$ rpki-client -vvf repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft File: 23F26F571E3865A06A13936555D8DAA27B433933.mft (raw, json) Hash identifier: 70L8bG0N8dJFvEQELk/VKfDE9DbHbjbK+Cn02myDo1w= Subject key identifier: 85:3E:C6:35:92:B6:DA:D3:38:7D:76:E5:9A:32:37:E0:3B:A7:3C:6D Authority key identifier: 23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 Certificate issuer: /CN=23F26F571E3865A06A13936555D8DAA27B433933 Certificate serial: 3A6D4F1C2158D8AEAD157AB7A73C57059E5D0D06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft Manifest number: 01CC Signing time: Wed 02 Jul 2025 02:31:44 +0000 Manifest this update: Wed 02 Jul 2025 02:26:44 +0000 Manifest next update: Sat 05 Jul 2025 13:36:44 +0000 Files and hashes: 1: 3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa (hash: SP7Vczz+6iJdkBg+Pm02fK5fUh9ipxxjJbwoliQlUe0=) 2: 23F26F571E3865A06A13936555D8DAA27B433933.crl (hash: LvUyFfIRW5MdjezxFd+y67upZpFcUxo+LUvnakH7BZk=) 3: 3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa (hash: lkFPSA/0P6F0cE2k+qs5Hdu6hwn+gvFK2pZuPkqHwpw=) 4: 3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa (hash: 1TF1q7w4Zi+aLzgAuBXcx7Cio1arNovo47+qmMckVGw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 13:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6d:4f:1c:21:58:d8:ae:ad:15:7a:b7:a7:3c:57:05:9e:5d:0d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23F26F571E3865A06A13936555D8DAA27B433933 Validity Not Before: Jul 2 02:26:44 2025 GMT Not After : Jul 5 13:36:44 2025 GMT Subject: CN=853EC63592B6DAD3387D76E59A3237E03BA73C6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5e:f4:e8:64:47:49:94:04:27:1c:15:4d:91: 57:08:6a:37:ab:59:5e:77:27:c4:99:1f:4b:2b:cf: f4:21:2d:45:16:3c:c8:36:b7:86:90:dc:52:33:d2: 3d:14:22:f1:be:11:67:90:0b:62:f9:b4:61:a0:d1: c9:83:a8:9b:34:3f:9d:06:a6:2d:9a:73:68:d2:52: 12:8b:8f:b5:84:57:d2:89:74:57:fe:12:83:2e:ac: 41:ce:23:bd:ee:b8:7f:b9:13:98:b6:48:02:bd:2c: dc:d6:58:94:e1:08:77:d1:9f:17:d9:23:ce:e2:bb: 9d:ce:f4:66:9d:85:78:7c:a7:3a:65:f1:a9:e2:4b: b3:73:de:58:fc:a4:39:ea:d2:81:42:1a:01:29:f3: 55:b6:9f:7d:9f:ca:e9:f0:80:e3:69:c1:7c:4d:a6: a2:a5:d7:c9:e6:59:e1:e1:94:38:d1:47:07:8c:ff: 5c:52:9e:06:ac:05:e2:0e:02:0d:8e:3f:e8:32:e7: 30:ee:43:2c:b8:50:05:fd:7b:34:a8:8e:86:66:6b: 54:75:11:6d:a8:95:58:99:48:a7:ce:20:c1:f2:24: 9c:05:c3:34:41:af:a2:cc:a9:1c:2d:74:d1:3e:6b: 0d:66:4e:82:d1:a6:20:ac:f4:69:7c:87:9c:63:07: a4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3E:C6:35:92:B6:DA:D3:38:7D:76:E5:9A:32:37:E0:3B:A7:3C:6D X509v3 Authority Key Identifier: keyid:23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:e5:1e:ad:81:60:11:f3:ce:06:dc:f6:75:69:49:2f:aa:10: 3a:12:32:13:95:87:1f:6d:96:fb:a7:5a:ee:cd:3b:13:32:41: ff:48:f2:c8:3c:37:b9:0a:94:ba:68:07:2a:11:dd:2c:7c:c2: ef:38:ee:68:75:b8:bc:e3:14:6f:b4:25:cc:76:c8:5d:2a:85: e6:94:96:30:70:10:13:12:a1:db:1f:8a:70:f7:e1:d3:17:fd: 4c:0f:d1:bc:4c:6a:2f:1d:60:b7:cc:3d:a8:65:f4:14:5c:9b: 66:1c:19:91:39:33:d8:a2:02:59:fb:12:c6:b9:50:79:fd:d6: 08:ba:55:dd:4c:ff:01:76:0d:d3:11:71:73:df:1b:ab:73:aa: fb:a4:7c:e1:ed:9e:e5:bb:d4:7c:58:90:45:85:b4:94:d5:29: 35:41:a0:66:e3:8a:b4:99:c3:4d:69:b8:16:9e:67:8b:b8:26: 25:7a:dc:03:b7:43:62:e9:84:db:5a:83:41:30:58:21:58:69: a6:ba:71:95:55:b1:bf:e5:e0:58:32:67:26:24:8b:2e:58:40: e9:7c:89:ec:fa:0c:6b:88:65:e8:06:3b:50:bb:80:d6:60:7e: aa:96:3b:df:71:58:2d:65:47:22:3f:ce:3e:18:14:02:af:43: 8d:bf:6c:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOm1PHCFY2K6tFXq3pzxXBZ5dDQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3 QjQzMzkzMzAeFw0yNTA3MDIwMjI2NDRaFw0yNTA3MDUxMzM2NDRaMDMxMTAvBgNV BAMTKDg1M0VDNjM1OTJCNkRBRDMzODdENzZFNTlBMzIzN0UwM0JBNzNDNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRXvToZEdJlAQnHBVNkVcIajer WV53J8SZH0srz/QhLUUWPMg2t4aQ3FIz0j0UIvG+EWeQC2L5tGGg0cmDqJs0P50G pi2ac2jSUhKLj7WEV9KJdFf+EoMurEHOI73uuH+5E5i2SAK9LNzWWJThCHfRnxfZ I87iu53O9GadhXh8pzpl8aniS7Nz3lj8pDnq0oFCGgEp81W2n32fyunwgONpwXxN pqKl18nmWeHhlDjRRweM/1xSngasBeIOAg2OP+gy5zDuQyy4UAX9ezSojoZma1R1 EW2olViZSKfOIMHyJJwFwzRBr6LMqRwtdNE+aw1mToLRpiCs9Gl8h5xjB6RHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhT7GNZK22tM4fXblmjI34DunPG0wHwYDVR0j BBgwFoAUI/JvVx44ZaBqE5NlVdjaontDOTMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVmY2JmMC02NmVjLTQ4ZDMtYjIyMS0wZjA5Njg2ZDU4MTgvMC8yM0YyNkY1NzFF Mzg2NUEwNkExMzkzNjU1NUQ4REFBMjdCNDMzOTMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3QjQz MzkzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlZmNiZjAtNjZlYy00OGQzLWIy MjEtMGYwOTY4NmQ1ODE4LzAvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERB QTI3QjQzMzkzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPlHq2BYBHzzgbc9nVpSS+qEDoSMhOVhx9t lvunWu7NOxMyQf9I8sg8N7kKlLpoByoR3Sx8wu847mh1uLzjFG+0Jcx2yF0qheaU ljBwEBMSodsfinD34dMX/UwP0bxMai8dYLfMPahl9BRcm2YcGZE5M9iiAln7Esa5 UHn91gi6Vd1M/wF2DdMRcXPfG6tzqvukfOHtnuW71HxYkEWFtJTVKTVBoGbjirSZ w01puBaeZ4u4JiV63AO3Q2LphNtag0EwWCFYaaa6cZVVsb/l4FgyZyYkiy5YQOl8 iez6DGuIZegGO1C7gNZgfqqWO99xWC1lRyI/zj4YFAKvQ42/bD8= -----END CERTIFICATE-----Generated at Thu Jul 3 01:03:52 2025 by rpki-client