$ rpki-client -vvf repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft File: 230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft (raw, json) Hash identifier: 0qLffrJDpGFiBS/HLSiTZXMeTIIvamge4GRWQUsaVRU= Subject key identifier: 3C:5F:0B:5A:10:1A:4A:64:18:27:FD:9A:22:88:FC:56:9D:83:40:27 Authority key identifier: 23:0A:81:B2:83:31:4B:A7:9B:FA:02:4F:DF:9F:F4:DA:66:B4:24:BE Certificate issuer: /CN=230A81B283314BA79BFA024FDF9FF4DA66B424BE Certificate serial: 51103B62205DF7B8BC00E1B3AE7F4F6F82BB5B81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft Manifest number: 0201 Signing time: Fri 05 Sep 2025 08:22:13 +0000 Manifest this update: Fri 05 Sep 2025 08:17:13 +0000 Manifest next update: Mon 08 Sep 2025 18:37:13 +0000 Files and hashes: 1: 230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl (hash: DbFgjIknfb/eOgDqvLeOrTcxipCzyFQ/vkX2pdjrGXg=) 2: 3130332e3135322e3233382e302f32332d3234203d3e20313430343438.roa (hash: rBpy14k8W3mbLlNgX4J0/2ZVTjIArp0RYRGvkTqIoQQ=) 3: 323430363a333834303a3a2f33322d3438203d3e20313430343438.roa (hash: Ra1E9cOQanH1SiHnfJl04HYirMLU+Yh3tE7np1INosY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 18:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:10:3b:62:20:5d:f7:b8:bc:00:e1:b3:ae:7f:4f:6f:82:bb:5b:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230A81B283314BA79BFA024FDF9FF4DA66B424BE Validity Not Before: Sep 5 08:17:13 2025 GMT Not After : Sep 8 18:37:13 2025 GMT Subject: CN=3C5F0B5A101A4A641827FD9A2288FC569D834027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b3:4b:35:71:d4:f9:d0:d8:c2:1c:03:67:9d: 49:bd:4b:63:c1:4b:da:f3:ab:e1:95:2c:f9:41:9c: af:33:aa:ff:85:61:42:18:c3:b7:eb:0d:17:61:db: 36:af:ce:e2:11:aa:f9:cf:c2:c5:4e:fe:90:62:d8: 6f:cc:bf:96:72:b3:b2:57:5c:8b:78:83:a5:69:61: fd:ad:5a:be:3a:3a:44:99:42:f7:8a:f8:6c:d1:a1: b8:d1:3e:ae:86:21:80:4b:0d:2b:0c:88:d0:e2:3f: 7d:43:0a:47:00:8d:3e:07:18:ec:f6:65:04:f3:75: 2b:ee:ef:20:7d:73:e7:04:3a:26:ef:c6:1f:ce:71: e1:9d:b6:1c:ea:39:58:c9:03:60:1b:5c:5c:c6:db: 13:6c:84:c1:01:4f:07:9c:93:f7:a8:9e:b9:26:45: 84:e5:11:1f:30:40:d4:ad:fb:68:0b:f3:f5:e6:4f: 81:ff:3c:da:b7:75:16:e6:85:66:70:2f:ea:7d:e3: 21:43:6c:3b:a3:47:e2:96:96:60:f5:8a:c4:ea:5a: d6:06:e2:9a:9e:23:1f:d4:8a:8b:9c:b4:48:ad:a7: 45:a4:b7:7a:bf:e1:c3:bb:ea:90:cb:83:3b:6d:a9: 23:d9:52:3b:e9:3f:96:01:c9:eb:12:99:2e:61:7f: f5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5F:0B:5A:10:1A:4A:64:18:27:FD:9A:22:88:FC:56:9D:83:40:27 X509v3 Authority Key Identifier: keyid:23:0A:81:B2:83:31:4B:A7:9B:FA:02:4F:DF:9F:F4:DA:66:B4:24:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:63:69:d2:f0:c1:ff:06:08:86:6a:d0:c3:af:56:47:4f:96: 5b:60:a5:52:7f:20:79:ec:36:f7:7f:f6:b4:c7:9c:97:3e:00: 24:37:01:22:d9:8c:aa:d1:33:f3:0d:a1:d3:f5:25:6c:f1:c5: ab:00:71:d5:38:4e:78:29:9e:56:c9:5d:e5:18:a6:cc:73:9c: 3e:92:f1:03:40:ed:82:cd:50:29:e9:8a:2b:2a:97:61:f2:98: 7e:32:ae:7b:54:08:0b:a5:47:ef:10:c1:1c:2d:ed:b1:6a:bc: f9:88:d2:78:6c:68:22:be:34:59:db:6b:6b:d0:d3:4e:34:d4: 97:67:d2:dc:fd:c8:0a:b0:62:c9:86:2b:2c:ce:83:f4:2d:c6: bf:62:68:c8:71:20:ed:bf:5e:8a:48:f9:10:46:8e:73:30:17: 1a:a2:8a:a0:51:86:b4:8b:5f:6a:f5:e7:8e:13:9e:fc:08:2f: 43:5f:7a:27:14:63:57:59:bb:77:bc:f2:d6:60:8f:19:1b:41: 6f:16:71:62:04:ed:16:bb:d9:0f:2b:d3:ac:22:2f:47:a4:a1: fa:74:de:fd:b4:ab:3f:70:47:91:9b:73:8a:7f:fe:14:2c:1e: 45:af:96:73:9c:82:7f:57:7a:f1:79:cd:fa:2c:84:51:d3:4a: 43:6f:f5:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUURA7YiBd97i8AOGzrn9Pb4K7W4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0REE2 NkI0MjRCRTAeFw0yNTA5MDUwODE3MTNaFw0yNTA5MDgxODM3MTNaMDMxMTAvBgNV BAMTKDNDNUYwQjVBMTAxQTRBNjQxODI3RkQ5QTIyODhGQzU2OUQ4MzQwMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfs0s1cdT50NjCHANnnUm9S2PB S9rzq+GVLPlBnK8zqv+FYUIYw7frDRdh2zavzuIRqvnPwsVO/pBi2G/Mv5Zys7JX XIt4g6VpYf2tWr46OkSZQveK+GzRobjRPq6GIYBLDSsMiNDiP31DCkcAjT4HGOz2 ZQTzdSvu7yB9c+cEOibvxh/OceGdthzqOVjJA2AbXFzG2xNshMEBTweck/eonrkm RYTlER8wQNSt+2gL8/XmT4H/PNq3dRbmhWZwL+p94yFDbDujR+KWlmD1isTqWtYG 4pqeIx/UiouctEitp0Wkt3q/4cO76pDLgzttqSPZUjvpP5YByesSmS5hf/UfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPF8LWhAaSmQYJ/2aIoj8Vp2DQCcwHwYDVR0j BBgwFoAUIwqBsoMxS6eb+gJP35/02ma0JL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2ExY2U0ZS01OWM4LTQxY2MtYjVlNi1iZDdiN2E3MDQzNTYvMC8yMzBBODFCMjgz MzE0QkE3OUJGQTAyNEZERjlGRjREQTY2QjQyNEJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0REE2NkI0 MjRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdhMWNlNGUtNTljOC00MWNjLWI1 ZTYtYmQ3YjdhNzA0MzU2LzAvMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0 REE2NkI0MjRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBjadLwwf8GCIZq0MOvVkdPlltgpVJ/IHns Nvd/9rTHnJc+ACQ3ASLZjKrRM/MNodP1JWzxxasAcdU4TngpnlbJXeUYpsxznD6S 8QNA7YLNUCnpiisql2HymH4yrntUCAulR+8QwRwt7bFqvPmI0nhsaCK+NFnba2vQ 00401Jdn0tz9yAqwYsmGKyzOg/Qtxr9iaMhxIO2/XopI+RBGjnMwFxqiiqBRhrSL X2r1544TnvwIL0NfeicUY1dZu3e88tZgjxkbQW8WcWIE7Ra72Q8r06wiL0ekofp0 3v20qz9wR5Gbc4p//hQsHkWvlnOcgn9XevF5zfoshFHTSkNv9RI= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:51 2025 by rpki-client