$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft File: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft (raw, json) Hash identifier: 0uVQw0BblBj8EDHmqHFNzZ0BU9nCJkstzXQS7hx27hE= Subject key identifier: 16:D4:0F:F7:7D:25:6A:9B:C4:57:8D:27:77:E5:61:56:01:A5:E7:A1 Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Certificate serial: 7269879E4F2EE1B92F94EBDDC406E997BE7AEC62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft Manifest number: A8 Signing time: Sat 18 Oct 2025 23:00:37 +0000 Manifest this update: Sat 18 Oct 2025 22:55:37 +0000 Manifest next update: Wed 22 Oct 2025 05:57:37 +0000 Files and hashes: 1: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl (hash: XgnDXq8EfZmBoE9n3xbVnIu8Agkj28RVq+WyToff9eQ=) 2: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: 5aPZi9EHvbfyOxIPMTjzibe1Bxih6lwkA1KW+hUQT4E=) 3: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: /K4mylpcHmr+sO+7dTgSimoSvEZOrC1jLffnv1dbPQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:69:87:9e:4f:2e:e1:b9:2f:94:eb:dd:c4:06:e9:97:be:7a:ec:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Validity Not Before: Oct 18 22:55:37 2025 GMT Not After : Oct 22 05:57:37 2025 GMT Subject: CN=16D40FF77D256A9BC4578D2777E5615601A5E7A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:21:6d:01:8a:a9:ad:12:50:17:96:52:d6:f7: ee:fa:6e:03:2a:be:d1:14:7f:32:6c:76:8f:34:93: 30:3c:37:74:53:2a:5d:b8:f6:2f:f9:6a:6f:b6:4b: b5:01:43:7f:48:3a:91:4e:81:d3:8d:9a:17:b3:58: 06:d1:61:07:4a:69:0e:83:d0:0c:cb:31:69:d8:e2: 11:e4:d5:09:ce:b3:9f:14:90:53:fe:89:89:38:10: 8b:2e:f8:bf:8e:44:be:58:0c:70:a4:87:23:f6:1a: 0e:50:dc:b5:7c:7d:0a:f9:46:81:ea:ba:d4:8c:9a: 6a:2c:c7:70:ce:38:33:d7:c8:a7:ac:78:5d:f6:fe: 37:07:20:f9:d5:24:1e:36:a6:26:58:04:a4:7c:da: 18:aa:f7:d1:0b:97:7d:81:ae:b4:1d:b0:15:59:7a: 6b:af:58:6b:6b:71:ad:db:90:83:c4:f3:83:d3:21: f0:d8:64:0f:2d:20:92:10:cf:32:21:99:2e:b7:7f: f2:53:65:d8:1f:46:10:38:a4:f0:fc:40:0a:26:58: 8c:73:c3:94:f1:bb:81:83:dc:e7:8e:13:7b:a3:80: 3a:6c:0f:20:7c:09:d6:c4:9f:d5:9e:e7:eb:b3:a7: 67:f0:b5:46:a2:2c:f4:65:e1:9d:b1:e1:ae:29:f6: f3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D4:0F:F7:7D:25:6A:9B:C4:57:8D:27:77:E5:61:56:01:A5:E7:A1 X509v3 Authority Key Identifier: keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:37:0a:d1:5e:35:c3:ef:20:17:a6:d7:20:dc:12:4f:36:1c: fc:f0:f5:40:6c:34:7e:a9:97:13:81:db:46:bf:87:46:44:8c: 41:cb:a4:a2:32:9c:2c:4f:13:5d:e3:44:d5:a8:6e:27:71:3a: 4b:ad:93:0b:8f:8c:31:e6:9a:2c:8e:87:b5:0e:ad:bf:c8:1a: d7:ae:48:13:03:7c:14:a6:db:9d:d2:92:03:2c:b9:63:e7:f1: 80:72:4f:18:ba:ad:21:01:67:ef:27:20:76:ac:07:6a:a5:f7: bd:bc:96:fa:17:39:95:63:19:33:00:59:58:a6:17:bf:9d:9c: 45:7d:6e:69:d2:bb:e4:d3:6d:50:cb:4d:95:47:e8:c0:ab:c7: 59:4e:5e:55:d9:fd:57:5a:e8:52:7e:85:34:f6:c8:29:c0:56: 79:1d:73:09:28:68:6e:89:6e:26:18:ca:d4:37:57:fc:fb:a2: e8:a5:a8:e6:f3:8d:75:09:ab:50:8d:ce:4e:4b:28:13:c7:46: 38:4b:62:c6:ec:33:51:6a:9f:6b:0f:7a:40:40:da:07:3c:1d: b7:fd:63:e3:e0:b3:47:97:f4:48:cc:6b:51:41:3d:77:8c:4e: 90:9d:6a:e4:38:c4:c6:d1:00:71:0d:67:b5:35:33:be:62:41: 04:24:66:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcmmHnk8u4bkvlOvdxAbpl7567GIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0Ez RjVDMjhGNDAeFw0yNTEwMTgyMjU1MzdaFw0yNTEwMjIwNTU3MzdaMDMxMTAvBgNV BAMTKDE2RDQwRkY3N0QyNTZBOUJDNDU3OEQyNzc3RTU2MTU2MDFBNUU3QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcIW0BiqmtElAXllLW9+76bgMq vtEUfzJsdo80kzA8N3RTKl249i/5am+2S7UBQ39IOpFOgdONmhezWAbRYQdKaQ6D 0AzLMWnY4hHk1QnOs58UkFP+iYk4EIsu+L+ORL5YDHCkhyP2Gg5Q3LV8fQr5RoHq utSMmmosx3DOODPXyKeseF32/jcHIPnVJB42piZYBKR82hiq99ELl32BrrQdsBVZ emuvWGtrca3bkIPE84PTIfDYZA8tIJIQzzIhmS63f/JTZdgfRhA4pPD8QAomWIxz w5Txu4GD3OeOE3ujgDpsDyB8CdbEn9We5+uzp2fwtUaiLPRl4Z2x4a4p9vMxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFtQP930lapvEV40nd+VhVgGl56EwHwYDVR0j BBgwFoAUI0dahrtcUV3dd1O2VV4mej9cKPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8yMzQ3NUE4NkJC NUM1MTVEREQ3NzUzQjY1NTVFMjY3QTNGNUMyOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0EzRjVD MjhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2 N0EzRjVDMjhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ83CtFeNcPvIBem1yDcEk82HPzw9UBsNH6p lxOB20a/h0ZEjEHLpKIynCxPE13jRNWobidxOkutkwuPjDHmmiyOh7UOrb/IGteu SBMDfBSm253SkgMsuWPn8YByTxi6rSEBZ+8nIHasB2ql9728lvoXOZVjGTMAWVim F7+dnEV9bmnSu+TTbVDLTZVH6MCrx1lOXlXZ/Vda6FJ+hTT2yCnAVnkdcwkoaG6J biYYytQ3V/z7ouilqObzjXUJq1CNzk5LKBPHRjhLYsbsM1Fqn2sPekBA2gc8Hbf9 Y+Pgs0eX9EjMa1FBPXeMTpCdauQ4xMbRAHENZ7U1M75iQQQkZtA= -----END CERTIFICATE-----Generated at Tue Oct 21 03:06:21 2025 by rpki-client