$ rpki-client -vvf repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft File: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft (raw, json) Hash identifier: Jz+EkKO5hSqRBvLyti0hoMLIvsmSuVPy9+0zx6OQaYA= Subject key identifier: 64:33:11:3D:F2:D0:32:99:1F:8C:F3:87:BB:EF:E7:17:41:22:87:BE Authority key identifier: 23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D Certificate issuer: /CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Certificate serial: 6CC0A52A4824AC322F4E24A0C9C23A8415672375 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft Manifest number: 04F4 Signing time: Wed 23 Jul 2025 16:51:47 +0000 Manifest this update: Wed 23 Jul 2025 16:46:47 +0000 Manifest next update: Sat 26 Jul 2025 19:02:47 +0000 Files and hashes: 1: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl (hash: ePVGW8sXSLPE5iJ03UT44xrBrIQ01oYHa4eHBYTtmR4=) 2: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: bVRLDmnlkDr+Er81GecVOu1gTofkGixwnSL4beQ/iNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 19:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c0:a5:2a:48:24:ac:32:2f:4e:24:a0:c9:c2:3a:84:15:67:23:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Validity Not Before: Jul 23 16:46:47 2025 GMT Not After : Jul 26 19:02:47 2025 GMT Subject: CN=6433113DF2D032991F8CF387BBEFE717412287BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:97:0e:e5:c7:17:8d:da:cb:f1:82:91:8d:77: f5:38:8f:75:a6:dc:0d:b5:24:6f:39:1b:83:a9:58: 55:49:0a:aa:15:b9:d8:98:04:5d:16:03:88:0b:a6: 78:ed:51:12:03:3a:1d:60:9b:73:e2:11:a9:fb:a5: 4b:6d:f6:96:ea:d2:a3:cf:3e:ea:98:64:bd:98:c8: 62:57:2e:6f:d1:c8:44:f3:f9:25:b3:68:bd:48:7e: 90:16:d0:77:be:ab:30:90:9b:13:72:f2:b1:56:20: 02:4e:4b:2b:46:40:a0:73:11:2d:4f:ef:c5:44:6f: 6a:4d:76:00:12:d8:e0:53:ea:02:ea:66:3e:6d:cb: 6e:ce:c2:44:18:60:12:5a:c9:51:20:38:b7:5f:01: 85:a8:e8:ee:be:60:87:19:67:78:a0:24:bd:10:00: c5:8b:8f:9e:15:e6:c3:65:65:2a:be:89:66:72:7e: 43:46:0c:f1:4a:a2:fa:dd:6f:15:f8:96:da:70:9c: 4f:f7:72:34:7e:6b:3d:83:a9:1e:13:97:4d:05:75: 73:e3:d0:0b:fd:5e:c3:ca:38:ac:2b:4f:01:b9:c0: 49:dc:da:ca:cb:74:fd:05:0e:54:c8:8d:ee:01:e8: 32:f2:a1:c9:52:c6:7b:18:e8:5b:a0:c6:5e:29:c1: 19:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:33:11:3D:F2:D0:32:99:1F:8C:F3:87:BB:EF:E7:17:41:22:87:BE X509v3 Authority Key Identifier: keyid:23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:ad:c1:71:10:1e:bf:bc:2f:70:cc:0f:04:18:06:2e:8c:fd: 63:23:63:83:e3:4b:75:94:2f:6f:86:a8:4e:24:17:91:ff:60: a0:75:6d:13:cb:35:8e:29:50:e3:68:5a:1c:66:97:34:8b:44: 2a:5a:77:42:98:d4:8f:86:19:b4:71:85:0d:e8:ba:40:af:e6: d4:54:8d:30:d4:ca:c5:be:ea:ac:e3:28:f0:df:dc:c3:0c:68: 9b:76:89:b8:7e:eb:77:c2:b7:3b:1d:2d:c2:c5:c3:09:5b:f4: df:9f:64:54:84:63:22:09:42:83:64:71:21:a0:b0:a9:0b:b7: af:a8:1d:73:0d:24:2d:08:0b:11:81:8b:2e:e4:cf:69:0f:7e: 07:2d:63:cf:88:09:28:fb:83:8f:6d:4f:7e:cf:68:bb:73:25: 7d:5b:5e:80:82:32:6e:52:b5:c4:c3:49:66:d4:a4:04:43:80: b4:3c:a0:88:30:7c:34:ce:cf:0d:63:98:80:10:77:9c:29:37: 45:ea:44:7c:0b:46:f9:3c:49:3c:ef:43:f1:20:a1:1d:f1:24: 1c:70:7f:59:c3:45:5b:de:2e:fe:f2:c8:46:46:e6:94:17:db: 77:87:81:62:d7:13:a3:6c:f5:37:a5:02:05:50:72:c8:5a:ed: 79:f3:a9:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbMClKkgkrDIvTiSgycI6hBVnI3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUw NURERjIzRDAeFw0yNTA3MjMxNjQ2NDdaFw0yNTA3MjYxOTAyNDdaMDMxMTAvBgNV BAMTKDY0MzMxMTNERjJEMDMyOTkxRjhDRjM4N0JCRUZFNzE3NDEyMjg3QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSlw7lxxeN2svxgpGNd/U4j3Wm 3A21JG85G4OpWFVJCqoVudiYBF0WA4gLpnjtURIDOh1gm3PiEan7pUtt9pbq0qPP PuqYZL2YyGJXLm/RyETz+SWzaL1IfpAW0He+qzCQmxNy8rFWIAJOSytGQKBzES1P 78VEb2pNdgAS2OBT6gLqZj5ty27OwkQYYBJayVEgOLdfAYWo6O6+YIcZZ3igJL0Q AMWLj54V5sNlZSq+iWZyfkNGDPFKovrdbxX4ltpwnE/3cjR+az2DqR4Tl00FdXPj 0Av9XsPKOKwrTwG5wEnc2srLdP0FDlTIje4B6DLyoclSxnsY6Fugxl4pwRm5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZDMRPfLQMpkfjPOHu+/nF0Eih74wHwYDVR0j BBgwFoAUIzrybX2ubDWesDrVxvtLTgXd8j0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTVlYWM5Ny0zMWI1LTRmMzMtODJmNC01MjQxNDcwY2JiYmUvMC8yMzNBRjI2RDdE QUU2QzM1OUVCMDNBRDVDNkZCNEI0RTA1RERGMjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUwNURE RjIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU1ZWFjOTctMzFiNS00ZjMzLTgy ZjQtNTI0MTQ3MGNiYmJlLzAvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRC NEUwNURERjIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJitwXEQHr+8L3DMDwQYBi6M/WMjY4PjS3WU L2+GqE4kF5H/YKB1bRPLNY4pUONoWhxmlzSLRCpad0KY1I+GGbRxhQ3oukCv5tRU jTDUysW+6qzjKPDf3MMMaJt2ibh+63fCtzsdLcLFwwlb9N+fZFSEYyIJQoNkcSGg sKkLt6+oHXMNJC0ICxGBiy7kz2kPfgctY8+ICSj7g49tT37PaLtzJX1bXoCCMm5S tcTDSWbUpARDgLQ8oIgwfDTOzw1jmIAQd5wpN0XqRHwLRvk8STzvQ/EgoR3xJBxw f1nDRVveLv7yyEZG5pQX23eHgWLXE6Ns9TelAgVQcsha7XnzqZY= -----END CERTIFICATE-----Generated at Thu Jul 24 08:15:07 2025 by rpki-client