$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft File: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft (raw, json) Hash identifier: HG3gIL9sBMHp9ArM+3OITISvC4rjYa5OvoTqYJKDFVs= Subject key identifier: 17:0B:95:A5:FB:7D:01:12:6C:DA:E8:5D:D2:85:F6:A1:D8:67:D1:07 Authority key identifier: 23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 Certificate issuer: /CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Certificate serial: 48CE0B915DC8DA5364031F92DF10742E05E9ABF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft Manifest number: B4 Signing time: Sun 20 Jul 2025 05:30:52 +0000 Manifest this update: Sun 20 Jul 2025 05:25:52 +0000 Manifest next update: Wed 23 Jul 2025 10:13:52 +0000 Files and hashes: 1: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl (hash: 1D/t3IIb/+C6ZAHifYcWJgkjVl42zdDWQknxkU9pUqk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 10:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ce:0b:91:5d:c8:da:53:64:03:1f:92:df:10:74:2e:05:e9:ab:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Validity Not Before: Jul 20 05:25:52 2025 GMT Not After : Jul 23 10:13:52 2025 GMT Subject: CN=170B95A5FB7D01126CDAE85DD285F6A1D867D107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8e:0b:bd:82:71:27:d5:46:7f:f9:7c:ea:33: 5f:f8:00:91:da:55:0a:0c:d9:b0:a3:7b:95:fc:61: 16:47:09:45:09:54:9e:24:d8:74:dc:47:95:42:73: 18:be:15:a0:ae:42:20:d9:aa:90:a0:a4:f8:6b:68: e5:06:25:39:1a:78:7b:b1:c3:09:05:5d:e0:18:64: 9d:f5:3b:67:11:21:9a:07:64:d1:e4:2a:11:ad:e8: 53:d1:b2:99:eb:f9:29:62:1c:32:48:99:2e:1c:2c: 27:d6:24:23:52:4a:3a:9d:f0:b9:6a:53:46:73:2d: bf:09:5e:0b:c4:75:b2:2a:04:e5:6d:ef:17:af:2e: 9d:77:92:6e:4b:ed:96:c4:85:3b:54:35:b0:ed:86: 66:e3:59:5e:0a:ba:3b:be:1a:d2:0a:2d:0b:7d:df: fa:ff:85:dc:e6:86:a8:96:18:e6:9c:05:05:ed:8c: 35:c9:58:e4:34:f7:88:f2:bb:d8:86:58:cb:9a:03: d1:c6:14:40:21:64:73:8e:b5:8e:6c:88:2f:05:e5: 49:46:3b:85:64:f4:83:c8:a2:82:a3:4f:de:1e:68: 71:de:db:20:18:40:e2:23:32:6b:be:67:ed:e6:dc: 9e:ff:87:d9:d2:97:c7:49:62:ca:e7:a1:ad:6f:6f: 96:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0B:95:A5:FB:7D:01:12:6C:DA:E8:5D:D2:85:F6:A1:D8:67:D1:07 X509v3 Authority Key Identifier: keyid:23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:6c:d0:bf:7f:a0:c2:46:e0:a7:76:fa:92:95:9e:74:63:d1: c8:6e:3b:0f:c1:88:5d:73:39:91:af:84:f8:3d:65:62:0b:99: ae:86:9e:cf:cb:5c:f0:1e:a7:f4:6c:ab:0a:76:df:9f:04:d8: 2f:ad:50:af:1d:2f:a1:17:0c:c5:6e:cf:ac:e7:97:c5:4f:2f: 61:09:1b:3b:ee:ef:da:e9:0d:f5:06:e6:1b:a8:28:c3:68:a4: d3:3e:47:df:be:3d:73:b2:76:36:60:36:df:38:b7:e5:7b:7c: c2:fe:b7:b9:14:4f:7a:14:40:28:3a:49:62:61:a1:9a:ab:04: 2e:29:e0:a0:34:ec:2c:85:a7:d0:db:b3:8c:13:46:cd:18:aa: 6c:48:d1:a9:38:e4:be:c5:f0:55:ce:84:bf:09:eb:8d:ef:a4: 04:4e:ad:23:f0:41:3b:9f:55:4b:74:4c:dd:1a:6b:d5:c9:22: 68:c4:87:d5:e6:c2:10:89:94:dc:89:52:fd:f9:21:1d:9c:c4: 85:1d:ee:d6:6b:2e:0c:2b:40:e8:64:41:c7:6b:82:4c:72:7d: b4:04:e5:4d:96:6d:74:60:53:0b:5c:c8:01:90:91:ab:26:72: e7:80:09:d4:f7:56:84:5a:ee:07:42:c5:e1:e2:45:44:9b:5b: 56:35:68:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSM4LkV3I2lNkAx+S3xB0LgXpq/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFC RkNDN0UzNjAeFw0yNTA3MjAwNTI1NTJaFw0yNTA3MjMxMDEzNTJaMDMxMTAvBgNV BAMTKDE3MEI5NUE1RkI3RDAxMTI2Q0RBRTg1REQyODVGNkExRDg2N0QxMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrjgu9gnEn1UZ/+XzqM1/4AJHa VQoM2bCje5X8YRZHCUUJVJ4k2HTcR5VCcxi+FaCuQiDZqpCgpPhraOUGJTkaeHux wwkFXeAYZJ31O2cRIZoHZNHkKhGt6FPRspnr+SliHDJImS4cLCfWJCNSSjqd8Llq U0ZzLb8JXgvEdbIqBOVt7xevLp13km5L7ZbEhTtUNbDthmbjWV4Kuju+GtIKLQt9 3/r/hdzmhqiWGOacBQXtjDXJWOQ094jyu9iGWMuaA9HGFEAhZHOOtY5siC8F5UlG O4Vk9IPIooKjT94eaHHe2yAYQOIjMmu+Z+3m3J7/h9nSl8dJYsrnoa1vb5ZJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFwuVpft9ARJs2uhd0oX2odhn0QcwHwYDVR0j BBgwFoAUI8Yi+HYYq4sEIuempG0ukb/MfjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMS8yM0M2MjJGODc2 MThBQjhCMDQyMkU3QTZBNDZEMkU5MUJGQ0M3RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFCRkND N0UzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzEvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJF OTFCRkNDN0UzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANs0L9/oMJG4Kd2+pKVnnRj0chuOw/BiF1z OZGvhPg9ZWILma6Gns/LXPAep/Rsqwp2358E2C+tUK8dL6EXDMVuz6znl8VPL2EJ Gzvu79rpDfUG5huoKMNopNM+R9++PXOydjZgNt84t+V7fML+t7kUT3oUQCg6SWJh oZqrBC4p4KA07CyFp9Dbs4wTRs0YqmxI0ak45L7F8FXOhL8J643vpAROrSPwQTuf VUt0TN0aa9XJImjEh9XmwhCJlNyJUv35IR2cxIUd7tZrLgwrQOhkQcdrgkxyfbQE 5U2WbXRgUwtcyAGQkasmcueACdT3VoRa7gdCxeHiRUSbW1Y1aB0= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:44 2025 by rpki-client