$ rpki-client -vvf repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft File: 23F26F571E3865A06A13936555D8DAA27B433933.mft (raw, json) Hash identifier: 6rELceq9ooQocIwxrebMqwu37u6Ime51BKMAwTnd69U= Subject key identifier: 7E:EC:64:96:03:39:61:ED:07:46:EE:91:63:FE:66:C4:7D:A4:7D:6F Authority key identifier: 23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 Certificate issuer: /CN=23F26F571E3865A06A13936555D8DAA27B433933 Certificate serial: 73B01921ECE98952F813DEAD494C2E57D307AC62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft Manifest number: 01E8 Signing time: Thu 04 Sep 2025 00:41:46 +0000 Manifest this update: Thu 04 Sep 2025 00:36:46 +0000 Manifest next update: Sun 07 Sep 2025 12:08:46 +0000 Files and hashes: 1: 3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa (hash: lkFPSA/0P6F0cE2k+qs5Hdu6hwn+gvFK2pZuPkqHwpw=) 2: 3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa (hash: 1TF1q7w4Zi+aLzgAuBXcx7Cio1arNovo47+qmMckVGw=) 3: 23F26F571E3865A06A13936555D8DAA27B433933.crl (hash: xJJaK1rEopfn7TvCue7IbIwr/S2VGmJXwjVtks/eY9E=) 4: 3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa (hash: SP7Vczz+6iJdkBg+Pm02fK5fUh9ipxxjJbwoliQlUe0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 12:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:b0:19:21:ec:e9:89:52:f8:13:de:ad:49:4c:2e:57:d3:07:ac:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23F26F571E3865A06A13936555D8DAA27B433933 Validity Not Before: Sep 4 00:36:46 2025 GMT Not After : Sep 7 12:08:46 2025 GMT Subject: CN=7EEC6496033961ED0746EE9163FE66C47DA47D6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ec:ee:bb:a4:07:9b:35:bd:4e:a9:51:43:1c: bf:ca:51:92:fd:b8:69:1d:16:46:4b:80:17:da:81: 32:bb:26:d5:bc:27:4c:f8:c6:80:b2:44:2d:a1:3d: b8:76:19:84:45:0d:34:20:9b:34:07:e9:db:3d:f2: fe:f1:8e:f5:0e:e2:2b:d5:57:9e:86:b6:ee:ad:8f: 98:08:3d:87:e0:25:51:be:9f:e4:b1:e0:95:f8:5f: 3c:47:57:74:f7:5e:0d:00:c4:9f:92:fb:3d:27:b9: ee:0e:12:2d:24:28:d5:3a:93:37:6b:9f:66:65:c4: 31:de:d5:2c:a6:f0:27:a2:5c:0d:4b:3d:39:e6:cd: ba:ae:cb:1e:a2:fb:14:98:f2:24:db:55:27:3f:40: f0:38:5e:a5:f2:4e:7f:77:e8:f5:98:10:81:57:04: 4f:47:bc:b1:00:20:23:9d:8c:5b:98:c1:04:df:26: 23:05:ac:5f:50:62:f1:9b:e6:d7:da:28:56:04:2d: bf:30:78:b9:93:68:8c:07:5b:4c:9c:39:3b:af:13: 9c:60:9d:14:d2:5a:de:59:49:6c:94:20:b9:6f:cd: 33:63:cd:c5:b3:18:9d:15:03:84:b5:61:7c:03:3f: 9f:53:b0:6f:02:0e:ae:0e:59:f9:33:f8:ad:93:bd: 8b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EC:64:96:03:39:61:ED:07:46:EE:91:63:FE:66:C4:7D:A4:7D:6F X509v3 Authority Key Identifier: keyid:23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:33:34:d2:f9:eb:bf:07:22:ea:37:52:5f:b2:32:2b:38:24: ec:42:7b:ed:88:22:46:97:e6:27:7f:fd:7e:f8:a1:93:9a:f3: 48:15:b3:36:43:b6:fc:cb:45:ac:00:ef:03:55:1f:14:77:62: 77:63:a8:71:19:25:96:94:cc:ab:27:23:3f:70:fe:a2:25:bd: 13:df:b0:32:73:1d:9d:a2:e0:72:85:50:d8:c4:21:91:df:26: ed:f4:49:17:aa:d3:4d:4e:59:88:3d:40:e2:d2:70:6b:ce:f5: eb:c8:ff:37:71:9a:f0:9e:34:df:9d:4e:71:3f:2e:f7:2b:94: ec:49:10:0b:ec:8a:57:f5:31:fc:bc:2e:80:f6:86:ea:58:03: 4f:2a:dd:df:ec:d1:5a:78:ab:d8:c2:16:0d:90:fb:62:5f:05: ab:5c:b2:03:83:0d:aa:fa:5b:80:a5:a1:10:db:7e:cd:9b:fc: 81:a9:91:db:24:ca:ac:1e:a7:1f:e3:49:24:b2:4c:0a:a8:3e: 6a:2e:15:28:c5:ef:a2:5a:82:6b:a3:78:40:5b:56:0a:87:fd: 41:de:2c:25:e1:cd:1c:31:51:16:35:ce:8e:47:49:e5:72:32: 11:e7:5e:f8:27:bd:b4:be:45:f4:14:93:e8:e3:d5:2d:e7:da: 0f:51:43:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc7AZIezpiVL4E96tSUwuV9MHrGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3 QjQzMzkzMzAeFw0yNTA5MDQwMDM2NDZaFw0yNTA5MDcxMjA4NDZaMDMxMTAvBgNV BAMTKDdFRUM2NDk2MDMzOTYxRUQwNzQ2RUU5MTYzRkU2NkM0N0RBNDdENkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO7O67pAebNb1OqVFDHL/KUZL9 uGkdFkZLgBfagTK7JtW8J0z4xoCyRC2hPbh2GYRFDTQgmzQH6ds98v7xjvUO4ivV V56Gtu6tj5gIPYfgJVG+n+Sx4JX4XzxHV3T3Xg0AxJ+S+z0nue4OEi0kKNU6kzdr n2ZlxDHe1Sym8CeiXA1LPTnmzbquyx6i+xSY8iTbVSc/QPA4XqXyTn936PWYEIFX BE9HvLEAICOdjFuYwQTfJiMFrF9QYvGb5tfaKFYELb8weLmTaIwHW0ycOTuvE5xg nRTSWt5ZSWyUILlvzTNjzcWzGJ0VA4S1YXwDP59TsG8CDq4OWfkz+K2TvYv7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfuxklgM5Ye0HRu6RY/5mxH2kfW8wHwYDVR0j BBgwFoAUI/JvVx44ZaBqE5NlVdjaontDOTMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVmY2JmMC02NmVjLTQ4ZDMtYjIyMS0wZjA5Njg2ZDU4MTgvMC8yM0YyNkY1NzFF Mzg2NUEwNkExMzkzNjU1NUQ4REFBMjdCNDMzOTMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3QjQz MzkzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlZmNiZjAtNjZlYy00OGQzLWIy MjEtMGYwOTY4NmQ1ODE4LzAvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERB QTI3QjQzMzkzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEczNNL5678HIuo3Ul+yMis4JOxCe+2IIkaX 5id//X74oZOa80gVszZDtvzLRawA7wNVHxR3YndjqHEZJZaUzKsnIz9w/qIlvRPf sDJzHZ2i4HKFUNjEIZHfJu30SReq001OWYg9QOLScGvO9evI/zdxmvCeNN+dTnE/ LvcrlOxJEAvsilf1Mfy8LoD2hupYA08q3d/s0Vp4q9jCFg2Q+2JfBatcsgODDar6 W4CloRDbfs2b/IGpkdskyqwepx/jSSSyTAqoPmouFSjF76JagmujeEBbVgqH/UHe LCXhzRwxURY1zo5HSeVyMhHnXvgnvbS+RfQUk+jj1S3n2g9RQ3g= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:37 2025 by rpki-client