$ rpki-client -vvf repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft File: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft (raw, json) Hash identifier: UULStqJOo9HlKkUArRdB8yoltUAiwnp9KmuTegGsjTo= Subject key identifier: F8:7C:EB:31:49:03:0E:82:F3:65:07:EE:C8:19:9D:33:CB:56:6D:DD Authority key identifier: 23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C Certificate issuer: /CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Certificate serial: 7C160E548EECE52A7404314ED792B366743F4A00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft Manifest number: 67 Signing time: Wed 04 Jun 2025 14:22:03 +0000 Manifest this update: Wed 04 Jun 2025 14:17:03 +0000 Manifest next update: Sat 07 Jun 2025 22:12:03 +0000 Files and hashes: 1: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl (hash: Dk8Giazu4HTcXpxaZOFtwINkP98LEqbXpr0xM1L2ePY=) 2: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: YV/07SIZYC4/VtvBJStdBJgRKQnAK1y/gzxul6oggek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 22:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:16:0e:54:8e:ec:e5:2a:74:04:31:4e:d7:92:b3:66:74:3f:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Validity Not Before: Jun 4 14:17:03 2025 GMT Not After : Jun 7 22:12:03 2025 GMT Subject: CN=F87CEB3149030E82F36507EEC8199D33CB566DDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:db:ad:3a:17:70:17:68:d4:04:fd:68:b9:92: 2c:37:a1:65:9c:99:57:31:e5:6a:a0:94:19:7d:78: 44:34:75:a4:55:a7:d0:84:75:e5:d1:fa:d8:f2:1d: 2a:8b:77:65:eb:cd:f0:59:db:df:82:a8:94:99:d1: 4b:84:8b:b8:c3:33:08:08:2a:3b:a7:fa:04:3e:06: 2e:97:06:e0:ba:53:b8:5e:81:7b:3a:31:c7:62:11: a8:6b:f8:b4:40:48:64:65:8b:c5:44:f8:d9:b3:93: 5c:d4:7f:67:93:c0:8d:95:d0:26:e6:92:57:15:07: 6f:86:3a:b8:e8:14:03:b3:f8:74:05:0a:00:26:ca: fc:f7:2e:e2:52:fd:27:5c:6e:12:e7:c8:e0:68:b0: 78:92:e1:ef:1b:f3:49:d7:f3:3f:64:2e:04:5f:36: 48:36:a3:7f:11:b2:91:0d:d3:0a:a9:c7:63:6c:0f: 1f:41:b9:21:51:85:7b:d4:a9:95:fd:df:1a:d0:70: fc:b2:9c:5f:84:ba:7e:8e:24:05:62:e9:84:17:c9: 01:a4:59:a1:9f:4b:5c:5e:5a:67:02:1b:26:d7:7a: 22:79:11:54:b5:61:8b:21:92:23:88:9a:59:34:cc: ae:fb:59:b0:b3:ef:b9:5c:32:97:98:a7:a0:89:ec: 3c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7C:EB:31:49:03:0E:82:F3:65:07:EE:C8:19:9D:33:CB:56:6D:DD X509v3 Authority Key Identifier: keyid:23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:e9:33:7d:65:a3:0e:e2:65:26:15:8b:bb:a4:12:0a:fd:ec: 79:24:52:b6:e5:74:d2:91:97:9c:45:f1:dc:3b:12:52:09:a5: aa:8c:a8:bf:db:39:e0:0a:75:cf:cc:b8:84:09:cd:d2:5b:26: cd:78:ab:7c:1b:e0:39:18:91:34:3b:52:f0:d3:e6:72:8c:2b: 93:1a:b0:88:71:b0:f1:d5:95:df:01:2c:ba:24:a6:97:c7:ba: 3a:6d:c4:63:92:98:29:aa:72:fe:b2:b1:9d:d0:9c:28:6e:02: d7:06:91:0f:73:fc:dc:ed:92:58:87:15:35:90:97:73:73:d5: d7:46:07:4e:8f:0d:77:3d:df:d1:4e:c0:30:a3:63:bd:f2:5e: 3b:f8:39:6b:53:12:c3:b6:83:bd:f5:2e:79:e4:fe:69:e0:a8: 4f:f1:3b:3b:e6:ae:06:aa:a5:5e:bd:92:f5:b8:43:5f:ae:6e: 24:77:31:43:de:54:3d:1f:92:0a:e7:88:5e:e5:85:dc:f4:de: a6:03:5a:73:19:d0:a9:f6:9c:c6:de:57:da:1f:07:25:bc:41: f7:53:54:d8:e4:32:3e:79:27:9e:04:4a:c0:a7:2a:1d:70:37: 55:64:73:a3:4c:fe:09:c5:0d:9a:8f:01:93:d6:a7:18:32:58: eb:a8:a2:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfBYOVI7s5Sp0BDFO15KzZnQ/SgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3 N0U4RUU3QzAeFw0yNTA2MDQxNDE3MDNaFw0yNTA2MDcyMjEyMDNaMDMxMTAvBgNV BAMTKEY4N0NFQjMxNDkwMzBFODJGMzY1MDdFRUM4MTk5RDMzQ0I1NjZEREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM2606F3AXaNQE/Wi5kiw3oWWc mVcx5WqglBl9eEQ0daRVp9CEdeXR+tjyHSqLd2XrzfBZ29+CqJSZ0UuEi7jDMwgI Kjun+gQ+Bi6XBuC6U7hegXs6McdiEahr+LRASGRli8VE+Nmzk1zUf2eTwI2V0Cbm klcVB2+GOrjoFAOz+HQFCgAmyvz3LuJS/SdcbhLnyOBosHiS4e8b80nX8z9kLgRf Nkg2o38RspEN0wqpx2NsDx9BuSFRhXvUqZX93xrQcPyynF+Eun6OJAVi6YQXyQGk WaGfS1xeWmcCGybXeiJ5EVS1YYshkiOImlk0zK77WbCz77lcMpeYp6CJ7DybAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+HzrMUkDDoLzZQfuyBmdM8tWbd0wHwYDVR0j BBgwFoAUI76M6mGUBvnYYLH5fuj37Xfo7nwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmVkNmRjNC1kMzhiLTQ0YmEtOWYwYi00Mjg0NTViMjc2ZWUvMC8yM0JFOENFQTYx OTQwNkY5RDg2MEIxRjk3RUU4RjdFRDc3RThFRTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3N0U4 RUU3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJlZDZkYzQtZDM4Yi00NGJhLTlm MGItNDI4NDU1YjI3NmVlLzAvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3 RUQ3N0U4RUU3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHpM31low7iZSYVi7ukEgr97HkkUrbldNKR l5xF8dw7ElIJpaqMqL/bOeAKdc/MuIQJzdJbJs14q3wb4DkYkTQ7UvDT5nKMK5Ma sIhxsPHVld8BLLokppfHujptxGOSmCmqcv6ysZ3QnChuAtcGkQ9z/NztkliHFTWQ l3Nz1ddGB06PDXc939FOwDCjY73yXjv4OWtTEsO2g731Lnnk/mngqE/xOzvmrgaq pV69kvW4Q1+ubiR3MUPeVD0fkgrniF7lhdz03qYDWnMZ0Kn2nMbeV9ofByW8QfdT VNjkMj55J54ESsCnKh1wN1Vkc6NM/gnFDZqPAZPWpxgyWOuoomk= -----END CERTIFICATE-----Generated at Fri Jun 6 17:45:12 2025 by rpki-client