$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft File: F23ACCA147720B423A9576F3E408691505B293A3.mft (raw, json) Hash identifier: ud2jjq6pnI6JadB5CMfE6Vz3OSQsugYuO3qT2FMKfiM= Subject key identifier: 10:71:36:F1:29:1C:C3:B3:E9:4E:1F:3E:6A:AE:C4:89:C2:0A:9B:EB Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 Certificate issuer: /CN=F23ACCA147720B423A9576F3E408691505B293A3 Certificate serial: 75AFBF16313EAD05EDEFFF9E4E8D29C110305DB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft Manifest number: 012B Signing time: Fri 08 Aug 2025 15:51:37 +0000 Manifest this update: Fri 08 Aug 2025 15:46:37 +0000 Manifest next update: Mon 11 Aug 2025 16:07:37 +0000 Files and hashes: 1: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: tvYlBhnklEiw/TZsUy/XAKxHZ5SwpPC4Bkk7W+uYiRM=) 2: F23ACCA147720B423A9576F3E408691505B293A3.crl (hash: tXBgSAdGtmB3k0dJIuH8skXGCAadNDdAXvA1Xmn/g9o=) 3: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: 4xG5rUbrfk7U5JEhOVdnlCDzgzXDJr6D4I9VnoiM2Rc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 16:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:af:bf:16:31:3e:ad:05:ed:ef:ff:9e:4e:8d:29:c1:10:30:5d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3 Validity Not Before: Aug 8 15:46:37 2025 GMT Not After : Aug 11 16:07:37 2025 GMT Subject: CN=107136F1291CC3B3E94E1F3E6AAEC489C20A9BEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f8:5b:fd:88:66:db:b4:ae:78:ff:07:de:fd: 61:45:34:26:61:c4:e0:90:64:a3:48:29:3a:38:52: e8:cc:80:47:9e:0b:a3:87:b5:2a:76:d6:14:55:1a: ca:b7:4e:ca:3e:94:e8:79:08:fd:de:2f:00:2b:8e: 66:57:f2:fb:0f:a5:1a:a0:8a:76:8f:83:ea:35:0c: 6f:4b:37:c4:b8:e8:e4:76:1f:4f:9a:5e:7b:71:6d: b5:bb:78:a0:35:3a:eb:2a:32:12:86:fd:46:14:c5: 86:91:54:1e:7d:00:c4:57:8a:f9:32:78:63:1b:c9: fb:e3:fb:32:80:aa:70:53:38:f5:c7:48:fe:5a:62: 22:94:16:42:ea:1a:2b:e1:d1:3a:fc:7e:0b:a0:45: e4:bf:5f:f8:10:3a:32:03:f3:bd:42:28:68:a1:6d: 24:7b:8b:37:6e:d4:7b:d8:60:cf:e2:f8:e9:f9:a1: dc:05:55:ae:41:ec:50:f0:96:72:70:99:8d:39:c2: d1:15:50:db:ba:b7:90:f3:55:87:30:29:9c:72:c4: 5c:02:aa:ec:92:3f:d4:fc:11:d4:40:bf:01:e5:b4: e0:5e:10:3d:a4:08:95:8f:38:3f:ed:3a:94:62:1f: 2c:24:ea:5f:0a:aa:17:d3:ff:dc:8a:b3:d1:b6:ca: 20:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:71:36:F1:29:1C:C3:B3:E9:4E:1F:3E:6A:AE:C4:89:C2:0A:9B:EB X509v3 Authority Key Identifier: keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:3b:e5:b3:91:8a:59:d3:dc:87:8d:62:ca:17:6b:27:e7:e3: 65:06:5c:ec:cc:5c:d9:34:8d:2c:ba:ce:30:fa:c7:7b:ec:f4: 22:8e:0b:82:ef:80:ab:f7:a2:1d:61:30:b3:06:57:09:51:52: 31:8c:d2:64:9f:54:2d:96:d9:55:b4:f5:a2:49:c1:93:4c:00: 6d:4c:a1:61:c3:35:d9:3c:d1:d4:86:cb:4c:91:69:64:fc:28: 4e:1d:7e:88:4a:8e:d0:9b:99:16:3d:52:12:ac:b0:49:ee:7f: 87:2d:d4:7b:5f:6d:22:e1:ff:c8:bb:9f:a9:38:83:34:78:1a: bf:29:50:08:b9:16:13:1d:03:4a:5d:b1:bb:d8:b0:ec:64:1f: 14:88:71:32:ed:88:c9:5c:52:7b:ff:50:c0:64:8a:15:15:8e: 1d:b9:1d:dd:00:71:a2:09:3f:48:8e:35:d9:3e:43:3f:ea:00: 0d:3f:15:84:eb:90:6c:4c:f5:ae:23:19:25:61:21:6e:6a:38: 1a:54:3e:8a:92:36:0f:7a:62:43:30:c1:28:54:96:3a:3a:bb: f3:49:77:3a:85:47:10:7a:55:0b:27:68:a0:03:f4:b4:ba:e9: 50:ce:95:6c:49:28:79:18:05:29:a5:6c:d9:81:7a:a3:ce:95: 4f:33:59:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUda+/FjE+rQXt7/+eTo0pwRAwXbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUw NUIyOTNBMzAeFw0yNTA4MDgxNTQ2MzdaFw0yNTA4MTExNjA3MzdaMDMxMTAvBgNV BAMTKDEwNzEzNkYxMjkxQ0MzQjNFOTRFMUYzRTZBQUVDNDg5QzIwQTlCRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+Fv9iGbbtK54/wfe/WFFNCZh xOCQZKNIKTo4UujMgEeeC6OHtSp21hRVGsq3Tso+lOh5CP3eLwArjmZX8vsPpRqg inaPg+o1DG9LN8S46OR2H0+aXntxbbW7eKA1OusqMhKG/UYUxYaRVB59AMRXivky eGMbyfvj+zKAqnBTOPXHSP5aYiKUFkLqGivh0Tr8fgugReS/X/gQOjID871CKGih bSR7izdu1HvYYM/i+On5odwFVa5B7FDwlnJwmY05wtEVUNu6t5DzVYcwKZxyxFwC quySP9T8EdRAvwHltOBeED2kCJWPOD/tOpRiHywk6l8KqhfT/9yKs9G2yiAFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEHE28Skcw7PpTh8+aq7EicIKm+swHwYDVR0j BBgwFoAU8jrMoUdyC0I6lXbz5AhpFQWyk6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWUxNDM4Mi1kNTg3LTRlODYtOGU3ZS02YTI2NGE1OGVhMDYvMC9GMjNBQ0NBMTQ3 NzIwQjQyM0E5NTc2RjNFNDA4NjkxNTA1QjI5M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUwNUIy OTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVlMTQzODItZDU4Ny00ZTg2LThl N2UtNmEyNjRhNThlYTA2LzAvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5 MTUwNUIyOTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIk75bORilnT3IeNYsoXayfn42UGXOzMXNk0 jSy6zjD6x3vs9CKOC4LvgKv3oh1hMLMGVwlRUjGM0mSfVC2W2VW09aJJwZNMAG1M oWHDNdk80dSGy0yRaWT8KE4dfohKjtCbmRY9UhKssEnuf4ct1HtfbSLh/8i7n6k4 gzR4Gr8pUAi5FhMdA0pdsbvYsOxkHxSIcTLtiMlcUnv/UMBkihUVjh25Hd0AcaIJ P0iONdk+Qz/qAA0/FYTrkGxM9a4jGSVhIW5qOBpUPoqSNg96YkMwwShUljo6u/NJ dzqFRxB6VQsnaKAD9LS66VDOlWxJKHkYBSmlbNmBeqPOlU8zWYc= -----END CERTIFICATE-----Generated at Sat Aug 9 02:49:59 2025 by rpki-client