$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft File: F23ACCA147720B423A9576F3E408691505B293A3.mft (raw, json) Hash identifier: hjkjHk0T0jobEaFvJJrbI3iDKobrwMwYJZKtzJ1qOyc= Subject key identifier: 69:37:0B:9A:81:FF:9A:29:F1:65:12:91:6E:6B:F0:F2:32:D9:49:CC Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 Certificate issuer: /CN=F23ACCA147720B423A9576F3E408691505B293A3 Certificate serial: 53EFF40D9C7A7B469ABDE8F899DC36330FACF613 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft Manifest number: 010E Signing time: Wed 04 Jun 2025 08:11:34 +0000 Manifest this update: Wed 04 Jun 2025 08:06:34 +0000 Manifest next update: Sat 07 Jun 2025 16:54:34 +0000 Files and hashes: 1: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: 4xG5rUbrfk7U5JEhOVdnlCDzgzXDJr6D4I9VnoiM2Rc=) 2: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: tvYlBhnklEiw/TZsUy/XAKxHZ5SwpPC4Bkk7W+uYiRM=) 3: F23ACCA147720B423A9576F3E408691505B293A3.crl (hash: M7Uj52zFJtf/xUU19uYxpU9saXv93Z4U7xgN7FahSsg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 16:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ef:f4:0d:9c:7a:7b:46:9a:bd:e8:f8:99:dc:36:33:0f:ac:f6:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3 Validity Not Before: Jun 4 08:06:34 2025 GMT Not After : Jun 7 16:54:34 2025 GMT Subject: CN=69370B9A81FF9A29F16512916E6BF0F232D949CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:eb:c3:0c:52:9d:f1:15:3e:82:9f:c7:86:cd: 73:54:b4:46:76:1c:a7:76:6d:00:23:92:54:2c:ad: c3:42:2c:f7:ac:6f:b3:80:cd:7c:ad:28:4c:14:71: 33:f9:fb:d1:6c:42:7f:53:f6:40:e7:ad:d2:08:00: 84:22:7f:f3:85:de:b5:28:35:60:6d:b3:5c:b8:84: 98:25:d4:a0:14:29:2e:f1:94:0d:3f:f5:e6:c5:a7: d3:8e:e6:95:50:31:d1:4f:9f:04:1c:a9:93:61:a5: ff:26:f6:b9:58:4e:62:46:b2:79:ca:96:50:77:f0: 7f:93:e7:b1:a3:b2:72:f6:49:30:61:d7:20:69:ce: b6:e6:d1:9c:73:94:17:cf:cb:8e:c4:df:96:d4:ac: d6:43:56:5d:3f:7d:f1:54:fb:01:78:02:7d:32:36: 78:45:c5:70:8e:24:f8:3f:46:5c:14:1f:5d:b6:83: 84:de:19:62:a7:fa:08:f6:dd:77:51:ad:d0:a5:d6: b9:36:0f:db:e5:ec:ba:0b:19:72:95:cb:2e:9a:fb: 89:f6:5f:c9:b4:35:fd:1c:bc:8c:19:4f:07:55:30: 4e:2a:2c:cf:0c:f4:50:80:50:06:ca:26:75:de:c1: 6d:01:38:ad:6d:56:a0:03:42:19:02:f8:51:a4:40: c1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:37:0B:9A:81:FF:9A:29:F1:65:12:91:6E:6B:F0:F2:32:D9:49:CC X509v3 Authority Key Identifier: keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:c2:c8:0f:77:22:b6:c7:ca:01:a4:6c:57:c1:9f:58:bb:83: b2:a7:40:8a:a4:c9:6d:d6:07:a7:a5:6c:8a:6f:df:15:c4:1d: 69:a5:20:63:a3:9e:ae:70:bb:4d:0b:24:8d:f8:61:d8:04:c4: b6:d3:23:b1:76:ae:2c:45:57:87:8b:c1:66:1b:99:c3:f8:81: 6c:6a:8e:36:8c:59:26:99:f3:2e:01:4a:fe:d3:f7:57:ab:29: 54:f6:37:61:d7:c6:77:ad:85:fd:c8:53:71:40:0e:c4:15:ef: 44:ab:c7:b9:10:5a:5f:65:33:15:11:c4:85:70:09:3d:35:7d: 14:8c:95:9c:6f:50:2d:df:24:6a:48:58:e8:d1:55:6b:85:6f: 7d:e7:76:90:78:d8:05:2d:13:2c:76:bd:cc:c2:a6:a2:e0:c8: a2:76:31:e1:fd:08:6c:a2:ba:24:b7:0c:ae:51:4c:25:92:8e: 4f:27:d9:54:31:3a:18:80:30:5e:cc:6b:6c:e9:09:77:a4:64: 25:28:78:bc:43:a6:e3:d3:f6:fa:19:96:c8:b4:58:b0:09:d9: 1f:32:b3:c1:67:b4:e4:08:ff:0d:09:cd:b7:a4:3f:e2:06:72: fc:35:7a:96:26:e0:34:d8:46:ca:89:97:ae:87:c4:44:e8:51: b2:4f:df:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU+/0DZx6e0aavej4mdw2Mw+s9hMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUw NUIyOTNBMzAeFw0yNTA2MDQwODA2MzRaFw0yNTA2MDcxNjU0MzRaMDMxMTAvBgNV BAMTKDY5MzcwQjlBODFGRjlBMjlGMTY1MTI5MTZFNkJGMEYyMzJEOTQ5Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd68MMUp3xFT6Cn8eGzXNUtEZ2 HKd2bQAjklQsrcNCLPesb7OAzXytKEwUcTP5+9FsQn9T9kDnrdIIAIQif/OF3rUo NWBts1y4hJgl1KAUKS7xlA0/9ebFp9OO5pVQMdFPnwQcqZNhpf8m9rlYTmJGsnnK llB38H+T57GjsnL2STBh1yBpzrbm0ZxzlBfPy47E35bUrNZDVl0/ffFU+wF4An0y NnhFxXCOJPg/RlwUH122g4TeGWKn+gj23XdRrdCl1rk2D9vl7LoLGXKVyy6a+4n2 X8m0Nf0cvIwZTwdVME4qLM8M9FCAUAbKJnXewW0BOK1tVqADQhkC+FGkQMEXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaTcLmoH/minxZRKRbmvw8jLZScwwHwYDVR0j BBgwFoAU8jrMoUdyC0I6lXbz5AhpFQWyk6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWUxNDM4Mi1kNTg3LTRlODYtOGU3ZS02YTI2NGE1OGVhMDYvMC9GMjNBQ0NBMTQ3 NzIwQjQyM0E5NTc2RjNFNDA4NjkxNTA1QjI5M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUwNUIy OTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVlMTQzODItZDU4Ny00ZTg2LThl N2UtNmEyNjRhNThlYTA2LzAvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5 MTUwNUIyOTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMPCyA93IrbHygGkbFfBn1i7g7KnQIqkyW3W B6elbIpv3xXEHWmlIGOjnq5wu00LJI34YdgExLbTI7F2rixFV4eLwWYbmcP4gWxq jjaMWSaZ8y4BSv7T91erKVT2N2HXxnethf3IU3FADsQV70Srx7kQWl9lMxURxIVw CT01fRSMlZxvUC3fJGpIWOjRVWuFb33ndpB42AUtEyx2vczCpqLgyKJ2MeH9CGyi uiS3DK5RTCWSjk8n2VQxOhiAMF7Ma2zpCXekZCUoeLxDpuPT9voZlsi0WLAJ2R8y s8FntOQI/w0JzbekP+IGcvw1epYm4DTYRsqJl66HxEToUbJP3yg= -----END CERTIFICATE-----Generated at Thu Jun 5 19:50:34 2025 by rpki-client