$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft File: F23ACCA147720B423A9576F3E408691505B293A3.mft (raw, json) Hash identifier: keNIEob/bfKAU87XnumYXZjZS7sxKSZp8kF97BAoi8E= Subject key identifier: 46:B5:C9:D7:3C:98:64:F8:D6:86:AF:56:48:26:F8:07:7E:AD:D8:43 Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 Certificate issuer: /CN=F23ACCA147720B423A9576F3E408691505B293A3 Certificate serial: 63988F948AFBFC56B87EE69859D1DD25CCC5AAE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft Manifest number: 0137 Signing time: Thu 04 Sep 2025 04:04:01 +0000 Manifest this update: Thu 04 Sep 2025 03:59:01 +0000 Manifest next update: Sun 07 Sep 2025 15:12:01 +0000 Files and hashes: 1: F23ACCA147720B423A9576F3E408691505B293A3.crl (hash: m9lbQVCVERa0JOIq3YvN8VU/zjbUkty1uSGb5CwuFBI=) 2: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: BETPcfS1VcTumvWSwQRlY9PEvVDNhn9IgT3oOeof4jw=) 3: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: bL4A3iMML3JwhDE2yFeN6uDiSzuObZzoT/f0gxHop3A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 15:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:98:8f:94:8a:fb:fc:56:b8:7e:e6:98:59:d1:dd:25:cc:c5:aa:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3 Validity Not Before: Sep 4 03:59:01 2025 GMT Not After : Sep 7 15:12:01 2025 GMT Subject: CN=46B5C9D73C9864F8D686AF564826F8077EADD843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0b:59:c4:cb:27:21:ff:98:0d:5e:d3:25:2b: 7b:2f:0f:a2:ba:aa:a6:fc:03:d0:95:18:57:06:71: cd:42:dc:78:39:ae:53:58:f0:c7:a0:1d:3f:be:cf: 10:93:bf:d0:e8:30:d4:d4:3b:60:12:fa:04:2a:9f: ff:33:c7:a2:28:66:81:11:6a:f6:4f:d9:11:81:c1: 8b:ce:ff:4c:a4:88:af:1b:cd:f9:96:a2:a3:6b:a8: a0:18:45:1d:2d:13:26:51:25:ce:ae:05:d0:11:0e: fa:e9:78:4c:71:3d:24:2b:8e:49:37:ab:29:fa:5c: 93:a2:6d:3a:2d:e9:15:ad:e8:95:fb:b5:15:48:1a: ff:52:41:c2:8b:4d:69:63:b9:70:72:39:23:fa:fe: 51:6c:aa:1d:37:d8:e3:f9:80:2d:d2:a5:77:bc:c2: 83:16:05:b3:bc:96:2a:a5:fb:ce:4d:c8:21:c4:ca: 02:46:76:4c:45:01:02:58:6b:7d:db:9b:1d:a7:2a: eb:19:04:ef:64:de:42:67:73:70:40:f6:5c:60:57: 8f:83:3f:1e:11:0e:84:dc:1f:59:b2:f8:fa:57:72: 04:72:18:9e:f5:e6:b1:69:fe:56:63:11:f4:aa:25: 5e:0b:90:e3:01:af:97:77:dc:4f:fc:7d:2b:1b:59: 5e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B5:C9:D7:3C:98:64:F8:D6:86:AF:56:48:26:F8:07:7E:AD:D8:43 X509v3 Authority Key Identifier: keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:8f:d5:dd:7e:bc:af:a5:cf:69:a2:f0:50:a1:59:67:cb:41: 10:e4:b2:7a:f9:94:7a:50:23:6a:32:05:27:08:1f:6c:87:fe: ee:a0:87:ad:18:6d:64:78:0f:eb:1a:35:97:1d:c2:f8:44:46: 84:12:66:05:2d:95:d2:d7:61:4a:3f:3f:3e:d1:fb:2f:fd:73: 5f:ca:88:c9:d8:ba:5b:81:21:64:b8:90:4d:07:1f:57:b4:f8: e3:6d:53:d3:6b:f0:30:1b:68:77:b1:e4:88:e6:3b:5f:f2:9f: c6:de:25:f3:2c:ea:79:c3:4b:63:b8:da:82:51:7e:33:7a:ae: 38:0b:b4:7e:83:a4:30:64:9f:c9:09:6e:65:db:22:9f:ee:31: 3e:2d:69:24:0d:8b:9e:c0:9d:02:41:59:b7:8a:cc:fa:b0:5a: 28:df:85:f6:b4:46:c9:89:31:19:0c:2d:08:12:0e:3d:3e:04: 01:27:d3:c5:23:14:fe:f0:ab:0c:7d:50:cb:b3:44:cf:d3:05: b2:20:9b:69:8a:07:3b:41:fc:29:ad:2a:5e:83:6a:fa:ed:c2: cc:bb:37:0e:9c:f1:be:e7:f7:53:1b:0a:fb:73:88:00:69:16: a7:94:ee:e9:0f:f8:76:ae:6f:49:b3:c1:15:8f:b9:ec:fc:49: 2a:af:1b:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY5iPlIr7/Fa4fuaYWdHdJczFquMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUw NUIyOTNBMzAeFw0yNTA5MDQwMzU5MDFaFw0yNTA5MDcxNTEyMDFaMDMxMTAvBgNV BAMTKDQ2QjVDOUQ3M0M5ODY0RjhENjg2QUY1NjQ4MjZGODA3N0VBREQ4NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjC1nEyych/5gNXtMlK3svD6K6 qqb8A9CVGFcGcc1C3Hg5rlNY8MegHT++zxCTv9DoMNTUO2AS+gQqn/8zx6IoZoER avZP2RGBwYvO/0ykiK8bzfmWoqNrqKAYRR0tEyZRJc6uBdARDvrpeExxPSQrjkk3 qyn6XJOibTot6RWt6JX7tRVIGv9SQcKLTWljuXByOSP6/lFsqh032OP5gC3SpXe8 woMWBbO8liql+85NyCHEygJGdkxFAQJYa33bmx2nKusZBO9k3kJnc3BA9lxgV4+D Px4RDoTcH1my+PpXcgRyGJ715rFp/lZjEfSqJV4LkOMBr5d33E/8fSsbWV6hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURrXJ1zyYZPjWhq9WSCb4B36t2EMwHwYDVR0j BBgwFoAU8jrMoUdyC0I6lXbz5AhpFQWyk6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWUxNDM4Mi1kNTg3LTRlODYtOGU3ZS02YTI2NGE1OGVhMDYvMC9GMjNBQ0NBMTQ3 NzIwQjQyM0E5NTc2RjNFNDA4NjkxNTA1QjI5M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUwNUIy OTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVlMTQzODItZDU4Ny00ZTg2LThl N2UtNmEyNjRhNThlYTA2LzAvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5 MTUwNUIyOTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOP1d1+vK+lz2mi8FChWWfLQRDksnr5lHpQ I2oyBScIH2yH/u6gh60YbWR4D+saNZcdwvhERoQSZgUtldLXYUo/Pz7R+y/9c1/K iMnYuluBIWS4kE0HH1e0+ONtU9Nr8DAbaHex5IjmO1/yn8beJfMs6nnDS2O42oJR fjN6rjgLtH6DpDBkn8kJbmXbIp/uMT4taSQNi57AnQJBWbeKzPqwWijfhfa0RsmJ MRkMLQgSDj0+BAEn08UjFP7wqwx9UMuzRM/TBbIgm2mKBztB/CmtKl6Davrtwsy7 Nw6c8b7n91MbCvtziABpFqeU7ukP+Haub0mzwRWPuez8SSqvG6k= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:39 2025 by rpki-client