$ rpki-client -vvf repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft File: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft (raw, json) Hash identifier: CWCh0rCaMweLZ5aC10d04NmHRDryPwx7EDz9gCWk3eg= Subject key identifier: 44:08:CF:05:8D:49:0C:15:DA:15:D5:00:CF:20:0D:3F:0A:B5:16:4C Authority key identifier: C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF Certificate issuer: /CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Certificate serial: 7EE3F907F75F89C3BCF5EB2CB45036B2919EE4AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft Manifest number: 8D Signing time: Sat 14 Jun 2025 06:01:09 +0000 Manifest this update: Sat 14 Jun 2025 05:56:09 +0000 Manifest next update: Tue 17 Jun 2025 14:30:09 +0000 Files and hashes: 1: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: eyFleiV8rp1+1bq0+hrbGjYjkkXec6CZy2qIm0a3nAk=) 2: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl (hash: tpeChjYENVfmKMhf3eq1HuAPgYNveEjm9/dqf7rsf4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 14:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e3:f9:07:f7:5f:89:c3:bc:f5:eb:2c:b4:50:36:b2:91:9e:e4:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Validity Not Before: Jun 14 05:56:09 2025 GMT Not After : Jun 17 14:30:09 2025 GMT Subject: CN=4408CF058D490C15DA15D500CF200D3F0AB5164C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ae:c3:65:46:d1:19:00:09:00:06:82:19:76: 2f:fe:dc:1a:8b:e2:bb:66:3b:7f:2c:26:53:7f:dd: 2c:02:6f:4b:2c:25:4d:c3:dc:ad:03:2f:60:29:ce: 2e:b2:71:c4:d7:35:f8:4b:8e:54:d9:d4:5c:14:48: 37:e1:7d:4b:01:77:d4:79:bb:aa:4b:91:0f:e0:9b: ae:61:14:8f:38:bc:1a:51:7e:ff:18:80:a7:cf:7d: 39:06:7a:1d:ea:17:7e:1e:a5:ee:47:93:c7:2c:96: fc:8b:da:32:33:41:7d:cc:7a:2a:20:b8:cb:19:fb: 75:5f:d4:06:19:5b:76:ef:13:7a:de:1a:42:2c:f6: 2d:a4:9d:2a:1f:e5:40:eb:83:d5:19:41:ac:2d:f3: 74:45:a8:a6:0d:55:e2:92:be:0d:89:3f:4b:7f:52: c5:ee:ba:0c:92:2a:b7:fc:a2:b7:af:fd:f2:9c:d7: 17:b7:5c:46:50:a4:bd:b5:cf:34:a2:31:fe:ef:9e: 8e:36:15:47:26:b2:85:3b:31:88:09:70:12:08:60: cb:13:5d:17:32:50:f6:3c:55:5b:af:7a:b7:f4:f6: c2:8e:2c:2a:81:08:b2:4b:a9:a5:ba:9a:bd:48:f0: 09:23:a1:7c:9c:9c:15:28:7d:d2:a8:6f:dc:0b:1c: 8a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:08:CF:05:8D:49:0C:15:DA:15:D5:00:CF:20:0D:3F:0A:B5:16:4C X509v3 Authority Key Identifier: keyid:C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:f3:b5:bc:af:3d:1e:34:7e:63:76:a2:63:16:cf:79:51:15: aa:1c:b5:51:83:1a:57:57:18:c0:37:e9:21:04:6f:6d:36:f2: ab:23:79:5e:a8:74:fa:40:35:b0:cf:9e:ec:fe:fd:de:1e:c5: 07:88:23:96:4c:b6:37:ba:86:67:40:f3:4c:9a:f4:f5:01:2f: 23:05:dd:de:c4:0b:18:84:af:06:e7:c5:d0:02:8f:a6:0d:f7: 3c:99:1d:0b:84:b4:e1:25:3c:ee:e9:98:ae:a2:32:4a:70:4d: 19:e3:be:c3:33:96:2b:b3:01:7f:6f:14:ce:47:01:73:5d:e7: 34:9a:cf:4e:85:29:62:1b:e2:1d:2c:1e:d9:e5:09:55:c9:2c: df:c1:57:f9:2c:de:f7:f8:1e:d2:85:81:f2:34:d3:93:93:df: be:4a:bb:fb:90:f0:1e:cb:33:ad:aa:d9:24:ba:d2:7e:4e:ca: 25:5e:87:91:63:1e:f8:c6:72:d8:d4:3b:de:1e:3b:b4:09:8d: e4:1d:9e:4f:ce:f5:a8:56:71:55:c0:8f:9a:76:af:13:a1:a7: 05:25:21:3f:fd:43:ec:21:94:50:94:2b:b8:7b:b0:69:29:83: 79:76:0e:03:ed:b6:15:61:fe:29:ff:48:ec:a3:1c:f6:0d:50: bf:dc:bf:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfuP5B/dficO89esstFA2spGe5KowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIz RTNBNENCRjAeFw0yNTA2MTQwNTU2MDlaFw0yNTA2MTcxNDMwMDlaMDMxMTAvBgNV BAMTKDQ0MDhDRjA1OEQ0OTBDMTVEQTE1RDUwMENGMjAwRDNGMEFCNTE2NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTrsNlRtEZAAkABoIZdi/+3BqL 4rtmO38sJlN/3SwCb0ssJU3D3K0DL2Apzi6yccTXNfhLjlTZ1FwUSDfhfUsBd9R5 u6pLkQ/gm65hFI84vBpRfv8YgKfPfTkGeh3qF34epe5Hk8cslvyL2jIzQX3Meiog uMsZ+3Vf1AYZW3bvE3reGkIs9i2knSof5UDrg9UZQawt83RFqKYNVeKSvg2JP0t/ UsXuugySKrf8orev/fKc1xe3XEZQpL21zzSiMf7vno42FUcmsoU7MYgJcBIIYMsT XRcyUPY8VVuverf09sKOLCqBCLJLqaW6mr1I8AkjoXycnBUofdKob9wLHIpBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURAjPBY1JDBXaFdUAzyANPwq1FkwwHwYDVR0j BBgwFoAUwj+DLyfbiLi8WHZpMv2hmz46TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjc5ZWU5Yy1hZDJiLTRiZWQtODY0MS0yM2JmMmQzYjE2ZGIvMC9DMjNGODMyRjI3 REI4OEI4QkM1ODc2NjkzMkZEQTE5QjNFM0E0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIzRTNB NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI3OWVlOWMtYWQyYi00YmVkLTg2 NDEtMjNiZjJkM2IxNmRiLzAvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREEx OUIzRTNBNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDztbyvPR40fmN2omMWz3lRFaoctVGDGldX GMA36SEEb2028qsjeV6odPpANbDPnuz+/d4exQeII5ZMtje6hmdA80ya9PUBLyMF 3d7ECxiErwbnxdACj6YN9zyZHQuEtOElPO7pmK6iMkpwTRnjvsMzliuzAX9vFM5H AXNd5zSaz06FKWIb4h0sHtnlCVXJLN/BV/ks3vf4HtKFgfI005OT375Ku/uQ8B7L M62q2SS60n5OyiVeh5FjHvjGctjUO94eO7QJjeQdnk/O9ahWcVXAj5p2rxOhpwUl IT/9Q+whlFCUK7h7sGkpg3l2DgPtthVh/in/SOyjHPYNUL/cvzs= -----END CERTIFICATE-----Generated at Mon Jun 16 02:05:44 2025 by rpki-client