$ rpki-client -vvf repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft File: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft (raw, json) Hash identifier: Iwy2Kbtatpj27xTO6TpO2qeQoAC+TrvD5wRQ+n1ik+g= Subject key identifier: 24:DE:2C:22:3A:64:DA:66:70:76:69:E2:1A:FA:30:EF:4B:A9:FD:EB Authority key identifier: 23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D Certificate issuer: /CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Certificate serial: 472A3F7B012019797E65CC2E635683BE8881D628 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft Manifest number: 04F5 Signing time: Fri 25 Jul 2025 19:11:59 +0000 Manifest this update: Fri 25 Jul 2025 19:06:59 +0000 Manifest next update: Tue 29 Jul 2025 01:40:59 +0000 Files and hashes: 1: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl (hash: Locpbv5N0jxWtRe6KXNxkBu+nYPJ4D/4E0009MbbKUg=) 2: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: bVRLDmnlkDr+Er81GecVOu1gTofkGixwnSL4beQ/iNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 01:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:2a:3f:7b:01:20:19:79:7e:65:cc:2e:63:56:83:be:88:81:d6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Validity Not Before: Jul 25 19:06:59 2025 GMT Not After : Jul 29 01:40:59 2025 GMT Subject: CN=24DE2C223A64DA66707669E21AFA30EF4BA9FDEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1b:44:7f:62:6e:70:73:5e:8a:0d:ea:74:c3: 2f:6f:82:a5:e7:49:16:00:7d:31:61:89:7a:6f:f5: fa:02:07:97:c6:e7:a0:4e:18:a7:81:1d:ac:a2:bb: 09:e7:20:d2:74:cb:62:95:8a:1b:d2:40:9d:b1:83: 07:b1:41:90:01:8f:0e:c0:a7:8b:fa:68:48:b8:0d: 5a:3a:81:ea:d7:7d:b0:1d:7e:92:ab:6a:82:40:14: 39:9f:fd:d6:05:c2:cb:20:ae:73:8f:d1:b6:01:5e: fb:2b:d9:de:04:54:22:b4:ef:f6:eb:cf:75:7f:f6: ba:bd:4e:50:58:19:ac:8e:0b:25:7d:bb:33:aa:65: 31:e4:a0:ad:0c:dc:08:3d:ec:41:c1:52:72:fc:08: a5:77:49:c6:f9:85:f6:1a:7a:56:cb:e6:68:e8:92: 4f:8a:e4:9f:7f:75:0a:76:32:df:b7:5a:70:18:be: 11:9f:e9:90:f7:34:19:3c:c4:18:86:79:e9:a7:09: f1:0b:0f:39:b5:e9:10:94:b2:e0:d5:2b:3f:ad:66: d0:53:1f:a1:02:92:4a:7f:93:52:8b:a3:ca:8a:42: 54:1a:4e:8b:7a:c6:fd:31:e5:15:7b:70:2d:d8:57: 87:fe:4a:35:b3:d4:41:35:79:06:63:85:5f:84:7f: 4e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DE:2C:22:3A:64:DA:66:70:76:69:E2:1A:FA:30:EF:4B:A9:FD:EB X509v3 Authority Key Identifier: keyid:23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e8:92:0e:8e:98:23:be:bb:4a:b5:7f:c0:2d:bb:05:98:d1: 63:09:cf:53:f4:71:ea:08:e9:86:4b:a9:ab:b3:93:01:ec:d8: 7b:6c:51:b6:9f:48:6c:4e:93:b5:f4:05:2a:60:a3:df:26:dd: 57:8d:9b:ab:22:64:96:e3:8e:9c:63:31:26:fa:5b:53:fd:8c: 58:96:5d:b7:98:a3:09:9f:00:ff:d6:5e:12:b0:82:43:bb:d1: f2:e6:3d:9a:08:ca:0d:0d:7a:6f:05:d4:a6:16:6a:24:63:78: 77:51:f8:de:df:4e:16:14:2f:19:0a:ef:a0:04:af:ea:2e:de: d9:e4:50:0f:1b:c7:d4:c0:61:a7:16:b2:79:4d:a1:f0:c4:db: 31:9c:3e:7c:6f:ed:32:a8:e7:ec:ed:2d:a0:17:b4:cb:45:05: 73:28:d9:3b:78:c3:dd:4c:24:9a:dc:eb:d1:ac:23:ef:77:aa: 04:54:4b:f1:a4:77:85:07:d9:72:cf:7b:f7:51:31:6d:6d:cc: 37:7d:a6:d2:8c:8e:fd:79:43:1e:32:c9:ff:95:55:f6:88:96: 02:da:7e:86:ce:9d:ef:b8:09:d8:f6:49:95:07:b7:0d:14:0e: 8c:51:b1:39:e7:8a:19:f3:97:61:89:6a:83:10:1f:07:a1:33: d0:c5:1f:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURyo/ewEgGXl+ZcwuY1aDvoiB1igwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUw NURERjIzRDAeFw0yNTA3MjUxOTA2NTlaFw0yNTA3MjkwMTQwNTlaMDMxMTAvBgNV BAMTKDI0REUyQzIyM0E2NERBNjY3MDc2NjlFMjFBRkEzMEVGNEJBOUZERUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpG0R/Ym5wc16KDep0wy9vgqXn SRYAfTFhiXpv9foCB5fG56BOGKeBHayiuwnnINJ0y2KVihvSQJ2xgwexQZABjw7A p4v6aEi4DVo6gerXfbAdfpKraoJAFDmf/dYFwssgrnOP0bYBXvsr2d4EVCK07/br z3V/9rq9TlBYGayOCyV9uzOqZTHkoK0M3Ag97EHBUnL8CKV3Scb5hfYaelbL5mjo kk+K5J9/dQp2Mt+3WnAYvhGf6ZD3NBk8xBiGeemnCfELDzm16RCUsuDVKz+tZtBT H6ECkkp/k1KLo8qKQlQaTot6xv0x5RV7cC3YV4f+SjWz1EE1eQZjhV+Ef06NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJN4sIjpk2mZwdmniGvow70up/eswHwYDVR0j BBgwFoAUIzrybX2ubDWesDrVxvtLTgXd8j0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTVlYWM5Ny0zMWI1LTRmMzMtODJmNC01MjQxNDcwY2JiYmUvMC8yMzNBRjI2RDdE QUU2QzM1OUVCMDNBRDVDNkZCNEI0RTA1RERGMjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUwNURE RjIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU1ZWFjOTctMzFiNS00ZjMzLTgy ZjQtNTI0MTQ3MGNiYmJlLzAvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRC NEUwNURERjIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXokg6OmCO+u0q1f8AtuwWY0WMJz1P0ceoI 6YZLqauzkwHs2HtsUbafSGxOk7X0BSpgo98m3VeNm6siZJbjjpxjMSb6W1P9jFiW XbeYowmfAP/WXhKwgkO70fLmPZoIyg0Nem8F1KYWaiRjeHdR+N7fThYULxkK76AE r+ou3tnkUA8bx9TAYacWsnlNofDE2zGcPnxv7TKo5+ztLaAXtMtFBXMo2Tt4w91M JJrc69GsI+93qgRUS/Gkd4UH2XLPe/dRMW1tzDd9ptKMjv15Qx4yyf+VVfaIlgLa fobOne+4Cdj2SZUHtw0UDoxRsTnnihnzl2GJaoMQHwehM9DFHyA= -----END CERTIFICATE-----Generated at Sat Jul 26 02:45:58 2025 by rpki-client