$ rpki-client -vvf repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft File: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft (raw, json) Hash identifier: YjmbOF5AHX+ewpc2AV1KXcRIhkFt4jDmBy3uhqkbeXc= Subject key identifier: 6C:63:77:2A:99:FD:99:EB:5B:DC:D2:83:2C:C3:69:F8:4A:22:33:9F Authority key identifier: 23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C Certificate issuer: /CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Certificate serial: 23663E2FA57423821CD5B06450B1D14579165C05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft Manifest number: 6C Signing time: Mon 16 Jun 2025 08:22:05 +0000 Manifest this update: Mon 16 Jun 2025 08:17:05 +0000 Manifest next update: Thu 19 Jun 2025 18:58:05 +0000 Files and hashes: 1: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: YV/07SIZYC4/VtvBJStdBJgRKQnAK1y/gzxul6oggek=) 2: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl (hash: iqoa9B3npCD5z9Ln+xDZZ4W1FLTWOSuoIaFt1B4AgO8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:66:3e:2f:a5:74:23:82:1c:d5:b0:64:50:b1:d1:45:79:16:5c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Validity Not Before: Jun 16 08:17:05 2025 GMT Not After : Jun 19 18:58:05 2025 GMT Subject: CN=6C63772A99FD99EB5BDCD2832CC369F84A22339F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6c:cc:fb:4f:f5:45:46:b6:90:23:49:16:b0: 7f:ca:42:d4:90:fc:73:ee:34:9d:e5:60:af:bc:9e: 08:80:1e:98:51:e4:03:20:5e:ae:e8:02:6b:40:7f: e0:ed:60:f3:32:12:9d:5f:e8:b4:25:99:6e:21:04: d2:df:a1:1d:68:5d:3d:79:99:89:39:7c:d9:be:44: 96:ab:26:35:26:5a:cc:88:2b:86:c2:83:ae:70:e7: e4:f5:a3:3a:51:98:0d:44:6e:5c:80:8e:21:d7:34: 92:ac:4b:fb:da:36:25:02:62:6c:14:fd:64:0c:b4: 2c:ae:40:1c:b2:0c:96:ff:94:ef:1c:3b:10:53:33: e2:e1:4a:23:6b:37:44:0e:b6:67:33:90:4c:be:6f: e7:77:c0:b1:29:e4:c4:3e:57:68:a0:b3:d5:7b:c1: 4a:e4:53:f7:35:2e:5e:44:40:bd:bc:44:40:e0:46: aa:4f:b2:2d:44:d3:a7:d7:7c:f5:3a:7f:1d:48:f0: c5:21:4f:8d:24:25:7f:93:f8:12:2d:40:52:a2:68: 77:a3:18:7a:b3:83:ff:71:ec:a1:be:f1:f2:10:d7: 80:da:8f:78:26:8a:0d:b1:ff:1b:57:92:a0:f3:5e: 62:03:15:8e:f6:03:f4:a3:f4:63:8c:0c:1f:59:c9: 00:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:63:77:2A:99:FD:99:EB:5B:DC:D2:83:2C:C3:69:F8:4A:22:33:9F X509v3 Authority Key Identifier: keyid:23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:a6:b6:20:35:9a:b3:60:0e:f8:0c:98:aa:a7:5a:4d:b4:f9: c0:a0:64:75:1d:95:01:8a:5f:79:78:50:1d:57:3a:f0:c9:6c: 48:82:f9:fc:99:e2:64:6b:7b:f8:9e:d4:83:11:0f:f4:f9:3c: 05:e8:a9:8c:3d:f9:fd:b4:e8:61:56:a4:05:3c:05:cb:7c:a8: dd:e5:cc:38:aa:1a:43:7c:b9:c8:e3:55:1a:f5:ad:98:98:72: e7:2f:82:33:d9:a6:fe:3e:0b:b8:6c:a3:45:01:ab:ee:a3:01: 4e:5b:8f:57:b8:4b:dd:80:ca:44:45:f4:e8:0a:20:f3:f8:b8: 4c:fc:d8:69:c4:81:02:2f:42:a6:e0:c6:46:1c:49:63:57:32: 55:5e:81:cc:92:e9:53:09:a8:84:ff:65:76:af:ef:92:88:d3: f9:1e:80:ef:9d:61:5f:f4:28:c6:ce:12:af:3a:43:97:ff:d3: b6:31:9b:3b:83:4e:2a:da:34:2b:60:89:3e:22:dc:a0:8b:f8: 24:00:ad:4a:93:b1:9a:b4:52:d4:f7:58:d2:c3:05:23:37:c3: d4:6a:30:70:a3:74:ec:e2:09:72:ea:aa:3f:7e:c2:2e:ff:e5: b0:ae:83:8a:82:bd:d5:46:df:a6:03:9e:34:7b:06:fc:b3:a9: 1b:a5:54:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI2Y+L6V0I4Ic1bBkULHRRXkWXAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3 N0U4RUU3QzAeFw0yNTA2MTYwODE3MDVaFw0yNTA2MTkxODU4MDVaMDMxMTAvBgNV BAMTKDZDNjM3NzJBOTlGRDk5RUI1QkRDRDI4MzJDQzM2OUY4NEEyMjMzOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAbMz7T/VFRraQI0kWsH/KQtSQ /HPuNJ3lYK+8ngiAHphR5AMgXq7oAmtAf+DtYPMyEp1f6LQlmW4hBNLfoR1oXT15 mYk5fNm+RJarJjUmWsyIK4bCg65w5+T1ozpRmA1EblyAjiHXNJKsS/vaNiUCYmwU /WQMtCyuQByyDJb/lO8cOxBTM+LhSiNrN0QOtmczkEy+b+d3wLEp5MQ+V2igs9V7 wUrkU/c1Ll5EQL28REDgRqpPsi1E06fXfPU6fx1I8MUhT40kJX+T+BItQFKiaHej GHqzg/9x7KG+8fIQ14Daj3gmig2x/xtXkqDzXmIDFY72A/Sj9GOMDB9ZyQDHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbGN3Kpn9metb3NKDLMNp+EoiM58wHwYDVR0j BBgwFoAUI76M6mGUBvnYYLH5fuj37Xfo7nwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmVkNmRjNC1kMzhiLTQ0YmEtOWYwYi00Mjg0NTViMjc2ZWUvMC8yM0JFOENFQTYx OTQwNkY5RDg2MEIxRjk3RUU4RjdFRDc3RThFRTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3N0U4 RUU3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJlZDZkYzQtZDM4Yi00NGJhLTlm MGItNDI4NDU1YjI3NmVlLzAvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3 RUQ3N0U4RUU3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWmtiA1mrNgDvgMmKqnWk20+cCgZHUdlQGK X3l4UB1XOvDJbEiC+fyZ4mRre/ie1IMRD/T5PAXoqYw9+f206GFWpAU8Bct8qN3l zDiqGkN8ucjjVRr1rZiYcucvgjPZpv4+C7hso0UBq+6jAU5bj1e4S92AykRF9OgK IPP4uEz82GnEgQIvQqbgxkYcSWNXMlVegcyS6VMJqIT/ZXav75KI0/kegO+dYV/0 KMbOEq86Q5f/07YxmzuDTiraNCtgiT4i3KCL+CQArUqTsZq0UtT3WNLDBSM3w9Rq MHCjdOziCXLqqj9+wi7/5bCug4qCvdVG36YDnjR7BvyzqRulVJ0= -----END CERTIFICATE-----Generated at Tue Jun 17 12:40:27 2025 by rpki-client