$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft File: F23ACCA147720B423A9576F3E408691505B293A3.mft (raw, json) Hash identifier: NKdl7fvHjJjNYXhnnxdFkX3BIhDEuMihzab8X8AVAIE= Subject key identifier: 03:BF:25:81:62:A9:89:09:3A:31:BC:ED:C0:55:15:2E:01:DC:77:23 Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 Certificate issuer: /CN=F23ACCA147720B423A9576F3E408691505B293A3 Certificate serial: 1029A2B070D82171A84DF82186FCB57CF020A5FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft Manifest number: 014B Signing time: Sun 19 Oct 2025 05:21:36 +0000 Manifest this update: Sun 19 Oct 2025 05:16:36 +0000 Manifest next update: Wed 22 Oct 2025 09:20:36 +0000 Files and hashes: 1: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: BETPcfS1VcTumvWSwQRlY9PEvVDNhn9IgT3oOeof4jw=) 2: F23ACCA147720B423A9576F3E408691505B293A3.crl (hash: 2gTTry2RBcDI474sHMDguNT+bZpmcByt4LMAPr3Kmpc=) 3: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: bL4A3iMML3JwhDE2yFeN6uDiSzuObZzoT/f0gxHop3A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:29:a2:b0:70:d8:21:71:a8:4d:f8:21:86:fc:b5:7c:f0:20:a5:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3 Validity Not Before: Oct 19 05:16:36 2025 GMT Not After : Oct 22 09:20:36 2025 GMT Subject: CN=03BF258162A989093A31BCEDC055152E01DC7723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:22:40:01:37:f6:29:41:d1:d8:2b:e1:2c:11: 7e:fe:2a:ea:ef:13:c6:fd:a3:18:5d:ba:b0:f9:a5: 00:d7:c8:9e:23:40:02:02:93:22:61:52:77:36:40: 8c:1f:6c:3a:26:e7:0a:fb:3a:83:51:8e:35:f9:66: 0d:33:e9:4f:c6:97:85:77:69:44:f1:f6:40:c0:53: d2:ed:71:30:24:a4:8e:4c:e2:89:54:73:a9:53:b0: b6:b5:02:42:30:c5:4a:97:4a:e7:8e:c7:6e:31:1a: 1a:75:75:4f:1c:89:51:dd:3c:8c:f1:7f:3c:2a:c5: 04:89:d3:66:12:7e:b3:25:61:dc:85:b5:29:85:30: aa:99:02:bb:b5:d8:7a:0e:0f:91:7a:10:a0:b2:b9: d7:46:1d:da:2a:ec:89:5b:cd:48:74:8f:b6:30:ce: db:e1:82:66:48:32:f6:7f:a0:65:fc:9a:21:55:97: ea:af:10:2a:80:a7:49:1c:e8:38:09:31:23:b5:9e: a4:9d:45:b3:c0:8f:3b:43:c8:ff:41:45:53:70:6d: e1:24:0d:4a:48:b4:f3:85:a5:81:dc:60:2e:a0:40: 36:65:78:af:69:da:40:f5:ea:a0:80:6b:b7:b5:4b: cb:71:6b:a0:e3:ca:fa:67:69:22:6c:6c:da:07:ca: df:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BF:25:81:62:A9:89:09:3A:31:BC:ED:C0:55:15:2E:01:DC:77:23 X509v3 Authority Key Identifier: keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:10:47:35:0f:13:ba:fa:de:70:3b:15:4a:b4:57:42:a4:56: 4e:9e:dd:f0:91:08:17:2a:0d:3e:44:46:3e:e4:61:e6:29:ab: 9f:fc:6c:43:8e:6e:74:f6:34:20:45:51:f5:25:e9:d7:99:89: e0:1b:9f:19:ad:d6:70:20:61:33:d0:a5:64:b9:e2:68:4a:f5: a5:b7:f2:ab:75:c0:a9:d0:0e:be:cb:97:0e:a3:fb:de:ba:70: a8:32:28:de:40:41:60:0a:31:8e:ec:c5:67:d7:29:76:7d:c9: d7:fa:c2:73:8f:81:fa:30:a7:5a:d5:fb:bb:ed:88:23:21:48: fb:fc:e1:ec:38:7a:a6:96:11:56:88:26:ac:98:87:bc:24:81: 0f:6b:dd:32:53:0d:f7:43:6b:b3:b6:a1:c7:8e:3f:4c:5a:ce: 1f:9f:81:07:40:a2:c0:b1:43:bc:78:dc:a2:3f:2c:0b:53:af: 8d:3d:08:a0:2c:d4:4d:6e:94:b9:e9:ef:75:65:61:b5:09:e4: ca:f1:58:d1:34:9b:b3:7b:5a:fa:54:3e:6b:ee:86:c6:3c:80: e6:87:09:e4:91:6c:f5:6b:f0:07:44:40:9d:8a:34:c2:aa:1c: 4f:44:9c:d8:ee:c4:d7:2e:93:40:93:51:6c:7f:40:bd:e6:08: 01:a8:b2:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUECmisHDYIXGoTfghhvy1fPAgpf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUw NUIyOTNBMzAeFw0yNTEwMTkwNTE2MzZaFw0yNTEwMjIwOTIwMzZaMDMxMTAvBgNV BAMTKDAzQkYyNTgxNjJBOTg5MDkzQTMxQkNFREMwNTUxNTJFMDFEQzc3MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwIkABN/YpQdHYK+EsEX7+Kurv E8b9oxhdurD5pQDXyJ4jQAICkyJhUnc2QIwfbDom5wr7OoNRjjX5Zg0z6U/Gl4V3 aUTx9kDAU9LtcTAkpI5M4olUc6lTsLa1AkIwxUqXSueOx24xGhp1dU8ciVHdPIzx fzwqxQSJ02YSfrMlYdyFtSmFMKqZAru12HoOD5F6EKCyuddGHdoq7IlbzUh0j7Yw ztvhgmZIMvZ/oGX8miFVl+qvECqAp0kc6DgJMSO1nqSdRbPAjztDyP9BRVNwbeEk DUpItPOFpYHcYC6gQDZleK9p2kD16qCAa7e1S8txa6DjyvpnaSJsbNoHyt8LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA78lgWKpiQk6MbztwFUVLgHcdyMwHwYDVR0j BBgwFoAU8jrMoUdyC0I6lXbz5AhpFQWyk6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWUxNDM4Mi1kNTg3LTRlODYtOGU3ZS02YTI2NGE1OGVhMDYvMC9GMjNBQ0NBMTQ3 NzIwQjQyM0E5NTc2RjNFNDA4NjkxNTA1QjI5M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUwNUIy OTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVlMTQzODItZDU4Ny00ZTg2LThl N2UtNmEyNjRhNThlYTA2LzAvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5 MTUwNUIyOTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALwQRzUPE7r63nA7FUq0V0KkVk6e3fCRCBcq DT5ERj7kYeYpq5/8bEOObnT2NCBFUfUl6deZieAbnxmt1nAgYTPQpWS54mhK9aW3 8qt1wKnQDr7Llw6j+966cKgyKN5AQWAKMY7sxWfXKXZ9ydf6wnOPgfowp1rV+7vt iCMhSPv84ew4eqaWEVaIJqyYh7wkgQ9r3TJTDfdDa7O2oceOP0xazh+fgQdAosCx Q7x43KI/LAtTr409CKAs1E1ulLnp73VlYbUJ5MrxWNE0m7N7WvpUPmvuhsY8gOaH CeSRbPVr8AdEQJ2KNMKqHE9EnNjuxNcuk0CTUWx/QL3mCAGosr0= -----END CERTIFICATE-----Generated at Tue Oct 21 00:50:52 2025 by rpki-client