$ rpki-client -vvf repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft File: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft (raw, json) Hash identifier: oZzLjdH1Yv3Y3albImBLO02OjRVAyki6Fb5WCkVGiXg= Subject key identifier: 28:CC:B0:92:B5:99:F6:58:EB:B6:F5:6E:69:0A:9E:D5:4E:15:8C:06 Authority key identifier: 23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C Certificate issuer: /CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Certificate serial: 060ADD317D300C7436F81AC23411F1B7FDDB5B90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft Manifest number: 8A Signing time: Fri 22 Aug 2025 20:32:14 +0000 Manifest this update: Fri 22 Aug 2025 20:27:14 +0000 Manifest next update: Mon 25 Aug 2025 22:06:14 +0000 Files and hashes: 1: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: YV/07SIZYC4/VtvBJStdBJgRKQnAK1y/gzxul6oggek=) 2: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl (hash: MlRX96C4ENzJYqDxsBd9LzffVUaCh2/yiXIOCRwoNKs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:0a:dd:31:7d:30:0c:74:36:f8:1a:c2:34:11:f1:b7:fd:db:5b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Validity Not Before: Aug 22 20:27:14 2025 GMT Not After : Aug 25 22:06:14 2025 GMT Subject: CN=28CCB092B599F658EBB6F56E690A9ED54E158C06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:25:c0:20:95:b5:77:9d:64:29:69:18:06:62: d6:d4:09:57:75:9e:5e:10:5f:7d:34:a8:f7:97:9a: 95:c0:cd:2b:7b:48:f1:d9:ea:ba:ac:36:b1:34:42: 12:43:79:62:53:e0:f4:ce:6a:d4:a3:ef:e0:7a:65: c1:7f:c7:08:0d:e8:a5:cc:b2:87:6a:68:ff:25:4c: fa:7c:14:80:e3:55:51:9a:bb:13:b6:22:a8:6d:c8: a2:94:4d:8b:95:2e:a2:4f:6f:05:a0:82:ef:e2:0e: c1:b9:97:ac:52:50:11:88:15:56:1e:0f:43:d9:95: b5:f4:5f:2f:ec:31:1f:ef:3c:d9:66:ce:14:84:92: 57:e2:43:3e:41:fd:3c:4f:8b:87:60:ea:37:61:cd: 34:b1:0c:53:de:6d:a6:18:1e:1c:be:e6:69:26:a6: 40:85:e4:53:66:37:4e:4a:f3:72:87:6d:0a:d5:d5: 3c:21:8e:b6:d8:37:fe:ec:87:85:18:fa:6e:3c:e6: 34:d3:29:bf:c1:78:03:84:ee:f6:ed:4b:7d:02:1a: 68:35:e0:37:ba:9e:bd:7b:ad:78:6c:c5:b1:94:6d: 4f:2a:f6:d7:b0:32:d4:d9:fc:d8:d3:d5:77:35:e6: eb:92:53:a0:ee:61:e1:2b:fb:b7:55:f6:92:db:68: 68:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CC:B0:92:B5:99:F6:58:EB:B6:F5:6E:69:0A:9E:D5:4E:15:8C:06 X509v3 Authority Key Identifier: keyid:23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:12:a7:19:ca:7a:49:d4:53:63:dd:11:38:58:59:dd:f4:53: d1:0e:cf:14:61:14:24:2e:1d:4f:7e:e2:7a:b9:09:5d:41:21: 53:e9:69:92:52:2a:9a:3c:92:08:e0:27:97:1b:cd:fe:54:21: e3:4d:9d:af:c5:dd:0b:35:e1:59:d3:76:21:46:11:4b:1a:8a: 78:86:b0:d4:c8:bf:92:c2:16:61:a4:a8:19:98:50:5e:08:3c: 13:14:fe:f7:58:fb:7a:71:57:03:1d:59:1a:d8:17:96:b1:81: d3:ee:e8:fe:eb:be:6a:ad:dd:ef:4f:4f:68:33:da:9e:c1:01: f4:f9:0c:78:e9:5b:f1:04:90:84:7f:49:2c:aa:68:7d:c1:13: be:3b:a7:7f:d9:78:1f:60:9b:7a:a9:58:0e:ab:13:7b:de:dc: 23:22:5d:6c:84:f6:4a:9a:19:80:12:a9:46:cf:55:ff:0a:31: 38:ef:5c:0b:84:88:96:8b:c1:8a:d9:a6:c5:e7:4f:f3:47:29: e1:d1:9f:4d:c1:46:9d:56:f9:93:30:53:5a:40:92:0b:54:f9: 54:20:ef:7d:41:e4:26:5c:d6:38:59:ac:47:dd:56:15:c9:a3: 5b:80:46:08:a1:33:67:f1:d3:f7:61:ad:c0:cf:37:0c:8d:5b: 38:b9:ad:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBgrdMX0wDHQ2+BrCNBHxt/3bW5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3 N0U4RUU3QzAeFw0yNTA4MjIyMDI3MTRaFw0yNTA4MjUyMjA2MTRaMDMxMTAvBgNV BAMTKDI4Q0NCMDkyQjU5OUY2NThFQkI2RjU2RTY5MEE5RUQ1NEUxNThDMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJcAglbV3nWQpaRgGYtbUCVd1 nl4QX300qPeXmpXAzSt7SPHZ6rqsNrE0QhJDeWJT4PTOatSj7+B6ZcF/xwgN6KXM sodqaP8lTPp8FIDjVVGauxO2IqhtyKKUTYuVLqJPbwWggu/iDsG5l6xSUBGIFVYe D0PZlbX0Xy/sMR/vPNlmzhSEklfiQz5B/TxPi4dg6jdhzTSxDFPebaYYHhy+5mkm pkCF5FNmN05K83KHbQrV1TwhjrbYN/7sh4UY+m485jTTKb/BeAOE7vbtS30CGmg1 4De6nr17rXhsxbGUbU8q9tewMtTZ/NjT1Xc15uuSU6DuYeEr+7dV9pLbaGiTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKMywkrWZ9ljrtvVuaQqe1U4VjAYwHwYDVR0j BBgwFoAUI76M6mGUBvnYYLH5fuj37Xfo7nwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmVkNmRjNC1kMzhiLTQ0YmEtOWYwYi00Mjg0NTViMjc2ZWUvMC8yM0JFOENFQTYx OTQwNkY5RDg2MEIxRjk3RUU4RjdFRDc3RThFRTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3N0U4 RUU3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJlZDZkYzQtZDM4Yi00NGJhLTlm MGItNDI4NDU1YjI3NmVlLzAvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3 RUQ3N0U4RUU3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIASpxnKeknUU2PdEThYWd30U9EOzxRhFCQu HU9+4nq5CV1BIVPpaZJSKpo8kgjgJ5cbzf5UIeNNna/F3Qs14VnTdiFGEUsainiG sNTIv5LCFmGkqBmYUF4IPBMU/vdY+3pxVwMdWRrYF5axgdPu6P7rvmqt3e9PT2gz 2p7BAfT5DHjpW/EEkIR/SSyqaH3BE747p3/ZeB9gm3qpWA6rE3ve3CMiXWyE9kqa GYASqUbPVf8KMTjvXAuEiJaLwYrZpsXnT/NHKeHRn03BRp1W+ZMwU1pAkgtU+VQg 731B5CZc1jhZrEfdVhXJo1uARgihM2fx0/dhrcDPNwyNWzi5rcE= -----END CERTIFICATE-----Generated at Sat Aug 23 21:52:58 2025 by rpki-client