$ rpki-client -vvf repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft File: 23093B0E58201D339EAA3983654297729EB3D7FD.mft (raw, json) Hash identifier: AAn4Zjmwn3ZZumbcKnVYITiJ0Rfi2VM3pBPswmp4XzQ= Subject key identifier: 63:82:3F:C4:B8:05:64:56:D9:17:39:B4:92:D1:22:FB:84:0D:01:3D Authority key identifier: 23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD Certificate issuer: /CN=23093B0E58201D339EAA3983654297729EB3D7FD Certificate serial: 367CD6CA67D2A51AF5708ED815D7C5FBBE881059 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft Manifest number: 024F Signing time: Sun 20 Jul 2025 01:52:18 +0000 Manifest this update: Sun 20 Jul 2025 01:47:18 +0000 Manifest next update: Wed 23 Jul 2025 13:39:18 +0000 Files and hashes: 1: 3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa (hash: OQRs+DvdssfbxLcADcws53iRv33QqeJjAKKK3zO8V5k=) 2: 23093B0E58201D339EAA3983654297729EB3D7FD.crl (hash: t3jCFia1kpiHsD45ZJ+Xf+fQnBLZUUoA6HtjqjDAf2I=) 3: 3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa (hash: 36BE9n6WV91maxO5GlAf2fK0lfyiWZQfuF7lsrGEJUk=) 4: 3130332e3136362e3231322e302f32342d3234203d3e20313431393537.roa (hash: AwdKe4Y6MEUfnqDScIzMXI+Jh2SUVi5+YUpo0QrZJkc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 13:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:7c:d6:ca:67:d2:a5:1a:f5:70:8e:d8:15:d7:c5:fb:be:88:10:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23093B0E58201D339EAA3983654297729EB3D7FD Validity Not Before: Jul 20 01:47:18 2025 GMT Not After : Jul 23 13:39:18 2025 GMT Subject: CN=63823FC4B8056456D91739B492D122FB840D013D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:00:6f:63:96:3f:de:c6:31:8f:e5:5e:d2:b2: 20:9c:da:82:d1:9e:08:b9:2a:66:15:81:1e:ea:53: f0:25:74:df:82:5a:0a:0e:c8:4a:71:89:42:27:61: 22:70:3c:56:b0:6e:40:c7:ec:3a:1c:94:70:48:d4: 50:85:a1:6b:30:48:cd:a1:24:48:3a:73:91:5a:b6: 92:99:f9:7d:25:92:ab:53:d2:f2:93:4e:27:12:d2: ec:8a:cb:09:fa:e9:81:88:1e:92:6c:e3:0b:a3:48: 92:cd:cb:de:c0:92:83:6d:c5:37:c1:f8:94:5e:f8: cb:3b:75:ec:96:c2:db:e4:f5:f5:4a:18:c4:f1:12: ae:96:b7:be:5c:58:6b:3d:03:b9:80:ee:12:d4:c7: 90:b2:b6:b1:8b:f1:34:24:42:36:71:1e:d7:9d:43: dd:ae:39:6a:53:fb:71:ba:ce:11:57:55:80:ef:55: 78:7a:3e:a9:cc:42:21:c6:07:f8:92:a6:e4:2a:5d: e9:01:74:0d:8d:89:f6:3d:ba:4f:4c:3f:41:5b:60: fd:e0:d1:57:b1:88:13:8a:e7:76:51:ba:df:c9:25: 3f:a1:1a:e4:fb:9e:81:52:70:19:5d:65:eb:a7:57: 9d:b9:ac:c7:c2:3f:3f:58:71:ba:5a:b5:95:f4:fd: 63:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:82:3F:C4:B8:05:64:56:D9:17:39:B4:92:D1:22:FB:84:0D:01:3D X509v3 Authority Key Identifier: keyid:23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:56:d3:80:e7:5f:c5:11:59:5d:6f:29:9c:af:2b:f8:67:e6: 56:56:35:0e:48:c6:20:d7:73:4c:8e:ce:cb:54:1a:bf:ba:ea: 2e:e9:12:ed:7e:96:94:11:eb:8a:d1:75:8c:18:cc:f3:0d:68: 0e:42:4f:64:33:2f:d5:70:36:81:ca:a5:c0:9d:41:30:38:5e: 17:8f:eb:4f:9e:8b:3b:ea:c2:39:df:da:a8:fe:46:5a:29:91: 19:53:6a:6e:ea:38:97:32:ee:2f:fd:86:e1:eb:20:7c:d3:f2: 3a:3b:90:0c:d2:71:ba:ce:f8:03:b9:94:72:c9:fa:9d:ad:98: fb:05:c1:c5:72:3e:f2:2d:e5:04:b2:fd:70:a9:58:66:35:ad: 1a:8f:e5:24:2b:53:12:fe:a8:e5:10:31:d7:0b:53:ff:36:69: 08:90:45:48:da:a5:f3:be:e9:4e:99:29:31:60:0b:71:a1:a1: 43:38:f0:5d:56:25:58:4c:53:cd:15:06:e8:b5:6d:65:b9:35: 9f:a2:c6:e0:fc:7e:5b:6e:7a:c8:59:16:53:fb:fe:0c:83:a6: 2a:28:fb:91:fb:5e:9d:47:a4:24:05:6a:20:09:a8:8f:a3:db: 27:f3:bd:86:68:3e:50:d5:57:7b:a2:1c:cb:a6:5f:a3:a4:f0: 05:20:28:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNnzWymfSpRr1cI7YFdfF+76IEFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5 RUIzRDdGRDAeFw0yNTA3MjAwMTQ3MThaFw0yNTA3MjMxMzM5MThaMDMxMTAvBgNV BAMTKDYzODIzRkM0QjgwNTY0NTZEOTE3MzlCNDkyRDEyMkZCODQwRDAxM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtAG9jlj/exjGP5V7SsiCc2oLR ngi5KmYVgR7qU/AldN+CWgoOyEpxiUInYSJwPFawbkDH7DoclHBI1FCFoWswSM2h JEg6c5FatpKZ+X0lkqtT0vKTTicS0uyKywn66YGIHpJs4wujSJLNy97AkoNtxTfB +JRe+Ms7deyWwtvk9fVKGMTxEq6Wt75cWGs9A7mA7hLUx5CytrGL8TQkQjZxHted Q92uOWpT+3G6zhFXVYDvVXh6PqnMQiHGB/iSpuQqXekBdA2NifY9uk9MP0FbYP3g 0VexiBOK53ZRut/JJT+hGuT7noFScBldZeunV525rMfCPz9YcbpatZX0/WN9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY4I/xLgFZFbZFzm0ktEi+4QNAT0wHwYDVR0j BBgwFoAUIwk7DlggHTOeqjmDZUKXcp6z1/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTk1YjdkNC0zYWFiLTRiODMtOTRiMi1jNDI2N2IyYWUwYTAvMC8yMzA5M0IwRTU4 MjAxRDMzOUVBQTM5ODM2NTQyOTc3MjlFQjNEN0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5RUIz RDdGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU5NWI3ZDQtM2FhYi00YjgzLTk0 YjItYzQyNjdiMmFlMGEwLzAvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3 NzI5RUIzRDdGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtW04DnX8URWV1vKZyvK/hn5lZWNQ5IxiDX c0yOzstUGr+66i7pEu1+lpQR64rRdYwYzPMNaA5CT2QzL9VwNoHKpcCdQTA4XheP 60+eizvqwjnf2qj+RlopkRlTam7qOJcy7i/9huHrIHzT8jo7kAzScbrO+AO5lHLJ +p2tmPsFwcVyPvIt5QSy/XCpWGY1rRqP5SQrUxL+qOUQMdcLU/82aQiQRUjapfO+ 6U6ZKTFgC3GhoUM48F1WJVhMU80VBui1bWW5NZ+ixuD8fltueshZFlP7/gyDpioo +5H7Xp1HpCQFaiAJqI+j2yfzvYZoPlDVV3uiHMumX6Ok8AUgKH0= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:56 2025 by rpki-client