$ rpki-client -vvf repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft File: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft (raw, json) Hash identifier: pP4GY7dzfo91oCfQThSTY6oKdrwv53pyvGVdokqcHKs= Subject key identifier: E5:D5:88:A4:EA:57:71:30:81:FA:10:26:C9:ED:7F:2F:57:F2:32:29 Authority key identifier: 23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C Certificate issuer: /CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Certificate serial: 0CA4ADB567969045AE029952F03C2972403A07E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft Manifest number: 7C Signing time: Tue 22 Jul 2025 00:52:03 +0000 Manifest this update: Tue 22 Jul 2025 00:47:03 +0000 Manifest next update: Fri 25 Jul 2025 11:54:03 +0000 Files and hashes: 1: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl (hash: aVEZCpb/WeHGcUE4a+8dkk7Gcf8Xjl/q6mp7THAAsaQ=) 2: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: YV/07SIZYC4/VtvBJStdBJgRKQnAK1y/gzxul6oggek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a4:ad:b5:67:96:90:45:ae:02:99:52:f0:3c:29:72:40:3a:07:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Validity Not Before: Jul 22 00:47:03 2025 GMT Not After : Jul 25 11:54:03 2025 GMT Subject: CN=E5D588A4EA57713081FA1026C9ED7F2F57F23229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:76:95:ff:b6:d4:9f:24:d6:4c:80:36:d1: 68:e0:23:5b:9f:0e:2f:b4:e7:b9:ab:43:b3:63:2f: 74:93:47:53:51:40:a1:ba:75:62:f2:f2:fd:c7:55: b2:94:23:f1:9c:da:64:2e:b5:a0:ef:f2:e7:7e:71: cd:43:cb:26:1d:ef:0d:92:b7:65:9e:77:01:53:be: 3c:48:99:e0:75:66:c2:20:ae:4f:c6:a1:00:6c:e6: 97:f9:fc:5a:d1:d2:06:da:59:fd:8f:95:22:89:25: 3d:f5:c8:e2:a1:01:b5:2d:eb:e9:33:54:47:07:05: 1c:0e:29:c8:df:4f:04:f7:fc:bc:a5:a0:95:d5:f2: fa:94:23:eb:26:29:9a:2f:7e:6c:e3:fc:80:71:df: bb:7a:89:bb:3a:39:5b:58:66:42:d0:6d:3e:5f:46: ee:13:f1:87:4e:8d:8e:71:54:7e:4f:0d:20:0d:b7: fe:3e:2e:41:ba:0f:91:ff:e7:c6:42:74:33:4b:b3: 45:11:6f:d4:bd:2a:34:f7:4a:bd:66:96:0c:e1:ce: 22:67:f8:36:e0:20:68:89:02:fd:66:ae:c0:66:63: ea:50:5a:69:05:66:a9:38:5e:ff:9a:68:7f:68:40: 2b:45:f3:7b:2a:c1:83:91:55:58:05:eb:2e:8d:29: ff:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D5:88:A4:EA:57:71:30:81:FA:10:26:C9:ED:7F:2F:57:F2:32:29 X509v3 Authority Key Identifier: keyid:23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:20:50:cd:9e:cf:c7:35:3a:99:95:68:12:8a:42:f1:ae:eb: ad:6a:3a:5e:13:1f:e4:c8:a3:75:c2:ce:70:ce:1e:4d:0c:ec: d5:32:43:71:f1:7d:78:e1:ba:b7:d6:a2:d8:df:aa:e9:5d:b2: 0c:72:e8:8c:ec:f6:1a:cf:60:b7:0f:08:18:f4:60:8e:ca:29: 02:d2:e3:c1:b6:09:7e:d6:49:cd:77:02:14:75:e3:5a:7a:fd: b9:f4:fc:52:19:d1:16:91:ff:76:7f:e5:9b:9b:34:06:38:e3: a8:7a:e4:07:96:71:a1:86:ba:9d:75:04:9e:7e:aa:16:18:37: bc:23:9f:ea:aa:d6:13:15:ed:27:58:c0:0f:12:b0:a3:a4:bf: 04:ab:d8:ab:06:1f:c4:e3:1c:76:c4:91:78:d2:b3:9d:3a:93: a5:a2:dc:56:96:20:6c:7a:7d:00:d0:d9:13:ca:bd:89:f6:12: 69:52:c5:5c:5e:bf:d3:49:03:53:42:1e:23:b2:74:f4:19:ff: 37:5a:bc:48:f7:fd:a0:33:23:8d:53:d5:c3:68:37:4a:14:25: 2a:75:d7:8c:c5:fe:1e:08:f6:59:03:1a:c5:55:c0:90:5a:48: aa:65:d8:40:02:d8:e8:af:1e:b6:ce:ad:90:a1:39:07:56:54: 3c:e9:bf:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDKSttWeWkEWuAplS8DwpckA6B+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3 N0U4RUU3QzAeFw0yNTA3MjIwMDQ3MDNaFw0yNTA3MjUxMTU0MDNaMDMxMTAvBgNV BAMTKEU1RDU4OEE0RUE1NzcxMzA4MUZBMTAyNkM5RUQ3RjJGNTdGMjMyMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE+XaV/7bUnyTWTIA20WjgI1uf Di+057mrQ7NjL3STR1NRQKG6dWLy8v3HVbKUI/Gc2mQutaDv8ud+cc1DyyYd7w2S t2WedwFTvjxImeB1ZsIgrk/GoQBs5pf5/FrR0gbaWf2PlSKJJT31yOKhAbUt6+kz VEcHBRwOKcjfTwT3/LyloJXV8vqUI+smKZovfmzj/IBx37t6ibs6OVtYZkLQbT5f Ru4T8YdOjY5xVH5PDSANt/4+LkG6D5H/58ZCdDNLs0URb9S9KjT3Sr1mlgzhziJn +DbgIGiJAv1mrsBmY+pQWmkFZqk4Xv+aaH9oQCtF83sqwYORVVgF6y6NKf9nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5dWIpOpXcTCB+hAmye1/L1fyMikwHwYDVR0j BBgwFoAUI76M6mGUBvnYYLH5fuj37Xfo7nwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmVkNmRjNC1kMzhiLTQ0YmEtOWYwYi00Mjg0NTViMjc2ZWUvMC8yM0JFOENFQTYx OTQwNkY5RDg2MEIxRjk3RUU4RjdFRDc3RThFRTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3N0U4 RUU3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJlZDZkYzQtZDM4Yi00NGJhLTlm MGItNDI4NDU1YjI3NmVlLzAvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3 RUQ3N0U4RUU3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwgUM2ez8c1OpmVaBKKQvGu661qOl4TH+TI o3XCznDOHk0M7NUyQ3HxfXjhurfWotjfquldsgxy6Izs9hrPYLcPCBj0YI7KKQLS 48G2CX7WSc13AhR141p6/bn0/FIZ0RaR/3Z/5ZubNAY446h65AeWcaGGup11BJ5+ qhYYN7wjn+qq1hMV7SdYwA8SsKOkvwSr2KsGH8TjHHbEkXjSs506k6Wi3FaWIGx6 fQDQ2RPKvYn2EmlSxVxev9NJA1NCHiOydPQZ/zdavEj3/aAzI41T1cNoN0oUJSp1 14zF/h4I9lkDGsVVwJBaSKpl2EAC2OivHrbOrZChOQdWVDzpvz4= -----END CERTIFICATE-----Generated at Tue Jul 22 06:40:52 2025 by rpki-client