$ rpki-client -vvf repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft File: 23093B0E58201D339EAA3983654297729EB3D7FD.mft (raw, json) Hash identifier: +/8MGbUqq/JlfanefAjGG2NA9Iwfetl3ImaxaQKe4jw= Subject key identifier: E8:E2:3B:60:66:B5:3B:54:43:7F:12:9A:93:D9:E3:22:32:4D:7F:32 Authority key identifier: 23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD Certificate issuer: /CN=23093B0E58201D339EAA3983654297729EB3D7FD Certificate serial: 250B196C575BB31CF8C0D07F73AEA5EA53248190 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft Manifest number: 0240 Signing time: Mon 16 Jun 2025 03:02:17 +0000 Manifest this update: Mon 16 Jun 2025 02:57:17 +0000 Manifest next update: Thu 19 Jun 2025 03:02:17 +0000 Files and hashes: 1: 3130332e3136362e3231322e302f32342d3234203d3e20313431393537.roa (hash: AwdKe4Y6MEUfnqDScIzMXI+Jh2SUVi5+YUpo0QrZJkc=) 2: 23093B0E58201D339EAA3983654297729EB3D7FD.crl (hash: DGcEJhZyVnmIMy9w4rMEP49aE2lhADQ2A1tPFIZm2LQ=) 3: 3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa (hash: OQRs+DvdssfbxLcADcws53iRv33QqeJjAKKK3zO8V5k=) 4: 3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa (hash: 36BE9n6WV91maxO5GlAf2fK0lfyiWZQfuF7lsrGEJUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 03:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:0b:19:6c:57:5b:b3:1c:f8:c0:d0:7f:73:ae:a5:ea:53:24:81:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23093B0E58201D339EAA3983654297729EB3D7FD Validity Not Before: Jun 16 02:57:17 2025 GMT Not After : Jun 19 03:02:17 2025 GMT Subject: CN=E8E23B6066B53B54437F129A93D9E322324D7F32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9e:02:71:66:93:f8:d2:8e:51:21:c2:ac:bf: ff:15:7d:d3:0b:19:4d:15:d9:4c:a8:9f:a6:33:69: c4:f2:ec:52:cf:f3:34:17:6d:28:fc:bd:92:c9:f9: 98:d2:41:9e:b7:a4:c1:d7:25:76:12:36:40:4a:e7: a2:55:cc:fd:26:0b:04:35:0e:1d:5c:a0:d7:47:0d: 5f:6d:91:2a:b5:52:ed:18:e8:28:a3:95:0a:f4:b8: 6f:2d:cf:17:05:ab:cb:43:49:73:82:20:1e:d1:2e: ad:5e:67:22:a2:7a:93:6e:cb:19:81:f7:43:d5:02: 2f:a8:14:ef:ec:58:42:be:e9:b3:e6:b9:62:4b:13: 54:c6:9d:50:c1:a7:1f:b1:fd:b7:20:5b:aa:46:b1: bf:e5:f9:7f:69:42:a7:47:59:24:64:a5:80:8e:33: 3b:40:da:d0:a8:ac:b0:bd:c9:e9:d5:a8:6c:50:fc: e7:d2:d5:60:b3:b1:02:2e:fb:43:63:c8:04:b3:14: 88:f2:4e:c1:49:c8:71:ac:ec:4f:7e:94:a2:dc:fa: a5:11:10:95:20:b0:82:1f:83:2e:00:56:6b:7d:e8: e7:aa:c6:cd:3b:15:30:24:77:dd:92:6a:cd:4c:d0: 12:82:9d:6d:27:1f:1f:5a:a2:d4:8f:77:0b:fd:82: 01:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E2:3B:60:66:B5:3B:54:43:7F:12:9A:93:D9:E3:22:32:4D:7F:32 X509v3 Authority Key Identifier: keyid:23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:e2:f3:25:be:f5:71:b9:69:d6:75:43:d5:20:98:56:d9:4e: ba:22:06:8b:35:6e:cc:f2:55:57:a4:35:78:93:02:fc:90:9f: d9:48:0d:9b:10:31:f8:43:1f:80:9b:af:87:02:1c:c3:ae:e2: e0:48:81:8e:01:d2:89:95:e4:f5:1d:cb:8c:7a:37:6d:e7:cb: 56:58:a4:93:a6:d7:24:c8:8e:5e:5b:4d:9a:ac:e0:ec:62:14: af:a8:9a:e3:79:ba:cd:d0:ec:46:0d:37:60:39:50:a6:de:50: d3:9e:98:ae:8e:0d:a8:9b:35:01:ef:02:f9:71:96:96:b3:7b: 6a:87:4f:a0:86:23:70:d4:80:c3:64:d2:a5:e1:85:ea:a0:a1: df:3c:fa:e3:46:fd:0c:56:4a:a0:1c:2f:fc:1a:fc:fc:3e:06: 01:51:43:7b:ae:de:e6:f9:18:3f:92:b8:25:69:86:5d:04:ec: 63:ab:34:56:4a:3c:cc:0e:ae:19:78:7c:93:84:ab:15:62:81: 17:5d:d5:d3:c8:69:00:e0:49:e0:c6:c4:03:1a:aa:0e:a9:ed: 11:c1:9d:43:dd:7a:7d:64:84:8e:db:66:65:9c:8b:a3:c8:06: 6c:fa:ef:43:e3:5d:5b:fa:c5:84:5f:f2:f3:1b:f9:fe:83:1c: ab:7f:65:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJQsZbFdbsxz4wNB/c66l6lMkgZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5 RUIzRDdGRDAeFw0yNTA2MTYwMjU3MTdaFw0yNTA2MTkwMzAyMTdaMDMxMTAvBgNV BAMTKEU4RTIzQjYwNjZCNTNCNTQ0MzdGMTI5QTkzRDlFMzIyMzI0RDdGMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqngJxZpP40o5RIcKsv/8VfdML GU0V2Uyon6YzacTy7FLP8zQXbSj8vZLJ+ZjSQZ63pMHXJXYSNkBK56JVzP0mCwQ1 Dh1coNdHDV9tkSq1Uu0Y6CijlQr0uG8tzxcFq8tDSXOCIB7RLq1eZyKiepNuyxmB 90PVAi+oFO/sWEK+6bPmuWJLE1TGnVDBpx+x/bcgW6pGsb/l+X9pQqdHWSRkpYCO MztA2tCorLC9yenVqGxQ/OfS1WCzsQIu+0NjyASzFIjyTsFJyHGs7E9+lKLc+qUR EJUgsIIfgy4AVmt96Oeqxs07FTAkd92Sas1M0BKCnW0nHx9aotSPdwv9ggFLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6OI7YGa1O1RDfxKak9njIjJNfzIwHwYDVR0j BBgwFoAUIwk7DlggHTOeqjmDZUKXcp6z1/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTk1YjdkNC0zYWFiLTRiODMtOTRiMi1jNDI2N2IyYWUwYTAvMC8yMzA5M0IwRTU4 MjAxRDMzOUVBQTM5ODM2NTQyOTc3MjlFQjNEN0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5RUIz RDdGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU5NWI3ZDQtM2FhYi00YjgzLTk0 YjItYzQyNjdiMmFlMGEwLzAvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3 NzI5RUIzRDdGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMzi8yW+9XG5adZ1Q9UgmFbZTroiBos1bszy VVekNXiTAvyQn9lIDZsQMfhDH4Cbr4cCHMOu4uBIgY4B0omV5PUdy4x6N23ny1ZY pJOm1yTIjl5bTZqs4OxiFK+omuN5us3Q7EYNN2A5UKbeUNOemK6ODaibNQHvAvlx lpaze2qHT6CGI3DUgMNk0qXhheqgod88+uNG/QxWSqAcL/wa/Pw+BgFRQ3uu3ub5 GD+SuCVphl0E7GOrNFZKPMwOrhl4fJOEqxVigRdd1dPIaQDgSeDGxAMaqg6p7RHB nUPden1khI7bZmWci6PIBmz670PjXVv6xYRf8vMb+f6DHKt/ZV8= -----END CERTIFICATE-----Generated at Mon Jun 16 12:18:45 2025 by rpki-client