$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft File: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft (raw, json) Hash identifier: 3vcvMBTz4kwDTNj1kL56pMNgDXv1I1g/esB3ndQoWEg= Subject key identifier: 29:14:6C:19:D5:AD:56:36:D2:29:8B:1E:4E:65:AA:F2:48:6B:1C:B8 Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Certificate serial: 1121CFACCB909C1FCB41CB77E056621CED7B9413 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft Manifest number: 8D Signing time: Fri 22 Aug 2025 00:50:36 +0000 Manifest this update: Fri 22 Aug 2025 00:45:36 +0000 Manifest next update: Mon 25 Aug 2025 01:05:36 +0000 Files and hashes: 1: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: VEUp2w3yPHnRqBLCf0zsUoh5RoZ8ZNdZE7XgU6xqQTk=) 2: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: 1gjKyDW4KHd430zjH8eS6Hf0gzUPhwcmOJ+5ePkv/wI=) 3: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl (hash: wnMCeSGceHajI0f5K+qihsutx72q6kAzoyCd3siP7nQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:21:cf:ac:cb:90:9c:1f:cb:41:cb:77:e0:56:62:1c:ed:7b:94:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Validity Not Before: Aug 22 00:45:36 2025 GMT Not After : Aug 25 01:05:36 2025 GMT Subject: CN=29146C19D5AD5636D2298B1E4E65AAF2486B1CB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:16:5f:7f:d2:72:0c:fa:88:10:1f:7f:4d:4f: fe:fc:39:b9:9d:98:8d:5a:69:08:06:95:e5:83:55: 52:35:64:9d:d6:42:5f:5b:22:8a:33:82:60:f3:ff: 43:51:04:7f:e6:da:30:0c:4b:7c:65:6c:e4:88:83: 5d:30:17:0f:3f:33:98:f3:0e:f3:0f:a0:6e:e6:e1: 8c:d3:29:b6:04:ac:b3:12:25:6f:ef:af:e0:67:c6: ca:79:6c:ba:76:87:07:56:ca:88:23:49:35:e4:cb: 4a:57:97:28:bb:d0:33:f7:9d:b8:c9:66:d7:82:bf: 6f:5b:90:69:24:25:c7:9c:45:c5:a6:0f:7b:23:b4: bb:80:02:c5:1f:41:56:56:e4:ff:4d:e8:c9:58:99: 1d:2b:36:69:f8:84:1b:65:7a:08:fa:f9:5f:7a:bf: 49:95:a4:eb:a3:35:3c:18:d5:38:a6:c6:0a:2c:80: 94:5e:37:0f:55:81:6f:d9:46:17:32:b4:02:d1:1a: da:a6:bd:dd:76:da:45:5f:c8:d8:8c:2d:69:c3:7e: 34:da:34:62:ce:a4:b9:cc:fb:db:86:16:26:1f:a8: be:1b:e5:7d:27:69:60:50:f2:62:2d:df:9c:86:aa: d2:c7:d4:84:f7:23:48:30:38:66:63:97:e8:21:b6: a4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:14:6C:19:D5:AD:56:36:D2:29:8B:1E:4E:65:AA:F2:48:6B:1C:B8 X509v3 Authority Key Identifier: keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:97:13:ec:74:5c:7c:34:c7:39:3b:3d:54:02:34:01:d8:de: 1d:8b:0b:3b:87:e7:10:c9:e9:cf:88:c5:57:cd:e4:0c:77:1a: 12:87:61:be:ab:e7:e0:09:6f:31:f7:a0:a1:63:8b:fe:95:cf: b5:5a:5c:b5:49:4b:8a:4f:4b:de:97:a2:5d:03:2d:8e:8d:8a: 76:e1:29:48:50:78:78:3e:53:f1:42:a9:f0:55:f1:ca:67:38: 95:5f:53:b0:69:cb:9b:9e:d3:8b:6e:a5:ca:c5:0c:09:3b:e9: 08:11:d5:45:ae:a0:a6:e8:80:8d:28:8c:8a:f8:a0:42:bd:1c: e6:a1:41:fd:59:79:cc:47:1b:07:3c:ff:53:48:0a:94:f6:28: 83:6e:a3:5d:3f:fe:72:36:d4:01:2d:b9:87:a5:68:64:16:05: 8a:01:1e:8b:4f:14:a3:bb:f4:88:e9:33:1e:f3:1c:23:0f:68: 26:00:f3:dd:97:2d:49:99:6a:f7:90:28:da:a7:af:2c:af:0f: 29:76:a5:1a:03:9a:ab:fc:b2:8b:51:e0:b0:27:a1:55:cf:f4: d0:b3:c8:a7:1b:18:4b:cb:44:47:06:e4:a6:a9:ba:26:8f:be: b3:aa:46:f6:c3:47:d1:fb:62:1e:1d:2b:57:ec:6e:d5:6a:52: ed:ae:55:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUESHPrMuQnB/LQct34FZiHO17lBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0Ez RjVDMjhGNDAeFw0yNTA4MjIwMDQ1MzZaFw0yNTA4MjUwMTA1MzZaMDMxMTAvBgNV BAMTKDI5MTQ2QzE5RDVBRDU2MzZEMjI5OEIxRTRFNjVBQUYyNDg2QjFDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Fl9/0nIM+ogQH39NT/78Obmd mI1aaQgGleWDVVI1ZJ3WQl9bIoozgmDz/0NRBH/m2jAMS3xlbOSIg10wFw8/M5jz DvMPoG7m4YzTKbYErLMSJW/vr+Bnxsp5bLp2hwdWyogjSTXky0pXlyi70DP3nbjJ ZteCv29bkGkkJcecRcWmD3sjtLuAAsUfQVZW5P9N6MlYmR0rNmn4hBtlegj6+V96 v0mVpOujNTwY1TimxgosgJReNw9VgW/ZRhcytALRGtqmvd122kVfyNiMLWnDfjTa NGLOpLnM+9uGFiYfqL4b5X0naWBQ8mIt35yGqtLH1IT3I0gwOGZjl+ghtqRpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKRRsGdWtVjbSKYseTmWq8khrHLgwHwYDVR0j BBgwFoAUI0dahrtcUV3dd1O2VV4mej9cKPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8yMzQ3NUE4NkJC NUM1MTVEREQ3NzUzQjY1NTVFMjY3QTNGNUMyOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0EzRjVD MjhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2 N0EzRjVDMjhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6XE+x0XHw0xzk7PVQCNAHY3h2LCzuH5xDJ 6c+IxVfN5Ax3GhKHYb6r5+AJbzH3oKFji/6Vz7VaXLVJS4pPS96Xol0DLY6Ninbh KUhQeHg+U/FCqfBV8cpnOJVfU7Bpy5ue04tupcrFDAk76QgR1UWuoKbogI0ojIr4 oEK9HOahQf1ZecxHGwc8/1NICpT2KINuo10//nI21AEtuYelaGQWBYoBHotPFKO7 9IjpMx7zHCMPaCYA892XLUmZaveQKNqnryyvDyl2pRoDmqv8sotR4LAnoVXP9NCz yKcbGEvLREcG5KapuiaPvrOqRvbDR9H7Yh4dK1fsbtVqUu2uVfo= -----END CERTIFICATE-----Generated at Sun Aug 24 02:25:41 2025 by rpki-client