$ rpki-client -vvf repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft File: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft (raw, json) Hash identifier: d/kEJsGHttP1UkF0QtBwX14Fp9f54DeoGR/Fjv7VboE= Subject key identifier: F1:0E:72:AA:31:90:44:20:8C:2F:B3:28:A6:5B:C3:EA:4A:F9:78:FC Authority key identifier: 23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D Certificate issuer: /CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Certificate serial: 02C450C1FFCEF1619AE083CC5F1AFF40B41197AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft Manifest number: 051B Signing time: Sat 18 Oct 2025 06:01:49 +0000 Manifest this update: Sat 18 Oct 2025 05:56:49 +0000 Manifest next update: Tue 21 Oct 2025 10:04:49 +0000 Files and hashes: 1: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl (hash: fuzkQ5YTvOMJCq5AbIF/M3TWeCJKVLNas1ydQwQ3aUU=) 2: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: bVRLDmnlkDr+Er81GecVOu1gTofkGixwnSL4beQ/iNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 10:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:c4:50:c1:ff:ce:f1:61:9a:e0:83:cc:5f:1a:ff:40:b4:11:97:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Validity Not Before: Oct 18 05:56:49 2025 GMT Not After : Oct 21 10:04:49 2025 GMT Subject: CN=F10E72AA319044208C2FB328A65BC3EA4AF978FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:51:48:8f:63:c3:ca:ed:45:0e:41:65:54:f8: b0:4a:a8:67:9f:ef:5a:ad:2e:e8:24:e9:52:54:22: f5:77:bd:ec:fc:9e:a3:46:a6:fe:20:15:7b:8b:d6: ad:1b:76:f5:f7:ce:10:b4:9e:de:d8:c9:42:45:94: a5:42:4b:6c:57:25:01:6a:bf:87:4a:d6:da:8a:e4: 15:11:82:f9:c5:1a:79:b8:5d:4e:c9:0d:22:c4:30: cb:e8:81:8f:10:e1:6a:fb:0b:f2:69:26:24:05:3f: 46:4d:ee:72:7a:e6:f3:c2:45:d0:85:fd:6c:b0:6c: 22:ad:ce:59:b7:d9:37:41:4c:f3:b5:e2:4a:cf:0e: 58:c2:94:1b:e8:90:f2:0f:17:12:1c:80:c5:cc:d2: eb:a5:3c:2b:40:28:1b:bc:b3:76:c7:af:9b:bf:de: 76:17:b1:a4:82:f0:90:d5:42:e7:78:68:a1:63:e5: c3:b2:f6:3d:bd:8f:2b:f1:51:da:4e:ba:cd:54:50: 03:51:8a:d8:de:46:1f:14:b0:4d:e4:19:03:c0:89: 7d:e3:c7:6e:30:b7:ff:f1:a2:b9:61:f8:27:66:3e: c4:ba:9c:29:f9:5f:79:52:40:6c:fd:be:78:ec:55: 86:8a:fc:23:98:b4:21:d1:b6:ad:ab:1e:61:93:57: 35:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0E:72:AA:31:90:44:20:8C:2F:B3:28:A6:5B:C3:EA:4A:F9:78:FC X509v3 Authority Key Identifier: keyid:23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:bd:40:cd:5e:41:67:cd:1a:fd:5b:c6:c0:0a:6d:f4:01:ad: 91:f0:31:9d:55:bd:a0:3e:fe:5b:2d:a9:69:8b:d0:fa:a3:ba: 9f:32:22:e3:74:37:af:5e:58:ab:ca:d3:51:11:be:02:48:98: 27:c0:24:34:e7:bb:3b:8c:5f:c2:16:45:7d:de:d1:1d:f6:74: f7:d0:17:e3:58:03:61:7b:43:18:82:f1:a2:54:3b:54:04:fb: 53:71:37:75:7f:9f:63:c8:f5:32:23:b3:8d:a4:2a:10:96:98: 48:92:78:2a:f8:45:06:ce:ec:05:85:5e:9e:22:4e:a7:58:92: 1f:ce:aa:82:34:e0:c4:4c:9a:17:09:5a:2f:29:e8:67:d0:10: 64:c6:d0:dd:7c:30:84:1a:8f:2b:52:fc:9e:9c:25:d2:ff:46: bd:95:9e:99:07:e1:da:5a:5b:a8:b8:f5:da:14:c3:0a:26:d8: f2:d0:f0:22:eb:fc:22:d0:e8:09:b4:e9:40:21:d4:df:af:fd: 56:60:9d:ad:b3:8a:b7:c5:d4:bb:e0:1a:f9:cd:62:80:70:aa: f6:fd:d2:f3:ce:27:ee:b7:9d:2e:37:93:cb:b8:68:70:7d:00: 4c:4c:92:79:17:c1:3c:fd:3f:94:29:71:15:fc:85:0d:be:7b: ec:60:3a:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAsRQwf/O8WGa4IPMXxr/QLQRl64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUw NURERjIzRDAeFw0yNTEwMTgwNTU2NDlaFw0yNTEwMjExMDA0NDlaMDMxMTAvBgNV BAMTKEYxMEU3MkFBMzE5MDQ0MjA4QzJGQjMyOEE2NUJDM0VBNEFGOTc4RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwUUiPY8PK7UUOQWVU+LBKqGef 71qtLugk6VJUIvV3vez8nqNGpv4gFXuL1q0bdvX3zhC0nt7YyUJFlKVCS2xXJQFq v4dK1tqK5BURgvnFGnm4XU7JDSLEMMvogY8Q4Wr7C/JpJiQFP0ZN7nJ65vPCRdCF /WywbCKtzlm32TdBTPO14krPDljClBvokPIPFxIcgMXM0uulPCtAKBu8s3bHr5u/ 3nYXsaSC8JDVQud4aKFj5cOy9j29jyvxUdpOus1UUANRitjeRh8UsE3kGQPAiX3j x24wt//xorlh+CdmPsS6nCn5X3lSQGz9vnjsVYaK/COYtCHRtq2rHmGTVzWjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Q5yqjGQRCCML7MoplvD6kr5ePwwHwYDVR0j BBgwFoAUIzrybX2ubDWesDrVxvtLTgXd8j0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTVlYWM5Ny0zMWI1LTRmMzMtODJmNC01MjQxNDcwY2JiYmUvMC8yMzNBRjI2RDdE QUU2QzM1OUVCMDNBRDVDNkZCNEI0RTA1RERGMjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUwNURE RjIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU1ZWFjOTctMzFiNS00ZjMzLTgy ZjQtNTI0MTQ3MGNiYmJlLzAvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRC NEUwNURERjIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF29QM1eQWfNGv1bxsAKbfQBrZHwMZ1VvaA+ /lstqWmL0Pqjup8yIuN0N69eWKvK01ERvgJImCfAJDTnuzuMX8IWRX3e0R32dPfQ F+NYA2F7QxiC8aJUO1QE+1NxN3V/n2PI9TIjs42kKhCWmEiSeCr4RQbO7AWFXp4i TqdYkh/OqoI04MRMmhcJWi8p6GfQEGTG0N18MIQajytS/J6cJdL/Rr2VnpkH4dpa W6i49doUwwom2PLQ8CLr/CLQ6Am06UAh1N+v/VZgna2zirfF1LvgGvnNYoBwqvb9 0vPOJ+63nS43k8u4aHB9AExMknkXwTz9P5QpcRX8hQ2+e+xgOkU= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:24 2025 by rpki-client