$ rpki-client -vvf repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft File: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft (raw, json) Hash identifier: vBbhSi/ejNpCHtRcXiS/KGOD+6TcdXT0Zm6o2ylcGoc= Subject key identifier: E2:74:E5:A9:0F:32:1C:EB:23:C1:77:D8:9F:C5:48:E3:53:85:11:C4 Authority key identifier: C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF Certificate issuer: /CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Certificate serial: 27F40B1D153EF454160594E6A0CE4F83F9C4448F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft Manifest number: A5 Signing time: Wed 06 Aug 2025 13:01:09 +0000 Manifest this update: Wed 06 Aug 2025 12:56:09 +0000 Manifest next update: Sat 09 Aug 2025 15:13:09 +0000 Files and hashes: 1: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl (hash: /XGbeHbEBPsmHqbXPM6GXvVDZFxxUsT+kKZPvkc5KAo=) 2: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: hxLgZVEmgK6Q9Qorix7qtcxFffjQzl54opLxUmCvE+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:f4:0b:1d:15:3e:f4:54:16:05:94:e6:a0:ce:4f:83:f9:c4:44:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Validity Not Before: Aug 6 12:56:09 2025 GMT Not After : Aug 9 15:13:09 2025 GMT Subject: CN=E274E5A90F321CEB23C177D89FC548E3538511C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ef:de:14:5a:4f:f9:ce:be:fb:82:7a:83:84: da:a2:b5:a0:45:8d:4f:c0:08:c6:51:10:06:c4:db: d9:6b:5d:38:2c:3e:af:f1:ad:ff:2a:03:52:c1:8f: a0:48:d9:92:f8:9f:12:4a:1d:32:5a:03:3c:0a:0e: 22:c5:99:51:0a:c6:31:c4:a4:6b:af:67:84:2d:5d: 5f:6c:84:75:b8:94:48:7b:0b:48:66:82:ce:01:d6: 0a:66:82:5d:56:46:bd:28:f8:83:03:92:2e:d9:53: f5:25:9e:6b:50:3d:6b:17:b0:77:9e:80:8c:20:12: 90:98:bf:d2:96:fc:28:1b:64:bf:8d:8e:0e:7a:dc: 18:4b:43:a6:cf:6f:e9:f5:15:df:99:a8:3d:a8:25: 93:af:41:e2:cb:80:d3:8d:a8:87:f3:ae:26:03:fb: 02:50:15:f5:a8:51:f2:ca:e1:13:9c:43:2a:95:42: 81:c7:49:14:43:84:df:51:66:27:88:c7:3d:49:da: 17:13:a6:00:13:85:71:df:01:7e:c4:90:fd:1b:bc: 98:ec:37:78:07:9b:0e:35:84:1d:ef:ea:e8:93:77: 94:d5:50:cc:0a:27:41:e8:96:a5:3d:f8:9e:5a:16: ce:8a:34:15:bf:8f:72:83:97:27:49:f5:ac:51:3e: f9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:74:E5:A9:0F:32:1C:EB:23:C1:77:D8:9F:C5:48:E3:53:85:11:C4 X509v3 Authority Key Identifier: keyid:C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:a2:9a:d6:03:6a:ec:11:03:c0:5a:26:3f:8c:f0:2b:88:38: 99:4a:9a:09:28:c2:ab:a9:5f:ce:28:51:3e:a6:3b:fe:ae:de: f3:13:19:ae:6f:38:69:c9:b4:a3:87:f5:16:97:92:9e:59:ba: cd:d7:cd:10:ee:58:ee:1a:03:21:c6:3c:93:85:8f:0b:f3:da: 67:29:3c:82:f1:e1:e2:eb:91:9c:06:0d:f6:ae:bd:8e:34:4b: 87:c6:ed:9d:1e:f2:ae:e8:19:99:7f:83:ed:0b:22:81:60:2f: 6a:70:ea:88:df:e8:1a:46:eb:84:b4:18:aa:39:9e:2b:83:95: 63:23:bf:56:2e:45:a9:85:73:09:e3:9f:4e:49:39:7d:73:43: ea:2b:cb:04:d2:7d:54:c9:c7:c3:7a:fc:c3:b1:dc:8a:7a:73: c1:fd:ce:fa:07:cb:65:4c:ee:41:cd:6c:d3:2d:74:d5:b7:dd: a4:0b:c0:af:fb:2d:14:7e:f7:ac:7f:33:58:e9:42:90:32:86: 0c:09:20:ab:aa:4d:1a:d4:2a:7f:c0:79:31:40:ad:9f:7e:b1: 50:89:88:61:ca:66:ba:5b:eb:4a:24:af:b0:50:d3:2e:bf:57: 7f:72:87:2f:7f:07:ff:62:17:05:c3:3b:94:f7:31:fb:15:19: 23:7f:c6:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ/QLHRU+9FQWBZTmoM5Pg/nERI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIz RTNBNENCRjAeFw0yNTA4MDYxMjU2MDlaFw0yNTA4MDkxNTEzMDlaMDMxMTAvBgNV BAMTKEUyNzRFNUE5MEYzMjFDRUIyM0MxNzdEODlGQzU0OEUzNTM4NTExQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC794UWk/5zr77gnqDhNqitaBF jU/ACMZREAbE29lrXTgsPq/xrf8qA1LBj6BI2ZL4nxJKHTJaAzwKDiLFmVEKxjHE pGuvZ4QtXV9shHW4lEh7C0hmgs4B1gpmgl1WRr0o+IMDki7ZU/UlnmtQPWsXsHee gIwgEpCYv9KW/CgbZL+Njg563BhLQ6bPb+n1Fd+ZqD2oJZOvQeLLgNONqIfzriYD +wJQFfWoUfLK4ROcQyqVQoHHSRRDhN9RZieIxz1J2hcTpgAThXHfAX7EkP0bvJjs N3gHmw41hB3v6uiTd5TVUMwKJ0HolqU9+J5aFs6KNBW/j3KDlydJ9axRPvmXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4nTlqQ8yHOsjwXfYn8VI41OFEcQwHwYDVR0j BBgwFoAUwj+DLyfbiLi8WHZpMv2hmz46TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjc5ZWU5Yy1hZDJiLTRiZWQtODY0MS0yM2JmMmQzYjE2ZGIvMC9DMjNGODMyRjI3 REI4OEI4QkM1ODc2NjkzMkZEQTE5QjNFM0E0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIzRTNB NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI3OWVlOWMtYWQyYi00YmVkLTg2 NDEtMjNiZjJkM2IxNmRiLzAvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREEx OUIzRTNBNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACaimtYDauwRA8BaJj+M8CuIOJlKmgkowqup X84oUT6mO/6u3vMTGa5vOGnJtKOH9RaXkp5Zus3XzRDuWO4aAyHGPJOFjwvz2mcp PILx4eLrkZwGDfauvY40S4fG7Z0e8q7oGZl/g+0LIoFgL2pw6ojf6BpG64S0GKo5 niuDlWMjv1YuRamFcwnjn05JOX1zQ+orywTSfVTJx8N6/MOx3Ip6c8H9zvoHy2VM 7kHNbNMtdNW33aQLwK/7LRR+96x/M1jpQpAyhgwJIKuqTRrUKn/AeTFArZ9+sVCJ iGHKZrpb60okr7BQ0y6/V39yhy9/B/9iFwXDO5T3MfsVGSN/xj4= -----END CERTIFICATE-----Generated at Thu Aug 7 00:31:58 2025 by rpki-client