$ rpki-client -vvf repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft File: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft (raw, json) Hash identifier: 6J1Id5TB/3Nna+eQDYcTlYG7qyaWLSu/s+YvVhyb+54= Subject key identifier: E0:FE:18:5C:DE:E0:F0:B5:27:42:00:42:13:D9:88:7A:CA:F1:1B:18 Authority key identifier: 23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C Certificate issuer: /CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Certificate serial: 109001095D5350854BFF235ADA2D90868F087CBE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft Manifest number: AC Signing time: Tue 04 Nov 2025 00:22:06 +0000 Manifest this update: Tue 04 Nov 2025 00:17:06 +0000 Manifest next update: Fri 07 Nov 2025 03:07:06 +0000 Files and hashes: 1: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl (hash: 85cWZoeEajXihEzhOfYEW7S4K2zqtonQ1TtrHgK2ess=) 2: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: TgOS2DIzKKN1li7GhbP8QE2EiuFzEQeHETrSLQ8zd80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 03:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:90:01:09:5d:53:50:85:4b:ff:23:5a:da:2d:90:86:8f:08:7c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Validity Not Before: Nov 4 00:17:06 2025 GMT Not After : Nov 7 03:07:06 2025 GMT Subject: CN=E0FE185CDEE0F0B52742004213D9887ACAF11B18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e6:bb:b6:28:99:b5:34:aa:98:c4:bb:1d:93: a9:62:14:ba:12:72:ab:59:6e:4f:5a:ab:38:58:9d: 1c:c6:e7:3e:fb:13:8a:28:45:13:00:19:6b:6b:7c: 38:14:91:3b:19:6e:f8:85:8c:e8:2f:2f:47:d2:7f: a8:ba:f8:2d:4a:09:35:46:8e:e1:30:76:46:b5:52: 83:9a:e7:3c:c0:cd:0d:9b:61:3d:56:56:fc:9d:2b: 74:37:7e:f8:47:d1:0d:b2:6f:46:5b:e6:69:ba:91: 82:26:63:ac:26:11:7b:55:b3:58:a2:33:f9:db:49: 0b:a0:88:cc:16:fb:62:2e:e5:a1:c1:3c:87:c6:34: 2a:a6:02:fb:d5:21:30:f6:5e:08:64:2b:69:45:35: f7:fc:d6:54:b4:1b:07:f1:62:f9:ac:9e:4a:25:aa: f3:5f:4d:01:53:9d:ec:6e:22:c0:38:bb:35:2c:0b: 3c:f9:2d:e5:81:57:8e:42:21:3c:78:f3:03:d9:0c: f1:35:d4:ef:29:c6:60:c0:46:ac:06:35:0e:fc:36: ed:2b:0d:2e:df:68:4e:fe:ff:2a:0f:03:9b:9a:fb: e6:45:7b:e6:00:af:29:b9:64:4a:52:a4:e7:a7:3f: ca:1d:cd:93:c9:a9:cb:29:de:8b:fc:71:0d:ef:38: 7c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:FE:18:5C:DE:E0:F0:B5:27:42:00:42:13:D9:88:7A:CA:F1:1B:18 X509v3 Authority Key Identifier: keyid:23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:72:cf:88:73:64:b2:fc:52:df:ee:2e:7a:e3:ce:ff:7e:02: 97:d5:46:81:67:d4:9a:b4:ae:31:39:b4:c6:1e:46:a8:70:71: 52:19:50:f1:22:4f:48:34:1d:0e:ed:f5:11:0c:0d:44:9a:fe: b1:93:e3:db:01:b4:08:1d:80:06:73:ef:a0:26:7d:53:be:c8: 5b:0f:16:04:ee:44:f5:e3:7b:6c:3b:f2:18:1d:bf:ea:e7:37: 5b:3a:08:a3:eb:b9:b3:3b:77:0d:6e:e8:a9:76:b2:8e:b3:02: 35:df:a7:44:9f:37:58:a1:2d:1e:51:44:2d:4e:a6:25:7f:bc: 0b:c3:a6:c1:e3:17:5e:a9:20:26:95:a4:3b:0b:18:d8:f7:c8: 27:1a:14:71:b2:73:62:39:c8:91:b9:22:ee:42:d0:1c:22:f8: c9:34:34:34:7c:dc:6b:a8:8a:a5:bc:45:5f:04:18:35:fa:3a: 22:46:4b:e0:70:af:37:7f:53:47:98:24:5c:6c:8a:bf:1c:30: e5:90:04:3d:c7:77:47:43:d8:46:d2:ca:28:96:88:99:18:5c: 26:de:ff:8b:31:67:16:d2:55:5d:d6:f3:87:ad:e8:e8:56:07: 44:10:9f:b2:3c:f7:73:38:79:55:43:b2:4c:0d:9c:e6:8d:46: 5c:c8:76:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEJABCV1TUIVL/yNa2i2Qho8IfL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3 N0U4RUU3QzAeFw0yNTExMDQwMDE3MDZaFw0yNTExMDcwMzA3MDZaMDMxMTAvBgNV BAMTKEUwRkUxODVDREVFMEYwQjUyNzQyMDA0MjEzRDk4ODdBQ0FGMTFCMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr5ru2KJm1NKqYxLsdk6liFLoS cqtZbk9aqzhYnRzG5z77E4ooRRMAGWtrfDgUkTsZbviFjOgvL0fSf6i6+C1KCTVG juEwdka1UoOa5zzAzQ2bYT1WVvydK3Q3fvhH0Q2yb0Zb5mm6kYImY6wmEXtVs1ii M/nbSQugiMwW+2Iu5aHBPIfGNCqmAvvVITD2XghkK2lFNff81lS0GwfxYvmsnkol qvNfTQFTnexuIsA4uzUsCzz5LeWBV45CITx48wPZDPE11O8pxmDARqwGNQ78Nu0r DS7faE7+/yoPA5ua++ZFe+YArym5ZEpSpOenP8odzZPJqcsp3ov8cQ3vOHyjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4P4YXN7g8LUnQgBCE9mIesrxGxgwHwYDVR0j BBgwFoAUI76M6mGUBvnYYLH5fuj37Xfo7nwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmVkNmRjNC1kMzhiLTQ0YmEtOWYwYi00Mjg0NTViMjc2ZWUvMC8yM0JFOENFQTYx OTQwNkY5RDg2MEIxRjk3RUU4RjdFRDc3RThFRTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3N0U4 RUU3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJlZDZkYzQtZDM4Yi00NGJhLTlm MGItNDI4NDU1YjI3NmVlLzAvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3 RUQ3N0U4RUU3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZyz4hzZLL8Ut/uLnrjzv9+ApfVRoFn1Jq0 rjE5tMYeRqhwcVIZUPEiT0g0HQ7t9REMDUSa/rGT49sBtAgdgAZz76AmfVO+yFsP FgTuRPXje2w78hgdv+rnN1s6CKPrubM7dw1u6Kl2so6zAjXfp0SfN1ihLR5RRC1O piV/vAvDpsHjF16pICaVpDsLGNj3yCcaFHGyc2I5yJG5Iu5C0Bwi+Mk0NDR83Guo iqW8RV8EGDX6OiJGS+Bwrzd/U0eYJFxsir8cMOWQBD3Hd0dD2EbSyiiWiJkYXCbe /4sxZxbSVV3W84et6OhWB0QQn7I893M4eVVDskwNnOaNRlzIdsk= -----END CERTIFICATE-----Generated at Wed Nov 5 16:08:18 2025 by rpki-client