$ rpki-client -vvf repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft File: 23F26F571E3865A06A13936555D8DAA27B433933.mft (raw, json) Hash identifier: Qn3pj1fd7sZ/3ta1KKR2osrWQS49GwSSmasgz5FB6TU= Subject key identifier: 33:E6:32:73:D4:A3:CE:34:45:C3:C9:A4:A1:9D:D4:52:8F:D7:4A:9F Authority key identifier: 23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 Certificate issuer: /CN=23F26F571E3865A06A13936555D8DAA27B433933 Certificate serial: 6BAC32002B7070C0132EA72A50F06CBDFAA888E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft Manifest number: 01DC Signing time: Thu 07 Aug 2025 11:21:54 +0000 Manifest this update: Thu 07 Aug 2025 11:16:54 +0000 Manifest next update: Sun 10 Aug 2025 18:07:54 +0000 Files and hashes: 1: 3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa (hash: 1TF1q7w4Zi+aLzgAuBXcx7Cio1arNovo47+qmMckVGw=) 2: 3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa (hash: SP7Vczz+6iJdkBg+Pm02fK5fUh9ipxxjJbwoliQlUe0=) 3: 3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa (hash: lkFPSA/0P6F0cE2k+qs5Hdu6hwn+gvFK2pZuPkqHwpw=) 4: 23F26F571E3865A06A13936555D8DAA27B433933.crl (hash: rblVORvgBLpHATIvtmBqEI6IqGp4dhRPnKdCC8e63tg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 18:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:ac:32:00:2b:70:70:c0:13:2e:a7:2a:50:f0:6c:bd:fa:a8:88:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23F26F571E3865A06A13936555D8DAA27B433933 Validity Not Before: Aug 7 11:16:54 2025 GMT Not After : Aug 10 18:07:54 2025 GMT Subject: CN=33E63273D4A3CE3445C3C9A4A19DD4528FD74A9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e1:dd:1f:5e:8b:cf:c7:d2:c0:66:c6:fd:47: c7:ed:7b:a6:a9:e0:87:b7:7b:09:d8:cf:b2:0a:d4: f4:4f:27:15:1d:f8:07:6a:2c:3e:f9:ed:04:b7:a6: 01:2c:c1:be:93:96:3d:b3:05:d6:e2:57:d3:06:98: 6d:d8:95:d7:1c:c3:31:d4:25:a9:11:e7:bd:31:11: d6:d9:e4:7c:03:f2:23:b6:e4:5c:5f:25:24:ee:5e: 24:de:3c:ea:ee:e8:ba:e8:c6:ee:7d:d4:4f:4d:f5: 23:34:17:ba:65:5c:fc:40:bb:77:a4:a3:2b:94:0b: 7e:92:0f:a4:80:15:89:7a:0f:e2:ae:b3:31:08:c5: 98:45:b7:b8:61:2d:69:6c:88:5a:3f:4b:50:34:f0: 2a:f7:c5:63:c3:9c:89:82:93:dd:27:b1:35:5d:68: a2:8c:d1:6f:89:ca:4e:a3:97:71:4f:d5:11:5f:88: 80:9c:2b:ee:88:bd:71:c4:59:33:9a:c8:29:a2:42: 82:d8:0d:1e:82:5b:e8:62:db:45:ce:59:68:97:5b: af:19:98:e1:b4:56:91:71:1c:e6:11:cd:25:a7:9c: c3:26:7d:7f:0c:4a:04:41:34:ee:dc:a1:55:68:d5: 68:3f:d7:4f:98:a4:16:8e:98:2a:d9:49:ac:1e:b5: 4b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E6:32:73:D4:A3:CE:34:45:C3:C9:A4:A1:9D:D4:52:8F:D7:4A:9F X509v3 Authority Key Identifier: keyid:23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:57:6c:b0:03:f6:33:21:09:e7:2c:3e:59:16:6f:50:67:2c: e9:25:0e:d8:ef:04:5a:a1:61:30:08:9d:50:e0:3e:cf:7f:f9: 10:e4:34:8c:14:bb:8f:52:bc:b1:8c:bc:07:21:d3:31:db:f5: ca:b3:84:64:cc:dc:c4:0f:6d:b4:f3:8f:3d:68:c1:fa:40:b8: 01:cc:f6:3c:5f:61:d6:b5:ce:f2:c7:de:fe:b5:e3:21:e4:1b: a4:31:4c:f0:64:e2:00:b4:65:71:32:e0:0b:d9:5e:97:13:fc: 64:e0:d2:b1:88:d9:8d:8d:74:85:ed:e2:91:69:61:58:66:2d: b8:92:98:65:06:aa:56:69:91:3e:48:f3:cd:be:83:27:a2:31: cc:e3:bf:a6:13:8f:1b:93:ed:8c:0a:45:8c:45:15:83:d0:bf: 12:41:65:9a:d7:a1:ab:7c:43:88:80:bf:b6:04:d3:63:a7:b1: 02:dd:ba:47:a6:d1:12:d2:03:ef:e0:f1:9e:5b:50:55:8f:90: 09:7f:08:17:15:d2:aa:2d:8a:58:61:6a:15:d6:a8:05:15:cb: 5a:c0:cd:72:b2:dd:a7:2b:76:1f:ba:a2:48:62:13:ab:01:76: 0f:5f:b4:f3:0f:54:ea:db:11:1f:50:ea:59:77:51:bb:15:65: 28:7c:22:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa6wyACtwcMATLqcqUPBsvfqoiOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3 QjQzMzkzMzAeFw0yNTA4MDcxMTE2NTRaFw0yNTA4MTAxODA3NTRaMDMxMTAvBgNV BAMTKDMzRTYzMjczRDRBM0NFMzQ0NUMzQzlBNEExOURENDUyOEZENzRBOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb4d0fXovPx9LAZsb9R8fte6ap 4Ie3ewnYz7IK1PRPJxUd+AdqLD757QS3pgEswb6Tlj2zBdbiV9MGmG3YldccwzHU JakR570xEdbZ5HwD8iO25FxfJSTuXiTePOru6Lroxu591E9N9SM0F7plXPxAu3ek oyuUC36SD6SAFYl6D+KuszEIxZhFt7hhLWlsiFo/S1A08Cr3xWPDnImCk90nsTVd aKKM0W+Jyk6jl3FP1RFfiICcK+6IvXHEWTOayCmiQoLYDR6CW+hi20XOWWiXW68Z mOG0VpFxHOYRzSWnnMMmfX8MSgRBNO7coVVo1Wg/10+YpBaOmCrZSawetUsbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM+Yyc9SjzjRFw8mkoZ3UUo/XSp8wHwYDVR0j BBgwFoAUI/JvVx44ZaBqE5NlVdjaontDOTMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVmY2JmMC02NmVjLTQ4ZDMtYjIyMS0wZjA5Njg2ZDU4MTgvMC8yM0YyNkY1NzFF Mzg2NUEwNkExMzkzNjU1NUQ4REFBMjdCNDMzOTMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3QjQz MzkzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlZmNiZjAtNjZlYy00OGQzLWIy MjEtMGYwOTY4NmQ1ODE4LzAvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERB QTI3QjQzMzkzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVXbLAD9jMhCecsPlkWb1BnLOklDtjvBFqh YTAInVDgPs9/+RDkNIwUu49SvLGMvAch0zHb9cqzhGTM3MQPbbTzjz1owfpAuAHM 9jxfYda1zvLH3v614yHkG6QxTPBk4gC0ZXEy4AvZXpcT/GTg0rGI2Y2NdIXt4pFp YVhmLbiSmGUGqlZpkT5I882+gyeiMczjv6YTjxuT7YwKRYxFFYPQvxJBZZrXoat8 Q4iAv7YE02OnsQLdukem0RLSA+/g8Z5bUFWPkAl/CBcV0qotilhhahXWqAUVy1rA zXKy3acrdh+6okhiE6sBdg9ftPMPVOrbER9Q6ll3UbsVZSh8ItI= -----END CERTIFICATE-----Generated at Sat Aug 9 14:22:34 2025 by rpki-client