$ rpki-client -vvf repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft File: 23F26F571E3865A06A13936555D8DAA27B433933.mft (raw, json) Hash identifier: q4pADF9iwkQFJQvfrRAwdkQ83YY5A08xb18SplgrTRE= Subject key identifier: 58:7E:42:D7:4D:34:9E:00:D4:F6:7C:13:70:FB:C0:75:35:9F:3C:F6 Authority key identifier: 23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 Certificate issuer: /CN=23F26F571E3865A06A13936555D8DAA27B433933 Certificate serial: 350CAA2E0DFDA7B725868E0F83A2EA7EB3BC66CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft Manifest number: 01FC Signing time: Sat 18 Oct 2025 15:41:50 +0000 Manifest this update: Sat 18 Oct 2025 15:36:50 +0000 Manifest next update: Tue 21 Oct 2025 16:56:50 +0000 Files and hashes: 1: 3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa (hash: SP7Vczz+6iJdkBg+Pm02fK5fUh9ipxxjJbwoliQlUe0=) 2: 3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa (hash: lkFPSA/0P6F0cE2k+qs5Hdu6hwn+gvFK2pZuPkqHwpw=) 3: 23F26F571E3865A06A13936555D8DAA27B433933.crl (hash: 2OJbqarXA15eEdgCYQW3UwqatfCld5DPSqYadOnVkFE=) 4: 3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa (hash: 1TF1q7w4Zi+aLzgAuBXcx7Cio1arNovo47+qmMckVGw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 16:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:0c:aa:2e:0d:fd:a7:b7:25:86:8e:0f:83:a2:ea:7e:b3:bc:66:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23F26F571E3865A06A13936555D8DAA27B433933 Validity Not Before: Oct 18 15:36:50 2025 GMT Not After : Oct 21 16:56:50 2025 GMT Subject: CN=587E42D74D349E00D4F67C1370FBC075359F3CF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0a:33:9f:69:a1:28:10:2c:4a:09:81:65:b0: 3c:ae:26:b7:ca:97:65:b8:26:5f:61:53:e1:63:8f: 75:26:cf:26:f2:38:02:cf:57:77:74:c5:d7:08:00: e0:bb:b1:a0:e3:c9:f9:3f:34:84:51:23:03:59:ce: 09:00:0d:af:d3:78:f6:53:c7:e4:0d:b5:da:4d:25: a9:a4:c3:05:29:7c:12:4f:1b:36:df:cb:f8:20:ca: 40:6f:9e:ec:45:1c:b3:6b:53:53:fd:c9:c7:5c:41: 87:b7:6f:0a:cb:19:3a:fd:6c:ac:36:6f:10:c3:1d: 22:09:cb:a6:13:04:2a:da:14:d8:94:8c:a4:e2:70: 35:31:c8:22:a2:22:47:a7:01:8d:60:64:db:c7:71: d2:3b:ad:c4:5f:f8:10:1b:dc:1e:92:e0:f1:e0:3d: ce:05:7b:a1:7d:33:40:51:16:22:f0:b8:f1:d0:87: 55:6a:98:2a:6d:ee:38:57:9c:7b:d6:ec:4e:db:db: d3:4c:39:31:98:30:64:4a:ed:63:bb:56:32:81:2a: 01:bf:b5:44:18:7a:54:70:30:04:b9:87:69:68:ed: b3:ce:79:96:2f:09:a6:62:f2:af:51:9c:4d:26:61: 8f:f8:91:70:46:3a:c7:08:a8:d8:2a:e2:81:49:d4: c4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7E:42:D7:4D:34:9E:00:D4:F6:7C:13:70:FB:C0:75:35:9F:3C:F6 X509v3 Authority Key Identifier: keyid:23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:4f:2e:6f:03:72:5c:e0:a2:84:d8:11:58:54:48:5c:37:54: 82:54:10:c9:2d:b4:43:e0:88:6c:d2:68:02:19:a4:69:b9:18: 5d:5d:8c:b0:81:c2:2e:a0:5a:14:54:b9:53:83:64:b4:bd:16: b9:0b:91:4a:f3:93:42:3e:45:ac:b8:2d:33:b0:1d:b4:a9:f0: 49:0a:22:36:12:db:5b:11:8c:77:bd:23:2b:35:84:a5:60:f7: 8e:0f:30:9e:05:8f:bf:a0:88:07:d5:0c:84:dc:00:b4:87:33: 33:49:10:3f:82:05:6e:7c:63:13:38:bf:50:7d:53:95:98:79: 8d:da:3f:58:31:7e:e1:62:13:72:4f:a4:cf:92:44:62:23:84: 9b:04:94:42:6a:af:dd:e0:6f:a3:1b:76:6f:ad:c3:2c:a9:96: 6b:8b:68:c6:a6:00:92:4b:99:c9:67:af:46:74:74:2d:7d:a5: a9:e7:47:dd:d8:55:01:80:fc:95:ec:c5:e8:4d:c1:b5:31:57: 42:38:8d:3c:52:de:6c:99:ce:db:02:f8:82:b1:a2:e9:45:4f: 6a:85:14:ca:06:fd:81:34:16:7e:c9:52:e5:d6:6e:0b:d6:a9: 18:92:15:0a:f2:38:c5:97:30:65:c2:4e:32:90:4d:02:de:4b: 6f:b0:b9:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNQyqLg39p7clho4Pg6LqfrO8ZsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3 QjQzMzkzMzAeFw0yNTEwMTgxNTM2NTBaFw0yNTEwMjExNjU2NTBaMDMxMTAvBgNV BAMTKDU4N0U0MkQ3NEQzNDlFMDBENEY2N0MxMzcwRkJDMDc1MzU5RjNDRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrCjOfaaEoECxKCYFlsDyuJrfK l2W4Jl9hU+Fjj3UmzybyOALPV3d0xdcIAOC7saDjyfk/NIRRIwNZzgkADa/TePZT x+QNtdpNJamkwwUpfBJPGzbfy/ggykBvnuxFHLNrU1P9ycdcQYe3bwrLGTr9bKw2 bxDDHSIJy6YTBCraFNiUjKTicDUxyCKiIkenAY1gZNvHcdI7rcRf+BAb3B6S4PHg Pc4Fe6F9M0BRFiLwuPHQh1VqmCpt7jhXnHvW7E7b29NMOTGYMGRK7WO7VjKBKgG/ tUQYelRwMAS5h2lo7bPOeZYvCaZi8q9RnE0mYY/4kXBGOscIqNgq4oFJ1MTjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWH5C1000ngDU9nwTcPvAdTWfPPYwHwYDVR0j BBgwFoAUI/JvVx44ZaBqE5NlVdjaontDOTMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVmY2JmMC02NmVjLTQ4ZDMtYjIyMS0wZjA5Njg2ZDU4MTgvMC8yM0YyNkY1NzFF Mzg2NUEwNkExMzkzNjU1NUQ4REFBMjdCNDMzOTMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3QjQz MzkzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlZmNiZjAtNjZlYy00OGQzLWIy MjEtMGYwOTY4NmQ1ODE4LzAvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERB QTI3QjQzMzkzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1PLm8DclzgooTYEVhUSFw3VIJUEMkttEPg iGzSaAIZpGm5GF1djLCBwi6gWhRUuVODZLS9FrkLkUrzk0I+Ray4LTOwHbSp8EkK IjYS21sRjHe9Iys1hKVg944PMJ4Fj7+giAfVDITcALSHMzNJED+CBW58YxM4v1B9 U5WYeY3aP1gxfuFiE3JPpM+SRGIjhJsElEJqr93gb6Mbdm+twyyplmuLaMamAJJL mclnr0Z0dC19pannR93YVQGA/JXsxehNwbUxV0I4jTxS3myZztsC+IKxoulFT2qF FMoG/YE0Fn7JUuXWbgvWqRiSFQryOMWXMGXCTjKQTQLeS2+wuYY= -----END CERTIFICATE-----Generated at Mon Oct 20 15:41:03 2025 by rpki-client