:23:0d:59:a2:f1:8d:74:5c:d8:57:20: 58:85:95:0c:7d:dc:53:6d:2b:ec:e5:45:01:8c:26: 86:71:95:ec:19:c9:c4:fd:46:08:57:8b:58:20:f3: 76:4c:f8:92:02:ee:5e:a8:5e:96:e2:ad:84:9b:c3: 19:d1:5b:0c:dd:cf:0d:e6:dc:92:ed:1b:d0:20:7e: 7a:49:0c:48:5e:44:75:48:1e:af:05:40:bf:2f:a9: dd:07:56:88:ed:48:8e:1c:d3:d7:dd:b9:63:1c:f9: 1d:b5:0a:33:3e:ef:e7:7b:d9:31:83:9c:26:43:cd: 29:10:5a:b7:46:2d:35:8d:fe:9b:48:ed:af:aa:6e: bc:6f:af:b8:ec:1e:b5:cd:37:b7:66:e5:09:6e:44: 26:96:1f:9e:34:a1:85:58:e5:01:28:96:a5:a9:ba: c7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:46:88:CC:48:34:11:DA:78:FF:B2:CC:A5:69:1B:22:2E:FF:37:A5 X509v3 Authority Key Identifier: keyid:C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:7f:8a:c7:77:c1:f3:c5:d5:13:24:f8:90:ce:39:54:c9:47: 09:e9:98:b6:a2:fd:b1:2e:b7:92:64:4a:41:fb:b0:b5:3e:f0: 0a:d3:66:bb:a7:35:95:22:4a:a0:d7:88:68:b3:8a:a9:a3:b1: d4:9b:c1:1d:94:79:49:34:08:f3:77:12:b8:2b:66:df:bf:f1: 90:27:ac:57:35:2b:8a:59:93:06:00:2b:66:f2:b6:f1:af:8f: 3f:5a:61:7a:b6:5a:19:c8:90:bb:a8:1a:5b:8c:7e:53:d5:76: fc:09:f1:a7:42:a1:14:4b:4d:c5:15:2b:4e:1e:f0:eb:55:77: 4e:26:67:d6:28:35:ab:5a:b7:b0:f6:1d:27:32:38:1b:94:40: 29:3c:02:ba:59:60:89:28:94:05:5b:46:bc:1b:d9:5b:af:86: 5c:b3:66:ce:b9:87:fd:61:58:8f:31:0c:9a:a1:10:c2:6d:df: ab:39:73:ab:cf:56:08:b3:7f:3c:e3:e5:98:4e:d0:c1:5e:57: 91:9b:0b:d6:8b:af:58:43:64:52:cc:e5:c4:3f:8b:99:72:00: 57:ae:34:32:1f:b1:40:e3:5c:02:cb:b1:86:01:93:60:e8:2f: 8d:c0:de:53:90:9d:36:85:c9:54:12:fc:38:ec:48:d8:2a:05: d4:c8:62:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM6NibuhPVpYXn7YVVCUcxpgxVq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIz RTNBNENCRjAeFw0yNTEwMTkxMzM2MTBaFw0yNTEwMjIxNzQ2MTBaMDMxMTAvBgNV BAMTKDYzNDY4OENDNDgzNDExREE3OEZGQjJDQ0E1NjkxQjIyMkVGRjM3QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+vhwmexiTRp/aZbiiLgS42JW+ vQr52s1DOw/0j71frysQsdE5EQ5mfzR/yZIOOt1zaPMN54Mgiy09AN2LaB/uVn5t ndJ7jXDYEE4fgf/1cxS7lXcMIOCH/alFnHEjDVmi8Y10XNhXIFiFlQx93FNtK+zl RQGMJoZxlewZycT9RghXi1gg83ZM+JIC7l6oXpbirYSbwxnRWwzdzw3m3JLtG9Ag fnpJDEheRHVIHq8FQL8vqd0HVojtSI4c09fduWMc+R21CjM+7+d72TGDnCZDzSkQ WrdGLTWN/ptI7a+qbrxvr7jsHrXNN7dm5QluRCaWH540oYVY5QEolqWpuscfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY0aIzEg0Edp4/7LMpWkbIi7/N6UwHwYDVR0j BBgwFoAUwj+DLyfbiLi8WHZpMv2hmz46TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjc5ZWU5Yy1hZDJiLTRiZWQtODY0MS0yM2JmMmQzYjE2ZGIvMC9DMjNGODMyRjI3 REI4OEI4QkM1ODc2NjkzMkZEQTE5QjNFM0E0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIzRTNB NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI3OWVlOWMtYWQyYi00YmVkLTg2 NDEtMjNiZjJkM2IxNmRiLzAvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREEx OUIzRTNBNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABd/isd3wfPF1RMk+JDOOVTJRwnpmLai/bEu t5JkSkH7sLU+8ArTZrunNZUiSqDXiGiziqmjsdSbwR2UeUk0CPN3ErgrZt+/8ZAn rFc1K4pZkwYAK2bytvGvjz9aYXq2WhnIkLuoGluMflPVdvwJ8adCoRRLTcUVK04e 8OtVd04mZ9YoNatat7D2HScyOBuUQCk8ArpZYIkolAVbRrwb2VuvhlyzZs65h/1h WI8xDJqhEMJt36s5c6vPVgizfzzj5ZhO0MFeV5GbC9aLr1hDZFLM5cQ/i5lyAFeu NDIfsUDjXALLsYYBk2DoL43A3lOQnTaFyVQS/DjsSNgqBdTIYqc= -----END CERTIFICATE-----Generated at Tue Oct 21 09:36:32 2025 by rpki-client