$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft File: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft (raw, json) Hash identifier: DRvtdTgdq47afziDAdLMbErT6npjA5x1GClXU9922XA= Subject key identifier: 36:E7:E5:07:2B:1C:24:A1:D8:E2:20:C1:FE:7C:89:94:6C:F2:04:E7 Authority key identifier: 23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 Certificate issuer: /CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Certificate serial: 478F9C198C55402E16C2374F3207F1ABDB6570DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft Manifest number: C3 Signing time: Sat 23 Aug 2025 01:20:53 +0000 Manifest this update: Sat 23 Aug 2025 01:15:53 +0000 Manifest next update: Tue 26 Aug 2025 07:44:53 +0000 Files and hashes: 1: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl (hash: +tguoulMftycG8lKfSBRZS6rhTHz7rt7EAbpVxi4QoU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:8f:9c:19:8c:55:40:2e:16:c2:37:4f:32:07:f1:ab:db:65:70:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Validity Not Before: Aug 23 01:15:53 2025 GMT Not After : Aug 26 07:44:53 2025 GMT Subject: CN=36E7E5072B1C24A1D8E220C1FE7C89946CF204E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1a:24:4e:21:b2:97:01:24:99:59:5b:11:f4: 8f:da:73:bb:49:b1:32:6d:3e:dd:93:05:32:d1:f5: f9:6d:2a:24:7e:b6:84:7c:dd:70:e7:55:78:b2:22: e0:e0:6c:97:58:d8:f8:17:ba:c8:3f:09:69:47:e2: f8:b5:cd:2d:99:37:2c:c6:22:b2:9d:84:91:64:ee: 46:b7:c7:cf:f8:f9:45:2b:3c:35:33:34:19:f9:f8: 27:a7:b7:d2:e1:00:24:19:84:bf:ce:17:1e:7c:70: ec:27:74:93:a3:18:ca:9f:ea:80:bc:5b:ee:80:79: ed:2d:98:32:fa:05:ac:76:2f:76:56:63:b9:df:52: b1:bc:c8:25:d2:7f:fe:d9:c2:ce:af:ef:ef:c6:28: 78:f1:a9:bf:8e:51:73:d8:f7:bc:1a:6b:97:f1:06: 89:cd:9a:51:fa:35:5b:92:76:78:fe:9f:00:96:c2: f1:fd:57:d4:1e:85:09:7b:69:cb:b8:57:c0:33:1e: b6:24:b2:22:05:7b:8f:23:19:7a:41:0c:65:40:db: a9:d8:86:17:56:77:11:9f:71:ee:5e:09:56:cc:1f: c7:48:29:5f:ec:80:15:ed:fe:ae:1f:5e:8e:3d:64: be:78:7b:9a:65:f4:fd:c2:80:a2:2f:50:30:89:aa: 23:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E7:E5:07:2B:1C:24:A1:D8:E2:20:C1:FE:7C:89:94:6C:F2:04:E7 X509v3 Authority Key Identifier: keyid:23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:41:be:5a:ca:9f:25:85:d4:f7:8c:e9:a4:38:9b:93:fe:59: b8:07:fd:33:03:8a:ae:60:f8:88:0d:e1:de:50:c7:86:93:b2: 23:c7:38:2e:58:0f:30:63:de:46:c7:72:93:a8:45:ee:b1:f0: 47:00:75:99:bf:f3:4b:d0:ea:ec:cb:f0:31:d3:67:86:f4:b1: 66:28:e0:28:bb:e1:1a:30:9e:14:9b:57:13:0f:68:59:04:2d: 79:b2:8f:ca:14:f5:04:4b:0a:ed:03:16:3e:ba:19:47:76:21: 0e:26:20:ca:ea:d1:9f:8d:2d:08:ea:be:97:3e:d3:19:f5:7e: 54:e5:db:5c:86:e4:40:82:41:03:0d:5f:aa:68:1a:a1:08:91: c6:3e:ac:7f:01:25:c8:e4:ce:55:05:dd:23:42:ef:29:26:74: 69:ac:18:a2:94:3f:f1:a8:a7:4b:68:66:87:83:71:8b:67:1b: 2f:33:20:2b:89:f6:c5:d5:70:e4:77:c2:ac:a1:35:de:99:6c: a2:d3:39:d3:0e:f2:99:48:d3:2a:df:07:06:39:42:22:fe:e3: 96:b9:b7:e2:ba:e5:62:d0:65:d3:3c:f6:40:04:e3:b1:26:5d: 3b:af:9f:d1:fc:23:45:28:88:f4:70:12:4e:54:2d:f9:e2:0b: 08:c4:f3:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR4+cGYxVQC4WwjdPMgfxq9tlcN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFC RkNDN0UzNjAeFw0yNTA4MjMwMTE1NTNaFw0yNTA4MjYwNzQ0NTNaMDMxMTAvBgNV BAMTKDM2RTdFNTA3MkIxQzI0QTFEOEUyMjBDMUZFN0M4OTk0NkNGMjA0RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmGiROIbKXASSZWVsR9I/ac7tJ sTJtPt2TBTLR9fltKiR+toR83XDnVXiyIuDgbJdY2PgXusg/CWlH4vi1zS2ZNyzG IrKdhJFk7ka3x8/4+UUrPDUzNBn5+Cent9LhACQZhL/OFx58cOwndJOjGMqf6oC8 W+6Aee0tmDL6Bax2L3ZWY7nfUrG8yCXSf/7Zws6v7+/GKHjxqb+OUXPY97waa5fx BonNmlH6NVuSdnj+nwCWwvH9V9QehQl7acu4V8AzHrYksiIFe48jGXpBDGVA26nY hhdWdxGfce5eCVbMH8dIKV/sgBXt/q4fXo49ZL54e5pl9P3CgKIvUDCJqiNXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNuflByscJKHY4iDB/nyJlGzyBOcwHwYDVR0j BBgwFoAUI8Yi+HYYq4sEIuempG0ukb/MfjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMS8yM0M2MjJGODc2 MThBQjhCMDQyMkU3QTZBNDZEMkU5MUJGQ0M3RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFCRkND N0UzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzEvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJF OTFCRkNDN0UzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOBBvlrKnyWF1PeM6aQ4m5P+WbgH/TMDiq5g +IgN4d5Qx4aTsiPHOC5YDzBj3kbHcpOoRe6x8EcAdZm/80vQ6uzL8DHTZ4b0sWYo 4Ci74RownhSbVxMPaFkELXmyj8oU9QRLCu0DFj66GUd2IQ4mIMrq0Z+NLQjqvpc+ 0xn1flTl21yG5ECCQQMNX6poGqEIkcY+rH8BJcjkzlUF3SNC7ykmdGmsGKKUP/Go p0toZoeDcYtnGy8zICuJ9sXVcOR3wqyhNd6ZbKLTOdMO8plI0yrfBwY5QiL+45a5 t+K65WLQZdM89kAE47EmXTuvn9H8I0UoiPRwEk5ULfniCwjE8zE= -----END CERTIFICATE-----Generated at Sat Aug 23 16:57:26 2025 by rpki-client