$ rpki-client -vvf repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft File: 23F26F571E3865A06A13936555D8DAA27B433933.mft (raw, json) Hash identifier: K4nAU9+BMxEVoigUvTdf6SgUL+nALH5OqJEohjV7JCg= Subject key identifier: C1:F9:9D:90:B6:CB:FA:64:07:72:89:56:DD:2C:1C:9A:E0:A0:D8:59 Authority key identifier: 23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 Certificate issuer: /CN=23F26F571E3865A06A13936555D8DAA27B433933 Certificate serial: 0CB4911D2E1472309E63122901EE6B43048CED07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft Manifest number: 01E3 Signing time: Sat 23 Aug 2025 14:11:50 +0000 Manifest this update: Sat 23 Aug 2025 14:06:50 +0000 Manifest next update: Tue 26 Aug 2025 23:25:50 +0000 Files and hashes: 1: 3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa (hash: SP7Vczz+6iJdkBg+Pm02fK5fUh9ipxxjJbwoliQlUe0=) 2: 3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa (hash: lkFPSA/0P6F0cE2k+qs5Hdu6hwn+gvFK2pZuPkqHwpw=) 3: 3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa (hash: 1TF1q7w4Zi+aLzgAuBXcx7Cio1arNovo47+qmMckVGw=) 4: 23F26F571E3865A06A13936555D8DAA27B433933.crl (hash: eX99CRJaW/OmQ70fCbFs/XEHk2TpQcbUEn5rawTWY20=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 23:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b4:91:1d:2e:14:72:30:9e:63:12:29:01:ee:6b:43:04:8c:ed:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23F26F571E3865A06A13936555D8DAA27B433933 Validity Not Before: Aug 23 14:06:50 2025 GMT Not After : Aug 26 23:25:50 2025 GMT Subject: CN=C1F99D90B6CBFA6407728956DD2C1C9AE0A0D859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0a:1b:ac:3c:67:2e:e3:bb:19:4e:42:16:05: 45:69:e6:1d:89:9e:96:65:79:08:19:03:ce:31:ff: 20:29:4c:df:af:81:d2:9c:f2:e3:cc:55:28:46:30: 79:63:2f:99:0d:e1:c4:ec:6f:2e:05:75:db:70:bb: 25:41:eb:f8:b3:29:bd:c7:5e:2c:04:4a:f4:2b:b8: 1e:7a:25:aa:ec:fe:a0:22:79:08:34:73:74:fc:17: 07:59:5c:7a:a6:1f:0f:a4:dc:df:52:ea:f7:33:c5: 28:0f:2f:7e:74:37:e9:79:02:9b:95:e7:51:1a:c5: 9d:fb:19:00:1f:11:25:0f:5f:94:f1:f6:c1:c3:f9: c6:45:8f:20:3a:1b:b2:29:33:ff:10:cb:35:f7:ce: 2f:b0:a0:76:e6:ce:1a:02:c0:b8:09:15:8d:f7:ab: dc:8b:ca:ad:e9:ff:3e:eb:e8:76:83:52:0b:c0:67: 49:64:2e:32:b0:f2:fd:f1:29:80:4b:b5:76:3e:b2: fb:13:69:32:7f:34:08:8e:b4:f8:55:a8:8a:3f:6b: 50:36:90:b6:b4:95:27:5b:ce:13:71:37:be:8e:f8: 5a:08:c3:74:b9:fc:8d:27:c5:15:da:23:71:bc:84: c9:e5:0b:2b:7f:fb:41:9c:73:ad:34:40:67:9f:ce: c2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F9:9D:90:B6:CB:FA:64:07:72:89:56:DD:2C:1C:9A:E0:A0:D8:59 X509v3 Authority Key Identifier: keyid:23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:a8:85:e2:eb:ca:07:10:26:12:85:75:68:9f:82:0b:49:95: b0:8e:53:38:40:87:3f:77:95:0f:b3:32:ea:65:e1:fb:c3:a5: 93:f7:00:c9:ee:94:67:db:a9:05:97:e3:9f:79:88:94:5c:31: cf:52:5a:6f:16:3e:a7:53:dd:09:95:6d:7a:e6:44:34:8d:2c: 52:62:6e:4c:88:5b:4f:0b:76:bc:81:bf:c9:70:75:85:c2:ce: fb:59:cf:0e:0e:64:a2:67:0f:0b:cd:82:dc:88:b8:b3:42:c8: a1:0c:87:19:f1:9e:9e:b4:6c:5e:b0:c8:0a:71:cc:e6:3e:fd: 12:9a:12:62:86:46:8b:6c:13:34:ea:b2:7d:43:3b:a3:1b:9d: ba:8c:20:1d:8b:0f:c2:dc:82:cd:5f:25:43:c8:48:e1:8a:a0: 45:96:71:97:b2:4b:ee:be:f3:ee:81:17:2d:84:2d:30:1a:b5: 04:f7:0a:f0:ae:ed:20:23:b0:ad:c0:a0:d7:3e:5f:75:01:b9: a7:56:72:6f:a0:78:4a:a1:83:11:3a:93:0d:38:75:e9:2a:a0: ac:3c:fc:43:bc:92:e1:2e:72:1b:17:2c:3b:7c:24:5b:05:80: 1b:36:7c:13:da:a5:41:b9:2e:10:ae:cb:b2:92:dd:b6:a1:86: 24:20:bd:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDLSRHS4UcjCeYxIpAe5rQwSM7QcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3 QjQzMzkzMzAeFw0yNTA4MjMxNDA2NTBaFw0yNTA4MjYyMzI1NTBaMDMxMTAvBgNV BAMTKEMxRjk5RDkwQjZDQkZBNjQwNzcyODk1NkREMkMxQzlBRTBBMEQ4NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzChusPGcu47sZTkIWBUVp5h2J npZleQgZA84x/yApTN+vgdKc8uPMVShGMHljL5kN4cTsby4FddtwuyVB6/izKb3H XiwESvQruB56Jars/qAieQg0c3T8FwdZXHqmHw+k3N9S6vczxSgPL350N+l5ApuV 51EaxZ37GQAfESUPX5Tx9sHD+cZFjyA6G7IpM/8QyzX3zi+woHbmzhoCwLgJFY33 q9yLyq3p/z7r6HaDUgvAZ0lkLjKw8v3xKYBLtXY+svsTaTJ/NAiOtPhVqIo/a1A2 kLa0lSdbzhNxN76O+FoIw3S5/I0nxRXaI3G8hMnlCyt/+0Gcc600QGefzsIHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwfmdkLbL+mQHcolW3SwcmuCg2FkwHwYDVR0j BBgwFoAUI/JvVx44ZaBqE5NlVdjaontDOTMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVmY2JmMC02NmVjLTQ4ZDMtYjIyMS0wZjA5Njg2ZDU4MTgvMC8yM0YyNkY1NzFF Mzg2NUEwNkExMzkzNjU1NUQ4REFBMjdCNDMzOTMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3QjQz MzkzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlZmNiZjAtNjZlYy00OGQzLWIy MjEtMGYwOTY4NmQ1ODE4LzAvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERB QTI3QjQzMzkzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKoheLrygcQJhKFdWifggtJlbCOUzhAhz93 lQ+zMupl4fvDpZP3AMnulGfbqQWX4595iJRcMc9SWm8WPqdT3QmVbXrmRDSNLFJi bkyIW08LdryBv8lwdYXCzvtZzw4OZKJnDwvNgtyIuLNCyKEMhxnxnp60bF6wyApx zOY+/RKaEmKGRotsEzTqsn1DO6MbnbqMIB2LD8Lcgs1fJUPISOGKoEWWcZeyS+6+ 8+6BFy2ELTAatQT3CvCu7SAjsK3AoNc+X3UBuadWcm+geEqhgxE6kw04dekqoKw8 /EO8kuEuchsXLDt8JFsFgBs2fBPapUG5LhCuy7KS3bahhiQgvVg= -----END CERTIFICATE-----Generated at Sat Aug 23 17:24:06 2025 by rpki-client