$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft File: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft (raw, json) Hash identifier: XGPoByB2H2vn3hhjwLE7PXiVjtSlmtCSV/NswKoZs8Q= Subject key identifier: ED:4C:CD:DC:82:87:B9:CE:92:DB:3A:09:78:B3:5F:4A:00:BD:AB:96 Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Certificate serial: 79E4F7539CF3A8FD88E290BB8982D3D57FDE6B27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft Manifest number: 88 Signing time: Mon 11 Aug 2025 00:50:37 +0000 Manifest this update: Mon 11 Aug 2025 00:45:37 +0000 Manifest next update: Thu 14 Aug 2025 03:51:37 +0000 Files and hashes: 1: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl (hash: hrWzq/szxsLILatFlcfMn/8puLHfdiaK7Ap4T+KIh2s=) 2: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: VEUp2w3yPHnRqBLCf0zsUoh5RoZ8ZNdZE7XgU6xqQTk=) 3: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: 1gjKyDW4KHd430zjH8eS6Hf0gzUPhwcmOJ+5ePkv/wI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:e4:f7:53:9c:f3:a8:fd:88:e2:90:bb:89:82:d3:d5:7f:de:6b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Validity Not Before: Aug 11 00:45:37 2025 GMT Not After : Aug 14 03:51:37 2025 GMT Subject: CN=ED4CCDDC8287B9CE92DB3A0978B35F4A00BDAB96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:22:99:42:20:54:43:83:81:67:24:b2:f2:58: af:24:6e:83:d4:e0:0f:17:e7:f5:3c:d8:48:ff:43: 22:77:d7:ab:34:34:a2:69:8f:11:49:dc:1a:f9:62: dc:55:70:f0:ed:2b:71:1c:02:6d:6d:36:79:f0:33: 04:a2:90:d2:cf:3b:53:22:82:5c:4a:0e:f5:1f:0f: 2d:37:96:44:da:44:4c:1e:02:11:b6:2a:6a:e1:b7: e8:27:7f:11:1e:f3:0d:56:ce:6a:84:45:22:8e:2c: c1:37:41:d0:b2:cd:eb:05:79:a9:99:26:7e:5a:be: 0d:ca:c1:71:a6:51:8f:f3:b5:af:03:b5:8f:3c:94: c6:a7:3a:c5:18:97:8f:52:0c:cc:42:58:0d:b8:4d: fc:09:7e:44:16:51:88:fc:48:6a:80:3c:0e:68:27: 2e:99:5c:93:e5:5e:42:d3:f9:39:d3:4c:bc:8d:dd: 5e:4b:d1:db:fa:7f:92:b1:a2:4d:a4:2e:92:9e:37: 3d:7f:25:83:23:41:35:0c:34:de:f9:94:ef:61:a2: 1d:f2:e9:f6:fa:99:bb:a8:66:44:ef:e2:98:0f:21: 3b:f5:b8:e7:dc:93:79:3a:40:1c:db:74:5e:1a:65: 02:58:5a:96:d3:76:9f:f8:13:48:f7:63:de:33:ad: 10:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4C:CD:DC:82:87:B9:CE:92:DB:3A:09:78:B3:5F:4A:00:BD:AB:96 X509v3 Authority Key Identifier: keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:af:52:ad:63:30:15:b4:45:55:8b:ca:24:39:bb:b2:28:dc: 6b:1b:fe:87:63:47:b5:87:1a:04:6c:4c:ef:17:96:71:58:72: e3:63:c6:b9:f0:78:16:93:b6:e8:be:d8:72:9f:85:af:2b:32: 06:cb:9a:f6:f8:85:b8:bd:3e:0c:fa:e0:32:d9:86:97:46:ef: 73:ac:c7:f7:9d:8f:9b:17:e6:e3:c3:ea:4b:fa:c1:83:b3:df: 13:b9:fd:11:35:af:28:ef:4b:04:f2:7d:9f:d2:42:3b:9b:7a: 85:fc:bd:46:0c:78:b7:60:fe:3b:a1:a8:bf:4d:76:37:3d:27: 31:91:7c:fc:91:9c:61:40:92:8e:ad:14:6d:84:cf:44:b3:9c: 45:1e:05:87:af:08:95:f1:f0:d8:15:8e:9e:72:f6:21:eb:02: 57:7d:f3:92:39:94:3a:42:c3:1b:2a:46:f9:3a:ed:3b:ad:69: 48:23:73:f5:08:72:a5:10:be:c2:fc:50:a2:e3:5e:1a:15:d9: 5e:32:bf:50:16:10:40:a4:ce:22:14:72:1c:d1:29:e6:6b:bc: 4a:e2:de:b3:08:f9:08:4a:25:38:2f:25:45:9e:9c:f2:42:08: de:4a:03:63:40:ae:8c:71:f9:31:f2:f7:61:7c:88:3a:32:4e: a2:b5:55:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeeT3U5zzqP2I4pC7iYLT1X/eaycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0Ez RjVDMjhGNDAeFw0yNTA4MTEwMDQ1MzdaFw0yNTA4MTQwMzUxMzdaMDMxMTAvBgNV BAMTKEVENENDRERDODI4N0I5Q0U5MkRCM0EwOTc4QjM1RjRBMDBCREFCOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiIplCIFRDg4FnJLLyWK8kboPU 4A8X5/U82Ej/QyJ316s0NKJpjxFJ3Br5YtxVcPDtK3EcAm1tNnnwMwSikNLPO1Mi glxKDvUfDy03lkTaREweAhG2Kmrht+gnfxEe8w1WzmqERSKOLME3QdCyzesFeamZ Jn5avg3KwXGmUY/zta8DtY88lManOsUYl49SDMxCWA24TfwJfkQWUYj8SGqAPA5o Jy6ZXJPlXkLT+TnTTLyN3V5L0dv6f5Kxok2kLpKeNz1/JYMjQTUMNN75lO9hoh3y 6fb6mbuoZkTv4pgPITv1uOfck3k6QBzbdF4aZQJYWpbTdp/4E0j3Y94zrRA9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7UzN3IKHuc6S2zoJeLNfSgC9q5YwHwYDVR0j BBgwFoAUI0dahrtcUV3dd1O2VV4mej9cKPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8yMzQ3NUE4NkJC NUM1MTVEREQ3NzUzQjY1NTVFMjY3QTNGNUMyOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0EzRjVD MjhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2 N0EzRjVDMjhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2vUq1jMBW0RVWLyiQ5u7Io3Gsb/odjR7WH GgRsTO8XlnFYcuNjxrnweBaTtui+2HKfha8rMgbLmvb4hbi9Pgz64DLZhpdG73Os x/edj5sX5uPD6kv6wYOz3xO5/RE1ryjvSwTyfZ/SQjubeoX8vUYMeLdg/juhqL9N djc9JzGRfPyRnGFAko6tFG2Ez0SznEUeBYevCJXx8NgVjp5y9iHrAld985I5lDpC wxsqRvk67TutaUgjc/UIcqUQvsL8UKLjXhoV2V4yv1AWEECkziIUchzRKeZrvEri 3rMI+QhKJTgvJUWenPJCCN5KA2NAroxx+THy92F8iDoyTqK1VSM= -----END CERTIFICATE-----Generated at Tue Aug 12 13:44:26 2025 by rpki-client