$ rpki-client -vvf repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft File: 230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft (raw, json) Hash identifier: 9oql+somAUmXUUSndyagwAtMSTCZwvfnJKMcUzvzVww= Subject key identifier: 1C:B6:A2:4C:B0:73:0E:3E:9C:A5:84:4A:22:83:B7:6C:02:C8:0A:77 Authority key identifier: 23:0A:81:B2:83:31:4B:A7:9B:FA:02:4F:DF:9F:F4:DA:66:B4:24:BE Certificate issuer: /CN=230A81B283314BA79BFA024FDF9FF4DA66B424BE Certificate serial: 693456AC86D47DA8B6B9D92F030BA5EAB7471BCE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft Manifest number: 01FB Signing time: Fri 22 Aug 2025 15:12:10 +0000 Manifest this update: Fri 22 Aug 2025 15:07:10 +0000 Manifest next update: Mon 25 Aug 2025 18:32:10 +0000 Files and hashes: 1: 3130332e3135322e3233382e302f32332d3234203d3e20313430343438.roa (hash: rBpy14k8W3mbLlNgX4J0/2ZVTjIArp0RYRGvkTqIoQQ=) 2: 323430363a333834303a3a2f33322d3438203d3e20313430343438.roa (hash: Ra1E9cOQanH1SiHnfJl04HYirMLU+Yh3tE7np1INosY=) 3: 230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl (hash: T5hAJy3xTt5GobJRLIwPnzXIHbWuUk3PE1yVA2F2/IU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:34:56:ac:86:d4:7d:a8:b6:b9:d9:2f:03:0b:a5:ea:b7:47:1b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230A81B283314BA79BFA024FDF9FF4DA66B424BE Validity Not Before: Aug 22 15:07:10 2025 GMT Not After : Aug 25 18:32:10 2025 GMT Subject: CN=1CB6A24CB0730E3E9CA5844A2283B76C02C80A77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b1:f3:51:3d:4d:55:8d:4f:aa:13:60:90:cb: b0:ae:8c:05:3c:ce:4b:be:15:a7:5d:31:77:2f:7b: e3:37:70:b4:2e:3c:ee:3e:dc:7e:80:2c:b5:4d:b8: 3c:84:84:d7:5a:fd:ae:1f:17:9d:da:c4:a9:b7:25: 2b:21:f3:73:14:82:87:f3:d5:e7:26:3e:60:5f:c7: 7a:27:e2:55:1e:d8:20:9a:d7:a0:39:73:52:d1:12: aa:cf:e6:62:cc:41:e5:bc:ae:4c:ee:f5:e2:b6:e0: 0d:ed:e1:c6:9c:73:c9:87:86:af:e4:e6:a6:07:cc: b1:19:64:ed:a1:bf:5c:b0:45:28:64:ea:c0:6c:a7: fe:d5:79:16:8b:a9:75:07:6f:0b:0b:45:80:cc:a2: cb:21:6a:f9:19:85:42:e7:34:9a:16:fe:f7:c4:09: 79:3e:42:4c:87:91:e9:5b:6b:1d:99:69:35:51:e2: 5c:a6:71:2b:54:10:02:fc:5e:8a:dc:60:1a:36:92: 68:3b:7a:95:22:a2:45:4f:93:57:1c:2b:4c:c7:0d: cb:85:11:3e:aa:1b:0c:bb:d5:65:02:a0:53:81:8b: d6:cc:ad:d5:ec:70:2f:65:39:fd:e2:44:44:76:4e: d4:46:e8:64:9e:c3:85:36:c1:77:b4:ca:e3:eb:ea: ed:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B6:A2:4C:B0:73:0E:3E:9C:A5:84:4A:22:83:B7:6C:02:C8:0A:77 X509v3 Authority Key Identifier: keyid:23:0A:81:B2:83:31:4B:A7:9B:FA:02:4F:DF:9F:F4:DA:66:B4:24:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:85:94:d6:2a:2a:fb:45:55:1a:aa:72:ff:74:48:67:33:cc: 41:b3:0f:0d:2b:9c:2b:bf:b7:04:8f:6f:02:f0:12:db:4c:77: 26:a8:a8:23:c9:cd:ee:b8:cd:ea:fc:ba:54:f1:22:da:40:c2: eb:63:5a:49:28:e6:d2:af:8f:d9:b7:53:3d:08:59:49:71:e6: 7f:b1:2b:f2:e8:2c:26:69:2f:9a:f2:ed:b8:b6:e1:34:df:dd: 25:fc:ee:22:74:37:2e:c6:74:98:cf:a9:b2:ef:8f:24:15:bc: 8a:59:27:df:b2:2e:cd:0f:e7:c3:07:a6:ba:74:2e:21:49:e9: bb:4c:2a:a3:37:ab:fd:9a:7b:93:6a:39:72:d0:f8:2c:27:bc: ee:29:7d:41:d2:5e:bb:24:10:e1:4b:ac:3c:a8:94:ba:d5:ee: 93:26:9c:32:6a:c5:09:80:20:08:29:d6:0f:92:d5:2b:a2:42: 48:28:5e:1f:0e:4c:98:59:55:a2:ed:f7:f8:cd:66:69:6d:47: 3f:ed:f6:1f:c7:df:31:15:76:36:27:83:d4:5a:10:e8:9d:b2: c4:e0:ff:1f:5a:d7:03:3b:77:e7:21:6f:5f:bd:da:9a:95:de: 50:45:9c:a6:10:98:80:87:ea:f2:59:a1:d0:2b:2b:b4:53:14: 18:30:dd:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaTRWrIbUfai2udkvAwul6rdHG84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0REE2 NkI0MjRCRTAeFw0yNTA4MjIxNTA3MTBaFw0yNTA4MjUxODMyMTBaMDMxMTAvBgNV BAMTKDFDQjZBMjRDQjA3MzBFM0U5Q0E1ODQ0QTIyODNCNzZDMDJDODBBNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEsfNRPU1VjU+qE2CQy7CujAU8 zku+FaddMXcve+M3cLQuPO4+3H6ALLVNuDyEhNda/a4fF53axKm3JSsh83MUgofz 1ecmPmBfx3on4lUe2CCa16A5c1LREqrP5mLMQeW8rkzu9eK24A3t4cacc8mHhq/k 5qYHzLEZZO2hv1ywRShk6sBsp/7VeRaLqXUHbwsLRYDMosshavkZhULnNJoW/vfE CXk+QkyHkelbax2ZaTVR4lymcStUEAL8XorcYBo2kmg7epUiokVPk1ccK0zHDcuF ET6qGwy71WUCoFOBi9bMrdXscC9lOf3iRER2TtRG6GSew4U2wXe0yuPr6u1lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHLaiTLBzDj6cpYRKIoO3bALICncwHwYDVR0j BBgwFoAUIwqBsoMxS6eb+gJP35/02ma0JL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2ExY2U0ZS01OWM4LTQxY2MtYjVlNi1iZDdiN2E3MDQzNTYvMC8yMzBBODFCMjgz MzE0QkE3OUJGQTAyNEZERjlGRjREQTY2QjQyNEJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0REE2NkI0 MjRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdhMWNlNGUtNTljOC00MWNjLWI1 ZTYtYmQ3YjdhNzA0MzU2LzAvMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0 REE2NkI0MjRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaFlNYqKvtFVRqqcv90SGczzEGzDw0rnCu/ twSPbwLwEttMdyaoqCPJze64zer8ulTxItpAwutjWkko5tKvj9m3Uz0IWUlx5n+x K/LoLCZpL5ry7bi24TTf3SX87iJ0Ny7GdJjPqbLvjyQVvIpZJ9+yLs0P58MHprp0 LiFJ6btMKqM3q/2ae5NqOXLQ+CwnvO4pfUHSXrskEOFLrDyolLrV7pMmnDJqxQmA IAgp1g+S1SuiQkgoXh8OTJhZVaLt9/jNZmltRz/t9h/H3zEVdjYng9RaEOidssTg /x9a1wM7d+chb1+92pqV3lBFnKYQmICH6vJZodArK7RTFBgw3eA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:17:20 2025 by rpki-client