$ rpki-client -vvf repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft File: 23F26F571E3865A06A13936555D8DAA27B433933.mft (raw, json) Hash identifier: Rj27W0zE9yf5LHe90O82jksLVoe8tERLPfWjJ74lFW0= Subject key identifier: 46:F9:AB:D1:49:80:35:BD:48:C7:54:48:DA:00:83:00:1E:A1:66:27 Authority key identifier: 23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 Certificate issuer: /CN=23F26F571E3865A06A13936555D8DAA27B433933 Certificate serial: 4F947E40A209EB4CE97DC78ED3F9967E274B0FB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft Manifest number: 01AA Signing time: Sun 20 Apr 2025 15:01:45 +0000 Manifest this update: Sun 20 Apr 2025 14:56:45 +0000 Manifest next update: Wed 23 Apr 2025 17:31:45 +0000 Files and hashes: 1: 3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa (hash: 1c7vF0j+180KK05qO1wx3UahSJfHdN6s0TH81QKT2fw=) 2: 3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa (hash: gpAMB3PFSY1kzkTxd7ynwvze1zWn3ViLJlVVmsFJv0w=) 3: 3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa (hash: ZkP1Z20iRwsdlzNftqM2do7k6nScKN7bPLY363Wwabc=) 4: 23F26F571E3865A06A13936555D8DAA27B433933.crl (hash: yw5Z1kGNZLENW1txPrSfFrUpi8T2C49Gw0kOqI5VLM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 17:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:94:7e:40:a2:09:eb:4c:e9:7d:c7:8e:d3:f9:96:7e:27:4b:0f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23F26F571E3865A06A13936555D8DAA27B433933 Validity Not Before: Apr 20 14:56:45 2025 GMT Not After : Apr 23 17:31:45 2025 GMT Subject: CN=46F9ABD1498035BD48C75448DA0083001EA16627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a9:b3:dd:91:02:2b:29:de:de:c0:69:24:1c: 2e:29:f8:99:e5:99:7e:27:dd:42:37:06:fa:64:5c: b1:9c:f1:6e:8a:16:d9:4c:52:c3:eb:64:2e:fb:4f: 34:ae:4c:c3:3d:45:c0:87:c6:fc:ac:81:7e:c5:cf: dd:1b:50:8b:c7:f6:70:19:ed:68:5d:3b:ec:51:63: 17:2c:ff:3c:d5:28:3b:25:c9:a6:38:59:f5:cb:3c: 73:de:14:d0:a7:0a:3b:5c:ad:96:74:48:0f:94:e3: a6:f2:e2:9f:ca:7d:96:f6:f7:55:2a:38:a0:7c:1b: b0:07:ca:b5:79:f8:9f:16:3a:2b:07:07:da:b8:b5: bb:45:aa:f2:ee:55:33:03:9e:3e:6e:a4:ef:2b:e0: bf:53:7d:56:5b:1f:ea:a3:ee:c4:e2:41:a4:af:d5: e7:3c:98:6d:84:0a:92:0a:71:51:04:f8:14:06:68: 93:81:4d:29:8c:47:38:54:b0:a2:f0:c3:2a:c1:ae: ca:c0:59:99:72:8b:fc:e4:12:4a:5c:fe:0e:2e:5f: 16:95:25:f3:ee:ee:79:25:27:28:f9:fc:78:de:10: 95:13:2f:73:f5:5d:e6:87:ae:de:ad:04:ee:38:4c: e5:df:af:53:2e:49:87:36:06:2c:8e:c5:2c:68:aa: 78:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F9:AB:D1:49:80:35:BD:48:C7:54:48:DA:00:83:00:1E:A1:66:27 X509v3 Authority Key Identifier: keyid:23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:c7:4c:21:fd:db:37:bd:fe:10:cc:65:45:97:2b:d9:1b:67: 5e:8e:74:37:d1:9c:af:b9:27:ca:e0:01:64:81:83:a5:56:d3: 0a:93:c1:70:5b:52:09:85:00:cb:a4:2c:14:c8:fb:f9:c6:14: 5a:f6:c5:02:f9:a7:dd:8a:46:31:bc:ad:6e:b4:e5:b0:28:23: 52:a7:05:ee:6f:ca:b1:19:a1:99:9e:0f:d0:f5:b0:02:b4:56: a9:f6:55:74:8f:8c:cf:f1:21:35:67:84:a7:8f:76:50:b4:ac: fc:99:b0:95:6c:34:1d:77:16:d5:8a:e2:fd:3b:d3:74:fc:ea: 8d:19:71:ce:f3:d6:95:84:a3:15:39:10:f1:6f:c6:49:7e:ed: 8b:65:f5:97:f2:9a:98:02:9f:f1:a4:82:8a:a7:61:a5:8e:88: 65:d2:01:c6:e7:4e:bc:70:df:d1:4e:d7:60:a5:06:24:b2:c6: 89:de:27:ab:18:3a:02:84:b4:e5:88:ac:87:24:ba:d9:c2:4f: 98:d2:0b:cd:ed:d6:9e:92:86:3a:47:5f:e7:f6:50:6c:52:51: b6:b9:ab:12:d7:ef:a3:33:a4:48:47:ad:a5:a0:f7:2f:2e:f0: 2f:28:3a:40:7e:c6:e6:9b:7e:e5:86:df:e1:f1:38:0d:54:c3: 7a:bd:ce:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT5R+QKIJ60zpfceO0/mWfidLD7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3 QjQzMzkzMzAeFw0yNTA0MjAxNDU2NDVaFw0yNTA0MjMxNzMxNDVaMDMxMTAvBgNV BAMTKDQ2RjlBQkQxNDk4MDM1QkQ0OEM3NTQ0OERBMDA4MzAwMUVBMTY2MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRqbPdkQIrKd7ewGkkHC4p+Jnl mX4n3UI3BvpkXLGc8W6KFtlMUsPrZC77TzSuTMM9RcCHxvysgX7Fz90bUIvH9nAZ 7WhdO+xRYxcs/zzVKDslyaY4WfXLPHPeFNCnCjtcrZZ0SA+U46by4p/KfZb291Uq OKB8G7AHyrV5+J8WOisHB9q4tbtFqvLuVTMDnj5upO8r4L9TfVZbH+qj7sTiQaSv 1ec8mG2ECpIKcVEE+BQGaJOBTSmMRzhUsKLwwyrBrsrAWZlyi/zkEkpc/g4uXxaV JfPu7nklJyj5/HjeEJUTL3P1XeaHrt6tBO44TOXfr1MuSYc2BiyOxSxoqniNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURvmr0UmANb1Ix1RI2gCDAB6hZicwHwYDVR0j BBgwFoAUI/JvVx44ZaBqE5NlVdjaontDOTMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVmY2JmMC02NmVjLTQ4ZDMtYjIyMS0wZjA5Njg2ZDU4MTgvMC8yM0YyNkY1NzFF Mzg2NUEwNkExMzkzNjU1NUQ4REFBMjdCNDMzOTMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3QjQz MzkzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlZmNiZjAtNjZlYy00OGQzLWIy MjEtMGYwOTY4NmQ1ODE4LzAvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERB QTI3QjQzMzkzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjHTCH92ze9/hDMZUWXK9kbZ16OdDfRnK+5 J8rgAWSBg6VW0wqTwXBbUgmFAMukLBTI+/nGFFr2xQL5p92KRjG8rW605bAoI1Kn Be5vyrEZoZmeD9D1sAK0Vqn2VXSPjM/xITVnhKePdlC0rPyZsJVsNB13FtWK4v07 03T86o0Zcc7z1pWEoxU5EPFvxkl+7Ytl9ZfympgCn/GkgoqnYaWOiGXSAcbnTrxw 39FO12ClBiSyxoneJ6sYOgKEtOWIrIckutnCT5jSC83t1p6ShjpHX+f2UGxSUba5 qxLX76MzpEhHraWg9y8u8C8oOkB+xuabfuWG3+HxOA1Uw3q9zv8= -----END CERTIFICATE-----Generated at Mon Apr 21 07:30:08 2025 by rpki-client