$ rpki-client -vvf repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft File: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft (raw, json) Hash identifier: IQSupB6TLb+KtwBhDc1WB+RPMACSypMPl41HICnwMD4= Subject key identifier: 2C:22:DA:69:B7:4B:61:32:63:3F:74:97:87:1D:E7:39:64:86:B8:72 Authority key identifier: C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF Certificate issuer: /CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Certificate serial: 3E2D21CD58B699FE372E9AEACA7DBA7E140EFA7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft Manifest number: C7 Signing time: Tue 21 Oct 2025 17:51:11 +0000 Manifest this update: Tue 21 Oct 2025 17:46:11 +0000 Manifest next update: Fri 24 Oct 2025 18:14:11 +0000 Files and hashes: 1: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: hxLgZVEmgK6Q9Qorix7qtcxFffjQzl54opLxUmCvE+8=) 2: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl (hash: 3/Ir8C7oYysN6Gc5mS1+DOmdndTA/I8JCZEQT+N6Ua8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 18:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:2d:21:cd:58:b6:99:fe:37:2e:9a:ea:ca:7d:ba:7e:14:0e:fa:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Validity Not Before: Oct 21 17:46:11 2025 GMT Not After : Oct 24 18:14:11 2025 GMT Subject: CN=2C22DA69B74B6132633F7497871DE7396486B872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:98:a0:6d:54:1a:2b:a5:08:28:dc:b3:f5:b9: ab:b7:21:eb:7d:e9:95:75:30:de:0c:fe:5c:51:19: ed:43:6f:65:16:c7:5c:26:86:d7:84:8b:e0:fe:ba: 10:8a:09:eb:24:0e:df:15:b8:c7:be:0a:84:ad:93: 3e:ee:ee:1f:1d:f3:ff:a6:2a:c8:8d:4e:aa:60:40: e5:0c:07:7e:b5:1c:23:18:27:aa:50:eb:97:56:c2: 04:56:79:b8:1c:75:0d:a5:46:ec:1b:52:bc:71:4a: 0e:c3:93:fb:66:12:c9:66:0e:87:a3:9e:a0:8f:0d: d8:70:19:52:59:79:b2:2a:9f:b2:fa:63:66:4c:77: fc:8f:47:a0:a4:82:bc:8b:4d:67:49:42:2e:02:7f: 36:97:a4:cb:1e:66:39:03:46:67:99:f8:aa:42:79: a9:37:8c:a2:bc:91:66:e3:fe:44:21:73:b0:52:d4: 17:6f:b0:9f:6d:90:0c:1f:cd:25:66:2e:ea:42:1b: aa:d7:22:37:15:ae:ee:72:e6:c0:b9:f0:6e:00:bd: 52:0d:13:c0:a6:79:62:da:3b:9d:2b:ab:e0:68:27: b1:c2:76:58:dc:58:1b:2a:b7:71:63:ff:a4:81:7e: 2d:f7:11:67:88:3b:5e:0b:3d:67:cc:89:07:07:37: 07:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:22:DA:69:B7:4B:61:32:63:3F:74:97:87:1D:E7:39:64:86:B8:72 X509v3 Authority Key Identifier: keyid:C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:22:0a:3a:3b:5a:94:07:62:a1:a0:7b:e1:db:35:2b:28:f8: 08:e0:b5:e6:a4:1f:f6:e7:f6:c7:d3:fc:22:69:5a:8c:b6:19: 2a:0b:84:cc:d2:9d:07:c6:39:f9:c7:34:f7:25:6f:04:65:3b: 80:ba:18:cc:e3:16:5d:c1:90:33:b5:15:d3:dd:e3:31:b3:52: b9:62:be:df:95:ad:a2:1e:67:91:1b:1b:73:17:35:0e:e8:e8: 10:ab:98:96:f9:5a:70:d3:c8:9d:2b:c7:4c:7c:90:52:2d:21: 87:20:af:d5:84:e9:84:64:92:e3:85:40:b8:60:66:76:78:47: 81:0e:fb:28:bf:ac:49:a8:bf:35:5a:a0:9a:b5:9a:b9:ad:91: a2:59:6b:2b:51:de:93:c2:48:1b:7c:ae:bb:24:2b:0b:32:b9: ca:38:a9:41:aa:a0:9e:28:14:5e:36:08:52:c0:63:bf:e1:04: 5a:70:07:06:54:3e:74:70:1f:90:46:ac:8a:31:27:f4:e5:cb: 24:50:03:3d:44:3b:0f:3c:31:e7:ce:25:dd:54:64:ad:20:8b: 44:1a:8c:e9:e7:90:d9:1d:6a:36:f8:28:6e:d5:04:f2:52:50: fd:8f:47:c8:64:c9:ff:35:09:35:83:bf:08:8c:77:28:aa:b4: b8:32:4a:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPi0hzVi2mf43Lprqyn26fhQO+nswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIz RTNBNENCRjAeFw0yNTEwMjExNzQ2MTFaFw0yNTEwMjQxODE0MTFaMDMxMTAvBgNV BAMTKDJDMjJEQTY5Qjc0QjYxMzI2MzNGNzQ5Nzg3MURFNzM5NjQ4NkI4NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4mKBtVBorpQgo3LP1uau3Iet9 6ZV1MN4M/lxRGe1Db2UWx1wmhteEi+D+uhCKCeskDt8VuMe+CoStkz7u7h8d8/+m KsiNTqpgQOUMB361HCMYJ6pQ65dWwgRWebgcdQ2lRuwbUrxxSg7Dk/tmEslmDoej nqCPDdhwGVJZebIqn7L6Y2ZMd/yPR6CkgryLTWdJQi4CfzaXpMseZjkDRmeZ+KpC eak3jKK8kWbj/kQhc7BS1BdvsJ9tkAwfzSVmLupCG6rXIjcVru5y5sC58G4AvVIN E8CmeWLaO50rq+BoJ7HCdljcWBsqt3Fj/6SBfi33EWeIO14LPWfMiQcHNwcjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULCLaabdLYTJjP3SXhx3nOWSGuHIwHwYDVR0j BBgwFoAUwj+DLyfbiLi8WHZpMv2hmz46TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjc5ZWU5Yy1hZDJiLTRiZWQtODY0MS0yM2JmMmQzYjE2ZGIvMC9DMjNGODMyRjI3 REI4OEI4QkM1ODc2NjkzMkZEQTE5QjNFM0E0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIzRTNB NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI3OWVlOWMtYWQyYi00YmVkLTg2 NDEtMjNiZjJkM2IxNmRiLzAvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREEx OUIzRTNBNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0iCjo7WpQHYqGge+HbNSso+AjgteakH/bn 9sfT/CJpWoy2GSoLhMzSnQfGOfnHNPclbwRlO4C6GMzjFl3BkDO1FdPd4zGzUrli vt+VraIeZ5EbG3MXNQ7o6BCrmJb5WnDTyJ0rx0x8kFItIYcgr9WE6YRkkuOFQLhg ZnZ4R4EO+yi/rEmovzVaoJq1mrmtkaJZaytR3pPCSBt8rrskKwsyuco4qUGqoJ4o FF42CFLAY7/hBFpwBwZUPnRwH5BGrIoxJ/TlyyRQAz1EOw88MefOJd1UZK0gi0Qa jOnnkNkdajb4KG7VBPJSUP2PR8hkyf81CTWDvwiMdyiqtLgySso= -----END CERTIFICATE-----Generated at Tue Oct 21 23:19:12 2025 by rpki-client