$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft File: 232967D03C1169374A898D1C8991F1ABE7744870.mft (raw, json) Hash identifier: eOmxGgE+hI9U5CaIyeRsezq2PJARTzZL26+UB5apd4s= Subject key identifier: D4:A2:F0:5B:05:DF:8B:ED:8E:38:0E:1B:35:36:58:4C:FB:92:13:C8 Authority key identifier: 23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70 Certificate issuer: /CN=232967D03C1169374A898D1C8991F1ABE7744870 Certificate serial: 12DAE1206E6B31C8C58D83533AA707696DFF8C35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft Manifest number: 0282 Signing time: Mon 21 Jul 2025 23:41:32 +0000 Manifest this update: Mon 21 Jul 2025 23:36:32 +0000 Manifest next update: Fri 25 Jul 2025 00:03:32 +0000 Files and hashes: 1: 3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa (hash: 8k4I9alM31pB+adpaudK4H7ty0suQjHEpsCjRwS0mmE=) 2: 232967D03C1169374A898D1C8991F1ABE7744870.crl (hash: bD2aO2CK7ovMGn53AP3/wvk8MdwIJqj7O9afjLTy01Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 00:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:da:e1:20:6e:6b:31:c8:c5:8d:83:53:3a:a7:07:69:6d:ff:8c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=232967D03C1169374A898D1C8991F1ABE7744870 Validity Not Before: Jul 21 23:36:32 2025 GMT Not After : Jul 25 00:03:32 2025 GMT Subject: CN=D4A2F05B05DF8BED8E380E1B3536584CFB9213C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:54:aa:ce:85:ac:f5:8e:4f:47:6e:33:4b: 2d:c3:4e:74:08:fc:10:9c:b0:5b:43:da:a3:93:5a: ba:42:93:1e:7b:61:41:c1:41:39:4c:89:2b:a5:d1: ad:e0:b8:0c:76:8c:2c:7a:0c:42:98:f3:b6:12:d8: 28:dc:9e:e3:a9:4a:30:df:80:d8:b1:54:45:0a:52: 65:ad:36:47:12:23:73:df:88:7f:d9:1e:f6:46:8b: 0e:0e:56:b0:f6:e6:12:08:fc:f0:19:ab:cd:36:dc: 11:94:a8:74:56:9a:b5:8b:37:7a:24:09:ab:21:37: df:9a:8d:f2:61:69:f4:7f:11:50:c1:b7:6d:bc:8f: 29:fb:95:8c:51:af:6f:5b:cf:d6:49:8a:f8:23:38: 67:69:5a:d2:95:73:ad:ff:ba:fe:35:e7:cc:f1:c0: 97:84:11:e2:00:b8:c0:34:a0:12:93:1d:ab:bd:c5: 0f:9b:7c:2d:26:0e:5d:b2:2d:8b:ab:54:4c:36:76: 91:5b:ed:4d:14:c4:3c:95:dd:e5:1b:44:68:46:18: 6d:1f:5a:40:10:13:0e:3f:1a:f4:4c:52:b3:c1:20: c2:72:ed:4f:c7:72:e8:7a:a9:c5:2a:05:40:73:b2: d5:73:8d:7e:d0:07:28:af:07:61:50:12:10:d3:68: d1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A2:F0:5B:05:DF:8B:ED:8E:38:0E:1B:35:36:58:4C:FB:92:13:C8 X509v3 Authority Key Identifier: keyid:23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:e2:f3:3e:5e:0b:bd:f0:8c:e5:2a:85:c4:5a:53:67:c0:b9: e1:17:51:40:41:6b:5e:77:06:d0:71:2d:28:cc:38:7c:0c:78: 61:22:85:90:8f:a6:f7:32:08:39:c2:dd:d4:f2:4b:94:a0:b2: 1d:b1:66:38:c7:50:df:57:1d:56:51:06:12:29:65:37:6d:66: a4:de:32:66:ef:24:81:fc:70:c1:cf:e8:5b:f9:23:d5:63:45: 67:63:e0:f2:97:c2:fc:3c:75:75:48:13:db:2f:47:0e:1d:af: 12:72:95:82:bd:7e:7e:19:27:bc:6a:9c:72:4e:d3:f1:18:bb: 61:13:99:a3:8e:87:3e:14:c1:ca:ab:5c:8d:00:36:0e:20:7b: bb:4c:ae:3f:52:4a:3e:b6:b7:2a:d2:90:4a:76:6a:ee:47:2d: b9:90:77:d4:e0:9d:dc:3b:3b:1e:a6:f4:ac:7d:97:65:39:9c: 9c:fc:ed:4a:c3:a7:5a:e3:3b:29:86:f8:2b:2b:31:16:ec:d8: 63:5d:40:40:95:a0:1b:c8:00:0e:59:9b:48:7c:a6:d0:57:03: 41:d3:c8:6d:de:4f:74:8a:4a:58:1f:95:b2:fc:76:26:f3:74: 59:de:8d:c1:1c:b4:a1:02:35:5c:40:e1:ca:7f:78:04:81:b7: e4:f0:8a:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEtrhIG5rMcjFjYNTOqcHaW3/jDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMyOTY3RDAzQzExNjkzNzRBODk4RDFDODk5MUYxQUJF Nzc0NDg3MDAeFw0yNTA3MjEyMzM2MzJaFw0yNTA3MjUwMDAzMzJaMDMxMTAvBgNV BAMTKEQ0QTJGMDVCMDVERjhCRUQ4RTM4MEUxQjM1MzY1ODRDRkI5MjEzQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8i1SqzoWs9Y5PR24zSy3DTnQI /BCcsFtD2qOTWrpCkx57YUHBQTlMiSul0a3guAx2jCx6DEKY87YS2CjcnuOpSjDf gNixVEUKUmWtNkcSI3PfiH/ZHvZGiw4OVrD25hII/PAZq8023BGUqHRWmrWLN3ok CashN9+ajfJhafR/EVDBt228jyn7lYxRr29bz9ZJivgjOGdpWtKVc63/uv4158zx wJeEEeIAuMA0oBKTHau9xQ+bfC0mDl2yLYurVEw2dpFb7U0UxDyV3eUbRGhGGG0f WkAQEw4/GvRMUrPBIMJy7U/Hcuh6qcUqBUBzstVzjX7QByivB2FQEhDTaNHDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1KLwWwXfi+2OOA4bNTZYTPuSE8gwHwYDVR0j BBgwFoAUIyln0DwRaTdKiY0ciZHxq+d0SHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUzZTk4MS1iZjM5LTQyZTAtYTJmNi1jZjg3Yzc1N2Y4MjcvMC8yMzI5NjdEMDND MTE2OTM3NEE4OThEMUM4OTkxRjFBQkU3NzQ0ODcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMyOTY3RDAzQzExNjkzNzRBODk4RDFDODk5MUYxQUJFNzc0 NDg3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlM2U5ODEtYmYzOS00MmUwLWEy ZjYtY2Y4N2M3NTdmODI3LzAvMjMyOTY3RDAzQzExNjkzNzRBODk4RDFDODk5MUYx QUJFNzc0NDg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXi8z5eC73wjOUqhcRaU2fAueEXUUBBa153 BtBxLSjMOHwMeGEihZCPpvcyCDnC3dTyS5Sgsh2xZjjHUN9XHVZRBhIpZTdtZqTe MmbvJIH8cMHP6Fv5I9VjRWdj4PKXwvw8dXVIE9svRw4drxJylYK9fn4ZJ7xqnHJO 0/EYu2ETmaOOhz4UwcqrXI0ANg4ge7tMrj9SSj62tyrSkEp2au5HLbmQd9Tgndw7 Ox6m9Kx9l2U5nJz87UrDp1rjOymG+CsrMRbs2GNdQECVoBvIAA5Zm0h8ptBXA0HT yG3eT3SKSlgflbL8dibzdFnejcEctKECNVxA4cp/eASBt+TwivA= -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:09 2025 by rpki-client