$ rpki-client -vvf repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft File: 23093B0E58201D339EAA3983654297729EB3D7FD.mft (raw, json) Hash identifier: 2YYdHq5vh2a50rcmxNG2rfJKASXWhB6+oWOVWxbDsmg= Subject key identifier: 94:CE:48:45:F3:EA:63:21:DF:1F:E8:53:02:72:BA:46:B1:19:E6:D2 Authority key identifier: 23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD Certificate issuer: /CN=23093B0E58201D339EAA3983654297729EB3D7FD Certificate serial: 4CC5A684BD4BD58DD08767DBA264942401368DAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft Manifest number: 0279 Signing time: Sat 18 Oct 2025 18:42:20 +0000 Manifest this update: Sat 18 Oct 2025 18:37:20 +0000 Manifest next update: Tue 21 Oct 2025 19:02:20 +0000 Files and hashes: 1: 3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa (hash: +q+2lGJsfE4ezep6xSn8bk3REU1n8oNlxOWiZdJkL5s=) 2: 23093B0E58201D339EAA3983654297729EB3D7FD.crl (hash: plFI+BXx8t2KjnA85q/cv/PoEpUbBIr+iFZVHQtd7KM=) 3: 3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa (hash: I3IiUxQVB0K6AHHH6hadb9zyg87yVWrhTKPdESrGNC4=) 4: 3130332e3136362e3231322e302f32342d3234203d3e20313431393537.roa (hash: 1T/005+fcGS3bHhfnGHMDWx9bEqPsgYOiwCk3qFgrG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 19:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c5:a6:84:bd:4b:d5:8d:d0:87:67:db:a2:64:94:24:01:36:8d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23093B0E58201D339EAA3983654297729EB3D7FD Validity Not Before: Oct 18 18:37:20 2025 GMT Not After : Oct 21 19:02:20 2025 GMT Subject: CN=94CE4845F3EA6321DF1FE8530272BA46B119E6D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:07:6c:64:20:e3:88:a1:d2:cb:c0:c1:4e:ae: 63:e6:40:2a:75:cd:a9:8d:63:fc:d2:6a:fe:fd:39: da:65:4c:b8:8a:44:7e:1b:fa:df:a4:83:df:a6:9d: 37:e9:ae:34:30:95:fc:db:37:2a:d2:8f:8d:50:e7: c7:73:69:82:9b:56:7e:54:83:9d:ef:bb:62:49:50: d5:1d:9d:09:0b:ef:0b:8a:d8:00:1a:3b:c8:59:ae: 61:7d:42:3d:07:c8:91:fb:af:49:3f:20:1c:8f:f5: 7c:d9:5d:c9:20:9b:77:cd:9e:74:64:7a:a4:62:e7: 70:20:35:71:d6:42:d5:dd:23:22:8a:0f:27:f7:08: 2a:66:9f:29:05:b0:d4:97:14:47:3f:2b:c0:e4:49: 7e:6c:77:a3:91:22:08:76:a6:b8:f9:78:2b:46:73: c4:f2:c0:96:38:9f:57:65:47:67:4f:21:01:64:1d: 1d:d4:b5:22:4a:db:40:01:27:a5:93:61:c4:6c:79: e2:21:55:d3:4c:a0:56:46:3f:79:27:66:93:c7:52: d6:74:86:0d:ad:37:4c:2f:36:63:bb:d5:13:bc:f1: 0e:35:a9:9f:fc:65:c5:67:3c:94:cf:d1:9c:25:0f: ce:03:70:20:ac:af:4c:2c:36:28:7d:f6:ba:bb:72: 6d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:CE:48:45:F3:EA:63:21:DF:1F:E8:53:02:72:BA:46:B1:19:E6:D2 X509v3 Authority Key Identifier: keyid:23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:4d:7c:9b:13:41:18:e9:e6:a2:76:5b:1c:98:9f:b1:96:95: 62:b5:0e:c7:7b:54:0f:44:27:f8:a7:23:73:0b:6f:3d:b6:94: bd:6b:25:a5:07:7a:16:26:2c:32:71:95:ba:d4:f6:ff:f0:87: 68:fe:47:ec:31:cd:7b:e4:c8:e7:60:6b:db:d6:a7:13:e4:c3: 18:51:d2:60:1c:6a:de:51:99:80:56:eb:36:4a:b0:3b:fe:e3: 10:99:73:a7:25:50:20:5d:c9:51:07:cd:5c:45:b4:2a:05:87: fa:c7:ed:30:47:4a:fd:bf:5f:2f:61:89:40:5f:12:82:a4:ce: 22:f4:8d:d1:84:a9:0b:60:fe:3b:5f:02:48:fe:55:49:87:9f: e9:8c:36:3a:6b:6c:6d:70:a8:4e:ee:f5:ad:a4:4e:7a:69:5c: 62:42:60:1a:51:1b:9c:42:06:3c:a4:d7:03:8a:03:95:87:37: 2a:30:f4:dd:91:8d:33:49:17:da:43:c2:25:a9:9c:7f:22:d2: 38:a4:84:fa:e0:0a:7f:27:91:a1:0e:65:ae:50:e8:86:d4:5a: da:5c:86:e6:f3:90:66:79:5c:f4:2e:f4:0d:2a:1b:9d:46:ad: 47:47:b3:6e:4b:b2:f6:46:bc:d6:e5:8a:32:d9:af:44:95:1f: 4a:98:ec:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTMWmhL1L1Y3Qh2fbomSUJAE2jaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5 RUIzRDdGRDAeFw0yNTEwMTgxODM3MjBaFw0yNTEwMjExOTAyMjBaMDMxMTAvBgNV BAMTKDk0Q0U0ODQ1RjNFQTYzMjFERjFGRTg1MzAyNzJCQTQ2QjExOUU2RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyB2xkIOOIodLLwMFOrmPmQCp1 zamNY/zSav79OdplTLiKRH4b+t+kg9+mnTfprjQwlfzbNyrSj41Q58dzaYKbVn5U g53vu2JJUNUdnQkL7wuK2AAaO8hZrmF9Qj0HyJH7r0k/IByP9XzZXckgm3fNnnRk eqRi53AgNXHWQtXdIyKKDyf3CCpmnykFsNSXFEc/K8DkSX5sd6ORIgh2prj5eCtG c8TywJY4n1dlR2dPIQFkHR3UtSJK20ABJ6WTYcRseeIhVdNMoFZGP3knZpPHUtZ0 hg2tN0wvNmO71RO88Q41qZ/8ZcVnPJTP0ZwlD84DcCCsr0wsNih99rq7cm2fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlM5IRfPqYyHfH+hTAnK6RrEZ5tIwHwYDVR0j BBgwFoAUIwk7DlggHTOeqjmDZUKXcp6z1/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTk1YjdkNC0zYWFiLTRiODMtOTRiMi1jNDI2N2IyYWUwYTAvMC8yMzA5M0IwRTU4 MjAxRDMzOUVBQTM5ODM2NTQyOTc3MjlFQjNEN0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5RUIz RDdGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU5NWI3ZDQtM2FhYi00YjgzLTk0 YjItYzQyNjdiMmFlMGEwLzAvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3 NzI5RUIzRDdGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlNfJsTQRjp5qJ2WxyYn7GWlWK1Dsd7VA9E J/inI3MLbz22lL1rJaUHehYmLDJxlbrU9v/wh2j+R+wxzXvkyOdga9vWpxPkwxhR 0mAcat5RmYBW6zZKsDv+4xCZc6clUCBdyVEHzVxFtCoFh/rH7TBHSv2/Xy9hiUBf EoKkziL0jdGEqQtg/jtfAkj+VUmHn+mMNjprbG1wqE7u9a2kTnppXGJCYBpRG5xC Bjyk1wOKA5WHNyow9N2RjTNJF9pDwiWpnH8i0jikhPrgCn8nkaEOZa5Q6IbUWtpc hubzkGZ5XPQu9A0qG51GrUdHs25LsvZGvNblijLZr0SVH0qY7HM= -----END CERTIFICATE-----Generated at Mon Oct 20 14:58:09 2025 by rpki-client