$ rpki-client -vvf repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft File: 230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft (raw, json) Hash identifier: hF21c7Lq3CtIOEe+INg70twlUWB2PwDFKubJfF9CjNE= Subject key identifier: 57:2F:95:E5:F9:10:E0:89:8A:E1:4F:0C:C8:9D:45:7C:88:3E:86:B1 Authority key identifier: 23:0A:81:B2:83:31:4B:A7:9B:FA:02:4F:DF:9F:F4:DA:66:B4:24:BE Certificate issuer: /CN=230A81B283314BA79BFA024FDF9FF4DA66B424BE Certificate serial: 1ACDEF950ADEDFFFBEDC3FDD7BDD19AB14189732 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft Manifest number: 01EC Signing time: Sun 20 Jul 2025 00:12:09 +0000 Manifest this update: Sun 20 Jul 2025 00:07:09 +0000 Manifest next update: Wed 23 Jul 2025 09:28:09 +0000 Files and hashes: 1: 230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl (hash: 5liZWrhHHddGRcdzgO7fh/jFQMZsn5Eey8RKaEoL80g=) 2: 323430363a333834303a3a2f33322d3438203d3e20313430343438.roa (hash: Ra1E9cOQanH1SiHnfJl04HYirMLU+Yh3tE7np1INosY=) 3: 3130332e3135322e3233382e302f32332d3234203d3e20313430343438.roa (hash: rBpy14k8W3mbLlNgX4J0/2ZVTjIArp0RYRGvkTqIoQQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 09:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:cd:ef:95:0a:de:df:ff:be:dc:3f:dd:7b:dd:19:ab:14:18:97:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230A81B283314BA79BFA024FDF9FF4DA66B424BE Validity Not Before: Jul 20 00:07:09 2025 GMT Not After : Jul 23 09:28:09 2025 GMT Subject: CN=572F95E5F910E0898AE14F0CC89D457C883E86B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f0:0b:31:88:0b:95:95:1a:b7:7b:ce:e5:0b: a3:5a:28:2a:4f:d1:a5:7a:04:ef:7a:44:1e:6f:64: 03:d1:d9:72:a3:fc:2d:90:76:de:85:46:d5:76:5b: 06:96:2a:b5:65:ef:8a:a7:22:cb:a8:cf:64:42:1d: e0:7d:48:f4:21:3a:96:07:75:c7:bf:b3:b6:d1:23: 0b:f6:ce:50:73:bb:7f:e9:6f:87:bc:38:d0:b1:1a: 54:8e:f1:60:4c:bd:99:5b:b8:b2:31:be:3c:9d:84: c3:eb:50:d3:78:23:17:b3:90:ba:4c:80:52:b4:78: f3:d0:3f:07:25:42:44:a0:1c:ff:75:2d:d2:dd:5c: c3:54:c9:ea:fd:b5:78:14:a7:b9:c8:84:4b:53:43: ca:aa:1a:06:e6:88:23:4b:6b:4d:9e:ef:42:26:48: c4:71:8e:ae:ea:10:42:e9:07:b1:98:cd:cd:e5:e8: 2f:32:8b:2d:a6:eb:ce:79:1d:95:c0:65:9d:13:07: 9f:da:df:68:7f:d9:6b:25:07:ee:3e:98:f6:1d:87: 50:78:c7:f4:79:aa:1e:47:13:75:a3:eb:f9:d7:4a: a7:b2:58:7f:d6:29:77:a4:85:c4:22:70:c4:cd:f6: ca:33:61:7d:db:9a:5e:fb:17:74:03:88:bc:3c:f5: 21:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2F:95:E5:F9:10:E0:89:8A:E1:4F:0C:C8:9D:45:7C:88:3E:86:B1 X509v3 Authority Key Identifier: keyid:23:0A:81:B2:83:31:4B:A7:9B:FA:02:4F:DF:9F:F4:DA:66:B4:24:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:6a:00:3d:c1:75:09:2f:bf:5c:49:05:9e:ad:78:3e:35:b3: ee:24:4a:43:5e:46:f6:48:7d:f0:30:24:87:bd:59:05:66:6d: 89:0c:86:2f:b1:27:07:7c:37:ee:d4:c2:cd:4a:66:90:d4:c4: 2f:66:d5:37:7c:70:74:de:26:94:77:43:bc:b4:06:a8:0a:a6: 8b:7b:e9:6f:15:fd:41:f9:0b:9a:e1:05:98:d8:63:66:f5:84: b5:30:fa:50:d7:73:db:a2:03:b7:de:fb:d2:45:12:b1:a5:39: d4:58:59:0a:29:43:fe:c8:f0:c7:9f:57:72:83:f1:2d:10:0f: 92:91:da:2d:ce:18:9e:1d:f3:8e:2c:25:a0:9b:73:65:30:3b: 45:67:d8:ec:ae:d5:a2:cf:42:47:0d:a7:2d:7e:62:0c:7a:57: e9:89:57:3d:cc:1b:04:7e:d5:c6:f2:8a:7f:a1:28:cb:ef:40: f8:da:03:67:50:9b:0d:7d:f4:c5:69:64:ea:bb:56:c1:ff:96: 63:6c:c6:64:27:81:c9:30:26:55:f6:86:a0:74:f7:c5:89:27: a8:22:d0:b1:1d:e5:da:28:da:3e:f9:33:68:7c:70:28:35:c9: 85:5a:d0:4f:c4:e2:a1:a0:68:15:94:35:f1:b0:84:21:35:c0: 14:5f:b6:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGs3vlQre3/++3D/de90ZqxQYlzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0REE2 NkI0MjRCRTAeFw0yNTA3MjAwMDA3MDlaFw0yNTA3MjMwOTI4MDlaMDMxMTAvBgNV BAMTKDU3MkY5NUU1RjkxMEUwODk4QUUxNEYwQ0M4OUQ0NTdDODgzRTg2QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ8AsxiAuVlRq3e87lC6NaKCpP 0aV6BO96RB5vZAPR2XKj/C2Qdt6FRtV2WwaWKrVl74qnIsuoz2RCHeB9SPQhOpYH dce/s7bRIwv2zlBzu3/pb4e8ONCxGlSO8WBMvZlbuLIxvjydhMPrUNN4IxezkLpM gFK0ePPQPwclQkSgHP91LdLdXMNUyer9tXgUp7nIhEtTQ8qqGgbmiCNLa02e70Im SMRxjq7qEELpB7GYzc3l6C8yiy2m6855HZXAZZ0TB5/a32h/2WslB+4+mPYdh1B4 x/R5qh5HE3Wj6/nXSqeyWH/WKXekhcQicMTN9sozYX3bml77F3QDiLw89SFNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVy+V5fkQ4ImK4U8MyJ1FfIg+hrEwHwYDVR0j BBgwFoAUIwqBsoMxS6eb+gJP35/02ma0JL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2ExY2U0ZS01OWM4LTQxY2MtYjVlNi1iZDdiN2E3MDQzNTYvMC8yMzBBODFCMjgz MzE0QkE3OUJGQTAyNEZERjlGRjREQTY2QjQyNEJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0REE2NkI0 MjRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdhMWNlNGUtNTljOC00MWNjLWI1 ZTYtYmQ3YjdhNzA0MzU2LzAvMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0 REE2NkI0MjRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVqAD3BdQkvv1xJBZ6teD41s+4kSkNeRvZI ffAwJIe9WQVmbYkMhi+xJwd8N+7Uws1KZpDUxC9m1Td8cHTeJpR3Q7y0BqgKpot7 6W8V/UH5C5rhBZjYY2b1hLUw+lDXc9uiA7fe+9JFErGlOdRYWQopQ/7I8MefV3KD 8S0QD5KR2i3OGJ4d844sJaCbc2UwO0Vn2Oyu1aLPQkcNpy1+Ygx6V+mJVz3MGwR+ 1cbyin+hKMvvQPjaA2dQmw199MVpZOq7VsH/lmNsxmQngckwJlX2hqB098WJJ6gi 0LEd5doo2j75M2h8cCg1yYVa0E/E4qGgaBWUNfGwhCE1wBRftjc= -----END CERTIFICATE-----Generated at Mon Jul 21 01:32:09 2025 by rpki-client