$ rpki-client -vvf repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft File: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft (raw, json) Hash identifier: hKlXlzZStccv6X6EGa6YefM9EuXu6AFV6oBVh3AsPkI= Subject key identifier: 30:80:BB:95:A4:DD:0E:B3:20:9E:46:C7:C7:00:3F:A7:90:A7:09:C4 Authority key identifier: 23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 Certificate issuer: /CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Certificate serial: 4450F782C1069F590A52CEE9D32F44664BE12A22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft Manifest number: FA Signing time: Sun 29 Jun 2025 15:21:56 +0000 Manifest this update: Sun 29 Jun 2025 15:16:56 +0000 Manifest next update: Thu 03 Jul 2025 03:02:56 +0000 Files and hashes: 1: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl (hash: xeNJhZlZMtJBhPduXSJQ4LigI5YPJUjLkPmP69VcL4Q=) 2: 3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa (hash: GanArMdyxHcMbx7yNEnXuF/pBEYLZnuk0ZSf31LCDR8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 03:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:50:f7:82:c1:06:9f:59:0a:52:ce:e9:d3:2f:44:66:4b:e1:2a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Validity Not Before: Jun 29 15:16:56 2025 GMT Not After : Jul 3 03:02:56 2025 GMT Subject: CN=3080BB95A4DD0EB3209E46C7C7003FA790A709C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9a:64:56:1b:f9:37:81:df:37:3b:43:4a:d1: e2:63:07:c0:b5:86:74:13:83:29:ba:c8:40:48:52: a5:54:48:df:9c:05:0e:56:ca:dc:5f:fe:db:78:df: d2:42:0d:e7:84:64:2f:80:23:84:b4:ad:7d:61:27: e2:05:07:08:d8:d0:fb:52:58:5a:c0:61:9a:e1:9d: d6:38:19:1a:99:65:41:c3:d1:03:c0:5e:c3:83:a9: d5:fd:26:29:e6:44:09:84:2b:9b:33:24:05:10:c3: 3b:68:e4:a7:e6:03:fa:1a:66:1e:d4:23:3c:a1:53: 73:55:5c:ac:23:6a:7d:ab:fc:91:51:62:f8:8a:c8: 11:7f:6e:53:fc:ef:8b:bd:6a:a7:63:33:42:f4:67: 3b:63:02:20:9a:85:ca:d3:41:07:c7:6a:b8:24:93: 10:8b:55:ce:73:3b:01:2d:f4:d0:74:69:d3:2d:3c: 5a:73:2b:27:84:a3:c9:1e:88:00:25:bc:b4:f9:69: 31:8d:20:30:b7:b1:04:18:62:d8:9c:f4:93:3d:16: 4f:e4:f7:fa:48:d0:ed:f0:a9:3c:5c:ca:38:e8:4d: 31:2a:a1:43:ad:85:e5:27:7f:00:31:df:cc:fb:3d: b8:41:e6:a4:5d:3b:4a:3d:d0:b9:63:c9:90:11:63: ce:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:80:BB:95:A4:DD:0E:B3:20:9E:46:C7:C7:00:3F:A7:90:A7:09:C4 X509v3 Authority Key Identifier: keyid:23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:3f:4e:4d:cb:ae:7d:c4:21:5c:a5:6c:a1:24:a2:74:5e:0d: 52:f0:e4:5c:cf:cb:2f:2a:4c:d6:ef:27:25:17:0d:21:08:28: e1:cd:61:55:c5:9b:10:2d:44:67:b4:ae:5e:d2:82:38:f9:fc: dd:ad:86:29:aa:23:45:e6:a6:6c:c9:83:3e:90:40:dd:6b:62: f1:3d:af:1b:cf:12:ea:a4:da:43:ac:a5:38:50:01:31:71:04: 10:97:b4:33:e5:b3:40:7b:f8:2b:d4:19:c1:38:58:10:c0:f6: 47:1e:eb:6a:e4:ac:7f:71:16:50:c2:1d:35:5a:f0:56:6e:1e: 89:63:f2:d3:46:2f:f1:3c:8a:cf:67:3d:0f:9f:68:e6:55:44: f6:26:96:62:b0:60:1c:a9:52:81:12:44:96:24:d0:c7:76:8b: 90:3c:e8:45:eb:ad:e9:c8:00:b8:28:3a:cc:ca:ab:e5:0d:ee: ce:17:8f:44:f2:30:7b:be:73:5a:50:4d:45:9d:7c:10:a4:11: e0:3c:62:c9:41:72:2b:e9:ee:ca:0a:74:dd:69:d3:f1:fd:4b: 8e:5e:ab:bb:5b:94:70:3f:0f:f0:dd:8d:c2:47:92:64:cc:82: e3:5f:bf:b0:12:0f:fe:f0:66:e3:bd:a6:c1:a4:29:aa:10:28: fc:83:f6:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURFD3gsEGn1kKUs7p0y9EZkvhKiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIz QjAwRUVCNjAeFw0yNTA2MjkxNTE2NTZaFw0yNTA3MDMwMzAyNTZaMDMxMTAvBgNV BAMTKDMwODBCQjk1QTRERDBFQjMyMDlFNDZDN0M3MDAzRkE3OTBBNzA5QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1mmRWG/k3gd83O0NK0eJjB8C1 hnQTgym6yEBIUqVUSN+cBQ5Wytxf/tt439JCDeeEZC+AI4S0rX1hJ+IFBwjY0PtS WFrAYZrhndY4GRqZZUHD0QPAXsODqdX9JinmRAmEK5szJAUQwzto5KfmA/oaZh7U IzyhU3NVXKwjan2r/JFRYviKyBF/blP874u9aqdjM0L0ZztjAiCahcrTQQfHargk kxCLVc5zOwEt9NB0adMtPFpzKyeEo8keiAAlvLT5aTGNIDC3sQQYYtic9JM9Fk/k 9/pI0O3wqTxcyjjoTTEqoUOtheUnfwAx38z7PbhB5qRdO0o90LljyZARY84fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMIC7laTdDrMgnkbHxwA/p5CnCcQwHwYDVR0j BBgwFoAUIxMtasKg7UGZb1TACopZsjsA7rYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmU0N2M2ZC1lNjI0LTQ3N2MtYWUxOC1kMzJmMjJjOTYyMDQvMC8yMzEzMkQ2QUMy QTBFRDQxOTk2RjU0QzAwQThBNTlCMjNCMDBFRUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIzQjAw RUVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZlNDdjNmQtZTYyNC00NzdjLWFl MTgtZDMyZjIyYzk2MjA0LzAvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5 QjIzQjAwRUVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACU/Tk3Lrn3EIVylbKEkonReDVLw5FzPyy8q TNbvJyUXDSEIKOHNYVXFmxAtRGe0rl7Sgjj5/N2thimqI0XmpmzJgz6QQN1rYvE9 rxvPEuqk2kOspThQATFxBBCXtDPls0B7+CvUGcE4WBDA9kce62rkrH9xFlDCHTVa 8FZuHolj8tNGL/E8is9nPQ+faOZVRPYmlmKwYBypUoESRJYk0Md2i5A86EXrrenI ALgoOszKq+UN7s4Xj0TyMHu+c1pQTUWdfBCkEeA8YslBcivp7soKdN1p0/H9S45e q7tblHA/D/DdjcJHkmTMguNfv7ASD/7wZuO9psGkKaoQKPyD9lI= -----END CERTIFICATE-----Generated at Mon Jun 30 10:21:20 2025 by rpki-client