$ rpki-client -vvf repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft File: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft (raw, json) Hash identifier: vb/eghSNkhTMCG5fDb3Odry+jCxZA/J6+1pcivKXRzM= Subject key identifier: DC:DA:1D:EC:32:1D:8B:A4:A6:59:8D:89:67:2F:20:50:C6:EF:1D:15 Authority key identifier: 23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C Certificate issuer: /CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Certificate serial: 29F40B26AE34D3372430A4DD313AEEA2EDAF9783 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft Manifest number: 91 Signing time: Sun 07 Sep 2025 03:12:05 +0000 Manifest this update: Sun 07 Sep 2025 03:07:05 +0000 Manifest next update: Wed 10 Sep 2025 12:18:05 +0000 Files and hashes: 1: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: YV/07SIZYC4/VtvBJStdBJgRKQnAK1y/gzxul6oggek=) 2: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl (hash: AnA80vDF7JTcMfOzJY1eW4lRCz7DuiTiAv6lLadqsoA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 12:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f4:0b:26:ae:34:d3:37:24:30:a4:dd:31:3a:ee:a2:ed:af:97:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Validity Not Before: Sep 7 03:07:05 2025 GMT Not After : Sep 10 12:18:05 2025 GMT Subject: CN=DCDA1DEC321D8BA4A6598D89672F2050C6EF1D15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:20:c9:f2:03:c0:73:f3:75:12:12:01:c1:e9: ac:f8:72:cc:46:e9:70:95:17:d2:4e:a6:bd:30:c8: ab:fb:4e:81:4d:35:b9:cf:94:77:fc:2a:74:5d:c5: 67:75:36:87:9d:e5:b9:ea:23:e7:a3:66:01:e3:45: 4e:13:57:22:ad:38:6a:62:6c:35:13:e9:67:5b:fb: 1a:9b:0a:3c:2b:bb:23:86:74:8a:1d:8f:cf:cf:cc: 53:28:ff:d8:61:ba:f6:fe:2e:79:1e:11:52:f7:73: 11:eb:f6:c4:4c:a6:c3:11:e0:cd:15:18:b0:28:91: e6:60:d6:15:4f:63:a3:16:a8:bd:a1:b8:8a:ab:eb: 4d:41:fc:8e:ec:30:78:a5:2f:a9:91:fd:a9:93:4a: 7e:bf:a7:2e:16:a2:7c:7b:49:04:e1:a1:46:9e:3a: a0:35:b5:c4:3c:57:c4:58:ea:4f:1a:8d:84:59:ea: c0:2d:42:39:16:b4:b4:a9:cf:42:74:a2:2c:0e:d9: 8f:e0:c3:cc:08:41:78:16:76:9f:d6:c5:80:2e:fd: 8f:79:ce:1b:94:2b:2f:3a:96:ba:4d:41:32:e6:84: 8a:06:7c:e0:a0:3b:c0:8f:87:7e:fd:37:c1:a0:d2: 81:80:6d:43:05:9f:d9:22:6d:10:12:9a:bd:ec:eb: d0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DA:1D:EC:32:1D:8B:A4:A6:59:8D:89:67:2F:20:50:C6:EF:1D:15 X509v3 Authority Key Identifier: keyid:23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:92:d2:f0:ba:e3:ce:7a:4f:f8:c9:ca:0e:c9:37:ac:c5:4c: 7b:ae:c2:cc:35:31:19:53:2a:65:7e:f6:af:5f:b7:c7:f7:a5: 96:41:8a:18:16:b9:0e:f6:fe:de:d1:ed:30:85:1e:c2:28:a0: 2f:86:d5:63:93:80:dd:b6:a4:37:25:11:2a:fc:a3:72:38:aa: 3b:77:9b:56:d9:af:52:65:be:27:71:42:ed:94:c1:e2:05:36: e8:b5:63:d4:83:9c:11:d2:21:84:e6:51:62:c7:2c:a3:05:dd: 69:8b:d9:28:5f:9b:75:5a:76:8a:bc:24:b7:0b:96:6a:72:5c: 50:67:50:0b:0c:7c:f4:61:7f:ba:fe:14:db:7d:05:4d:57:b9: 34:2e:87:8d:0f:71:46:3b:5e:07:6f:b5:13:18:86:92:01:2b: b5:57:ee:bb:9d:53:d5:94:e5:0e:fb:af:bd:68:39:fe:e3:e5: 3e:a7:72:87:24:f4:3a:90:49:33:db:15:dc:ba:35:b2:32:34: 42:2c:e9:c5:7f:85:23:a3:7f:5e:c3:b1:83:cc:fb:44:10:16: f6:cb:9c:19:7f:e5:d1:7c:08:7a:ce:86:9a:d3:15:8a:3c:59: 1d:b3:59:9a:96:85:cc:36:e9:e9:bd:1c:5b:c2:e0:34:0e:59: 2c:12:ca:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKfQLJq400zckMKTdMTruou2vl4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3 N0U4RUU3QzAeFw0yNTA5MDcwMzA3MDVaFw0yNTA5MTAxMjE4MDVaMDMxMTAvBgNV BAMTKERDREExREVDMzIxRDhCQTRBNjU5OEQ4OTY3MkYyMDUwQzZFRjFEMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVIMnyA8Bz83USEgHB6az4csxG 6XCVF9JOpr0wyKv7ToFNNbnPlHf8KnRdxWd1Noed5bnqI+ejZgHjRU4TVyKtOGpi bDUT6Wdb+xqbCjwruyOGdIodj8/PzFMo/9hhuvb+LnkeEVL3cxHr9sRMpsMR4M0V GLAokeZg1hVPY6MWqL2huIqr601B/I7sMHilL6mR/amTSn6/py4Wonx7SQThoUae OqA1tcQ8V8RY6k8ajYRZ6sAtQjkWtLSpz0J0oiwO2Y/gw8wIQXgWdp/WxYAu/Y95 zhuUKy86lrpNQTLmhIoGfOCgO8CPh379N8Gg0oGAbUMFn9kibRASmr3s69BXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Nod7DIdi6SmWY2JZy8gUMbvHRUwHwYDVR0j BBgwFoAUI76M6mGUBvnYYLH5fuj37Xfo7nwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmVkNmRjNC1kMzhiLTQ0YmEtOWYwYi00Mjg0NTViMjc2ZWUvMC8yM0JFOENFQTYx OTQwNkY5RDg2MEIxRjk3RUU4RjdFRDc3RThFRTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3N0U4 RUU3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJlZDZkYzQtZDM4Yi00NGJhLTlm MGItNDI4NDU1YjI3NmVlLzAvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3 RUQ3N0U4RUU3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuS0vC64856T/jJyg7JN6zFTHuuwsw1MRlT KmV+9q9ft8f3pZZBihgWuQ72/t7R7TCFHsIooC+G1WOTgN22pDclESr8o3I4qjt3 m1bZr1JlvidxQu2UweIFNui1Y9SDnBHSIYTmUWLHLKMF3WmL2Shfm3Vadoq8JLcL lmpyXFBnUAsMfPRhf7r+FNt9BU1XuTQuh40PcUY7XgdvtRMYhpIBK7VX7rudU9WU 5Q77r71oOf7j5T6ncock9DqQSTPbFdy6NbIyNEIs6cV/hSOjf17DsYPM+0QQFvbL nBl/5dF8CHrOhprTFYo8WR2zWZqWhcw26em9HFvC4DQOWSwSyks= -----END CERTIFICATE-----Generated at Mon Sep 8 05:09:29 2025 by rpki-client