$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft File: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft (raw, json) Hash identifier: LVV+hfxtAcOdGoJot31fFsXn0HdA44Jr+eJFAjcLLCA= Subject key identifier: E1:47:22:7E:FB:C4:D6:5F:89:81:2B:15:67:E7:FD:FF:B0:49:C7:56 Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Certificate serial: 57955D3F2311FDA5F6508F8676ED8A61C6ADB32D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft Manifest number: 76 Signing time: Mon 30 Jun 2025 19:50:36 +0000 Manifest this update: Mon 30 Jun 2025 19:45:36 +0000 Manifest next update: Fri 04 Jul 2025 07:41:36 +0000 Files and hashes: 1: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: VEUp2w3yPHnRqBLCf0zsUoh5RoZ8ZNdZE7XgU6xqQTk=) 2: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl (hash: 8x39jLJN21ZAXPGtCyzenVyjIVNkc7l3Xho7DGoSPcc=) 3: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: 1gjKyDW4KHd430zjH8eS6Hf0gzUPhwcmOJ+5ePkv/wI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 07:41:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:95:5d:3f:23:11:fd:a5:f6:50:8f:86:76:ed:8a:61:c6:ad:b3:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Validity Not Before: Jun 30 19:45:36 2025 GMT Not After : Jul 4 07:41:36 2025 GMT Subject: CN=E147227EFBC4D65F89812B1567E7FDFFB049C756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f3:ce:dc:f3:24:e5:9b:97:e0:10:b3:fa:ee: bf:c7:33:33:db:ab:73:b9:8e:70:16:76:d3:e8:38: df:32:98:28:5b:d8:56:f4:3f:53:bb:3f:8f:7f:a3: 30:17:e2:68:79:63:5f:f4:99:07:24:c7:32:dc:88: 4e:a8:00:4d:a0:3f:36:b9:55:63:e0:9c:40:44:4e: 0c:8e:65:32:19:1c:dc:d8:c8:ec:34:d7:b7:ee:06: bc:f7:04:47:69:4e:70:1a:3b:fc:36:cb:aa:cd:c5: bd:cd:d0:9f:a1:a0:4c:4a:d4:4e:de:22:c7:2e:cf: 8d:cd:ef:5d:1f:90:0e:ea:23:4f:3c:08:9c:df:bc: 43:0a:cd:ad:80:19:3d:8c:81:88:3a:d2:64:92:fe: 19:83:b6:bf:b9:c3:50:b3:51:f0:db:dd:b8:5e:ed: 17:8c:45:b5:f1:d5:f1:78:80:5a:b8:6d:23:34:26: 0f:6f:5a:08:87:44:2d:65:f4:a4:de:4b:2b:3b:39: b2:24:71:fb:5c:52:bf:d0:ea:13:48:d1:f7:b9:07: 85:1a:51:36:13:b1:1f:67:6c:a9:bc:9d:f9:46:2d: 95:c1:43:e1:89:c1:6c:f9:c4:7c:9a:5f:77:dc:85: 35:b0:0f:b8:f9:e9:88:11:89:e0:34:be:d5:53:13: 02:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:47:22:7E:FB:C4:D6:5F:89:81:2B:15:67:E7:FD:FF:B0:49:C7:56 X509v3 Authority Key Identifier: keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:5b:49:56:8c:63:70:f4:40:3a:c7:2e:8d:83:83:ed:d0:fa: b3:b7:64:7b:2d:f1:9c:29:45:2b:57:e2:51:f6:42:e9:14:5e: 90:e5:10:53:1d:ef:8c:ad:a3:94:24:fc:66:f9:e4:55:d7:02: 71:b9:d1:5c:d8:fe:25:99:dc:f5:bf:db:fb:cc:43:bd:b9:c5: 77:47:c3:17:d8:5d:f9:b0:31:62:45:15:2b:7a:17:0e:77:b0: 54:9a:0f:e9:2e:ad:7f:75:7b:b5:ed:b6:ea:54:84:c1:05:a9: ff:a0:2e:e6:2d:9a:bd:b9:74:7c:e4:6e:53:f0:07:b5:39:cd: c4:9d:af:e8:6e:3f:ee:ed:01:93:9c:90:05:1c:f6:6c:60:72: 95:69:ad:79:73:c6:81:c1:7b:d2:0d:b6:1f:b7:34:bd:1f:61: d4:c6:22:f7:32:52:35:dc:96:82:9e:48:62:55:2b:d0:b9:0f: c8:ae:b4:09:16:36:da:23:df:48:3b:b2:26:15:74:72:50:1f: bc:30:59:68:58:2c:f8:d5:da:ee:33:98:d1:bf:7c:e4:da:b9: b2:96:27:16:dc:2a:84:64:8b:6b:24:fc:a2:04:fb:01:ae:3d: 30:06:12:a1:fd:29:01:e3:f2:8b:b5:b4:ca:be:0e:75:27:86: dc:20:26:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV5VdPyMR/aX2UI+Gdu2KYcatsy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0Ez RjVDMjhGNDAeFw0yNTA2MzAxOTQ1MzZaFw0yNTA3MDQwNzQxMzZaMDMxMTAvBgNV BAMTKEUxNDcyMjdFRkJDNEQ2NUY4OTgxMkIxNTY3RTdGREZGQjA0OUM3NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe887c8yTlm5fgELP67r/HMzPb q3O5jnAWdtPoON8ymChb2Fb0P1O7P49/ozAX4mh5Y1/0mQckxzLciE6oAE2gPza5 VWPgnEBETgyOZTIZHNzYyOw017fuBrz3BEdpTnAaO/w2y6rNxb3N0J+hoExK1E7e Iscuz43N710fkA7qI088CJzfvEMKza2AGT2MgYg60mSS/hmDtr+5w1CzUfDb3bhe 7ReMRbXx1fF4gFq4bSM0Jg9vWgiHRC1l9KTeSys7ObIkcftcUr/Q6hNI0fe5B4Ua UTYTsR9nbKm8nflGLZXBQ+GJwWz5xHyaX3fchTWwD7j56YgRieA0vtVTEwIRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4UcifvvE1l+JgSsVZ+f9/7BJx1YwHwYDVR0j BBgwFoAUI0dahrtcUV3dd1O2VV4mej9cKPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8yMzQ3NUE4NkJC NUM1MTVEREQ3NzUzQjY1NTVFMjY3QTNGNUMyOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0EzRjVD MjhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2 N0EzRjVDMjhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRbSVaMY3D0QDrHLo2Dg+3Q+rO3ZHst8Zwp RStX4lH2QukUXpDlEFMd74yto5Qk/Gb55FXXAnG50VzY/iWZ3PW/2/vMQ725xXdH wxfYXfmwMWJFFSt6Fw53sFSaD+kurX91e7XttupUhMEFqf+gLuYtmr25dHzkblPw B7U5zcSdr+huP+7tAZOckAUc9mxgcpVprXlzxoHBe9INth+3NL0fYdTGIvcyUjXc loKeSGJVK9C5D8iutAkWNtoj30g7siYVdHJQH7wwWWhYLPjV2u4zmNG/fOTaubKW JxbcKoRki2sk/KIE+wGuPTAGEqH9KQHj8ou1tMq+DnUnhtwgJss= -----END CERTIFICATE-----Generated at Thu Jul 3 06:54:07 2025 by rpki-client