$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft File: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft (raw, json) Hash identifier: n/eC+SFdv3O5o7w0G2LH8HI/Zle/g12LJCjtDnkpk2I= Subject key identifier: F8:87:BC:67:ED:58:55:7A:1F:06:01:A0:E6:D5:B7:DA:B7:35:94:EA Authority key identifier: 23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 Certificate issuer: /CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Certificate serial: 2ED19AB4B0995A22DF75C39782D7B13612D692A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft Manifest number: A0 Signing time: Thu 05 Jun 2025 01:50:53 +0000 Manifest this update: Thu 05 Jun 2025 01:45:53 +0000 Manifest next update: Sun 08 Jun 2025 11:25:53 +0000 Files and hashes: 1: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl (hash: ntz1dEZTVDX++cBdOjNiZ2KZ7eV7PuXGrc+NQL9Xikg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 11:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d1:9a:b4:b0:99:5a:22:df:75:c3:97:82:d7:b1:36:12:d6:92:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Validity Not Before: Jun 5 01:45:53 2025 GMT Not After : Jun 8 11:25:53 2025 GMT Subject: CN=F887BC67ED58557A1F0601A0E6D5B7DAB73594EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f8:1a:e7:18:ca:00:3a:f6:e7:aa:0c:31:0b: d3:67:a2:de:87:e5:3c:74:e1:fa:ec:5f:70:7d:fb: 72:e7:ba:91:ee:43:5c:5a:a7:02:1c:73:a1:a5:f0: 51:af:f3:a3:cd:50:16:bd:a6:33:d8:66:69:f4:61: de:ff:40:f1:11:f8:bc:6b:72:b5:0f:e0:22:5f:5f: 83:03:11:3d:10:5a:7f:ff:d8:b9:76:b8:06:5d:d0: 0e:56:1a:7f:08:90:4b:cd:dc:9a:c1:cb:2c:29:f9: e7:eb:3c:f7:49:4b:a4:1d:44:de:35:12:b2:b6:89: 07:d3:b3:e8:da:1b:a4:5e:6a:03:61:fa:0b:f6:ce: 00:dc:fa:c9:6d:48:9a:d1:4a:c3:66:f2:f4:6c:18: 83:19:a6:1d:09:c0:84:cf:06:cb:43:a7:75:ab:02: c2:e0:20:03:c0:c4:d5:10:1e:80:77:f4:50:79:f9: b5:7f:f2:22:d4:c9:b2:29:45:0a:85:3e:d6:ec:e6: 39:7a:49:1a:b6:09:4e:59:d2:13:c6:85:24:20:82: f3:6b:a9:77:27:98:d0:e3:78:20:9f:a6:87:6b:67: 91:78:10:35:eb:26:0b:f7:09:0f:d5:5a:39:b0:31: e7:a3:f0:fb:8e:a9:be:d0:50:58:3c:90:46:ed:04: f2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:87:BC:67:ED:58:55:7A:1F:06:01:A0:E6:D5:B7:DA:B7:35:94:EA X509v3 Authority Key Identifier: keyid:23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:75:8a:67:8d:09:c7:44:1e:a4:a9:87:2e:67:db:11:a9:44: 91:48:04:6e:37:56:5c:24:18:51:eb:21:01:9f:fd:54:a5:20: 46:37:3a:6c:b5:f8:6c:5b:12:34:ed:23:3b:6f:3f:08:e1:38: d8:f8:c8:e3:c9:9a:5e:48:02:ed:f4:ad:6f:6b:1f:81:e8:3b: 8f:45:1b:55:18:b9:41:fc:37:24:ee:7d:42:df:c4:8f:2e:67: 48:55:f1:77:89:60:45:ec:51:2c:53:d9:de:c0:01:6c:ff:28: ce:7f:23:bd:50:d4:4f:54:18:15:d3:d6:78:ac:f0:ad:b2:16: a5:28:1e:31:0b:1f:22:64:e1:6e:e1:14:cd:fe:15:11:d0:12: 29:12:a1:24:73:6e:51:7f:44:7f:27:e8:9a:0f:d0:1b:81:4b: 6d:49:20:3d:11:0a:fb:05:91:a4:53:f7:0e:b6:51:2c:85:e3: 27:b0:96:68:30:79:91:cd:cf:cd:2b:32:a5:ad:4d:80:28:e6: c7:8f:1c:0b:a0:f3:8c:18:25:30:6a:bc:a0:89:ef:05:04:8b: 96:ac:dc:03:d0:82:af:b8:92:f2:96:6d:29:09:5b:bb:e2:df: e1:5f:a9:be:74:2b:a0:de:d7:30:0e:66:47:f8:00:b9:df:86: 8a:3f:c4:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULtGatLCZWiLfdcOXgtexNhLWkqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFC RkNDN0UzNjAeFw0yNTA2MDUwMTQ1NTNaFw0yNTA2MDgxMTI1NTNaMDMxMTAvBgNV BAMTKEY4ODdCQzY3RUQ1ODU1N0ExRjA2MDFBMEU2RDVCN0RBQjczNTk0RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC++BrnGMoAOvbnqgwxC9Nnot6H 5Tx04frsX3B9+3LnupHuQ1xapwIcc6Gl8FGv86PNUBa9pjPYZmn0Yd7/QPER+Lxr crUP4CJfX4MDET0QWn//2Ll2uAZd0A5WGn8IkEvN3JrByywp+efrPPdJS6QdRN41 ErK2iQfTs+jaG6ReagNh+gv2zgDc+sltSJrRSsNm8vRsGIMZph0JwITPBstDp3Wr AsLgIAPAxNUQHoB39FB5+bV/8iLUybIpRQqFPtbs5jl6SRq2CU5Z0hPGhSQggvNr qXcnmNDjeCCfpodrZ5F4EDXrJgv3CQ/VWjmwMeej8PuOqb7QUFg8kEbtBPKHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Ie8Z+1YVXofBgGg5tW32rc1lOowHwYDVR0j BBgwFoAUI8Yi+HYYq4sEIuempG0ukb/MfjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMS8yM0M2MjJGODc2 MThBQjhCMDQyMkU3QTZBNDZEMkU5MUJGQ0M3RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFCRkND N0UzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzEvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJF OTFCRkNDN0UzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIp1imeNCcdEHqSphy5n2xGpRJFIBG43Vlwk GFHrIQGf/VSlIEY3Omy1+GxbEjTtIztvPwjhONj4yOPJml5IAu30rW9rH4HoO49F G1UYuUH8NyTufULfxI8uZ0hV8XeJYEXsUSxT2d7AAWz/KM5/I71Q1E9UGBXT1nis 8K2yFqUoHjELHyJk4W7hFM3+FRHQEikSoSRzblF/RH8n6JoP0BuBS21JID0RCvsF kaRT9w62USyF4yewlmgweZHNz80rMqWtTYAo5sePHAug84wYJTBqvKCJ7wUEi5as 3APQgq+4kvKWbSkJW7vi3+Ffqb50K6De1zAOZkf4ALnfhoo/xOs= -----END CERTIFICATE-----Generated at Thu Jun 5 18:31:10 2025 by rpki-client