$ rpki-client -vvf repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft File: 230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft (raw, json) Hash identifier: 985n0Ba2DOVVkbXH7Wsx3rLg5Dy61Y+az9E0DH95MmI= Subject key identifier: 3C:05:CF:4F:AF:EA:5B:2B:4C:39:62:1A:6E:31:7C:20:F7:47:E8:E3 Authority key identifier: 23:0A:81:B2:83:31:4B:A7:9B:FA:02:4F:DF:9F:F4:DA:66:B4:24:BE Certificate issuer: /CN=230A81B283314BA79BFA024FDF9FF4DA66B424BE Certificate serial: 0557C1AEECB24F3B1D6D1582292A7D7BF2F90DBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft Manifest number: 01E2 Signing time: Sat 28 Jun 2025 07:42:09 +0000 Manifest this update: Sat 28 Jun 2025 07:37:09 +0000 Manifest next update: Tue 01 Jul 2025 14:41:09 +0000 Files and hashes: 1: 230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl (hash: zyZ5rkNCEl+feJ1z2Grr6VRWmrwW35xzAt5bRB9gs1g=) 2: 323430363a333834303a3a2f33322d3438203d3e20313430343438.roa (hash: Ra1E9cOQanH1SiHnfJl04HYirMLU+Yh3tE7np1INosY=) 3: 3130332e3135322e3233382e302f32332d3234203d3e20313430343438.roa (hash: rBpy14k8W3mbLlNgX4J0/2ZVTjIArp0RYRGvkTqIoQQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:57:c1:ae:ec:b2:4f:3b:1d:6d:15:82:29:2a:7d:7b:f2:f9:0d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230A81B283314BA79BFA024FDF9FF4DA66B424BE Validity Not Before: Jun 28 07:37:09 2025 GMT Not After : Jul 1 14:41:09 2025 GMT Subject: CN=3C05CF4FAFEA5B2B4C39621A6E317C20F747E8E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a7:04:af:f0:1c:06:21:e4:fa:0c:df:e2:17: 66:08:2e:50:64:f9:31:8c:03:9b:55:a3:81:47:64: 7d:3a:20:47:a6:63:57:c8:f0:16:c2:69:f7:4f:9d: 3e:a2:63:f9:7b:fd:b1:24:bf:30:11:ad:ff:bb:11: 8b:dc:d1:33:6d:8b:b6:30:f3:b1:62:f9:84:2e:66: a9:7e:bf:0d:52:9c:cf:2c:60:09:75:f3:ae:82:7f: 7e:88:c5:d4:2a:08:59:d8:f8:18:77:58:fa:39:2f: ca:97:ab:e8:40:20:ef:3f:1d:e1:29:34:48:69:51: 11:d5:eb:83:d4:65:d2:93:d8:65:79:bd:33:7a:84: b6:f3:fe:d6:ab:84:43:a9:ff:41:9d:88:07:35:3a: 94:57:b3:3b:96:86:9b:4c:88:2f:45:70:e8:ea:e4: 60:11:6d:0b:28:e7:b9:17:6e:a7:2a:d8:ba:ec:0c: 10:e6:29:bc:d8:6c:b8:50:c9:fc:7c:db:ac:50:e9: 9e:81:bd:71:80:a4:3a:3a:03:66:2d:9a:8a:47:03: 16:ff:ff:ef:8b:69:e9:18:b4:11:f0:b1:df:c2:88: ed:24:47:a5:1d:36:14:1c:e2:43:8e:4a:1c:0d:a0: 4a:55:00:c8:33:fc:29:9c:e8:81:68:54:0f:a8:77: 8b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:05:CF:4F:AF:EA:5B:2B:4C:39:62:1A:6E:31:7C:20:F7:47:E8:E3 X509v3 Authority Key Identifier: keyid:23:0A:81:B2:83:31:4B:A7:9B:FA:02:4F:DF:9F:F4:DA:66:B4:24:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:e3:16:53:cb:db:ea:e9:ff:37:d4:30:cd:cf:c8:c7:44:4c: 00:71:70:72:d7:85:65:b3:c6:ec:d7:a9:6f:8e:b4:c0:63:02: 95:da:7f:99:e2:f6:d9:7b:dd:d5:84:d5:fc:73:c4:0d:12:9d: dc:ae:f6:2f:03:d3:f0:95:a5:0b:25:b6:7f:5f:f4:c0:55:c0: 46:b9:8d:ed:1d:fe:2c:52:d7:96:09:0f:f8:97:d9:77:db:d8: 98:1e:8d:ef:cf:02:8c:ab:da:fe:6e:20:72:04:8a:24:a3:7a: 8f:6c:a9:8d:72:37:5b:b8:91:58:3c:96:2b:ce:1d:12:7c:f3: 95:34:8a:7e:77:e4:be:7a:e0:3c:68:9d:84:64:40:43:78:b3: 5f:40:5c:a7:e2:30:fa:e9:3f:8e:a9:ac:79:cb:83:13:b4:ca: b3:d2:f9:70:58:f4:9d:48:be:f4:1f:f9:02:c1:92:d0:c8:ca: 63:de:c3:3e:dc:c2:a8:a0:83:38:ec:0f:9e:fd:f2:f5:10:c5: d3:9f:e3:e0:33:28:43:6e:f8:c2:48:80:63:ee:c0:00:d3:d4: 47:5e:01:28:2f:ee:b4:71:0a:9b:c6:e8:88:0c:03:fe:37:d8: 5f:c0:c4:ef:02:eb:7a:86:33:52:0f:74:cb:9c:8f:79:96:76: 3e:01:55:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBVfBruyyTzsdbRWCKSp9e/L5DbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0REE2 NkI0MjRCRTAeFw0yNTA2MjgwNzM3MDlaFw0yNTA3MDExNDQxMDlaMDMxMTAvBgNV BAMTKDNDMDVDRjRGQUZFQTVCMkI0QzM5NjIxQTZFMzE3QzIwRjc0N0U4RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDpwSv8BwGIeT6DN/iF2YILlBk +TGMA5tVo4FHZH06IEemY1fI8BbCafdPnT6iY/l7/bEkvzARrf+7EYvc0TNti7Yw 87Fi+YQuZql+vw1SnM8sYAl1866Cf36IxdQqCFnY+Bh3WPo5L8qXq+hAIO8/HeEp NEhpURHV64PUZdKT2GV5vTN6hLbz/tarhEOp/0GdiAc1OpRXszuWhptMiC9FcOjq 5GARbQso57kXbqcq2LrsDBDmKbzYbLhQyfx826xQ6Z6BvXGApDo6A2YtmopHAxb/ /++LaekYtBHwsd/CiO0kR6UdNhQc4kOOShwNoEpVAMgz/Cmc6IFoVA+od4vFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPAXPT6/qWytMOWIabjF8IPdH6OMwHwYDVR0j BBgwFoAUIwqBsoMxS6eb+gJP35/02ma0JL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2ExY2U0ZS01OWM4LTQxY2MtYjVlNi1iZDdiN2E3MDQzNTYvMC8yMzBBODFCMjgz MzE0QkE3OUJGQTAyNEZERjlGRjREQTY2QjQyNEJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0REE2NkI0 MjRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdhMWNlNGUtNTljOC00MWNjLWI1 ZTYtYmQ3YjdhNzA0MzU2LzAvMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0 REE2NkI0MjRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXjFlPL2+rp/zfUMM3PyMdETABxcHLXhWWz xuzXqW+OtMBjApXaf5ni9tl73dWE1fxzxA0Sndyu9i8D0/CVpQsltn9f9MBVwEa5 je0d/ixS15YJD/iX2Xfb2Jgeje/PAoyr2v5uIHIEiiSjeo9sqY1yN1u4kVg8livO HRJ885U0in535L564DxonYRkQEN4s19AXKfiMPrpP46prHnLgxO0yrPS+XBY9J1I vvQf+QLBktDIymPewz7cwqiggzjsD5798vUQxdOf4+AzKENu+MJIgGPuwADT1Ede ASgv7rRxCpvG6IgMA/432F/AxO8C63qGM1IPdMucj3mWdj4BVTs= -----END CERTIFICATE-----Generated at Sun Jun 29 18:18:31 2025 by rpki-client