$ rpki-client -vvf repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft File: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft (raw, json) Hash identifier: PSZv1d0M87bQR7fPaIP6/YjHoONNjogz3uw/33+4Gjw= Subject key identifier: 8B:43:9C:D4:21:2D:FC:E7:61:0C:85:A5:71:69:84:01:F5:D1:B2:49 Authority key identifier: 23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 Certificate issuer: /CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Certificate serial: 29340B76F08913EF84CD089F4ABB459C39FD5261 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft Manifest number: 0103 Signing time: Sun 20 Jul 2025 02:51:56 +0000 Manifest this update: Sun 20 Jul 2025 02:46:56 +0000 Manifest next update: Wed 23 Jul 2025 13:19:56 +0000 Files and hashes: 1: 3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa (hash: GanArMdyxHcMbx7yNEnXuF/pBEYLZnuk0ZSf31LCDR8=) 2: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl (hash: s5gHPzRbgg1AxIOWq3T91GTa2LuixPbFzATxa2FOLh4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 13:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:34:0b:76:f0:89:13:ef:84:cd:08:9f:4a:bb:45:9c:39:fd:52:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Validity Not Before: Jul 20 02:46:56 2025 GMT Not After : Jul 23 13:19:56 2025 GMT Subject: CN=8B439CD4212DFCE7610C85A571698401F5D1B249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0b:9c:68:aa:79:0a:a9:d2:ad:12:ea:5e:f0: bc:2f:fc:84:8e:82:28:b5:d3:09:56:cf:2d:b8:b6: e4:4b:0c:01:5e:eb:f6:24:57:32:5a:40:f6:c3:7c: 03:df:fd:dc:8c:42:8e:38:2f:79:a7:ee:89:ac:3e: 28:ed:0f:0d:53:9b:60:40:49:78:f7:c9:5c:d5:a4: 7e:20:ab:f1:ce:2c:e7:eb:8c:27:0d:91:10:ac:db: d4:d7:a5:77:07:54:42:84:67:3f:30:a1:c7:54:21: be:bd:77:cd:a6:06:da:07:b5:2b:e5:1c:79:33:6e: bd:83:66:41:44:e5:9a:2d:c4:2f:ff:87:7d:c6:33: 5f:b3:53:c4:98:f3:b4:29:b9:7f:42:0b:11:52:a1: f9:ee:13:7c:79:18:41:8b:b9:ec:e3:4e:17:a5:76: 7b:e2:4a:2e:79:70:e3:ac:7e:e8:f6:59:7e:d4:77: f4:5a:0e:0a:7f:c7:c7:da:90:b6:74:6d:53:55:d8: 64:7f:40:cc:3d:9e:c3:58:eb:51:c5:32:a3:66:e2: 13:87:c6:e5:9a:66:40:83:c3:49:6a:96:3d:53:7a: 76:08:e8:a4:90:48:fa:75:be:b5:5b:37:e8:c6:34: d5:4e:c9:fe:16:3d:5a:a0:cb:d2:b4:32:42:eb:7c: 5f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:43:9C:D4:21:2D:FC:E7:61:0C:85:A5:71:69:84:01:F5:D1:B2:49 X509v3 Authority Key Identifier: keyid:23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:a8:76:13:e8:cf:48:99:4a:5e:8e:c5:96:b9:a7:1d:b5:08: ee:f5:d4:10:ff:25:e3:d9:2c:67:5e:ee:f4:15:69:d0:68:60: fd:38:3b:30:28:ae:af:4e:a1:b2:08:aa:85:80:7a:dd:26:7d: 0e:2b:a7:64:78:f3:5e:ab:e9:7f:54:d0:21:22:00:99:87:54: 79:80:ec:90:71:df:ad:e7:e7:49:eb:b1:24:55:c9:be:f6:26: f5:96:35:8a:6d:b9:7a:a4:50:84:ea:a8:c9:ea:01:6b:4e:98: b7:b8:25:d4:65:95:87:6c:83:b7:0d:ee:01:74:c8:9c:73:e4: 6c:f2:db:54:cc:28:7e:3b:c4:a5:78:53:f5:70:51:18:bc:3e: 74:9f:70:d1:3a:4f:4d:0d:63:1d:ff:37:26:d4:6f:97:15:4b: 1b:63:c7:fa:05:31:b7:8d:1a:a5:00:d9:f2:70:9f:5f:ce:c8: 37:f7:0a:ed:8b:3c:28:7c:17:7d:63:ea:40:04:04:07:15:f0: 35:75:3d:30:73:b9:65:6f:ad:27:65:56:e1:26:1d:66:2e:1e: 80:23:27:df:e6:ac:41:97:0f:35:9b:eb:18:3c:2f:75:21:e2: dd:a2:eb:90:85:4f:84:89:1d:74:9c:2e:24:db:19:6a:e8:67: 5d:0f:b4:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKTQLdvCJE++EzQifSrtFnDn9UmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIz QjAwRUVCNjAeFw0yNTA3MjAwMjQ2NTZaFw0yNTA3MjMxMzE5NTZaMDMxMTAvBgNV BAMTKDhCNDM5Q0Q0MjEyREZDRTc2MTBDODVBNTcxNjk4NDAxRjVEMUIyNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwC5xoqnkKqdKtEupe8Lwv/ISO gii10wlWzy24tuRLDAFe6/YkVzJaQPbDfAPf/dyMQo44L3mn7omsPijtDw1Tm2BA SXj3yVzVpH4gq/HOLOfrjCcNkRCs29TXpXcHVEKEZz8wocdUIb69d82mBtoHtSvl HHkzbr2DZkFE5ZotxC//h33GM1+zU8SY87QpuX9CCxFSofnuE3x5GEGLuezjThel dnviSi55cOOsfuj2WX7Ud/RaDgp/x8fakLZ0bVNV2GR/QMw9nsNY61HFMqNm4hOH xuWaZkCDw0lqlj1TenYI6KSQSPp1vrVbN+jGNNVOyf4WPVqgy9K0MkLrfF8xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi0Oc1CEt/OdhDIWlcWmEAfXRskkwHwYDVR0j BBgwFoAUIxMtasKg7UGZb1TACopZsjsA7rYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmU0N2M2ZC1lNjI0LTQ3N2MtYWUxOC1kMzJmMjJjOTYyMDQvMC8yMzEzMkQ2QUMy QTBFRDQxOTk2RjU0QzAwQThBNTlCMjNCMDBFRUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIzQjAw RUVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZlNDdjNmQtZTYyNC00NzdjLWFl MTgtZDMyZjIyYzk2MjA0LzAvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5 QjIzQjAwRUVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACiodhPoz0iZSl6OxZa5px21CO711BD/JePZ LGde7vQVadBoYP04OzAorq9OobIIqoWAet0mfQ4rp2R4816r6X9U0CEiAJmHVHmA 7JBx363n50nrsSRVyb72JvWWNYptuXqkUITqqMnqAWtOmLe4JdRllYdsg7cN7gF0 yJxz5Gzy21TMKH47xKV4U/VwURi8PnSfcNE6T00NYx3/NybUb5cVSxtjx/oFMbeN GqUA2fJwn1/OyDf3Cu2LPCh8F31j6kAEBAcV8DV1PTBzuWVvrSdlVuEmHWYuHoAj J9/mrEGXDzWb6xg8L3Uh4t2i65CFT4SJHXScLiTbGWroZ10PtJ4= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:47 2025 by rpki-client