$ rpki-client -vvf repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft File: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft (raw, json) Hash identifier: rxkJae10KYCD52xYVyc1eJ/FL4E9Kytmgws/L03RjTw= Subject key identifier: AE:8F:16:D8:53:DE:5F:8D:E3:E2:10:34:26:9E:05:D5:6C:E1:45:DE Authority key identifier: 23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 Certificate issuer: /CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Certificate serial: 7BC3577E0E129CB67A4699C217BAB4098CDEC68B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft Manifest number: 010A Signing time: Tue 05 Aug 2025 07:42:00 +0000 Manifest this update: Tue 05 Aug 2025 07:37:00 +0000 Manifest next update: Fri 08 Aug 2025 12:47:00 +0000 Files and hashes: 1: 3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa (hash: GanArMdyxHcMbx7yNEnXuF/pBEYLZnuk0ZSf31LCDR8=) 2: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl (hash: JDF4mjyOm58VzF9G1vvPBRBVYdqAUCQpaYSL4ZpSSp0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 12:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c3:57:7e:0e:12:9c:b6:7a:46:99:c2:17:ba:b4:09:8c:de:c6:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Validity Not Before: Aug 5 07:37:00 2025 GMT Not After : Aug 8 12:47:00 2025 GMT Subject: CN=AE8F16D853DE5F8DE3E21034269E05D56CE145DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4d:23:64:a1:e1:1d:2b:df:3d:62:65:13:49: 8f:e9:41:b4:2a:48:10:61:73:2c:dc:aa:f1:a3:ed: 67:62:40:77:68:2c:27:cd:87:d2:d8:a2:19:8a:aa: 75:7d:f2:66:a1:3e:a7:5d:2b:1e:2d:73:47:62:52: f0:f0:8e:8c:35:72:a6:35:ad:ee:da:bf:e6:2a:e2: 97:e0:66:fd:93:85:ff:d1:70:12:8a:04:74:a9:57: e7:5b:1b:05:fe:c3:0c:f2:5a:87:50:ac:e1:ea:c0: 2c:0c:1f:9a:4f:66:7b:43:a0:d9:f6:bc:a1:5a:33: 97:3e:ca:fe:52:5d:e9:4e:8c:c8:93:32:d9:18:db: 42:9b:08:28:4f:b0:19:a1:7b:b2:db:fa:89:f6:90: 1e:50:f5:0a:35:d1:86:81:77:61:21:bc:21:1f:a0: fb:22:52:24:05:53:0a:d2:cc:4f:2f:ae:ab:24:ad: 3f:12:69:75:17:37:dd:cf:d2:89:77:9d:65:47:89: 6d:1e:b5:11:12:ac:99:17:ee:d0:42:37:20:f3:7f: d0:a6:65:85:be:b1:19:c5:17:90:75:40:8b:64:7b: ac:fb:ae:bd:6b:f7:bb:d9:0d:38:31:3e:12:6a:64: 1e:34:a5:67:5e:3f:1d:63:7c:80:c0:cb:7b:9d:2e: 76:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8F:16:D8:53:DE:5F:8D:E3:E2:10:34:26:9E:05:D5:6C:E1:45:DE X509v3 Authority Key Identifier: keyid:23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:dd:a4:3d:3f:03:c1:45:6b:bf:b6:36:b9:03:fb:98:c2:fe: 76:ea:32:8a:ab:f9:c2:e5:4d:54:99:ee:3c:56:01:16:e1:2e: 09:85:99:f7:8d:ac:1a:88:69:6d:6d:2b:90:2c:9a:21:14:26: b0:28:0a:af:78:e9:a9:4e:96:c5:15:3a:b9:ac:d9:e5:eb:59: 28:6c:c3:58:72:95:6f:19:d1:14:9b:dd:9a:d5:2b:77:4c:79: eb:66:0a:a6:d3:71:95:bf:50:6c:df:2e:b3:be:81:dd:b8:56: 8b:9b:92:e4:31:8b:82:18:70:ad:65:83:d3:d5:21:08:38:a8: 15:3e:d5:3c:bc:cb:b5:06:0c:31:b4:51:48:6b:6e:9b:70:d8: d9:70:ed:2c:25:a1:3e:a2:4d:99:29:e7:77:9f:83:cf:86:66: d9:de:81:82:80:40:f3:b3:1a:cd:f3:b2:eb:c5:25:4c:e4:02: f6:94:5e:17:54:c9:9c:f7:52:11:f5:e2:61:22:ef:f7:d0:5a: 73:cf:8a:dd:d2:ab:cf:3e:97:01:bb:69:b7:01:15:4e:ce:d3: b3:08:ea:a9:14:90:41:5f:4a:ec:2a:ed:b9:c4:9e:51:89:b3: 85:8c:61:6a:3e:48:fa:2e:7b:1d:b4:ed:3f:84:59:b4:ff:74: 37:6a:98:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe8NXfg4SnLZ6RpnCF7q0CYzexoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIz QjAwRUVCNjAeFw0yNTA4MDUwNzM3MDBaFw0yNTA4MDgxMjQ3MDBaMDMxMTAvBgNV BAMTKEFFOEYxNkQ4NTNERTVGOERFM0UyMTAzNDI2OUUwNUQ1NkNFMTQ1REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcTSNkoeEdK989YmUTSY/pQbQq SBBhcyzcqvGj7WdiQHdoLCfNh9LYohmKqnV98mahPqddKx4tc0diUvDwjow1cqY1 re7av+Yq4pfgZv2Thf/RcBKKBHSpV+dbGwX+wwzyWodQrOHqwCwMH5pPZntDoNn2 vKFaM5c+yv5SXelOjMiTMtkY20KbCChPsBmhe7Lb+on2kB5Q9Qo10YaBd2EhvCEf oPsiUiQFUwrSzE8vrqskrT8SaXUXN93P0ol3nWVHiW0etRESrJkX7tBCNyDzf9Cm ZYW+sRnFF5B1QItke6z7rr1r97vZDTgxPhJqZB40pWdePx1jfIDAy3udLnb/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUro8W2FPeX43j4hA0Jp4F1WzhRd4wHwYDVR0j BBgwFoAUIxMtasKg7UGZb1TACopZsjsA7rYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmU0N2M2ZC1lNjI0LTQ3N2MtYWUxOC1kMzJmMjJjOTYyMDQvMC8yMzEzMkQ2QUMy QTBFRDQxOTk2RjU0QzAwQThBNTlCMjNCMDBFRUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIzQjAw RUVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZlNDdjNmQtZTYyNC00NzdjLWFl MTgtZDMyZjIyYzk2MjA0LzAvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5 QjIzQjAwRUVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzdpD0/A8FFa7+2NrkD+5jC/nbqMoqr+cLl TVSZ7jxWARbhLgmFmfeNrBqIaW1tK5AsmiEUJrAoCq946alOlsUVOrms2eXrWShs w1hylW8Z0RSb3ZrVK3dMeetmCqbTcZW/UGzfLrO+gd24VoubkuQxi4IYcK1lg9PV IQg4qBU+1Ty8y7UGDDG0UUhrbptw2Nlw7SwloT6iTZkp53efg8+GZtnegYKAQPOz Gs3zsuvFJUzkAvaUXhdUyZz3UhH14mEi7/fQWnPPit3Sq88+lwG7abcBFU7O07MI 6qkUkEFfSuwq7bnEnlGJs4WMYWo+SPouex207T+EWbT/dDdqmBA= -----END CERTIFICATE-----Generated at Thu Aug 7 01:04:32 2025 by rpki-client