$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft File: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft (raw, json) Hash identifier: 3EmYoj7xB7Q6fH3INckxQeK5EkG8Q8CQXjR9qrKLf3g= Subject key identifier: 4A:06:01:8D:99:FA:D1:DA:15:3F:F7:36:5B:AE:3E:6F:C8:4B:23:CB Authority key identifier: 23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 Certificate issuer: /CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Certificate serial: 3C26D2450D14EEB9D8D17EDE9E40662012C2926F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft Manifest number: DC Signing time: Sun 19 Oct 2025 04:20:53 +0000 Manifest this update: Sun 19 Oct 2025 04:15:53 +0000 Manifest next update: Wed 22 Oct 2025 07:19:53 +0000 Files and hashes: 1: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl (hash: h651ueUqIJLMK9fxGBkQ9WnXxnvWBn25K+WfRdZYKNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:26:d2:45:0d:14:ee:b9:d8:d1:7e:de:9e:40:66:20:12:c2:92:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Validity Not Before: Oct 19 04:15:53 2025 GMT Not After : Oct 22 07:19:53 2025 GMT Subject: CN=4A06018D99FAD1DA153FF7365BAE3E6FC84B23CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:bd:17:05:a3:b6:d4:27:65:70:f8:5a:6f: ba:b6:4c:8f:1d:58:7b:5f:a5:41:1f:dd:43:6e:ca: 64:f7:fd:f0:97:a2:2b:39:4e:65:f9:0f:c2:f7:db: c7:d2:d9:61:ad:78:70:6b:96:f0:c2:e1:92:bb:56: 68:84:04:c4:d5:cd:a0:5f:da:9c:3f:d9:70:3c:d4: 17:ff:85:24:ce:7e:19:95:98:53:51:1b:68:ba:5a: 23:42:aa:09:0e:b3:2f:96:bb:1c:b6:c8:cf:f8:f6: 23:5f:7d:7e:0e:f4:38:6f:ef:69:28:ec:6a:42:66: c0:1d:ca:3f:90:74:3e:1c:dd:09:d4:f1:8f:c7:89: 53:9b:e5:38:4a:da:a7:9c:bc:74:55:09:fb:31:2a: 74:9f:f8:24:73:49:5f:9a:5d:94:39:7e:cf:ef:0f: fa:85:8f:4a:b6:3a:72:98:21:15:06:fd:ac:a6:eb: 6e:e7:cf:cd:53:46:67:c9:6d:d0:0b:7e:f4:d3:4a: 24:de:2d:9b:d3:12:f5:2e:ea:c8:15:a5:5e:42:05: f6:a9:b3:ec:df:15:71:13:d2:8d:b8:0f:69:cd:70: 2a:65:89:9c:12:86:65:71:0a:bd:77:c0:db:1c:3b: 99:4b:3d:c7:67:15:a0:fd:98:68:bb:7c:53:a7:14: c9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:06:01:8D:99:FA:D1:DA:15:3F:F7:36:5B:AE:3E:6F:C8:4B:23:CB X509v3 Authority Key Identifier: keyid:23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:7f:f7:4d:94:14:ed:a9:23:0d:42:3f:cc:45:7c:be:61:dc: 6a:d0:1f:52:28:d8:07:51:8e:30:c8:31:06:e5:37:ff:dd:ed: af:18:a4:f0:6c:0e:9b:0e:fe:f1:32:c9:e2:12:e8:9b:8d:30: d3:42:3b:81:5f:4f:2e:32:38:34:f5:9e:f2:51:ba:ac:62:15: a4:bd:22:66:6c:c0:3f:af:cd:e3:f7:4e:e9:42:04:38:44:90: 77:0a:1d:5d:d8:75:6d:93:f7:e2:44:15:c0:9f:77:81:e7:c7: c1:ef:ad:74:87:0f:a7:6d:50:96:aa:f1:f7:23:c7:6a:99:fb: cb:1d:17:03:90:14:90:07:cf:1e:c5:4a:2e:1a:08:9f:a1:0f: 4d:e3:e9:9b:00:c2:a8:d7:4a:f1:b3:47:45:95:44:1d:5c:ce: 2e:ef:f7:c4:fa:c9:09:e7:96:f3:5c:e5:8c:2e:47:56:06:67: 19:84:18:3a:8c:91:5d:cd:a9:e3:c0:be:e7:e3:32:1f:6c:da: 89:bc:e6:29:02:4f:04:54:1b:39:a4:be:00:e7:bf:f1:9a:12: ec:47:91:c1:4f:0d:c8:0c:f9:a6:16:ea:5c:18:c8:f7:2d:f6: c4:60:82:0b:87:cf:7a:b7:d3:8d:ed:4e:4f:97:a5:c7:52:c2: 15:3c:ee:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPCbSRQ0U7rnY0X7enkBmIBLCkm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFC RkNDN0UzNjAeFw0yNTEwMTkwNDE1NTNaFw0yNTEwMjIwNzE5NTNaMDMxMTAvBgNV BAMTKDRBMDYwMThEOTlGQUQxREExNTNGRjczNjVCQUUzRTZGQzg0QjIzQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3b0XBaO21CdlcPhab7q2TI8d WHtfpUEf3UNuymT3/fCXois5TmX5D8L328fS2WGteHBrlvDC4ZK7VmiEBMTVzaBf 2pw/2XA81Bf/hSTOfhmVmFNRG2i6WiNCqgkOsy+Wuxy2yM/49iNffX4O9Dhv72ko 7GpCZsAdyj+QdD4c3QnU8Y/HiVOb5ThK2qecvHRVCfsxKnSf+CRzSV+aXZQ5fs/v D/qFj0q2OnKYIRUG/aym627nz81TRmfJbdALfvTTSiTeLZvTEvUu6sgVpV5CBfap s+zfFXET0o24D2nNcCpliZwShmVxCr13wNscO5lLPcdnFaD9mGi7fFOnFMlVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSgYBjZn60doVP/c2W64+b8hLI8swHwYDVR0j BBgwFoAUI8Yi+HYYq4sEIuempG0ukb/MfjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMS8yM0M2MjJGODc2 MThBQjhCMDQyMkU3QTZBNDZEMkU5MUJGQ0M3RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFCRkND N0UzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzEvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJF OTFCRkNDN0UzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN1/902UFO2pIw1CP8xFfL5h3GrQH1Io2AdR jjDIMQblN//d7a8YpPBsDpsO/vEyyeIS6JuNMNNCO4FfTy4yODT1nvJRuqxiFaS9 ImZswD+vzeP3TulCBDhEkHcKHV3YdW2T9+JEFcCfd4Hnx8HvrXSHD6dtUJaq8fcj x2qZ+8sdFwOQFJAHzx7FSi4aCJ+hD03j6ZsAwqjXSvGzR0WVRB1czi7v98T6yQnn lvNc5YwuR1YGZxmEGDqMkV3NqePAvufjMh9s2om85ikCTwRUGzmkvgDnv/GaEuxH kcFPDcgM+aYW6lwYyPct9sRggguHz3q3043tTk+XpcdSwhU87jc= -----END CERTIFICATE-----Generated at Mon Oct 20 12:56:51 2025 by rpki-client