$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft File: 232967D03C1169374A898D1C8991F1ABE7744870.mft (raw, json) Hash identifier: awLOfXEoviQerxpzFVj9VQK3YLAAYWDKAnmqtusW/5g= Subject key identifier: 32:DC:9A:D5:C7:55:80:93:BA:1D:21:21:99:65:53:BF:08:F6:E5:5E Authority key identifier: 23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70 Certificate issuer: /CN=232967D03C1169374A898D1C8991F1ABE7744870 Certificate serial: 31D06C0D8DF3DF4C34530F32FDFA58197EE701D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft Manifest number: 028F Signing time: Thu 21 Aug 2025 06:11:33 +0000 Manifest this update: Thu 21 Aug 2025 06:06:33 +0000 Manifest next update: Sun 24 Aug 2025 15:35:33 +0000 Files and hashes: 1: 232967D03C1169374A898D1C8991F1ABE7744870.crl (hash: U753HvN2U6yeL5No/yZ4Kg+Q+RFDGUCa0QmYxsEmYkA=) 2: 3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa (hash: 8k4I9alM31pB+adpaudK4H7ty0suQjHEpsCjRwS0mmE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 15:35:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:d0:6c:0d:8d:f3:df:4c:34:53:0f:32:fd:fa:58:19:7e:e7:01:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=232967D03C1169374A898D1C8991F1ABE7744870 Validity Not Before: Aug 21 06:06:33 2025 GMT Not After : Aug 24 15:35:33 2025 GMT Subject: CN=32DC9AD5C7558093BA1D2121996553BF08F6E55E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:08:f8:32:e7:03:92:e7:fd:38:65:4c:91:8c: 63:08:06:96:06:f3:34:d8:93:3e:d4:48:8d:86:42: 2e:47:5d:17:39:d9:8f:df:f2:58:9a:1e:1a:02:70: 05:a8:a4:ab:f5:d5:f3:59:4e:7d:9a:10:c2:9b:c9: 3d:5f:a5:a8:d5:46:f5:ac:ed:48:ca:7c:16:7b:f0: 43:81:70:bf:dc:04:30:dd:a9:fb:72:95:82:01:58: bc:62:66:0c:ca:17:8c:f9:9a:84:cb:b8:a6:b8:d3: b1:0f:fd:93:a1:97:ea:c0:73:c5:d7:e2:e5:a6:06: cc:09:95:5d:20:ff:0f:b2:e1:2a:c4:0b:6a:fa:15: d2:f0:05:ce:46:31:22:5c:bb:55:ec:81:25:f5:e0: 54:2a:2d:0c:11:fc:c5:66:02:dd:74:64:da:fc:aa: df:51:af:b0:0c:07:84:12:ef:8c:f9:f1:5a:81:af: c0:df:8f:95:95:d9:82:13:a1:81:be:df:ec:0b:20: 08:59:6c:7d:ca:86:63:67:66:bf:a4:13:94:05:31: ed:ef:3b:0a:64:c6:59:14:a6:ef:7f:a2:42:df:31: 9e:55:b9:38:57:01:fb:11:20:1f:76:bd:6b:da:af: b6:17:0d:8a:ce:eb:99:97:02:3e:a7:70:f3:b8:ed: 42:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DC:9A:D5:C7:55:80:93:BA:1D:21:21:99:65:53:BF:08:F6:E5:5E X509v3 Authority Key Identifier: keyid:23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f3:50:8e:e4:c2:45:91:b3:0c:6f:c1:05:5c:80:d1:5c:58: 44:56:10:02:92:08:62:65:e6:8e:0a:db:f4:d3:d0:93:c7:52: 5c:48:ac:45:f9:66:5a:fd:3f:c9:24:31:ab:77:1e:9d:b2:7f: 0e:71:55:ef:b0:d6:d0:6a:9a:65:55:3b:61:50:97:f2:61:f2: d8:09:dc:98:3b:be:9f:68:8f:7a:3b:ce:c7:bb:1d:7d:86:91: 02:26:f5:6f:96:c2:95:b2:c5:6b:ce:e6:09:37:0b:9d:26:33: a9:15:89:6d:19:57:12:75:19:71:4e:c9:ee:44:d9:96:c1:30: 6d:28:68:91:3e:42:c8:c2:08:e7:66:34:f9:70:c7:e5:e5:df: 03:18:2e:c0:a0:f9:bb:69:ad:67:75:2a:68:6b:33:02:58:a8: 86:8b:95:2b:8e:ee:49:04:b3:d3:60:0b:48:3f:cd:2e:60:0e: 9d:7d:24:da:67:53:1b:2b:ff:21:0d:c0:90:35:4e:16:59:f8: 17:9f:69:ca:0a:2d:cd:4d:a8:a2:ee:d0:23:ac:8b:37:5f:78: b3:46:f7:e5:0c:b1:ca:ef:18:62:3f:e3:69:92:79:cc:7d:0a: 48:1d:d3:05:a1:80:2c:fe:0e:e0:d3:28:e9:97:7b:bb:df:6c: a7:25:39:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMdBsDY3z30w0Uw8y/fpYGX7nAdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMyOTY3RDAzQzExNjkzNzRBODk4RDFDODk5MUYxQUJF Nzc0NDg3MDAeFw0yNTA4MjEwNjA2MzNaFw0yNTA4MjQxNTM1MzNaMDMxMTAvBgNV BAMTKDMyREM5QUQ1Qzc1NTgwOTNCQTFEMjEyMTk5NjU1M0JGMDhGNkU1NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1CPgy5wOS5/04ZUyRjGMIBpYG 8zTYkz7USI2GQi5HXRc52Y/f8liaHhoCcAWopKv11fNZTn2aEMKbyT1fpajVRvWs 7UjKfBZ78EOBcL/cBDDdqftylYIBWLxiZgzKF4z5moTLuKa407EP/ZOhl+rAc8XX 4uWmBswJlV0g/w+y4SrEC2r6FdLwBc5GMSJcu1XsgSX14FQqLQwR/MVmAt10ZNr8 qt9Rr7AMB4QS74z58VqBr8Dfj5WV2YIToYG+3+wLIAhZbH3KhmNnZr+kE5QFMe3v OwpkxlkUpu9/okLfMZ5VuThXAfsRIB92vWvar7YXDYrO65mXAj6ncPO47UJXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMtya1cdVgJO6HSEhmWVTvwj25V4wHwYDVR0j BBgwFoAUIyln0DwRaTdKiY0ciZHxq+d0SHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUzZTk4MS1iZjM5LTQyZTAtYTJmNi1jZjg3Yzc1N2Y4MjcvMC8yMzI5NjdEMDND MTE2OTM3NEE4OThEMUM4OTkxRjFBQkU3NzQ0ODcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMyOTY3RDAzQzExNjkzNzRBODk4RDFDODk5MUYxQUJFNzc0 NDg3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlM2U5ODEtYmYzOS00MmUwLWEy ZjYtY2Y4N2M3NTdmODI3LzAvMjMyOTY3RDAzQzExNjkzNzRBODk4RDFDODk5MUYx QUJFNzc0NDg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbzUI7kwkWRswxvwQVcgNFcWERWEAKSCGJl 5o4K2/TT0JPHUlxIrEX5Zlr9P8kkMat3Hp2yfw5xVe+w1tBqmmVVO2FQl/Jh8tgJ 3Jg7vp9oj3o7zse7HX2GkQIm9W+WwpWyxWvO5gk3C50mM6kViW0ZVxJ1GXFOye5E 2ZbBMG0oaJE+QsjCCOdmNPlwx+Xl3wMYLsCg+btprWd1KmhrMwJYqIaLlSuO7kkE s9NgC0g/zS5gDp19JNpnUxsr/yENwJA1ThZZ+BefacoKLc1NqKLu0COsizdfeLNG 9+UMscrvGGI/42mSecx9Ckgd0wWhgCz+DuDTKOmXe7vfbKclORs= -----END CERTIFICATE-----Generated at Sat Aug 23 15:30:41 2025 by rpki-client