$ rpki-client -vvf repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft File: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft (raw, json) Hash identifier: /c0jA6lIpMQ6cCARXFLiWhiB3dqbBHDn5s01pSNSsEA= Subject key identifier: FE:6B:7B:60:56:5D:CE:6B:0F:A3:A4:FB:F4:5F:1C:15:7A:B7:10:E6 Authority key identifier: C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF Certificate issuer: /CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Certificate serial: 054734E19C8B8533E4A7E01AD61EFEC32B53840F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft Manifest number: B0 Signing time: Sat 30 Aug 2025 22:21:12 +0000 Manifest this update: Sat 30 Aug 2025 22:16:12 +0000 Manifest next update: Wed 03 Sep 2025 00:17:12 +0000 Files and hashes: 1: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: hxLgZVEmgK6Q9Qorix7qtcxFffjQzl54opLxUmCvE+8=) 2: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl (hash: q5vpp6ceZ8UsZfOseZhoxSoFwxzviLWHm0aQAzvC1F8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:47:34:e1:9c:8b:85:33:e4:a7:e0:1a:d6:1e:fe:c3:2b:53:84:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Validity Not Before: Aug 30 22:16:12 2025 GMT Not After : Sep 3 00:17:12 2025 GMT Subject: CN=FE6B7B60565DCE6B0FA3A4FBF45F1C157AB710E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7d:07:0f:b2:4b:c1:74:ae:91:51:18:a5:3a: 24:bc:f7:97:2d:7c:bc:ed:d7:97:4b:4b:3f:14:04: fe:92:ac:f7:8f:af:01:f6:63:0a:bd:07:0d:17:35: 41:b1:fb:cb:08:71:65:a2:d5:4e:0e:dc:94:61:bb: e7:5d:08:3b:66:08:51:6b:8b:12:e7:8d:a1:4e:1b: 2a:60:8c:c7:6f:80:69:72:43:85:37:1c:2b:88:f7: 7a:00:ff:44:f8:17:b2:10:17:df:64:6c:01:e7:bf: 3c:eb:f9:5c:a0:79:f9:66:d6:f8:22:4c:bb:c3:90: 70:ac:7f:81:23:f9:ff:04:39:10:08:a1:52:fb:86: 9b:1c:4a:60:0a:cd:4b:95:4c:05:e3:ef:ad:27:6b: c0:79:b9:bc:1b:6c:9d:30:1f:a3:c4:d0:20:14:fa: fa:cd:87:80:7d:16:1e:7d:7b:43:b4:44:a9:44:07: 6f:eb:28:7d:7e:5a:61:99:73:ea:1a:34:d1:df:be: 89:af:d0:f2:27:f9:79:fa:3b:f7:85:de:08:75:75: 70:bc:bf:86:b4:06:5d:92:34:25:92:5a:67:7e:17: ef:2b:18:f5:bf:d8:e2:5b:72:91:63:b2:7f:ee:3a: 51:8b:fa:3e:8f:18:2e:00:15:8a:7e:9e:e8:7f:03: de:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6B:7B:60:56:5D:CE:6B:0F:A3:A4:FB:F4:5F:1C:15:7A:B7:10:E6 X509v3 Authority Key Identifier: keyid:C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:db:c0:5b:a8:7d:4a:1e:d7:3c:f9:ce:4e:7c:a7:5d:c8:b7: d1:51:d0:02:4e:97:88:59:67:53:f1:d9:74:8c:cc:6e:e7:d5: 4f:e4:27:b6:6b:cc:55:36:09:c7:94:ce:cd:0d:01:d0:c1:78: fe:d4:83:4e:1b:bb:f3:8e:f9:33:38:22:90:42:c9:a6:61:e6: f5:fa:e1:74:93:4e:85:d0:c3:cf:9c:59:0b:c3:18:38:59:ac: bb:6e:c7:03:89:15:ba:e9:ea:3c:73:77:f8:a3:47:57:aa:82: 38:e5:9e:29:46:da:63:96:0c:e7:ab:6d:e4:7f:35:ee:a3:ed: 88:f7:ee:01:bd:01:0c:7c:cc:22:fd:c0:16:20:e9:50:a6:da: 56:0a:25:ba:71:e8:4d:c9:3a:47:35:be:be:67:57:76:28:fd: 70:4a:05:29:45:82:a3:7d:c5:65:b1:a5:24:aa:e7:b0:2e:69: 1c:ed:87:ad:a2:37:8c:5b:d6:26:9d:ee:eb:4e:89:9f:af:fd: dd:f0:a9:9b:5a:f9:38:1d:84:4e:4d:4f:7a:3c:41:2d:09:c5: b9:07:c4:54:2a:b1:46:1e:44:78:08:1c:11:ed:88:80:2f:1e: 0b:98:5d:76:bd:47:c6:ba:b0:ed:d5:48:ce:04:35:ab:9c:e0: f6:72:36:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBUc04ZyLhTPkp+Aa1h7+wytThA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIz RTNBNENCRjAeFw0yNTA4MzAyMjE2MTJaFw0yNTA5MDMwMDE3MTJaMDMxMTAvBgNV BAMTKEZFNkI3QjYwNTY1RENFNkIwRkEzQTRGQkY0NUYxQzE1N0FCNzEwRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCufQcPskvBdK6RURilOiS895ct fLzt15dLSz8UBP6SrPePrwH2Ywq9Bw0XNUGx+8sIcWWi1U4O3JRhu+ddCDtmCFFr ixLnjaFOGypgjMdvgGlyQ4U3HCuI93oA/0T4F7IQF99kbAHnvzzr+Vygeflm1vgi TLvDkHCsf4Ej+f8EORAIoVL7hpscSmAKzUuVTAXj760na8B5ubwbbJ0wH6PE0CAU +vrNh4B9Fh59e0O0RKlEB2/rKH1+WmGZc+oaNNHfvomv0PIn+Xn6O/eF3gh1dXC8 v4a0Bl2SNCWSWmd+F+8rGPW/2OJbcpFjsn/uOlGL+j6PGC4AFYp+nuh/A97NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/mt7YFZdzmsPo6T79F8cFXq3EOYwHwYDVR0j BBgwFoAUwj+DLyfbiLi8WHZpMv2hmz46TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjc5ZWU5Yy1hZDJiLTRiZWQtODY0MS0yM2JmMmQzYjE2ZGIvMC9DMjNGODMyRjI3 REI4OEI4QkM1ODc2NjkzMkZEQTE5QjNFM0E0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIzRTNB NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI3OWVlOWMtYWQyYi00YmVkLTg2 NDEtMjNiZjJkM2IxNmRiLzAvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREEx OUIzRTNBNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrbwFuofUoe1zz5zk58p13It9FR0AJOl4hZ Z1Px2XSMzG7n1U/kJ7ZrzFU2CceUzs0NAdDBeP7Ug04bu/OO+TM4IpBCyaZh5vX6 4XSTToXQw8+cWQvDGDhZrLtuxwOJFbrp6jxzd/ijR1eqgjjlnilG2mOWDOerbeR/ Ne6j7Yj37gG9AQx8zCL9wBYg6VCm2lYKJbpx6E3JOkc1vr5nV3Yo/XBKBSlFgqN9 xWWxpSSq57AuaRzth62iN4xb1iad7utOiZ+v/d3wqZta+TgdhE5NT3o8QS0JxbkH xFQqsUYeRHgIHBHtiIAvHguYXXa9R8a6sO3VSM4ENauc4PZyNu0= -----END CERTIFICATE-----Generated at Mon Sep 1 00:06:25 2025 by rpki-client