$ rpki-client -vvf repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft File: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft (raw, json) Hash identifier: 9cWhpBtqFMkl31Jq1Te8qsFgWc9toBa25kB2FGmKh70= Subject key identifier: 2E:DA:7D:04:DA:9B:A8:18:A8:CB:18:17:0F:04:B1:9A:36:81:AA:2F Authority key identifier: 23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D Certificate issuer: /CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Certificate serial: 7051BB4F7F4EEF0E8526F19B3714BA5447C4F132 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft Manifest number: 04DD Signing time: Mon 02 Jun 2025 02:03:11 +0000 Manifest this update: Mon 02 Jun 2025 01:58:11 +0000 Manifest next update: Thu 05 Jun 2025 06:12:11 +0000 Files and hashes: 1: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: bVRLDmnlkDr+Er81GecVOu1gTofkGixwnSL4beQ/iNg=) 2: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl (hash: Fol3Awy9f6CINPp8K5xAl9Y0gg4OzgYiEZ8BHlhy3qA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 06:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:51:bb:4f:7f:4e:ef:0e:85:26:f1:9b:37:14:ba:54:47:c4:f1:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Validity Not Before: Jun 2 01:58:11 2025 GMT Not After : Jun 5 06:12:11 2025 GMT Subject: CN=2EDA7D04DA9BA818A8CB18170F04B19A3681AA2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:12:8c:6f:8e:53:39:0d:85:e4:24:f5:0d: b6:18:e0:c0:03:e2:d5:8d:c5:e3:d7:d1:bc:ac:d3: 07:cd:3b:da:1b:30:92:7e:13:a1:cc:98:b2:0d:3a: 2c:08:6f:20:49:f8:4d:d9:8e:02:0f:e4:20:29:3b: f4:aa:e9:06:9f:8b:c9:af:b0:53:e5:b7:af:9a:66: 97:54:73:fd:25:cd:df:8d:6c:6b:88:0d:c7:68:c0: 88:05:00:78:00:51:46:62:38:19:6d:1c:f4:84:00: 76:26:2f:a6:70:f8:b7:81:46:fc:dc:e0:f0:cc:f0: 51:b2:f9:e2:55:d6:b5:44:5d:34:fa:da:43:23:88: 6f:15:a7:bb:bd:a7:fd:a8:ca:4f:86:1d:b4:1b:a6: 69:1d:97:0a:fa:b9:02:6a:da:4b:8c:ed:7e:df:10: 44:1c:ca:3e:80:84:11:37:eb:5a:91:0c:73:ee:ee: d8:2a:af:3a:74:82:68:f2:f6:44:b9:bf:5b:86:65: b7:e7:8f:d8:8a:27:71:9d:e3:c2:26:be:17:6c:b3: 39:6c:14:c9:9c:21:c7:e7:9e:d0:ef:81:ab:43:b4: ec:ed:10:86:65:49:bf:0d:eb:53:e4:c6:48:96:1a: c2:83:24:ad:bb:7c:3e:53:e1:ab:b8:c3:69:ee:2a: 0a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DA:7D:04:DA:9B:A8:18:A8:CB:18:17:0F:04:B1:9A:36:81:AA:2F X509v3 Authority Key Identifier: keyid:23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9e:f6:f5:5a:8a:b1:65:12:6e:bc:1e:c1:6c:74:34:b7:68: d4:48:75:1e:f7:df:31:1e:dc:28:ea:d2:f0:a4:15:31:da:fe: 85:12:ee:36:b8:66:3a:43:7d:44:59:e6:1b:ae:99:b0:e1:1a: b1:98:6f:d9:6f:66:71:94:39:6b:3c:ae:f0:c6:fc:ff:78:95: 9f:28:30:ee:48:05:fd:0c:ba:45:cb:64:6e:cd:92:05:8c:07: cc:67:e8:3d:48:7f:13:c0:c9:aa:ff:33:f8:ce:38:86:75:7b: 2a:fa:2a:7f:f5:89:e8:8a:e5:1f:9c:e0:e9:c3:9e:93:0f:e7: d2:58:4d:47:ea:b9:78:1f:77:79:4c:11:46:db:af:36:79:20: 7f:c3:ba:d9:ec:78:44:36:17:65:e6:2d:70:ec:fd:0c:0e:76: 6a:62:03:ea:82:1d:4a:1d:3a:06:a8:58:6e:c9:5c:d7:7d:ca: f3:9d:47:79:8d:e9:86:4c:26:de:c1:44:6a:52:e7:2a:3a:2b: 2d:a8:2e:1d:02:91:51:c9:a5:b2:c8:29:6a:17:6d:23:37:40: 6e:4b:08:02:81:93:57:94:f3:7d:5b:c8:1e:cc:c9:4a:03:bb: 3f:fa:b8:0c:15:b6:47:ff:ac:ca:13:fa:ce:cb:2b:5d:cf:0b: c4:76:a8:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcFG7T39O7w6FJvGbNxS6VEfE8TIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUw NURERjIzRDAeFw0yNTA2MDIwMTU4MTFaFw0yNTA2MDUwNjEyMTFaMDMxMTAvBgNV BAMTKDJFREE3RDA0REE5QkE4MThBOENCMTgxNzBGMDRCMTlBMzY4MUFBMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5sxKMb45TOQ2F5CT1DbYY4MAD 4tWNxePX0bys0wfNO9obMJJ+E6HMmLINOiwIbyBJ+E3ZjgIP5CApO/Sq6Qafi8mv sFPlt6+aZpdUc/0lzd+NbGuIDcdowIgFAHgAUUZiOBltHPSEAHYmL6Zw+LeBRvzc 4PDM8FGy+eJV1rVEXTT62kMjiG8Vp7u9p/2oyk+GHbQbpmkdlwr6uQJq2kuM7X7f EEQcyj6AhBE361qRDHPu7tgqrzp0gmjy9kS5v1uGZbfnj9iKJ3Gd48Imvhdsszls FMmcIcfnntDvgatDtOztEIZlSb8N61PkxkiWGsKDJK27fD5T4au4w2nuKgotAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULtp9BNqbqBioyxgXDwSxmjaBqi8wHwYDVR0j BBgwFoAUIzrybX2ubDWesDrVxvtLTgXd8j0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTVlYWM5Ny0zMWI1LTRmMzMtODJmNC01MjQxNDcwY2JiYmUvMC8yMzNBRjI2RDdE QUU2QzM1OUVCMDNBRDVDNkZCNEI0RTA1RERGMjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUwNURE RjIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU1ZWFjOTctMzFiNS00ZjMzLTgy ZjQtNTI0MTQ3MGNiYmJlLzAvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRC NEUwNURERjIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABye9vVairFlEm68HsFsdDS3aNRIdR733zEe 3Cjq0vCkFTHa/oUS7ja4ZjpDfURZ5huumbDhGrGYb9lvZnGUOWs8rvDG/P94lZ8o MO5IBf0MukXLZG7NkgWMB8xn6D1IfxPAyar/M/jOOIZ1eyr6Kn/1ieiK5R+c4OnD npMP59JYTUfquXgfd3lMEUbbrzZ5IH/DutnseEQ2F2XmLXDs/QwOdmpiA+qCHUod OgaoWG7JXNd9yvOdR3mN6YZMJt7BRGpS5yo6Ky2oLh0CkVHJpbLIKWoXbSM3QG5L CAKBk1eU831byB7MyUoDuz/6uAwVtkf/rMoT+s7LK13PC8R2qFI= -----END CERTIFICATE-----Generated at Tue Jun 3 23:17:56 2025 by rpki-client