$ rpki-client -vvf repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft File: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft (raw, json) Hash identifier: exwG8FAJSuDAvd/T6V/OvmQtODfZpjp+mpzGrNeDqaU= Subject key identifier: F3:8F:B9:A6:7E:C7:4C:C3:31:A8:75:F3:21:0A:62:C2:6B:64:19:C9 Authority key identifier: 23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C Certificate issuer: /CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Certificate serial: 0444B43B34EC68434009B37C24B4C5EB9A34723D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft Manifest number: A5 Signing time: Sun 19 Oct 2025 16:42:04 +0000 Manifest this update: Sun 19 Oct 2025 16:37:04 +0000 Manifest next update: Wed 22 Oct 2025 21:16:04 +0000 Files and hashes: 1: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl (hash: MPXHUfJTvxFkFAU227i5SgjY2lZ10DIQA7cdS2Vt9cs=) 2: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: TgOS2DIzKKN1li7GhbP8QE2EiuFzEQeHETrSLQ8zd80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:44:b4:3b:34:ec:68:43:40:09:b3:7c:24:b4:c5:eb:9a:34:72:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Validity Not Before: Oct 19 16:37:04 2025 GMT Not After : Oct 22 21:16:04 2025 GMT Subject: CN=F38FB9A67EC74CC331A875F3210A62C26B6419C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b7:a4:d8:d9:c6:81:68:97:20:7a:be:3a:c4: 15:ec:05:83:52:a1:65:2e:14:3c:d6:7c:25:fe:84: ae:70:f9:25:f1:68:4b:8e:0b:f4:d7:86:a3:64:aa: 45:4b:a6:b3:2f:2e:82:ae:49:ff:22:b0:2a:41:b2: fe:af:9a:ff:10:d0:ee:86:83:fc:66:f3:7b:e4:a4: cc:0c:de:5a:03:3e:77:0e:23:7b:8b:17:5a:db:ca: 83:d2:9d:8a:63:51:3e:84:67:5d:47:26:c5:63:3a: 8f:8c:04:34:fb:f5:94:97:16:57:b4:11:60:18:36: a6:37:25:0f:a2:65:3c:00:a2:e3:0d:78:a4:fe:f1: c7:58:2c:19:54:a9:e6:af:3b:35:14:54:c6:e3:66: b1:c7:5f:4c:75:9e:84:81:b9:df:25:99:0c:e7:61: 27:a9:6e:27:25:6e:98:2b:91:7e:49:40:94:5b:9b: 90:f9:27:dd:bc:85:b5:05:c3:76:37:a5:af:0a:53: 82:6f:12:3f:ab:47:7f:b9:de:83:c2:7a:5b:72:ee: c5:03:8e:c3:2b:8e:15:f7:2e:fb:2a:ea:ec:76:79: 51:89:18:1c:25:46:5f:ba:cf:e1:f2:3c:6b:6e:57: 4c:46:4e:72:62:35:f5:52:e6:4e:23:43:f7:2c:82: c2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8F:B9:A6:7E:C7:4C:C3:31:A8:75:F3:21:0A:62:C2:6B:64:19:C9 X509v3 Authority Key Identifier: keyid:23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:3c:07:6c:06:4c:ad:0d:31:41:4c:86:0f:9a:12:18:40:a8: b4:cf:1c:6a:26:2b:2a:b4:d0:d4:bc:c4:48:15:65:30:11:bc: 74:7b:56:ef:79:77:7a:68:c9:11:50:d6:18:fd:31:b0:12:60: dc:2d:28:9c:ac:52:fd:28:f9:02:0a:77:b8:e4:e5:26:30:30: 3a:70:08:fe:3c:00:9e:60:22:04:9b:5e:26:2f:d3:5a:3e:52: 74:04:10:9a:c0:10:0d:39:8d:5a:89:94:75:d0:d4:9e:0f:88: 34:85:58:27:98:90:cb:47:34:52:a7:f6:b1:ef:f9:18:4c:59: 85:52:a5:12:53:35:ba:66:8b:b4:b1:c0:a2:54:97:21:26:5f: fd:82:3f:61:0e:f6:b6:31:52:d2:73:fe:e8:dc:60:e7:04:a3: 78:77:e7:f4:ea:31:ad:39:47:11:c3:99:9b:4e:a8:2d:31:af: b9:ee:aa:a7:53:0a:6f:ec:ad:df:f4:ff:66:61:dd:28:81:bf: 06:e8:b8:38:ce:f9:52:4d:a8:0c:f7:0e:56:8f:ec:b1:0e:5c: 62:0e:c6:8c:e9:e5:01:46:d9:b5:42:59:44:a5:15:19:fd:12: bd:1d:85:d2:bd:fc:96:86:0f:e5:f5:d1:b6:f6:eb:00:68:09: 5e:60:bc:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBES0OzTsaENACbN8JLTF65o0cj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3 N0U4RUU3QzAeFw0yNTEwMTkxNjM3MDRaFw0yNTEwMjIyMTE2MDRaMDMxMTAvBgNV BAMTKEYzOEZCOUE2N0VDNzRDQzMzMUE4NzVGMzIxMEE2MkMyNkI2NDE5QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmt6TY2caBaJcger46xBXsBYNS oWUuFDzWfCX+hK5w+SXxaEuOC/TXhqNkqkVLprMvLoKuSf8isCpBsv6vmv8Q0O6G g/xm83vkpMwM3loDPncOI3uLF1rbyoPSnYpjUT6EZ11HJsVjOo+MBDT79ZSXFle0 EWAYNqY3JQ+iZTwAouMNeKT+8cdYLBlUqeavOzUUVMbjZrHHX0x1noSBud8lmQzn YSepbiclbpgrkX5JQJRbm5D5J928hbUFw3Y3pa8KU4JvEj+rR3+53oPCelty7sUD jsMrjhX3Lvsq6ux2eVGJGBwlRl+6z+HyPGtuV0xGTnJiNfVS5k4jQ/csgsLTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU84+5pn7HTMMxqHXzIQpiwmtkGckwHwYDVR0j BBgwFoAUI76M6mGUBvnYYLH5fuj37Xfo7nwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmVkNmRjNC1kMzhiLTQ0YmEtOWYwYi00Mjg0NTViMjc2ZWUvMC8yM0JFOENFQTYx OTQwNkY5RDg2MEIxRjk3RUU4RjdFRDc3RThFRTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3N0U4 RUU3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJlZDZkYzQtZDM4Yi00NGJhLTlm MGItNDI4NDU1YjI3NmVlLzAvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3 RUQ3N0U4RUU3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQ8B2wGTK0NMUFMhg+aEhhAqLTPHGomKyq0 0NS8xEgVZTARvHR7Vu95d3poyRFQ1hj9MbASYNwtKJysUv0o+QIKd7jk5SYwMDpw CP48AJ5gIgSbXiYv01o+UnQEEJrAEA05jVqJlHXQ1J4PiDSFWCeYkMtHNFKn9rHv +RhMWYVSpRJTNbpmi7SxwKJUlyEmX/2CP2EO9rYxUtJz/ujcYOcEo3h35/TqMa05 RxHDmZtOqC0xr7nuqqdTCm/srd/0/2Zh3SiBvwbouDjO+VJNqAz3DlaP7LEOXGIO xozp5QFG2bVCWUSlFRn9Er0dhdK9/JaGD+X10bb26wBoCV5gvJQ= -----END CERTIFICATE-----Generated at Mon Oct 20 08:44:54 2025 by rpki-client