$ rpki-client -vvf repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft File: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft (raw, json) Hash identifier: 8cDc1SrfsKtspAoPbg/9xi9ywfgf1umvJWU+xereccY= Subject key identifier: 7C:01:F0:24:11:D2:9E:9D:5E:53:B1:0E:9A:19:71:24:C6:5A:22:C3 Authority key identifier: 23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D Certificate issuer: /CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Certificate serial: 78FC1B3A765CF81F47333A61A214C2E7FBD90582 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft Manifest number: 04FA Signing time: Tue 05 Aug 2025 18:41:48 +0000 Manifest this update: Tue 05 Aug 2025 18:36:48 +0000 Manifest next update: Fri 08 Aug 2025 20:37:48 +0000 Files and hashes: 1: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl (hash: PgzRDEJm91joShJZpVTzvdB+C68Y+hdjkdJw5xEpk+M=) 2: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: bVRLDmnlkDr+Er81GecVOu1gTofkGixwnSL4beQ/iNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 20:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:fc:1b:3a:76:5c:f8:1f:47:33:3a:61:a2:14:c2:e7:fb:d9:05:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Validity Not Before: Aug 5 18:36:48 2025 GMT Not After : Aug 8 20:37:48 2025 GMT Subject: CN=7C01F02411D29E9D5E53B10E9A197124C65A22C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2f:48:5e:2a:1d:58:e6:9d:62:e1:39:e5:4b: 9f:79:1a:c0:b1:8c:b1:a7:6a:f1:9f:57:bc:46:a0: c4:24:60:70:53:64:1d:c6:db:89:52:2f:45:97:66: 95:21:84:a6:89:dd:6a:bb:f3:31:da:c8:c9:b7:5e: b4:3f:42:9e:09:bc:c3:c5:c2:07:52:e0:21:9c:3b: 90:54:2b:00:18:ed:a7:96:d2:3d:42:b7:18:a4:16: 74:27:0d:c8:cd:dd:84:86:67:c7:b2:4e:5a:9e:6e: f8:2a:a2:5c:16:81:8e:aa:44:23:06:d2:28:7e:39: ac:ed:1b:39:40:75:20:36:ab:b9:f1:39:38:88:68: 9e:06:c8:0f:6e:8f:09:47:84:ec:74:f1:da:dd:67: 9e:25:18:6d:37:d8:42:45:d3:bd:af:db:b2:01:bd: d3:30:5c:c0:ae:33:5e:ac:ee:01:ba:60:18:ab:e2: ea:f8:af:4f:29:17:5d:b2:f8:e8:22:ab:28:8a:b0: e5:98:3f:c9:52:83:05:14:e4:42:ce:1e:79:6d:b5: e6:99:a8:a2:9d:66:e5:ae:a2:59:01:95:98:fe:d3: 88:14:28:56:e6:3f:50:3c:88:9b:7b:43:fc:9e:00: 59:43:82:4d:89:54:7e:56:f7:a7:ed:90:39:ed:fb: aa:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:01:F0:24:11:D2:9E:9D:5E:53:B1:0E:9A:19:71:24:C6:5A:22:C3 X509v3 Authority Key Identifier: keyid:23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:58:f3:9e:e2:91:87:2d:ef:4f:7a:87:ad:a6:9a:b6:8e:ef: 48:e4:63:2a:f8:21:be:72:5f:ff:3f:10:ad:3a:4a:4c:60:24: 14:76:5e:5d:d7:17:0d:f5:6e:71:b3:64:38:0c:36:39:98:a7: 22:99:11:90:18:99:ad:55:c7:6b:f7:60:8c:64:2c:f9:b6:2e: 86:72:71:40:f6:7d:cd:bf:eb:bf:6f:cf:4f:a0:d8:7a:c6:ac: 03:e4:a8:cd:04:d9:70:25:b8:18:ee:07:21:61:bf:c6:4a:a6: eb:b0:8b:3b:55:5a:16:1d:cf:d1:c3:92:5e:3d:1d:f2:f0:2a: 45:1c:8d:34:27:1e:bb:ca:e6:e2:c2:c7:d7:40:f6:69:79:92: 21:71:10:dd:ca:a3:58:76:3a:8f:3d:d4:d1:0a:55:b2:6d:22: cf:1b:65:90:eb:bf:25:6e:98:d1:ee:fe:1e:06:35:1a:21:8c: 34:49:92:f3:21:6b:d9:5f:6a:76:7d:02:75:82:29:66:f7:3a: 8a:65:a7:75:2f:64:f4:fa:2f:bc:f4:69:bc:dc:95:d9:27:7d: 1a:48:8b:52:e4:c8:15:28:1d:e6:41:c7:61:09:cd:cb:1e:99: b8:65:d9:39:06:da:93:c8:da:fe:79:f1:6b:98:1a:09:90:b4: 0d:71:52:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUePwbOnZc+B9HMzphohTC5/vZBYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUw NURERjIzRDAeFw0yNTA4MDUxODM2NDhaFw0yNTA4MDgyMDM3NDhaMDMxMTAvBgNV BAMTKDdDMDFGMDI0MTFEMjlFOUQ1RTUzQjEwRTlBMTk3MTI0QzY1QTIyQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGL0heKh1Y5p1i4TnlS595GsCx jLGnavGfV7xGoMQkYHBTZB3G24lSL0WXZpUhhKaJ3Wq78zHayMm3XrQ/Qp4JvMPF wgdS4CGcO5BUKwAY7aeW0j1CtxikFnQnDcjN3YSGZ8eyTlqebvgqolwWgY6qRCMG 0ih+OaztGzlAdSA2q7nxOTiIaJ4GyA9ujwlHhOx08drdZ54lGG032EJF072v27IB vdMwXMCuM16s7gG6YBir4ur4r08pF12y+OgiqyiKsOWYP8lSgwUU5ELOHnltteaZ qKKdZuWuolkBlZj+04gUKFbmP1A8iJt7Q/yeAFlDgk2JVH5W96ftkDnt+6o3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfAHwJBHSnp1eU7EOmhlxJMZaIsMwHwYDVR0j BBgwFoAUIzrybX2ubDWesDrVxvtLTgXd8j0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTVlYWM5Ny0zMWI1LTRmMzMtODJmNC01MjQxNDcwY2JiYmUvMC8yMzNBRjI2RDdE QUU2QzM1OUVCMDNBRDVDNkZCNEI0RTA1RERGMjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUwNURE RjIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU1ZWFjOTctMzFiNS00ZjMzLTgy ZjQtNTI0MTQ3MGNiYmJlLzAvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRC NEUwNURERjIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANY857ikYct7096h62mmraO70jkYyr4Ib5y X/8/EK06SkxgJBR2Xl3XFw31bnGzZDgMNjmYpyKZEZAYma1Vx2v3YIxkLPm2LoZy cUD2fc2/679vz0+g2HrGrAPkqM0E2XAluBjuByFhv8ZKpuuwiztVWhYdz9HDkl49 HfLwKkUcjTQnHrvK5uLCx9dA9ml5kiFxEN3Ko1h2Oo891NEKVbJtIs8bZZDrvyVu mNHu/h4GNRohjDRJkvMha9lfanZ9AnWCKWb3Ooplp3UvZPT6L7z0abzcldknfRpI i1LkyBUoHeZBx2EJzcsembhl2TkG2pPI2v558WuYGgmQtA1xUvM= -----END CERTIFICATE-----Generated at Thu Aug 7 03:30:38 2025 by rpki-client