$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft File: F23ACCA147720B423A9576F3E408691505B293A3.mft (raw, json) Hash identifier: Ipm2SS0zneEWqDFm6M6I6CalIEKB0dQks4FKewKXdhU= Subject key identifier: E2:E4:16:A8:F6:63:72:41:53:7D:59:A0:C3:9C:2F:42:94:00:3A:3F Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 Certificate issuer: /CN=F23ACCA147720B423A9576F3E408691505B293A3 Certificate serial: 7ECB23D6EE26E2490686396CC5533024716F1A31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft Manifest number: 0122 Signing time: Sat 19 Jul 2025 10:21:37 +0000 Manifest this update: Sat 19 Jul 2025 10:16:37 +0000 Manifest next update: Tue 22 Jul 2025 18:35:37 +0000 Files and hashes: 1: F23ACCA147720B423A9576F3E408691505B293A3.crl (hash: dffriOwREQvdRHcfoptp64vft5DiE7J9NXd4mLeoKBA=) 2: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: tvYlBhnklEiw/TZsUy/XAKxHZ5SwpPC4Bkk7W+uYiRM=) 3: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: 4xG5rUbrfk7U5JEhOVdnlCDzgzXDJr6D4I9VnoiM2Rc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 18:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:cb:23:d6:ee:26:e2:49:06:86:39:6c:c5:53:30:24:71:6f:1a:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3 Validity Not Before: Jul 19 10:16:37 2025 GMT Not After : Jul 22 18:35:37 2025 GMT Subject: CN=E2E416A8F6637241537D59A0C39C2F4294003A3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:0c:84:e3:aa:97:90:21:a6:2e:7f:07:91: 1f:25:1c:fe:58:bc:c8:1a:ee:29:55:d6:1f:33:f6: b5:7a:6b:62:88:f0:d2:f3:c7:20:a8:1f:63:89:ef: 12:39:ca:47:8d:17:7a:75:23:ef:9c:5b:b4:b4:58: 1e:f6:fb:a9:ff:72:61:3e:db:fd:eb:8c:55:20:c1: 18:a6:41:f7:e7:76:5c:32:44:6b:be:d5:e4:d7:77: 87:2f:80:43:d0:35:38:d5:d3:53:24:df:55:33:eb: 3d:0c:4d:71:14:d1:89:1f:f7:92:ee:1b:54:1b:35: be:8c:15:ad:29:bf:7c:71:b0:b2:29:71:fb:94:b8: a8:35:16:f0:d2:7f:70:91:6e:c2:ea:6b:e6:25:b1: 90:61:4e:d1:2a:85:2d:c5:17:79:86:6e:44:5a:15: 95:13:20:55:92:4f:a8:b0:14:0a:e4:b0:a0:a9:e0: 00:23:ad:11:48:6a:89:ce:5c:6d:d4:6a:af:b0:be: 15:08:df:83:19:db:74:5c:c7:0e:ba:a6:1d:b0:a8: 0c:f9:44:86:b9:51:5b:70:d0:b8:73:cf:d8:bd:fb: 1e:88:aa:ca:a9:45:e1:3f:0b:cb:ef:7c:29:60:a2: 9e:30:ee:52:36:ab:ef:bd:7e:3c:59:e7:b4:e1:96: 06:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E4:16:A8:F6:63:72:41:53:7D:59:A0:C3:9C:2F:42:94:00:3A:3F X509v3 Authority Key Identifier: keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:2a:00:66:e2:e8:a0:ee:e6:88:3f:35:c4:5f:21:87:e9:83: e2:3a:93:6a:e5:58:10:8e:12:40:3b:5a:df:71:6e:73:1d:ba: c2:58:05:a5:8f:37:0f:08:2f:54:81:ef:e8:c8:e5:f4:2e:ef: 09:57:91:95:16:75:b4:ee:f7:27:e0:90:c1:14:8d:14:33:cf: 06:b6:13:c8:b9:4e:62:84:45:ef:fe:a8:71:d6:a7:4d:15:ca: 9d:4d:35:2b:d4:49:f9:45:77:6a:7c:b8:b2:b9:2f:44:8c:69: 49:8d:5e:99:bd:ff:4a:68:c9:89:52:20:f8:66:21:f4:90:6e: 0c:f7:d4:c8:47:47:68:85:41:c5:f6:40:e8:4c:c9:ff:64:98: 72:7f:7a:4d:8d:e7:75:bd:c8:06:70:db:da:2d:db:6b:a4:21: 4a:29:b7:45:15:6b:12:a4:37:71:fa:a3:88:3e:80:57:42:68: e8:3f:87:1f:ee:00:14:15:ec:18:2f:9a:62:eb:ba:86:1b:c6: 61:dd:47:05:35:9f:42:c7:22:6c:40:71:27:bf:a0:3f:b9:a1: c9:49:38:20:85:f3:69:6f:a6:3e:26:50:d4:f2:0e:08:51:6b: 74:73:b5:b1:f6:93:a4:34:19:5b:94:9d:fd:7a:1a:48:3d:de: 41:23:9d:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfssj1u4m4kkGhjlsxVMwJHFvGjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUw NUIyOTNBMzAeFw0yNTA3MTkxMDE2MzdaFw0yNTA3MjIxODM1MzdaMDMxMTAvBgNV BAMTKEUyRTQxNkE4RjY2MzcyNDE1MzdENTlBMEMzOUMyRjQyOTQwMDNBM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ZQyE46qXkCGmLn8HkR8lHP5Y vMga7ilV1h8z9rV6a2KI8NLzxyCoH2OJ7xI5ykeNF3p1I++cW7S0WB72+6n/cmE+ 2/3rjFUgwRimQffndlwyRGu+1eTXd4cvgEPQNTjV01Mk31Uz6z0MTXEU0Ykf95Lu G1QbNb6MFa0pv3xxsLIpcfuUuKg1FvDSf3CRbsLqa+YlsZBhTtEqhS3FF3mGbkRa FZUTIFWST6iwFArksKCp4AAjrRFIaonOXG3Uaq+wvhUI34MZ23Rcxw66ph2wqAz5 RIa5UVtw0Lhzz9i9+x6IqsqpReE/C8vvfClgop4w7lI2q++9fjxZ57ThlgbnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4uQWqPZjckFTfVmgw5wvQpQAOj8wHwYDVR0j BBgwFoAU8jrMoUdyC0I6lXbz5AhpFQWyk6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWUxNDM4Mi1kNTg3LTRlODYtOGU3ZS02YTI2NGE1OGVhMDYvMC9GMjNBQ0NBMTQ3 NzIwQjQyM0E5NTc2RjNFNDA4NjkxNTA1QjI5M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUwNUIy OTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVlMTQzODItZDU4Ny00ZTg2LThl N2UtNmEyNjRhNThlYTA2LzAvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5 MTUwNUIyOTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8qAGbi6KDu5og/NcRfIYfpg+I6k2rlWBCO EkA7Wt9xbnMdusJYBaWPNw8IL1SB7+jI5fQu7wlXkZUWdbTu9yfgkMEUjRQzzwa2 E8i5TmKERe/+qHHWp00Vyp1NNSvUSflFd2p8uLK5L0SMaUmNXpm9/0poyYlSIPhm IfSQbgz31MhHR2iFQcX2QOhMyf9kmHJ/ek2N53W9yAZw29ot22ukIUopt0UVaxKk N3H6o4g+gFdCaOg/hx/uABQV7BgvmmLruoYbxmHdRwU1n0LHImxAcSe/oD+5oclJ OCCF82lvpj4mUNTyDghRa3RztbH2k6Q0GVuUnf16Gkg93kEjnVk= -----END CERTIFICATE-----Generated at Mon Jul 21 12:39:56 2025 by rpki-client