$ rpki-client -vvf repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft File: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft (raw, json) Hash identifier: 9YkvdlvFkaaDx2TfsZOU/pzvY7kSWjrjb7Koq8ltrsU= Subject key identifier: 6C:E6:7E:39:F0:36:CD:63:51:5B:3B:EE:6B:15:7D:22:07:B5:32:1E Authority key identifier: 23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 Certificate issuer: /CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Certificate serial: 58C00265B29CF71B44A146E8F2C8AE84B14543BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft Manifest number: 0111 Signing time: Thu 21 Aug 2025 04:51:57 +0000 Manifest this update: Thu 21 Aug 2025 04:46:57 +0000 Manifest next update: Sun 24 Aug 2025 13:53:57 +0000 Files and hashes: 1: 3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa (hash: GanArMdyxHcMbx7yNEnXuF/pBEYLZnuk0ZSf31LCDR8=) 2: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl (hash: 2151a9DdKGIC/qzNiPT/ZWfdjK1LMP16l2fI148s71c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:c0:02:65:b2:9c:f7:1b:44:a1:46:e8:f2:c8:ae:84:b1:45:43:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Validity Not Before: Aug 21 04:46:57 2025 GMT Not After : Aug 24 13:53:57 2025 GMT Subject: CN=6CE67E39F036CD63515B3BEE6B157D2207B5321E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:7e:81:6e:43:9d:b5:5a:93:5c:50:a1:22: 93:2a:d8:b3:1c:c7:a0:3f:d4:4b:b1:1d:9a:db:64: 00:95:46:ea:5c:31:f6:4a:70:a5:ed:96:6a:74:22: 9c:3e:3b:35:44:2d:57:ff:42:ce:9c:c0:a7:c7:08: 34:3c:95:19:ea:11:0d:30:26:cd:d7:c7:e8:28:13: fc:b2:ea:64:81:05:c5:7e:c2:0c:fa:8d:75:11:ed: 2a:57:88:33:36:56:14:f9:4b:7b:8a:b8:ea:fd:90: 5f:bd:f1:83:53:0b:48:55:aa:cd:e5:de:8d:d4:df: c1:d7:fb:32:7e:96:37:f0:d7:c6:a2:61:84:46:1d: 82:27:76:67:90:58:62:5c:31:42:32:34:71:87:3d: df:0d:cb:0f:66:c0:ca:ee:bb:e8:71:75:b0:dc:2f: 59:c7:3a:9d:34:42:db:f9:a3:ce:ba:3f:53:2a:48: aa:cc:fb:3f:ea:ea:be:eb:80:cc:57:f9:b2:5f:3c: 01:f8:fb:e2:22:38:3c:bc:24:03:a5:30:58:6c:3a: 81:1e:c7:e3:0d:38:83:b9:33:4b:29:9f:2d:f0:75: 29:64:0a:d2:45:26:36:99:f8:4f:d2:10:8d:c2:93: 6d:66:59:4c:b1:83:28:77:ae:6a:be:df:85:cd:c5: e2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E6:7E:39:F0:36:CD:63:51:5B:3B:EE:6B:15:7D:22:07:B5:32:1E X509v3 Authority Key Identifier: keyid:23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:63:eb:ae:43:4d:ee:89:61:2c:82:41:98:d5:c4:73:ed:d8: 41:dc:1b:ee:59:b4:99:61:54:84:fb:df:48:3c:31:26:9f:e1: 46:0e:9d:fb:06:9d:78:ff:87:72:74:69:cf:4c:b0:06:11:3c: c8:c1:7d:1e:80:6e:3e:e0:c5:d9:e0:e5:3c:e0:37:ab:bd:af: 28:e6:93:c2:04:e4:a6:09:42:db:6e:96:aa:8f:a6:b5:92:28: d1:8f:47:21:e4:82:bf:11:da:9e:80:3d:54:26:50:96:7e:fa: c5:c8:b8:03:e2:51:8a:82:19:c8:83:51:37:8d:91:f4:c0:57: 6c:6b:02:6c:fb:70:64:40:86:bc:c8:c8:5f:73:b4:7a:92:6d: cf:6a:5e:bb:e5:74:fd:81:1e:28:40:45:86:90:51:e2:52:10: 28:db:51:b0:ed:5c:82:6b:13:e6:2d:38:1c:a3:40:30:ed:b6: 34:36:f4:91:a3:6b:46:0e:41:6f:ee:7e:04:c4:f8:fd:73:03: 5f:0b:fa:a8:9e:42:fa:c2:74:68:f2:08:67:22:35:1f:e7:a7: a7:22:bb:0c:4e:b4:7f:fe:51:d7:a9:75:52:ae:da:fe:4e:7e: 19:13:e4:a0:b8:42:53:48:ef:f9:9a:ff:97:66:5d:32:31:a8: f3:75:bf:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWMACZbKc9xtEoUbo8siuhLFFQ78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIz QjAwRUVCNjAeFw0yNTA4MjEwNDQ2NTdaFw0yNTA4MjQxMzUzNTdaMDMxMTAvBgNV BAMTKDZDRTY3RTM5RjAzNkNENjM1MTVCM0JFRTZCMTU3RDIyMDdCNTMyMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsqn6BbkOdtVqTXFChIpMq2LMc x6A/1EuxHZrbZACVRupcMfZKcKXtlmp0Ipw+OzVELVf/Qs6cwKfHCDQ8lRnqEQ0w Js3Xx+goE/yy6mSBBcV+wgz6jXUR7SpXiDM2VhT5S3uKuOr9kF+98YNTC0hVqs3l 3o3U38HX+zJ+ljfw18aiYYRGHYIndmeQWGJcMUIyNHGHPd8Nyw9mwMruu+hxdbDc L1nHOp00Qtv5o866P1MqSKrM+z/q6r7rgMxX+bJfPAH4++IiODy8JAOlMFhsOoEe x+MNOIO5M0spny3wdSlkCtJFJjaZ+E/SEI3Ck21mWUyxgyh3rmq+34XNxeKdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbOZ+OfA2zWNRWzvuaxV9Ige1Mh4wHwYDVR0j BBgwFoAUIxMtasKg7UGZb1TACopZsjsA7rYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmU0N2M2ZC1lNjI0LTQ3N2MtYWUxOC1kMzJmMjJjOTYyMDQvMC8yMzEzMkQ2QUMy QTBFRDQxOTk2RjU0QzAwQThBNTlCMjNCMDBFRUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIzQjAw RUVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZlNDdjNmQtZTYyNC00NzdjLWFl MTgtZDMyZjIyYzk2MjA0LzAvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5 QjIzQjAwRUVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNj665DTe6JYSyCQZjVxHPt2EHcG+5ZtJlh VIT730g8MSaf4UYOnfsGnXj/h3J0ac9MsAYRPMjBfR6Abj7gxdng5TzgN6u9ryjm k8IE5KYJQttulqqPprWSKNGPRyHkgr8R2p6APVQmUJZ++sXIuAPiUYqCGciDUTeN kfTAV2xrAmz7cGRAhrzIyF9ztHqSbc9qXrvldP2BHihARYaQUeJSECjbUbDtXIJr E+YtOByjQDDttjQ29JGja0YOQW/ufgTE+P1zA18L+qieQvrCdGjyCGciNR/np6ci uwxOtH/+UdepdVKu2v5OfhkT5KC4QlNI7/ma/5dmXTIxqPN1v7s= -----END CERTIFICATE-----Generated at Sat Aug 23 12:53:50 2025 by rpki-client