$ rpki-client -vvf repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft File: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft (raw, json) Hash identifier: iaEDujNpdgAWQmO5QX8rxTdmVkxJ93P4HSKrLU2PI08= Subject key identifier: D8:42:E8:91:96:06:BE:37:C1:CD:24:C2:65:1D:19:D2:44:50:2F:6D Authority key identifier: 23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C Certificate issuer: /CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Certificate serial: 3744B8F42BE03BABA45CEC94092AEEE8D273E365 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft Manifest number: 72 Signing time: Mon 30 Jun 2025 03:42:01 +0000 Manifest this update: Mon 30 Jun 2025 03:37:01 +0000 Manifest next update: Thu 03 Jul 2025 04:06:01 +0000 Files and hashes: 1: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl (hash: bN5rdisdg4z9OeXJaxz3cEmDjISQeu9kBxnHWhBMsbA=) 2: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: YV/07SIZYC4/VtvBJStdBJgRKQnAK1y/gzxul6oggek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 04:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:44:b8:f4:2b:e0:3b:ab:a4:5c:ec:94:09:2a:ee:e8:d2:73:e3:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Validity Not Before: Jun 30 03:37:01 2025 GMT Not After : Jul 3 04:06:01 2025 GMT Subject: CN=D842E8919606BE37C1CD24C2651D19D244502F6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ac:75:4c:9c:5f:ac:29:6d:71:84:d5:8f:f0: 15:11:5e:d5:64:3a:6c:cb:da:9d:da:66:5c:15:f1: b4:c4:4d:ad:94:93:22:fe:8c:4b:ec:35:63:f6:ff: e3:e3:01:2e:08:50:36:d8:8d:59:a2:49:f6:28:d4: 05:8e:f3:3e:bb:c8:8d:7c:1c:a8:76:d5:da:40:0f: 9f:81:53:be:dc:04:54:27:60:4b:9c:44:fd:42:29: 6d:29:f7:b2:86:6f:9b:02:41:ce:24:60:97:3c:fe: 83:07:70:dc:eb:fd:19:fc:a4:7d:d7:64:aa:2a:1a: 4d:57:3b:dd:0d:4d:e4:12:67:33:e5:5d:02:4d:a0: a2:b5:47:6d:ab:4e:c2:05:02:ee:70:c1:bd:ff:d8: 53:6c:c2:86:5c:ed:e5:fa:5c:7c:58:20:d2:de:41: a3:be:c9:6a:d0:c0:27:ed:df:39:5a:23:7d:ef:a7: 9e:4f:2d:e5:0f:4d:d4:b8:b5:8b:da:9a:8d:88:dd: 93:e7:48:22:05:9d:1d:5f:dd:97:44:d2:4a:29:d3: 2c:97:c8:97:6f:0f:a4:19:a5:fc:6b:ff:28:ea:34: 5b:e0:1a:ad:26:ae:13:9e:54:4f:6b:61:50:7a:0c: 58:5d:46:75:33:ae:e5:74:38:2c:63:29:51:f8:03: 8b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:42:E8:91:96:06:BE:37:C1:CD:24:C2:65:1D:19:D2:44:50:2F:6D X509v3 Authority Key Identifier: keyid:23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:81:39:58:f3:5d:d6:d4:d8:83:37:68:7e:de:75:b0:97:5b: 7d:ba:b6:95:70:f1:9c:d6:dc:2d:db:f6:59:b1:88:f8:8f:6b: a3:dd:17:ec:f3:a1:10:4b:79:5f:33:01:c7:2f:12:a8:07:90: c4:15:06:0c:40:8f:19:a3:98:59:b1:d2:99:28:4b:42:cd:dd: 3a:5f:39:13:73:f1:55:6a:e7:38:71:61:72:02:aa:bd:b5:c4: 44:aa:93:55:31:98:80:22:ad:3c:97:04:72:d0:7b:2b:06:83: b7:d2:53:c4:8e:a4:6e:3a:33:93:dc:0e:f7:cb:70:da:0b:de: 91:c7:a5:19:8f:f3:3e:e9:85:a3:92:bc:f1:24:20:9e:ed:3d: 0f:76:f3:e3:4b:dd:49:fb:f4:a7:64:a8:d4:35:8b:8c:8a:7e: e1:98:13:ed:77:76:52:62:84:ed:40:ab:c6:6e:76:51:74:8d: 85:56:d0:ca:37:c2:df:1a:d2:7d:67:3a:2f:dc:bf:95:2f:a0: 9b:eb:8e:0e:24:3a:b6:d0:ee:5f:f4:ba:a5:cd:fa:cb:50:2d: d9:be:66:39:a8:a6:5d:1b:ae:a3:b9:7a:e0:44:44:e8:ea:08: 13:fb:45:f3:87:d7:39:94:65:37:ce:29:3c:b8:b9:9e:8c:0f: c7:33:d7:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN0S49CvgO6ukXOyUCSru6NJz42UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3 N0U4RUU3QzAeFw0yNTA2MzAwMzM3MDFaFw0yNTA3MDMwNDA2MDFaMDMxMTAvBgNV BAMTKEQ4NDJFODkxOTYwNkJFMzdDMUNEMjRDMjY1MUQxOUQyNDQ1MDJGNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDrHVMnF+sKW1xhNWP8BURXtVk OmzL2p3aZlwV8bTETa2UkyL+jEvsNWP2/+PjAS4IUDbYjVmiSfYo1AWO8z67yI18 HKh21dpAD5+BU77cBFQnYEucRP1CKW0p97KGb5sCQc4kYJc8/oMHcNzr/Rn8pH3X ZKoqGk1XO90NTeQSZzPlXQJNoKK1R22rTsIFAu5wwb3/2FNswoZc7eX6XHxYINLe QaO+yWrQwCft3zlaI33vp55PLeUPTdS4tYvamo2I3ZPnSCIFnR1f3ZdE0kop0yyX yJdvD6QZpfxr/yjqNFvgGq0mrhOeVE9rYVB6DFhdRnUzruV0OCxjKVH4A4vZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ELokZYGvjfBzSTCZR0Z0kRQL20wHwYDVR0j BBgwFoAUI76M6mGUBvnYYLH5fuj37Xfo7nwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmVkNmRjNC1kMzhiLTQ0YmEtOWYwYi00Mjg0NTViMjc2ZWUvMC8yM0JFOENFQTYx OTQwNkY5RDg2MEIxRjk3RUU4RjdFRDc3RThFRTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3N0U4 RUU3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJlZDZkYzQtZDM4Yi00NGJhLTlm MGItNDI4NDU1YjI3NmVlLzAvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3 RUQ3N0U4RUU3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGBOVjzXdbU2IM3aH7edbCXW326tpVw8ZzW 3C3b9lmxiPiPa6PdF+zzoRBLeV8zAccvEqgHkMQVBgxAjxmjmFmx0pkoS0LN3Tpf ORNz8VVq5zhxYXICqr21xESqk1UxmIAirTyXBHLQeysGg7fSU8SOpG46M5PcDvfL cNoL3pHHpRmP8z7phaOSvPEkIJ7tPQ928+NL3Un79KdkqNQ1i4yKfuGYE+13dlJi hO1Aq8ZudlF0jYVW0Mo3wt8a0n1nOi/cv5UvoJvrjg4kOrbQ7l/0uqXN+stQLdm+ Zjmopl0brqO5euBEROjqCBP7RfOH1zmUZTfOKTy4uZ6MD8cz19Q= -----END CERTIFICATE-----Generated at Tue Jul 1 01:52:40 2025 by rpki-client