$ rpki-client -vvf repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft File: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft (raw, json) Hash identifier: DPJtzTA1+h15sPKJkFqY4PmFyvDpHOVPULgzvCzsjTA= Subject key identifier: 09:59:25:D2:32:FB:45:6C:88:DC:32:22:40:A2:8E:6A:A3:95:09:85 Authority key identifier: 23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D Certificate issuer: /CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Certificate serial: 6966AB8DCEEC7D329E6D331E6C8A1D50990B91DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft Manifest number: 04E4 Signing time: Tue 17 Jun 2025 19:31:55 +0000 Manifest this update: Tue 17 Jun 2025 19:26:55 +0000 Manifest next update: Sat 21 Jun 2025 03:32:55 +0000 Files and hashes: 1: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl (hash: u62dKh6hGder97tRbhFfK5xmOmixp65tBu3eCMyN840=) 2: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: bVRLDmnlkDr+Er81GecVOu1gTofkGixwnSL4beQ/iNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 22:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:66:ab:8d:ce:ec:7d:32:9e:6d:33:1e:6c:8a:1d:50:99:0b:91:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Validity Not Before: Jun 17 19:26:55 2025 GMT Not After : Jun 21 03:32:55 2025 GMT Subject: CN=095925D232FB456C88DC322240A28E6AA3950985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:80:d6:85:f0:db:9f:66:99:14:5b:04:85:22: 1c:da:2d:cd:ea:ac:a7:a9:b3:a8:52:46:34:69:ab: 95:b1:b2:4a:48:c5:12:0e:d0:48:26:d2:68:09:90: 1b:84:6d:de:4f:98:a1:5d:98:3e:fa:06:bb:6c:13: 03:a6:df:95:ff:74:f1:91:ba:da:01:a3:31:3b:3c: 78:66:e6:2c:ee:49:fb:e1:10:67:8b:60:27:4f:b7: d1:93:da:3b:59:a3:1d:19:5f:82:1a:36:d1:6a:72: 90:77:3f:f8:45:e5:f4:31:88:51:da:b0:4c:82:5a: 0d:ef:10:40:7a:40:bb:cb:92:08:9a:39:a9:16:fa: b0:35:01:41:1b:b0:90:d4:44:39:89:01:7d:1f:a1: 08:02:87:d2:66:77:97:54:c0:5f:77:9c:41:4d:39: 90:51:80:a7:b8:bb:60:18:63:40:e4:c7:39:34:04: 97:33:41:e4:e4:ab:a1:40:4f:1a:a7:4b:c1:d1:2c: 40:5d:c4:66:2d:83:20:81:81:f6:64:1c:92:65:7c: 40:08:2c:cf:fd:15:35:22:02:a9:27:e5:64:25:db: 5f:2c:69:53:63:bc:62:1b:a0:96:c5:18:88:0b:62: 8a:ca:3e:33:3f:1b:2e:1f:a3:10:eb:4b:4f:1e:da: a0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:59:25:D2:32:FB:45:6C:88:DC:32:22:40:A2:8E:6A:A3:95:09:85 X509v3 Authority Key Identifier: keyid:23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:23:ed:e1:26:f6:e9:39:b2:f9:98:d4:11:6a:79:00:3b:e0: f3:1f:57:70:45:2e:60:ee:ca:bc:f2:99:ad:7e:2e:b6:c6:49: fa:83:dc:ba:be:af:0f:6e:08:86:b1:58:fb:3a:6c:ee:03:b1: 45:2c:af:52:de:b4:c0:78:91:f4:01:36:42:5d:81:3f:b6:f4: 35:95:e6:61:86:ea:b5:c6:50:b9:69:6f:7d:7d:ca:a5:21:5f: 50:ab:8b:94:5b:48:cc:39:6f:cb:39:1f:4d:32:21:54:78:e1: e1:eb:69:46:52:a0:c4:80:61:68:6d:0e:d8:72:67:60:d4:d9: 26:95:a0:1c:71:13:82:ce:19:77:26:c4:ac:f5:26:d8:ba:cb: b2:b7:42:09:b1:6b:11:ce:7d:b5:e0:29:87:2c:d1:48:c4:8a: 1a:c1:a6:a0:45:03:60:7e:9c:42:17:f3:4c:ff:97:6a:b7:93: 30:a3:35:24:5f:b7:f7:a3:ce:cd:b7:15:27:55:2e:2e:d4:e9: a7:6e:aa:df:69:6c:fb:2e:b5:e8:94:36:e1:b5:66:39:20:9a: d3:18:c7:16:81:73:e4:c5:8e:58:41:a4:8e:7b:fb:0f:b5:59: cc:71:02:e3:c7:29:87:5c:3f:0f:65:7f:01:4b:5a:57:5c:01: bf:47:da:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaWarjc7sfTKebTMebIodUJkLkd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUw NURERjIzRDAeFw0yNTA2MTcxOTI2NTVaFw0yNTA2MjEwMzMyNTVaMDMxMTAvBgNV BAMTKDA5NTkyNUQyMzJGQjQ1NkM4OERDMzIyMjQwQTI4RTZBQTM5NTA5ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvgNaF8NufZpkUWwSFIhzaLc3q rKeps6hSRjRpq5WxskpIxRIO0Egm0mgJkBuEbd5PmKFdmD76BrtsEwOm35X/dPGR utoBozE7PHhm5izuSfvhEGeLYCdPt9GT2jtZox0ZX4IaNtFqcpB3P/hF5fQxiFHa sEyCWg3vEEB6QLvLkgiaOakW+rA1AUEbsJDURDmJAX0foQgCh9Jmd5dUwF93nEFN OZBRgKe4u2AYY0Dkxzk0BJczQeTkq6FATxqnS8HRLEBdxGYtgyCBgfZkHJJlfEAI LM/9FTUiAqkn5WQl218saVNjvGIboJbFGIgLYorKPjM/Gy4foxDrS08e2qDxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCVkl0jL7RWyI3DIiQKKOaqOVCYUwHwYDVR0j BBgwFoAUIzrybX2ubDWesDrVxvtLTgXd8j0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTVlYWM5Ny0zMWI1LTRmMzMtODJmNC01MjQxNDcwY2JiYmUvMC8yMzNBRjI2RDdE QUU2QzM1OUVCMDNBRDVDNkZCNEI0RTA1RERGMjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUwNURE RjIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU1ZWFjOTctMzFiNS00ZjMzLTgy ZjQtNTI0MTQ3MGNiYmJlLzAvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRC NEUwNURERjIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMj7eEm9uk5svmY1BFqeQA74PMfV3BFLmDu yrzyma1+LrbGSfqD3Lq+rw9uCIaxWPs6bO4DsUUsr1LetMB4kfQBNkJdgT+29DWV 5mGG6rXGULlpb319yqUhX1Cri5RbSMw5b8s5H00yIVR44eHraUZSoMSAYWhtDthy Z2DU2SaVoBxxE4LOGXcmxKz1Jti6y7K3QgmxaxHOfbXgKYcs0UjEihrBpqBFA2B+ nEIX80z/l2q3kzCjNSRft/ejzs23FSdVLi7U6aduqt9pbPsuteiUNuG1ZjkgmtMY xxaBc+TFjlhBpI57+w+1WcxxAuPHKYdcPw9lfwFLWldcAb9H2v0= -----END CERTIFICATE-----Generated at Wed Jun 18 01:53:00 2025 by rpki-client