$ rpki-client -vvf repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft File: 923816C042C964B6465A7BA06B2D44BDAF28D827.mft (raw, json) Hash identifier: hjsJ/yoEwiLY91Isx0v61UGvVgjbvdruW8tqJlLlipk= Subject key identifier: 1C:85:17:3F:38:9A:9D:CE:25:EB:62:18:89:48:68:6E:94:99:8F:12 Authority key identifier: 92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 Certificate issuer: /CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Certificate serial: 5C3589877D10A4A4B2F55D79825C7BAF3AC1C12E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject info access: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft Manifest number: 01F0 Signing time: Mon 30 Jun 2025 22:00:37 +0000 Manifest this update: Mon 30 Jun 2025 21:55:37 +0000 Manifest next update: Fri 04 Jul 2025 07:56:37 +0000 Files and hashes: 1: 923816C042C964B6465A7BA06B2D44BDAF28D827.crl (hash: oc3Fe/3yWY5WkMjRyhV3ci98tWnjRUz8oUHO2ViAU0k=) 2: 3130332e3138392e35392e302f32342d3234203d3e20313439373538.roa (hash: nbEpopwiojWgYGehW+g9TqMlbT1/tFwqFVAFzwn9bm8=) 3: 3130332e3138392e35382e302f32332d3234203d3e20313439373538.roa (hash: UeRCOjo57wOeUyYDJJ1YZ67dLYbNF8SefWTH/DR2yv8=) 4: 3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa (hash: w12N/uYx27kZZwmhbBAPGCXLuSyR2+QhhurllIrq3Bc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 07:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:35:89:87:7d:10:a4:a4:b2:f5:5d:79:82:5c:7b:af:3a:c1:c1:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Validity Not Before: Jun 30 21:55:37 2025 GMT Not After : Jul 4 07:56:37 2025 GMT Subject: CN=1C85173F389A9DCE25EB62188948686E94998F12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:cc:61:15:80:8c:1a:75:c9:29:d6:7a:eb: 08:fa:04:4a:d0:bd:0f:c5:20:a7:fb:9c:e6:83:16: 6e:c6:d5:b1:9b:90:9d:3b:d2:55:b2:3a:52:39:f3: 50:1e:20:5a:e4:d6:73:00:c3:80:02:13:1e:9d:42: 4c:bd:99:f0:68:25:da:87:63:ec:fd:9b:e4:f8:1f: ae:2e:ae:5e:9f:1a:6b:94:28:51:15:5c:8c:a3:4f: a8:13:e5:1d:a4:fd:61:33:05:ac:71:01:e3:73:96: 7a:4a:8a:45:28:53:80:3e:b7:fb:2e:60:73:79:b3: c7:d3:0d:b2:a2:75:a6:98:94:19:93:2b:9d:92:76: c6:7a:52:55:b1:8d:a2:19:2a:35:d3:b4:87:a2:32: 9f:ab:b9:4c:cf:ea:bd:84:3d:8b:78:ff:a9:5d:bf: 35:5a:be:34:24:74:9a:9b:28:2d:57:81:32:79:26: 5b:64:32:09:7d:0e:c7:54:8d:81:57:bd:7e:ad:7a: 25:7f:35:78:f2:01:a2:57:6f:1e:36:73:96:df:e0: 0a:e6:a4:ee:9d:e8:a9:41:aa:25:3c:0b:f1:40:9b: c7:36:cc:31:ba:1f:47:7e:83:23:2c:e1:6b:11:8b: c5:00:7b:6a:ef:fc:3e:a3:20:a9:19:c9:ad:3c:89: bd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:85:17:3F:38:9A:9D:CE:25:EB:62:18:89:48:68:6E:94:99:8F:12 X509v3 Authority Key Identifier: keyid:92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a4:b4:90:95:fc:c3:4a:77:c6:6f:3c:f3:57:32:cf:6a:d7: be:78:50:99:ee:c0:ff:44:08:dc:63:8e:fa:7e:3a:34:b1:41: 82:d7:32:03:fd:29:c7:83:3f:bd:af:68:eb:27:f5:a5:1d:26: 52:78:4d:48:91:b7:61:72:37:87:08:ab:39:3d:f8:9d:0b:6a: d8:4a:db:27:61:26:04:90:5d:ae:de:e0:52:ef:01:ad:c5:49: f9:58:83:9a:0f:1f:0a:e0:d4:18:9a:73:e3:e7:27:7b:05:6d: 87:6c:21:6d:43:16:bc:7d:a0:25:c3:fc:aa:a0:1c:20:ea:0d: 07:67:ff:60:cb:4a:46:f4:6d:96:76:22:b0:fe:f2:65:7f:f4: a8:eb:95:bd:2b:de:27:d1:59:fb:61:e2:d3:55:31:fa:73:f3: a3:6b:9e:27:01:90:df:e0:1c:48:90:6b:d2:ee:ef:e3:d0:f4: d4:d8:99:f5:7c:57:a5:08:f0:f9:2d:69:98:93:11:ed:c8:e8: 3e:9e:ae:43:39:20:96:46:84:bd:ef:2b:5f:e3:7f:c7:be:fc: 70:b0:84:23:2e:89:c2:3b:61:52:35:03:e4:2d:69:39:ea:0a: 89:50:06:ce:d2:dc:7f:74:99:39:d8:82:8e:85:92:b0:80:66: 23:61:c6:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXDWJh30QpKSy9V15glx7rzrBwS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRB RjI4RDgyNzAeFw0yNTA2MzAyMTU1MzdaFw0yNTA3MDQwNzU2MzdaMDMxMTAvBgNV BAMTKDFDODUxNzNGMzg5QTlEQ0UyNUVCNjIxODg5NDg2ODZFOTQ5OThGMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC68cxhFYCMGnXJKdZ66wj6BErQ vQ/FIKf7nOaDFm7G1bGbkJ070lWyOlI581AeIFrk1nMAw4ACEx6dQky9mfBoJdqH Y+z9m+T4H64url6fGmuUKFEVXIyjT6gT5R2k/WEzBaxxAeNzlnpKikUoU4A+t/su YHN5s8fTDbKidaaYlBmTK52SdsZ6UlWxjaIZKjXTtIeiMp+ruUzP6r2EPYt4/6ld vzVavjQkdJqbKC1XgTJ5JltkMgl9DsdUjYFXvX6teiV/NXjyAaJXbx42c5bf4Arm pO6d6KlBqiU8C/FAm8c2zDG6H0d+gyMs4WsRi8UAe2rv/D6jIKkZya08ib1nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHIUXPzianc4l62IYiUhobpSZjxIwHwYDVR0j BBgwFoAUkjgWwELJZLZGWnugay1Eva8o2CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzdkZmI4OC1mYjUwLTQ4ZDEtYjkwZC1lNTI1MTAyZjRmNWUvMC85MjM4MTZDMDQy Qzk2NEI2NDY1QTdCQTA2QjJENDRCREFGMjhEODI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRBRjI4 RDgyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM3ZGZiODgtZmI1MC00OGQxLWI5 MGQtZTUyNTEwMmY0ZjVlLzAvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0 QkRBRjI4RDgyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6ktJCV/MNKd8ZvPPNXMs9q1754UJnuwP9E CNxjjvp+OjSxQYLXMgP9KceDP72vaOsn9aUdJlJ4TUiRt2FyN4cIqzk9+J0LathK 2ydhJgSQXa7e4FLvAa3FSflYg5oPHwrg1Biac+PnJ3sFbYdsIW1DFrx9oCXD/Kqg HCDqDQdn/2DLSkb0bZZ2IrD+8mV/9Kjrlb0r3ifRWfth4tNVMfpz86NrnicBkN/g HEiQa9Lu7+PQ9NTYmfV8V6UI8PktaZiTEe3I6D6erkM5IJZGhL3vK1/jf8e+/HCw hCMuicI7YVI1A+QtaTnqColQBs7S3H90mTnYgo6FkrCAZiNhxqY= -----END CERTIFICATE-----Generated at Wed Jul 2 15:59:19 2025 by rpki-client