$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft File: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft (raw, json) Hash identifier: QZT9/g1ZYQBsZhwtqiaoP//5uiZTfuTntMT3f5otJA0= Subject key identifier: 92:47:A7:A1:1E:01:A5:9B:E0:C3:BC:CC:E8:B4:E9:47:26:B6:F2:9C Authority key identifier: 23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 Certificate issuer: /CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Certificate serial: 218B260BC53822E9A58C5D654B4F22A4F8AC22CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft Manifest number: A4 Signing time: Fri 13 Jun 2025 16:30:52 +0000 Manifest this update: Fri 13 Jun 2025 16:25:52 +0000 Manifest next update: Tue 17 Jun 2025 02:30:52 +0000 Files and hashes: 1: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl (hash: wvV+d6rzEfozxVtxbUT58a9U+eFLXk903HNwpB62SFE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 02:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:8b:26:0b:c5:38:22:e9:a5:8c:5d:65:4b:4f:22:a4:f8:ac:22:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Validity Not Before: Jun 13 16:25:52 2025 GMT Not After : Jun 17 02:30:52 2025 GMT Subject: CN=9247A7A11E01A59BE0C3BCCCE8B4E94726B6F29C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1e:a5:56:96:a4:45:4a:f3:1c:33:b3:77:e8: 1d:7c:35:33:19:77:31:38:37:14:99:05:e7:77:77: 51:ee:2f:e6:ed:1d:ec:9d:e2:a0:0f:26:38:b1:d0: 20:7f:63:b2:d0:1c:f1:6b:6e:76:a0:eb:81:54:74: cc:22:4e:64:35:e1:4a:f9:67:0d:75:c2:1d:18:45: 2c:e0:28:b8:bd:8f:56:38:93:a6:d8:e6:19:5b:70: f3:9e:5c:a3:13:71:8c:a0:d3:f0:6c:b5:aa:71:4b: cf:52:ab:60:de:61:d5:0e:8a:d5:d6:a6:8d:15:96: e9:42:b8:32:32:dc:c7:6f:60:41:e5:4a:8c:03:89: 00:45:ae:48:ea:cf:fa:d4:4d:af:b3:54:95:3f:6d: a5:9f:70:a9:d0:da:f0:8d:6e:2a:34:6e:d9:66:85: 47:8d:6e:bb:23:fa:95:12:e1:6e:31:3d:95:eb:34: 7a:e5:bc:b2:43:de:10:08:53:b2:b9:a5:d8:c8:c7: 5c:59:c2:be:c2:41:99:98:e2:28:cb:89:e6:46:a4: 4d:2f:ae:b6:39:9f:54:0f:b3:2b:d6:fc:ef:02:46: b1:64:c3:13:f0:0b:d5:7c:03:ca:81:9e:8d:35:6e: a3:c5:68:27:34:34:9e:c8:6c:2f:52:26:0e:56:28: 18:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:47:A7:A1:1E:01:A5:9B:E0:C3:BC:CC:E8:B4:E9:47:26:B6:F2:9C X509v3 Authority Key Identifier: keyid:23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:b9:a8:4b:c5:4e:af:4e:b8:41:73:eb:42:b9:79:1a:f3:2c: 5a:c3:0e:37:94:d0:e9:f6:ba:be:91:b7:f0:f7:f7:1c:3e:34: ef:5a:20:20:0e:11:db:a1:85:2a:07:65:8b:38:2f:df:56:a0: 46:28:88:da:9a:71:2c:2f:88:46:1b:72:6b:c6:89:55:23:4e: 56:4d:39:eb:e0:a6:29:6e:24:40:19:a5:3a:aa:98:cc:b9:b4: fd:d4:26:f4:8a:a5:4f:08:e1:65:7e:a3:86:8b:31:a2:2a:55: 4b:7d:48:7e:64:2d:82:56:56:31:e2:49:28:c7:bd:eb:a3:62: 04:b3:b5:f0:9a:58:86:81:26:a0:86:83:1d:c6:a4:15:5a:c6: 26:7c:f9:0a:7f:30:ff:d7:4d:94:ea:96:b8:15:bb:b1:78:2d: 33:3f:3a:20:47:0a:be:c2:e0:30:d7:9e:82:57:31:7e:99:77: 59:01:87:1c:cd:e8:f4:2a:3b:ec:62:0d:b0:55:53:c6:84:56: 6b:f2:0d:27:5f:90:af:e7:b8:9b:40:f4:a0:c8:90:c1:22:f2: 64:8e:7d:f3:0e:52:7c:56:db:35:d3:d4:dd:ce:7d:bf:3d:5e: 0c:b7:9f:78:41:fa:57:62:1e:8b:ba:f2:86:96:71:5d:b6:40: 77:11:3b:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIYsmC8U4IumljF1lS08ipPisIs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFC RkNDN0UzNjAeFw0yNTA2MTMxNjI1NTJaFw0yNTA2MTcwMjMwNTJaMDMxMTAvBgNV BAMTKDkyNDdBN0ExMUUwMUE1OUJFMEMzQkNDQ0U4QjRFOTQ3MjZCNkYyOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkHqVWlqRFSvMcM7N36B18NTMZ dzE4NxSZBed3d1HuL+btHeyd4qAPJjix0CB/Y7LQHPFrbnag64FUdMwiTmQ14Ur5 Zw11wh0YRSzgKLi9j1Y4k6bY5hlbcPOeXKMTcYyg0/BstapxS89Sq2DeYdUOitXW po0VlulCuDIy3MdvYEHlSowDiQBFrkjqz/rUTa+zVJU/baWfcKnQ2vCNbio0btlm hUeNbrsj+pUS4W4xPZXrNHrlvLJD3hAIU7K5pdjIx1xZwr7CQZmY4ijLieZGpE0v rrY5n1QPsyvW/O8CRrFkwxPwC9V8A8qBno01bqPFaCc0NJ7IbC9SJg5WKBizAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkkenoR4BpZvgw7zM6LTpRya28pwwHwYDVR0j BBgwFoAUI8Yi+HYYq4sEIuempG0ukb/MfjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMS8yM0M2MjJGODc2 MThBQjhCMDQyMkU3QTZBNDZEMkU5MUJGQ0M3RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFCRkND N0UzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzEvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJF OTFCRkNDN0UzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACi5qEvFTq9OuEFz60K5eRrzLFrDDjeU0On2 ur6Rt/D39xw+NO9aICAOEduhhSoHZYs4L99WoEYoiNqacSwviEYbcmvGiVUjTlZN OevgpiluJEAZpTqqmMy5tP3UJvSKpU8I4WV+o4aLMaIqVUt9SH5kLYJWVjHiSSjH veujYgSztfCaWIaBJqCGgx3GpBVaxiZ8+Qp/MP/XTZTqlrgVu7F4LTM/OiBHCr7C 4DDXnoJXMX6Zd1kBhxzN6PQqO+xiDbBVU8aEVmvyDSdfkK/nuJtA9KDIkMEi8mSO ffMOUnxW2zXT1N3Ofb89Xgy3n3hB+ldiHou68oaWcV22QHcRO+g= -----END CERTIFICATE-----Generated at Sun Jun 15 17:09:51 2025 by rpki-client