$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft File: F23ACCA147720B423A9576F3E408691505B293A3.mft (raw, json) Hash identifier: dn8UGNekkZvPJb0A0uk3M1jEOl3cpWYCOnb0NxuHD5c= Subject key identifier: C9:A3:AA:02:64:5C:CE:7C:9D:26:50:25:AB:A8:D4:42:BA:E9:B4:4D Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 Certificate issuer: /CN=F23ACCA147720B423A9576F3E408691505B293A3 Certificate serial: 3D1FAA78709DD1764F8876C3057F09B12B0BCD8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft Manifest number: 014E Signing time: Sat 25 Oct 2025 16:11:37 +0000 Manifest this update: Sat 25 Oct 2025 16:06:37 +0000 Manifest next update: Wed 29 Oct 2025 03:49:37 +0000 Files and hashes: 1: F23ACCA147720B423A9576F3E408691505B293A3.crl (hash: Uez9OrG3zlD8nIjsVJ7AkFetIcPh6XvGnfnq489IhzE=) 2: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: BETPcfS1VcTumvWSwQRlY9PEvVDNhn9IgT3oOeof4jw=) 3: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: bL4A3iMML3JwhDE2yFeN6uDiSzuObZzoT/f0gxHop3A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 03:49:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:1f:aa:78:70:9d:d1:76:4f:88:76:c3:05:7f:09:b1:2b:0b:cd:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3 Validity Not Before: Oct 25 16:06:37 2025 GMT Not After : Oct 29 03:49:37 2025 GMT Subject: CN=C9A3AA02645CCE7C9D265025ABA8D442BAE9B44D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f2:7d:d3:4c:06:c8:a7:6a:ea:d4:a8:7b:97: fd:5d:e6:5e:52:5d:ea:c4:eb:27:13:fc:60:a9:44: 8f:9d:2d:dd:c9:57:47:83:9b:d8:52:42:40:df:1c: 18:f3:60:bb:e9:d7:58:cb:ed:22:92:2f:c4:b0:6d: 31:ef:bc:11:5b:a8:09:2a:58:a1:e0:bb:0c:1e:35: 23:c7:7a:81:f0:0a:95:4d:21:41:75:d6:a6:12:ec: bc:6f:b0:10:ee:9f:c0:a3:f2:5a:b0:8f:6b:7e:7c: 12:f9:56:84:e3:1b:f5:87:23:a0:91:c5:7f:6e:c7: a4:da:a2:f8:3d:85:6c:3c:46:27:bb:dc:d5:0c:ba: da:d9:7f:dd:27:19:be:80:63:1a:24:e1:72:3a:b0: 9f:5e:d3:bf:8d:23:6c:c1:1d:28:47:5f:c4:ea:45: b9:cc:5e:9b:1c:be:3d:dc:ba:19:28:1b:20:b9:1a: 84:f8:20:65:e7:75:56:5d:0a:7f:21:f9:5a:96:58: 05:13:ab:4a:2e:ab:15:53:b4:ce:31:6e:54:c8:eb: 8d:33:3b:aa:22:00:5a:74:9d:52:79:f5:c5:9c:b4: 76:6c:b6:be:a3:ec:5f:a5:a6:fa:34:02:1d:b6:d8: df:ed:7f:27:c3:88:f2:19:75:85:40:2b:95:8b:4a: a4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A3:AA:02:64:5C:CE:7C:9D:26:50:25:AB:A8:D4:42:BA:E9:B4:4D X509v3 Authority Key Identifier: keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:07:e2:5e:41:a5:bd:a2:be:6e:da:de:6c:cb:e0:10:52:c8: 94:df:b8:70:b0:52:d0:39:3d:b3:8c:34:77:c6:42:fc:64:1a: 86:2c:46:0e:c8:30:ac:45:db:5f:e0:b1:5f:f8:a7:bc:e0:0a: cf:27:38:fe:10:50:0c:ce:6b:6d:3e:f8:c5:2c:57:28:27:29: 2f:26:83:69:bc:08:91:4a:cc:a8:09:ce:af:3e:23:e7:6b:a7: ee:5b:57:d0:45:0e:09:93:d7:6c:0c:2b:b3:a9:e5:41:96:3a: 39:73:e5:f2:d2:53:11:da:ba:27:bd:0d:9d:7b:e0:55:15:c9: 28:c6:29:c9:99:a3:13:a5:c7:6e:67:8e:be:62:83:17:ff:6e: 29:29:e5:93:8d:33:2a:14:03:0e:83:ca:6b:35:6f:8a:a6:40: dc:3d:04:50:1d:6d:90:4c:7a:83:67:b9:f4:9f:7a:29:2a:97: 3d:ea:22:6b:48:2b:b3:62:fc:e3:89:6d:20:53:45:35:bc:43: 5c:d2:4d:e2:67:26:07:8c:9b:3a:80:71:79:68:fe:a5:75:9f: 17:44:0b:9e:66:9a:d4:1c:9b:af:35:67:a4:fe:32:2a:c1:d6: 52:85:25:42:c7:c4:18:c5:6a:01:55:8d:15:16:de:52:9b:a0: 80:c9:81:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPR+qeHCd0XZPiHbDBX8JsSsLzYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUw NUIyOTNBMzAeFw0yNTEwMjUxNjA2MzdaFw0yNTEwMjkwMzQ5MzdaMDMxMTAvBgNV BAMTKEM5QTNBQTAyNjQ1Q0NFN0M5RDI2NTAyNUFCQThENDQyQkFFOUI0NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ8n3TTAbIp2rq1Kh7l/1d5l5S XerE6ycT/GCpRI+dLd3JV0eDm9hSQkDfHBjzYLvp11jL7SKSL8SwbTHvvBFbqAkq WKHguwweNSPHeoHwCpVNIUF11qYS7LxvsBDun8Cj8lqwj2t+fBL5VoTjG/WHI6CR xX9ux6Taovg9hWw8Rie73NUMutrZf90nGb6AYxok4XI6sJ9e07+NI2zBHShHX8Tq RbnMXpscvj3cuhkoGyC5GoT4IGXndVZdCn8h+VqWWAUTq0ouqxVTtM4xblTI640z O6oiAFp0nVJ59cWctHZstr6j7F+lpvo0Ah222N/tfyfDiPIZdYVAK5WLSqShAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyaOqAmRcznydJlAlq6jUQrrptE0wHwYDVR0j BBgwFoAU8jrMoUdyC0I6lXbz5AhpFQWyk6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWUxNDM4Mi1kNTg3LTRlODYtOGU3ZS02YTI2NGE1OGVhMDYvMC9GMjNBQ0NBMTQ3 NzIwQjQyM0E5NTc2RjNFNDA4NjkxNTA1QjI5M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUwNUIy OTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVlMTQzODItZDU4Ny00ZTg2LThl N2UtNmEyNjRhNThlYTA2LzAvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5 MTUwNUIyOTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgH4l5Bpb2ivm7a3mzL4BBSyJTfuHCwUtA5 PbOMNHfGQvxkGoYsRg7IMKxF21/gsV/4p7zgCs8nOP4QUAzOa20++MUsVygnKS8m g2m8CJFKzKgJzq8+I+drp+5bV9BFDgmT12wMK7Op5UGWOjlz5fLSUxHauie9DZ17 4FUVySjGKcmZoxOlx25njr5igxf/bikp5ZONMyoUAw6Dyms1b4qmQNw9BFAdbZBM eoNnufSfeikqlz3qImtIK7Ni/OOJbSBTRTW8Q1zSTeJnJgeMmzqAcXlo/qV1nxdE C55mmtQcm681Z6T+MirB1lKFJULHxBjFagFVjRUW3lKboIDJgZw= -----END CERTIFICATE-----Generated at Mon Oct 27 12:09:12 2025 by rpki-client