$ rpki-client -vvf repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft File: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft (raw, json) Hash identifier: TK96TxUWUcEdBmbsunR245vboLCbO6Da3/XK21CyEZw= Subject key identifier: FA:10:D0:E9:46:A0:E3:C5:74:E3:0F:A6:6B:39:E1:E3:73:63:0A:95 Authority key identifier: 23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 Certificate issuer: /CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Certificate serial: 019DFE38B6F53358B38784151A539377FAFA806C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft Manifest number: EF Signing time: Wed 04 Jun 2025 14:41:57 +0000 Manifest this update: Wed 04 Jun 2025 14:36:57 +0000 Manifest next update: Sat 07 Jun 2025 18:26:57 +0000 Files and hashes: 1: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl (hash: 7RKTvc/XRw6v2UfSW5ZRO4KycmHuGsuhrga9uIz1rYA=) 2: 3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa (hash: GanArMdyxHcMbx7yNEnXuF/pBEYLZnuk0ZSf31LCDR8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:fe:38:b6:f5:33:58:b3:87:84:15:1a:53:93:77:fa:fa:80:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Validity Not Before: Jun 4 14:36:57 2025 GMT Not After : Jun 7 18:26:57 2025 GMT Subject: CN=FA10D0E946A0E3C574E30FA66B39E1E373630A95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8b:64:4c:0d:66:ed:63:a0:6e:11:11:eb:00: 40:1c:d2:07:73:f6:f8:31:37:87:ae:e7:84:fa:6b: 27:9f:83:eb:3a:3e:27:3e:0e:70:34:6d:b6:f6:7a: ca:c1:9d:88:06:c1:07:97:7c:9a:2b:7d:b4:80:13: 6d:72:8e:a7:58:2b:14:6d:6c:dd:ee:94:24:e5:96: 74:8a:7e:c1:85:92:8a:1a:db:7d:ba:64:a5:7c:7a: 4c:6d:a8:13:a4:26:45:c5:61:71:9b:08:48:fc:f2: 7b:9c:e4:aa:20:e1:2f:07:9b:4e:54:bf:ab:69:11: 01:d5:94:3e:80:23:85:fb:53:29:99:8a:bb:16:ab: 2a:c6:c6:3d:6a:70:25:08:43:4a:80:b2:dd:a7:c0: cd:07:c1:86:44:83:85:bb:d1:a2:6e:c4:39:86:f1: f7:f1:cb:83:91:f2:95:03:57:01:ac:3d:2d:c7:19: 1f:41:e3:b3:06:db:9e:f7:af:94:74:15:d0:8c:88: b1:83:41:c8:14:d5:c2:d2:dc:0c:e7:6d:36:47:21: 58:69:6b:89:be:4b:04:76:2a:95:6d:e2:87:46:72: f8:6e:40:56:a9:f6:99:be:71:b9:39:bc:2b:fe:55: 2c:ac:db:2a:33:1d:e1:eb:5f:65:cf:9e:d6:79:3d: 92:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:10:D0:E9:46:A0:E3:C5:74:E3:0F:A6:6B:39:E1:E3:73:63:0A:95 X509v3 Authority Key Identifier: keyid:23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:0e:26:bc:53:c3:5e:1d:d5:21:cb:70:d2:8d:fe:be:40:94: aa:ae:21:13:c8:17:c8:73:2b:a8:42:d7:8d:8f:20:3d:d7:a7: 46:74:74:ce:84:88:58:b0:95:95:4e:d9:4e:6c:49:6d:2d:e9: a4:84:e1:8d:43:8d:73:53:3e:18:72:37:2f:fc:c2:ef:8c:2d: 4a:1f:99:70:00:33:88:57:f6:3c:c0:8b:38:2c:42:a6:5d:97: bb:0e:99:cb:b3:0b:25:51:9a:fb:c4:79:41:c2:5a:c7:e4:59: 54:82:ae:af:94:f0:92:2d:f8:aa:79:1a:18:6f:8a:cd:01:36: 3b:c5:c7:7a:24:67:05:d9:9b:c7:38:c5:06:6c:50:6a:4e:21: b5:13:a5:ee:71:3e:fc:81:9e:91:17:5e:60:08:f7:f6:c8:2d: 4f:7d:0c:0b:77:c2:a0:0b:15:56:32:7b:80:77:9b:80:03:6a: 45:8d:7f:7c:d1:48:91:5a:5b:a9:6f:7b:8e:73:b9:14:b6:0e: 08:b4:eb:78:c4:f0:9a:a0:6b:c7:e7:17:62:0a:32:b0:07:71: 2c:02:1d:45:40:df:aa:7f:eb:07:9d:a2:ec:fb:a0:31:36:b7: 8f:e8:5c:8c:bf:22:18:2a:2e:eb:ee:dd:95:10:88:29:eb:7e: 50:f8:74:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAZ3+OLb1M1izh4QVGlOTd/r6gGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIz QjAwRUVCNjAeFw0yNTA2MDQxNDM2NTdaFw0yNTA2MDcxODI2NTdaMDMxMTAvBgNV BAMTKEZBMTBEMEU5NDZBMEUzQzU3NEUzMEZBNjZCMzlFMUUzNzM2MzBBOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyi2RMDWbtY6BuERHrAEAc0gdz 9vgxN4eu54T6ayefg+s6Pic+DnA0bbb2esrBnYgGwQeXfJorfbSAE21yjqdYKxRt bN3ulCTllnSKfsGFkooa2326ZKV8ekxtqBOkJkXFYXGbCEj88nuc5Kog4S8Hm05U v6tpEQHVlD6AI4X7UymZirsWqyrGxj1qcCUIQ0qAst2nwM0HwYZEg4W70aJuxDmG 8ffxy4OR8pUDVwGsPS3HGR9B47MG2573r5R0FdCMiLGDQcgU1cLS3AznbTZHIVhp a4m+SwR2KpVt4odGcvhuQFap9pm+cbk5vCv+VSys2yozHeHrX2XPntZ5PZK1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+hDQ6Uag48V04w+maznh43NjCpUwHwYDVR0j BBgwFoAUIxMtasKg7UGZb1TACopZsjsA7rYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmU0N2M2ZC1lNjI0LTQ3N2MtYWUxOC1kMzJmMjJjOTYyMDQvMC8yMzEzMkQ2QUMy QTBFRDQxOTk2RjU0QzAwQThBNTlCMjNCMDBFRUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIzQjAw RUVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZlNDdjNmQtZTYyNC00NzdjLWFl MTgtZDMyZjIyYzk2MjA0LzAvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5 QjIzQjAwRUVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4OJrxTw14d1SHLcNKN/r5AlKquIRPIF8hz K6hC142PID3Xp0Z0dM6EiFiwlZVO2U5sSW0t6aSE4Y1DjXNTPhhyNy/8wu+MLUof mXAAM4hX9jzAizgsQqZdl7sOmcuzCyVRmvvEeUHCWsfkWVSCrq+U8JIt+Kp5Ghhv is0BNjvFx3okZwXZm8c4xQZsUGpOIbUTpe5xPvyBnpEXXmAI9/bILU99DAt3wqAL FVYye4B3m4ADakWNf3zRSJFaW6lve45zuRS2Dgi063jE8Jqga8fnF2IKMrAHcSwC HUVA36p/6wedouz7oDE2t4/oXIy/IhgqLuvu3ZUQiCnrflD4dCA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:17:13 2025 by rpki-client