$ rpki-client -vvf repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft File: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft (raw, json) Hash identifier: tQEqcXHsFkx429H+VBm2I248JS/sGEemmumvogHrgPE= Subject key identifier: CC:8D:27:4A:8B:8E:FC:91:4C:44:EF:C1:A1:9C:CB:AE:3F:52:E2:09 Authority key identifier: 23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 Certificate issuer: /CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Certificate serial: 58D74E1EE9899BA633335ACC71A08A3065DD388D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft Manifest number: 012C Signing time: Mon 20 Oct 2025 11:11:58 +0000 Manifest this update: Mon 20 Oct 2025 11:06:58 +0000 Manifest next update: Thu 23 Oct 2025 15:29:58 +0000 Files and hashes: 1: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl (hash: RSuhHwHnHnYvP4H/eKjMAniHbJWIND3AmG8c3lmZvVM=) 2: 3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa (hash: GanArMdyxHcMbx7yNEnXuF/pBEYLZnuk0ZSf31LCDR8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d7:4e:1e:e9:89:9b:a6:33:33:5a:cc:71:a0:8a:30:65:dd:38:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Validity Not Before: Oct 20 11:06:58 2025 GMT Not After : Oct 23 15:29:58 2025 GMT Subject: CN=CC8D274A8B8EFC914C44EFC1A19CCBAE3F52E209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5f:6b:f7:0f:34:f4:d1:86:66:8d:68:49:b4: b8:f5:fd:90:be:45:51:9f:be:f6:aa:41:86:73:0d: eb:72:87:f7:78:a9:57:07:8e:13:9e:90:d0:77:b7: 06:7a:63:69:00:74:c2:2c:93:b9:32:dd:af:4e:af: ae:77:6f:ec:47:5a:99:13:c3:65:c9:01:4d:3d:7d: 1a:d3:89:46:7c:98:56:d3:02:2e:cc:60:de:cf:ad: 74:e6:55:fd:62:6c:bb:fe:83:a8:3c:a1:d2:06:3b: bf:8f:46:b8:df:05:ae:6a:09:23:1a:a6:d1:ec:78: 0c:af:a8:2a:06:df:99:61:ab:65:9e:71:37:9f:b3: ab:64:ae:e3:60:91:3b:8d:db:b1:a8:dc:17:27:f5: 0f:a7:9c:d1:58:20:32:b2:f5:48:8f:0c:c6:a6:75: 00:de:1b:eb:15:82:ae:69:01:69:26:f7:0a:4b:9c: 20:d3:6d:9a:99:e9:2e:2f:13:14:0b:89:8d:de:f3: 9c:02:0c:53:49:68:51:1e:11:ed:cf:d5:68:02:e0: 36:28:1d:2a:4d:82:6c:e7:c3:41:07:3e:bf:ac:96: 57:0f:7c:c3:7f:cf:95:df:83:c8:17:56:e6:56:86: 93:44:f1:be:a9:e2:3a:21:a0:0e:ba:39:a8:02:63: c5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:8D:27:4A:8B:8E:FC:91:4C:44:EF:C1:A1:9C:CB:AE:3F:52:E2:09 X509v3 Authority Key Identifier: keyid:23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:b6:c6:48:fa:13:83:02:da:f8:ae:1c:9b:c7:91:6d:97:65: 96:f9:a4:32:23:8c:13:83:da:cd:d3:1e:6d:60:f0:29:09:33: c2:bd:63:c4:84:02:9a:85:55:d7:2c:46:8e:46:f0:f5:b2:cd: d1:db:fe:da:63:ff:67:df:a8:3c:9a:e8:00:52:cd:16:15:2b: 7d:e8:5c:c7:17:69:a0:b4:a8:5c:70:da:b6:8e:d6:63:9c:a0: 5c:6c:77:4c:d0:9c:43:42:51:82:15:0f:db:e8:65:be:b8:1d: 86:69:39:c0:4c:69:0c:30:2f:16:47:84:f0:f6:f8:ef:15:da: a8:96:cb:09:ec:41:c7:7a:13:76:b6:2e:74:47:da:fe:32:fe: fa:0d:dd:8d:2e:bc:01:23:f0:01:52:3a:68:b6:5c:cb:13:44: e5:a1:57:b2:cb:5f:98:10:83:81:7d:d4:7e:f9:95:4a:0b:b2: 33:a2:e5:ff:ba:fb:81:6f:f0:ab:f5:ac:7c:57:99:d2:e1:19: fe:ba:8b:c8:94:ed:b0:81:0b:aa:5e:fc:76:68:5d:4a:f0:49: 15:d3:9c:65:7a:79:e9:23:e0:b1:b7:4a:13:65:a6:2d:d8:1c: 37:10:e2:f7:59:37:66:0b:03:0b:a9:59:3b:2b:5e:43:0e:fe: f6:35:12:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWNdOHumJm6YzM1rMcaCKMGXdOI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIz QjAwRUVCNjAeFw0yNTEwMjAxMTA2NThaFw0yNTEwMjMxNTI5NThaMDMxMTAvBgNV BAMTKENDOEQyNzRBOEI4RUZDOTE0QzQ0RUZDMUExOUNDQkFFM0Y1MkUyMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzX2v3DzT00YZmjWhJtLj1/ZC+ RVGfvvaqQYZzDetyh/d4qVcHjhOekNB3twZ6Y2kAdMIsk7ky3a9Or653b+xHWpkT w2XJAU09fRrTiUZ8mFbTAi7MYN7PrXTmVf1ibLv+g6g8odIGO7+PRrjfBa5qCSMa ptHseAyvqCoG35lhq2WecTefs6tkruNgkTuN27Go3Bcn9Q+nnNFYIDKy9UiPDMam dQDeG+sVgq5pAWkm9wpLnCDTbZqZ6S4vExQLiY3e85wCDFNJaFEeEe3P1WgC4DYo HSpNgmznw0EHPr+sllcPfMN/z5Xfg8gXVuZWhpNE8b6p4johoA66OagCY8VDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzI0nSouO/JFMRO/BoZzLrj9S4gkwHwYDVR0j BBgwFoAUIxMtasKg7UGZb1TACopZsjsA7rYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmU0N2M2ZC1lNjI0LTQ3N2MtYWUxOC1kMzJmMjJjOTYyMDQvMC8yMzEzMkQ2QUMy QTBFRDQxOTk2RjU0QzAwQThBNTlCMjNCMDBFRUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIzQjAw RUVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZlNDdjNmQtZTYyNC00NzdjLWFl MTgtZDMyZjIyYzk2MjA0LzAvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5 QjIzQjAwRUVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIi2xkj6E4MC2viuHJvHkW2XZZb5pDIjjBOD 2s3THm1g8CkJM8K9Y8SEApqFVdcsRo5G8PWyzdHb/tpj/2ffqDya6ABSzRYVK33o XMcXaaC0qFxw2raO1mOcoFxsd0zQnENCUYIVD9voZb64HYZpOcBMaQwwLxZHhPD2 +O8V2qiWywnsQcd6E3a2LnRH2v4y/voN3Y0uvAEj8AFSOmi2XMsTROWhV7LLX5gQ g4F91H75lUoLsjOi5f+6+4Fv8Kv1rHxXmdLhGf66i8iU7bCBC6pe/HZoXUrwSRXT nGV6eekj4LG3ShNlpi3YHDcQ4vdZN2YLAwupWTsrXkMO/vY1EoE= -----END CERTIFICATE-----Generated at Mon Oct 20 14:37:06 2025 by rpki-client