$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft File: 232967D03C1169374A898D1C8991F1ABE7744870.mft (raw, json) Hash identifier: HEUlBXXqVCpeqsij3/EYa53FI9V6ng8xJAgnm3A20Mw= Subject key identifier: A3:97:1C:8E:C6:48:42:B3:C6:FA:4C:C5:95:99:C3:10:46:73:1E:AE Authority key identifier: 23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70 Certificate issuer: /CN=232967D03C1169374A898D1C8991F1ABE7744870 Certificate serial: 231BAA40C7200E7C24792D86C5766DEB2F6C0AC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft Manifest number: 0289 Signing time: Thu 07 Aug 2025 06:21:35 +0000 Manifest this update: Thu 07 Aug 2025 06:16:35 +0000 Manifest next update: Sun 10 Aug 2025 12:23:35 +0000 Files and hashes: 1: 232967D03C1169374A898D1C8991F1ABE7744870.crl (hash: QaGCRWks901a+/f27bKF+BTNfhW3FS0OmvEoahlc+Xk=) 2: 3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa (hash: 8k4I9alM31pB+adpaudK4H7ty0suQjHEpsCjRwS0mmE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 12:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:1b:aa:40:c7:20:0e:7c:24:79:2d:86:c5:76:6d:eb:2f:6c:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=232967D03C1169374A898D1C8991F1ABE7744870 Validity Not Before: Aug 7 06:16:35 2025 GMT Not After : Aug 10 12:23:35 2025 GMT Subject: CN=A3971C8EC64842B3C6FA4CC59599C31046731EAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:95:b3:a1:e7:ff:cc:58:fb:51:26:6c:d6:a6: cb:36:f5:0a:8c:e4:46:d5:e6:2e:21:de:77:13:c6: f4:c1:b3:93:38:85:d2:c1:5c:e9:3f:b3:69:21:d6: 6f:cd:7b:c0:d5:6d:96:6f:2e:1a:cb:14:0f:43:b2: a6:c4:dd:e2:85:de:69:eb:e8:f1:5b:34:9a:8d:48: bc:51:56:a6:10:a6:38:68:11:92:9d:1f:7c:ab:6c: 7e:a5:20:1d:cd:79:16:7a:64:8d:b2:30:13:11:ff: 3c:92:f7:93:6d:f8:70:c6:89:c6:af:48:40:1b:20: 9f:3f:82:d0:22:d2:41:f9:c1:33:27:df:a0:08:6a: 22:02:a3:e5:92:5f:0f:0c:b4:93:a1:c0:c5:df:69: d4:c7:d4:8c:91:26:45:f4:e2:a0:0a:22:a6:fa:78: 06:be:1c:04:49:01:10:94:b3:9d:18:a8:e6:1b:b1: 17:1c:94:d0:3b:c4:97:c4:0e:00:41:9d:3e:32:83: f1:34:db:01:f9:ec:bf:8b:ae:d6:87:70:34:76:09: 50:4f:15:63:fd:ac:9b:c4:5a:25:b1:c0:64:e8:98: 2e:32:ed:5a:da:bf:aa:92:fe:1f:4d:d6:77:af:b1: 09:85:55:e7:91:3b:41:05:f0:88:07:3e:86:05:d0: b0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:97:1C:8E:C6:48:42:B3:C6:FA:4C:C5:95:99:C3:10:46:73:1E:AE X509v3 Authority Key Identifier: keyid:23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ea:0b:bf:82:61:09:79:ee:77:2b:67:3b:61:68:91:c2:42: ab:b2:d4:72:80:48:cb:ac:9a:b9:b4:8c:3f:73:71:63:e9:f8: 8e:10:2e:c9:f8:46:e0:c1:a5:3f:6f:43:62:76:b0:02:ae:4a: b3:de:cf:71:37:31:1e:f9:ed:0b:df:ed:fd:68:f3:91:79:3b: fd:51:89:9e:91:02:01:12:5e:8d:a8:2a:04:04:71:df:aa:a1: 11:a5:48:40:17:d8:f2:2d:68:64:b5:e1:f1:5c:40:b9:f3:1c: 16:ee:dc:6d:75:64:c4:d9:b7:53:1b:98:64:1c:c0:62:80:43: bd:18:2e:72:45:96:fd:16:a7:d2:58:20:04:c6:2e:1e:1e:37: 11:e3:a0:5f:e3:7d:4f:59:d6:2b:41:c5:82:22:e7:7a:9a:5f: cf:b3:23:91:3c:ab:19:5a:7a:26:52:fc:25:6d:a9:1e:14:ce: 0a:33:2b:6b:e6:1d:5f:62:3a:3c:ea:76:06:93:3b:82:c9:29: e1:5c:e0:3b:5f:cf:98:75:77:55:d9:5e:e8:67:7f:2c:96:d5: 1f:47:5e:4a:a1:28:47:74:02:eb:b0:05:27:4b:0a:31:e8:8e: 3e:4f:10:67:f4:96:43:37:a5:02:ab:a9:70:e1:b0:79:13:de: 0e:96:11:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIxuqQMcgDnwkeS2GxXZt6y9sCsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMyOTY3RDAzQzExNjkzNzRBODk4RDFDODk5MUYxQUJF Nzc0NDg3MDAeFw0yNTA4MDcwNjE2MzVaFw0yNTA4MTAxMjIzMzVaMDMxMTAvBgNV BAMTKEEzOTcxQzhFQzY0ODQyQjNDNkZBNENDNTk1OTlDMzEwNDY3MzFFQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCflbOh5//MWPtRJmzWpss29QqM 5EbV5i4h3ncTxvTBs5M4hdLBXOk/s2kh1m/Ne8DVbZZvLhrLFA9DsqbE3eKF3mnr 6PFbNJqNSLxRVqYQpjhoEZKdH3yrbH6lIB3NeRZ6ZI2yMBMR/zyS95Nt+HDGicav SEAbIJ8/gtAi0kH5wTMn36AIaiICo+WSXw8MtJOhwMXfadTH1IyRJkX04qAKIqb6 eAa+HARJARCUs50YqOYbsRcclNA7xJfEDgBBnT4yg/E02wH57L+LrtaHcDR2CVBP FWP9rJvEWiWxwGTomC4y7Vrav6qS/h9N1nevsQmFVeeRO0EF8IgHPoYF0LB1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo5ccjsZIQrPG+kzFlZnDEEZzHq4wHwYDVR0j BBgwFoAUIyln0DwRaTdKiY0ciZHxq+d0SHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUzZTk4MS1iZjM5LTQyZTAtYTJmNi1jZjg3Yzc1N2Y4MjcvMC8yMzI5NjdEMDND MTE2OTM3NEE4OThEMUM4OTkxRjFBQkU3NzQ0ODcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMyOTY3RDAzQzExNjkzNzRBODk4RDFDODk5MUYxQUJFNzc0 NDg3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlM2U5ODEtYmYzOS00MmUwLWEy ZjYtY2Y4N2M3NTdmODI3LzAvMjMyOTY3RDAzQzExNjkzNzRBODk4RDFDODk5MUYx QUJFNzc0NDg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfqC7+CYQl57ncrZzthaJHCQquy1HKASMus mrm0jD9zcWPp+I4QLsn4RuDBpT9vQ2J2sAKuSrPez3E3MR757Qvf7f1o85F5O/1R iZ6RAgESXo2oKgQEcd+qoRGlSEAX2PItaGS14fFcQLnzHBbu3G11ZMTZt1MbmGQc wGKAQ70YLnJFlv0Wp9JYIATGLh4eNxHjoF/jfU9Z1itBxYIi53qaX8+zI5E8qxla eiZS/CVtqR4UzgozK2vmHV9iOjzqdgaTO4LJKeFc4Dtfz5h1d1XZXuhnfyyW1R9H XkqhKEd0AuuwBSdLCjHojj5PEGf0lkM3pQKrqXDhsHkT3g6WEQw= -----END CERTIFICATE-----Generated at Sat Aug 9 05:35:34 2025 by rpki-client