$ rpki-client -vvf repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft File: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft (raw, json) Hash identifier: KK6r6p5ZWZHyX/Qj5G47rHF6fYc/5lXODM6FATjxqAs= Subject key identifier: 65:59:34:2E:BA:04:CA:E8:96:E6:C3:61:5A:F2:39:20:7C:A9:C4:0D Authority key identifier: 23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D Certificate issuer: /CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Certificate serial: 7E16E177A7F9ADD3E4ED5166F52DF17B3FAC730A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft Manifest number: 0522 Signing time: Sun 02 Nov 2025 14:11:47 +0000 Manifest this update: Sun 02 Nov 2025 14:06:47 +0000 Manifest next update: Wed 05 Nov 2025 22:12:47 +0000 Files and hashes: 1: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl (hash: vUoICSM3pDS0KKDPfWNlDk62+t3oigouFo6oTRM37yY=) 2: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: bVRLDmnlkDr+Er81GecVOu1gTofkGixwnSL4beQ/iNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 22:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:16:e1:77:a7:f9:ad:d3:e4:ed:51:66:f5:2d:f1:7b:3f:ac:73:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Validity Not Before: Nov 2 14:06:47 2025 GMT Not After : Nov 5 22:12:47 2025 GMT Subject: CN=6559342EBA04CAE896E6C3615AF239207CA9C40D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:43:69:00:e3:d1:52:1b:76:60:b9:1b:2f:94: 4d:ec:32:dd:27:33:1c:54:6b:52:ea:0a:bf:81:5c: a0:44:c9:52:b1:21:a9:08:f4:c3:ba:8d:c2:6e:d7: 72:b6:0c:40:37:24:a8:32:6f:66:57:91:34:aa:44: b4:a0:8c:25:76:48:07:11:2e:85:3b:4e:6e:44:42: 53:0d:c3:6d:63:0d:1a:74:ed:b8:76:ce:08:65:3c: f4:59:00:24:30:34:41:ca:ed:96:7c:5b:cc:ea:cc: d3:8a:b3:b2:3e:ea:a6:4b:9e:4b:15:93:94:4b:ad: 33:e2:ec:52:b6:fc:8e:8f:d3:86:1c:82:25:99:da: e2:9c:5c:28:67:03:83:2d:70:59:03:54:71:5b:c0: 99:a0:8f:28:2b:3a:5a:25:cf:e6:96:74:b1:f9:58: 47:01:b7:e4:64:b5:a2:dc:59:c0:e9:e0:79:1d:7b: f1:9a:f2:48:08:96:3e:a6:70:37:7a:88:5f:c9:e5: 14:ec:7e:2f:64:8e:af:f3:be:cb:f8:d8:c2:2f:ed: 27:83:17:e1:9c:63:70:a4:ad:13:82:ee:1c:7b:2d: dc:74:00:3c:57:fd:34:0f:4e:02:74:33:df:a2:2f: 04:27:b0:66:85:e2:ca:ed:ea:fd:ae:e4:ee:53:d3: ef:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:59:34:2E:BA:04:CA:E8:96:E6:C3:61:5A:F2:39:20:7C:A9:C4:0D X509v3 Authority Key Identifier: keyid:23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:75:c6:31:d9:25:12:d7:a1:1e:53:ec:d1:b2:bb:0f:b1:55: a3:2b:1c:97:8a:8d:1e:d2:a7:7f:d5:34:40:5e:4b:0e:bb:53: af:5d:c3:b8:0f:89:e0:ec:e8:37:9a:d0:84:79:80:ee:22:9a: c8:c0:dd:37:1f:af:70:14:48:fc:37:68:0e:b1:94:03:1d:1f: 01:89:91:b5:33:89:76:09:a6:0d:6f:ee:04:f9:fb:fc:f2:3b: c3:d3:07:bb:11:c5:78:14:0b:9c:7f:2d:64:97:d8:a5:1f:ab: 1f:cf:bb:80:3b:21:62:6b:0b:93:a3:1f:1b:aa:ad:41:2a:bf: dc:b5:22:08:9f:82:22:94:c0:db:ec:cd:84:0b:47:2a:67:5d: f3:cf:92:4d:68:e0:41:5d:1f:41:77:5a:22:11:41:26:5e:6f: 7f:6d:02:36:05:0b:f1:00:4a:36:6e:45:8d:93:69:61:e7:d8: ef:75:41:cf:cc:a3:52:4e:69:11:2d:6f:aa:e9:86:b5:9c:34: 2c:af:96:e4:91:3e:c3:ce:4e:c3:28:73:4f:ac:c4:15:4e:46: ad:f0:3a:50:dd:d4:c5:f2:df:37:8d:8c:6c:4d:9a:10:fd:a7: 6a:83:4b:fb:e9:ae:c9:9a:1e:eb:36:8d:48:ee:58:a3:34:8a: 86:62:42:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfhbhd6f5rdPk7VFm9S3xez+scwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUw NURERjIzRDAeFw0yNTExMDIxNDA2NDdaFw0yNTExMDUyMjEyNDdaMDMxMTAvBgNV BAMTKDY1NTkzNDJFQkEwNENBRTg5NkU2QzM2MTVBRjIzOTIwN0NBOUM0MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDQ2kA49FSG3ZguRsvlE3sMt0n MxxUa1LqCr+BXKBEyVKxIakI9MO6jcJu13K2DEA3JKgyb2ZXkTSqRLSgjCV2SAcR LoU7Tm5EQlMNw21jDRp07bh2zghlPPRZACQwNEHK7ZZ8W8zqzNOKs7I+6qZLnksV k5RLrTPi7FK2/I6P04YcgiWZ2uKcXChnA4MtcFkDVHFbwJmgjygrOlolz+aWdLH5 WEcBt+RktaLcWcDp4Hkde/Ga8kgIlj6mcDd6iF/J5RTsfi9kjq/zvsv42MIv7SeD F+GcY3CkrROC7hx7Ldx0ADxX/TQPTgJ0M9+iLwQnsGaF4srt6v2u5O5T0+/LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZVk0LroEyuiW5sNhWvI5IHypxA0wHwYDVR0j BBgwFoAUIzrybX2ubDWesDrVxvtLTgXd8j0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTVlYWM5Ny0zMWI1LTRmMzMtODJmNC01MjQxNDcwY2JiYmUvMC8yMzNBRjI2RDdE QUU2QzM1OUVCMDNBRDVDNkZCNEI0RTA1RERGMjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUwNURE RjIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU1ZWFjOTctMzFiNS00ZjMzLTgy ZjQtNTI0MTQ3MGNiYmJlLzAvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRC NEUwNURERjIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALB1xjHZJRLXoR5T7NGyuw+xVaMrHJeKjR7S p3/VNEBeSw67U69dw7gPieDs6Dea0IR5gO4imsjA3Tcfr3AUSPw3aA6xlAMdHwGJ kbUziXYJpg1v7gT5+/zyO8PTB7sRxXgUC5x/LWSX2KUfqx/Pu4A7IWJrC5OjHxuq rUEqv9y1IgifgiKUwNvszYQLRypnXfPPkk1o4EFdH0F3WiIRQSZeb39tAjYFC/EA SjZuRY2TaWHn2O91Qc/Mo1JOaREtb6rphrWcNCyvluSRPsPOTsMoc0+sxBVORq3w OlDd1MXy3zeNjGxNmhD9p2qDS/vprsmaHus2jUjuWKM0ioZiQrM= -----END CERTIFICATE-----Generated at Tue Nov 4 16:45:19 2025 by rpki-client