$ rpki-client -vvf repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft File: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft (raw, json) Hash identifier: xboqGzoBJzuebRpEkOkmQteDNl3w5LdeXQx1TpNFiIY= Subject key identifier: D6:04:2A:A1:CE:79:67:6C:8F:70:29:F9:82:4F:C4:1C:A4:5B:01:51 Authority key identifier: 23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D Certificate issuer: /CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Certificate serial: 2E1E10C78BCC22EB9218AA0E10E620C2364691CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft Manifest number: 0501 Signing time: Thu 21 Aug 2025 12:41:47 +0000 Manifest this update: Thu 21 Aug 2025 12:36:47 +0000 Manifest next update: Sun 24 Aug 2025 20:25:47 +0000 Files and hashes: 1: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: bVRLDmnlkDr+Er81GecVOu1gTofkGixwnSL4beQ/iNg=) 2: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl (hash: c6WPNNjhRgV+eY3UBmRQB2PS2MiGgqFjLeMfMRk48mk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:1e:10:c7:8b:cc:22:eb:92:18:aa:0e:10:e6:20:c2:36:46:91:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Validity Not Before: Aug 21 12:36:47 2025 GMT Not After : Aug 24 20:25:47 2025 GMT Subject: CN=D6042AA1CE79676C8F7029F9824FC41CA45B0151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:88:74:29:1e:ee:20:5f:6b:0b:be:96:60:c7: 9c:db:ec:7b:9e:78:fd:6c:cd:1b:58:ef:ff:b2:b8: 6d:e0:eb:9c:48:bd:81:92:be:06:36:63:97:30:8e: ae:c5:53:9d:59:b7:52:52:78:92:a4:84:d8:e4:ba: 46:55:ce:cc:9d:2e:02:bb:7f:0c:2b:40:6c:f9:08: 76:23:9c:c2:9d:20:50:86:92:63:16:2c:6c:b5:e4: b3:b6:c8:fe:9e:6f:00:0d:17:8c:26:f8:dd:05:3d: 84:80:20:a2:01:81:6f:52:8f:e1:7e:37:13:b1:63: ab:f9:df:8a:f8:eb:23:5d:6d:66:f6:eb:99:68:1b: 74:d4:db:b9:c5:10:55:cd:cf:69:b1:b5:85:91:56: a7:1c:f1:5e:42:36:64:ef:59:24:73:ef:c9:98:dd: d0:2f:1f:57:32:5c:9c:c6:a9:9a:2c:83:39:26:c1: 3e:06:68:f3:47:90:1d:01:85:c1:12:08:f9:96:31: 11:ad:f4:41:99:e8:99:d3:4f:ae:3d:10:77:bc:f3: 9d:b7:1f:ff:c7:00:b2:dd:94:da:f6:2a:e4:a8:ca: ee:24:90:a0:78:52:6b:5f:06:26:d1:0a:5a:51:64: 82:e9:7b:a3:87:d0:7d:09:7b:5d:80:a7:58:25:f1: f0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:04:2A:A1:CE:79:67:6C:8F:70:29:F9:82:4F:C4:1C:A4:5B:01:51 X509v3 Authority Key Identifier: keyid:23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:78:3b:58:be:56:72:0b:9e:db:ad:48:61:55:0e:14:7f:ec: d9:81:a5:5d:36:95:1f:35:95:64:32:37:8b:0d:2d:98:6d:ab: d9:41:9e:bc:b5:1d:d9:f3:8f:9b:48:96:41:34:fc:b4:f5:21: d4:68:a7:12:53:ae:9a:c9:b1:fd:3c:a8:79:9c:6d:26:27:77: 1f:c0:a1:9d:1a:7d:a3:5c:03:8e:a0:91:c5:fd:38:60:96:ca: ba:45:53:f6:6c:76:97:0c:d3:f6:16:a9:9e:1b:bb:04:5c:00: 0e:a7:a0:9b:5c:e4:ba:71:1f:39:b0:b4:6b:2f:17:36:9e:5a: 60:41:4e:81:34:a0:00:a2:1c:c5:18:9d:d5:43:d2:a0:af:f9: 73:53:69:42:ef:65:e6:55:54:d5:74:f6:b1:fd:b3:f3:97:bd: 89:fe:e4:d5:38:72:21:43:9e:3b:37:74:40:e4:a7:ca:48:f8: 8a:a3:3b:7c:8d:3c:89:c8:e6:59:5e:2e:d4:0c:83:ad:b7:62: 61:84:cd:3c:a4:5d:0c:26:f9:ab:6c:0f:cd:d8:0b:07:0f:c5: e1:bb:41:9a:5a:63:77:76:8d:dd:75:72:25:48:25:c0:3f:37: 7d:3e:cd:b2:7a:ea:64:ce:ae:cb:bd:8f:9e:ff:66:66:d1:3a: 62:46:b4:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULh4Qx4vMIuuSGKoOEOYgwjZGkcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUw NURERjIzRDAeFw0yNTA4MjExMjM2NDdaFw0yNTA4MjQyMDI1NDdaMDMxMTAvBgNV BAMTKEQ2MDQyQUExQ0U3OTY3NkM4RjcwMjlGOTgyNEZDNDFDQTQ1QjAxNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCviHQpHu4gX2sLvpZgx5zb7Hue eP1szRtY7/+yuG3g65xIvYGSvgY2Y5cwjq7FU51Zt1JSeJKkhNjkukZVzsydLgK7 fwwrQGz5CHYjnMKdIFCGkmMWLGy15LO2yP6ebwANF4wm+N0FPYSAIKIBgW9Sj+F+ NxOxY6v534r46yNdbWb265loG3TU27nFEFXNz2mxtYWRVqcc8V5CNmTvWSRz78mY 3dAvH1cyXJzGqZosgzkmwT4GaPNHkB0BhcESCPmWMRGt9EGZ6JnTT649EHe88523 H//HALLdlNr2KuSoyu4kkKB4UmtfBibRClpRZILpe6OH0H0Je12Ap1gl8fDlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1gQqoc55Z2yPcCn5gk/EHKRbAVEwHwYDVR0j BBgwFoAUIzrybX2ubDWesDrVxvtLTgXd8j0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTVlYWM5Ny0zMWI1LTRmMzMtODJmNC01MjQxNDcwY2JiYmUvMC8yMzNBRjI2RDdE QUU2QzM1OUVCMDNBRDVDNkZCNEI0RTA1RERGMjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUwNURE RjIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU1ZWFjOTctMzFiNS00ZjMzLTgy ZjQtNTI0MTQ3MGNiYmJlLzAvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRC NEUwNURERjIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJ4O1i+VnILntutSGFVDhR/7NmBpV02lR81 lWQyN4sNLZhtq9lBnry1Hdnzj5tIlkE0/LT1IdRopxJTrprJsf08qHmcbSYndx/A oZ0afaNcA46gkcX9OGCWyrpFU/ZsdpcM0/YWqZ4buwRcAA6noJtc5LpxHzmwtGsv FzaeWmBBToE0oACiHMUYndVD0qCv+XNTaULvZeZVVNV09rH9s/OXvYn+5NU4ciFD njs3dEDkp8pI+IqjO3yNPInI5lleLtQMg623YmGEzTykXQwm+atsD83YCwcPxeG7 QZpaY3d2jd11ciVIJcA/N30+zbJ66mTOrsu9j57/ZmbROmJGtJ8= -----END CERTIFICATE-----Generated at Sat Aug 23 13:32:32 2025 by rpki-client