$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft File: F23ACCA147720B423A9576F3E408691505B293A3.mft (raw, json) Hash identifier: 0IPVsFbjW7ZQb/J7Qqfj2NxXERhZZyeO/E9LKysa5IU= Subject key identifier: F9:D1:8B:0F:86:C2:25:A6:08:F5:03:C1:74:43:6D:93:96:D3:45:21 Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 Certificate issuer: /CN=F23ACCA147720B423A9576F3E408691505B293A3 Certificate serial: 29D988F0771AB783B7ABFB3485405C922C41F849 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft Manifest number: 0132 Signing time: Sat 23 Aug 2025 10:01:36 +0000 Manifest this update: Sat 23 Aug 2025 09:56:36 +0000 Manifest next update: Tue 26 Aug 2025 18:06:36 +0000 Files and hashes: 1: F23ACCA147720B423A9576F3E408691505B293A3.crl (hash: rqVBUgE/v3DiC3waDBFXDZXhm/wxnKdefYLqjFu/brk=) 2: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: bL4A3iMML3JwhDE2yFeN6uDiSzuObZzoT/f0gxHop3A=) 3: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: BETPcfS1VcTumvWSwQRlY9PEvVDNhn9IgT3oOeof4jw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 18:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d9:88:f0:77:1a:b7:83:b7:ab:fb:34:85:40:5c:92:2c:41:f8:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3 Validity Not Before: Aug 23 09:56:36 2025 GMT Not After : Aug 26 18:06:36 2025 GMT Subject: CN=F9D18B0F86C225A608F503C174436D9396D34521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:79:b0:f4:20:ad:81:d8:2c:63:6f:d3:dc:d3: 3b:b5:80:f4:e8:42:68:8c:93:21:e1:7c:a9:18:5b: 70:92:6a:da:99:bd:99:56:b5:ef:b9:75:e6:a8:19: 4c:54:d7:a1:21:9f:08:8f:35:af:a6:22:eb:75:70: 25:e4:e8:d9:84:bd:2a:a7:9f:b4:8f:53:f0:df:8b: 7e:99:47:53:0b:2b:04:ec:3d:6b:9c:19:00:ab:1c: 3b:58:87:b1:88:14:95:0a:16:73:fe:91:dc:59:70: aa:13:37:00:c8:f6:96:5c:b9:6e:a3:4c:e0:c3:c7: 4d:ba:38:a5:03:78:35:10:5b:dd:cd:7b:c1:b9:cc: c3:b6:55:e1:74:b2:a5:10:db:3f:c1:c6:13:41:3b: c5:78:92:98:c9:a5:43:0d:9c:c4:ee:75:ba:7b:c2: 2e:18:43:c3:b4:6c:d2:19:f3:13:f3:e3:ce:c1:e0: 27:6d:1f:e6:45:d4:8c:a7:b7:7b:c7:cb:52:13:e1: d4:d1:07:c2:c7:a9:72:15:d9:ab:28:78:11:84:c2: ca:b8:20:0c:3c:c8:66:8a:19:49:6b:bb:3d:1f:48: 6a:96:9d:32:61:e2:97:32:d6:31:2e:70:15:f7:88: 2a:3e:88:ac:2d:a1:60:4a:2f:9f:2e:0a:e7:25:fb: 85:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D1:8B:0F:86:C2:25:A6:08:F5:03:C1:74:43:6D:93:96:D3:45:21 X509v3 Authority Key Identifier: keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:24:36:1e:ba:cf:de:a5:a7:f3:e8:76:38:fc:07:09:d6:51: 62:46:07:66:f7:5e:01:9e:ac:7d:b3:eb:8e:b6:5d:43:f9:ae: 31:dd:31:8d:68:82:0f:4f:ee:d8:20:ca:26:be:25:b2:1f:eb: 39:31:0d:da:44:3a:f3:af:e2:55:b5:af:69:6f:e8:75:e7:1c: 63:d5:74:96:b8:03:2a:e3:09:2e:b6:40:d9:21:4f:60:95:11: b1:65:64:41:8c:37:b1:13:46:b4:28:57:83:f1:ab:13:d1:ea: 70:c0:10:ef:73:43:22:23:19:70:2f:84:1e:3a:b7:81:da:0a: ff:cf:d7:a7:2a:29:d1:77:b3:7c:62:dd:bc:ba:18:47:5c:d4: bc:21:20:14:7a:64:b1:e3:f9:b5:8c:f1:df:6e:1d:69:5a:e5: 3a:aa:93:4b:c2:de:8e:fa:cd:ff:9f:a6:f3:73:d9:f7:56:8f: 3c:d1:53:d9:9d:bf:84:d0:26:42:43:19:6a:9c:88:b6:45:8e: 5a:9d:7b:77:bb:0e:18:d4:e6:f0:e3:27:05:30:8c:0c:26:1f: e4:c4:40:17:df:c8:92:f1:f6:6d:55:61:b2:ef:f7:fd:86:cc: a0:7d:c2:ff:c9:2a:ab:3e:db:38:97:8b:0b:0e:32:b0:4c:8e: c5:02:09:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKdmI8Hcat4O3q/s0hUBckixB+EkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUw NUIyOTNBMzAeFw0yNTA4MjMwOTU2MzZaFw0yNTA4MjYxODA2MzZaMDMxMTAvBgNV BAMTKEY5RDE4QjBGODZDMjI1QTYwOEY1MDNDMTc0NDM2RDkzOTZEMzQ1MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeebD0IK2B2Cxjb9Pc0zu1gPTo QmiMkyHhfKkYW3CSatqZvZlWte+5deaoGUxU16EhnwiPNa+mIut1cCXk6NmEvSqn n7SPU/Dfi36ZR1MLKwTsPWucGQCrHDtYh7GIFJUKFnP+kdxZcKoTNwDI9pZcuW6j TODDx026OKUDeDUQW93Ne8G5zMO2VeF0sqUQ2z/BxhNBO8V4kpjJpUMNnMTudbp7 wi4YQ8O0bNIZ8xPz487B4CdtH+ZF1Iynt3vHy1IT4dTRB8LHqXIV2asoeBGEwsq4 IAw8yGaKGUlruz0fSGqWnTJh4pcy1jEucBX3iCo+iKwtoWBKL58uCucl+4W9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+dGLD4bCJaYI9QPBdENtk5bTRSEwHwYDVR0j BBgwFoAU8jrMoUdyC0I6lXbz5AhpFQWyk6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWUxNDM4Mi1kNTg3LTRlODYtOGU3ZS02YTI2NGE1OGVhMDYvMC9GMjNBQ0NBMTQ3 NzIwQjQyM0E5NTc2RjNFNDA4NjkxNTA1QjI5M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUwNUIy OTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVlMTQzODItZDU4Ny00ZTg2LThl N2UtNmEyNjRhNThlYTA2LzAvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5 MTUwNUIyOTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgkNh66z96lp/Podjj8BwnWUWJGB2b3XgGe rH2z6462XUP5rjHdMY1ogg9P7tggyia+JbIf6zkxDdpEOvOv4lW1r2lv6HXnHGPV dJa4AyrjCS62QNkhT2CVEbFlZEGMN7ETRrQoV4PxqxPR6nDAEO9zQyIjGXAvhB46 t4HaCv/P16cqKdF3s3xi3by6GEdc1LwhIBR6ZLHj+bWM8d9uHWla5Tqqk0vC3o76 zf+fpvNz2fdWjzzRU9mdv4TQJkJDGWqciLZFjlqde3e7DhjU5vDjJwUwjAwmH+TE QBffyJLx9m1VYbLv9/2GzKB9wv/JKqs+2ziXiwsOMrBMjsUCCVY= -----END CERTIFICATE-----Generated at Sat Aug 23 17:07:34 2025 by rpki-client