$ rpki-client -vvf repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft File: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft (raw, json) Hash identifier: vDC54iIz7kDCzWqG17L+aNJ21Nt96bczR6PE78GJZDU= Subject key identifier: F6:DA:50:33:EC:A0:A0:7D:FA:3E:40:56:69:64:EB:BE:03:A1:A8:53 Authority key identifier: 23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D Certificate issuer: /CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Certificate serial: 745791FF07F4A8095874E15690C4DA8938FCC9A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft Manifest number: 0509 Signing time: Sun 07 Sep 2025 17:01:48 +0000 Manifest this update: Sun 07 Sep 2025 16:56:48 +0000 Manifest next update: Thu 11 Sep 2025 04:43:48 +0000 Files and hashes: 1: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: bVRLDmnlkDr+Er81GecVOu1gTofkGixwnSL4beQ/iNg=) 2: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl (hash: aNNpTRJ5/njXw4DntSbPj+WLVtU0s3buBUu9GQaxfa0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 04:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:57:91:ff:07:f4:a8:09:58:74:e1:56:90:c4:da:89:38:fc:c9:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Validity Not Before: Sep 7 16:56:48 2025 GMT Not After : Sep 11 04:43:48 2025 GMT Subject: CN=F6DA5033ECA0A07DFA3E40566964EBBE03A1A853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5e:a2:e2:09:dc:9f:11:31:6a:0f:7e:15:4b: aa:6a:49:6c:c7:39:1b:99:a5:66:54:f0:0e:7e:82: 6b:07:8e:f8:58:bb:23:31:f9:67:f4:d7:33:f5:5b: 30:ca:e4:9e:1d:da:7d:29:b7:4b:c1:34:11:50:87: fb:e2:43:bc:6f:d8:4c:7f:08:48:c8:5b:61:57:59: 0a:03:53:32:a6:04:cc:e1:01:b0:c6:5f:7d:54:66: d5:e7:65:55:0c:32:c6:0a:60:e9:ef:30:1d:ae:d5: 44:fd:bc:c0:7e:81:cf:49:b2:13:12:24:f2:d2:f0: f3:06:78:54:0a:58:5e:44:ea:1c:bb:a5:f0:a9:fd: 97:98:3b:77:96:c2:6f:df:f1:8d:0d:d2:48:db:03: 63:99:18:42:7b:e5:fc:a3:20:73:86:c3:57:e9:bf: 92:c9:53:fd:da:19:ff:22:cb:5b:93:57:df:26:4f: b9:bb:a9:e6:9b:98:42:50:cf:be:ae:1c:31:f5:db: a9:33:5f:78:2c:af:eb:bb:65:93:47:c9:cc:d3:03: af:cd:90:c5:12:03:30:d7:5f:00:7f:63:a0:d5:ff: ff:f6:4f:3b:d7:1c:2a:df:c7:fe:ba:b1:b1:aa:fd: d5:31:d9:4e:7b:29:8c:d9:9a:6e:41:63:3d:b8:08: b8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DA:50:33:EC:A0:A0:7D:FA:3E:40:56:69:64:EB:BE:03:A1:A8:53 X509v3 Authority Key Identifier: keyid:23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ae:f6:57:f9:a9:0f:8e:57:1c:e4:45:57:4a:ec:0c:f5:bc: 2a:fc:16:6f:d1:63:8c:ba:39:78:e2:ba:d9:b0:e1:31:a7:6e: 98:cf:9a:cb:56:8a:61:dd:20:f5:98:1f:d6:05:e9:0a:f6:3e: 95:18:82:78:a7:ac:9b:8a:3e:19:06:70:44:e0:b9:fa:29:07: b0:45:81:91:40:e7:a7:64:b3:a8:29:27:53:3d:ea:a5:c7:da: 77:51:af:af:cd:2c:0c:2d:01:15:c8:a6:e6:45:e7:5d:b9:c8: 28:5c:f3:c9:68:e2:66:18:e2:1c:e0:1a:13:5d:eb:10:d3:9c: 13:42:b2:1e:53:b2:a1:80:9e:22:8a:d0:a8:9c:0e:df:d8:91: 42:0f:58:57:c5:63:56:a1:20:43:f2:42:e2:5b:f5:35:eb:69: 65:2f:7c:15:88:bb:f4:0c:58:68:bf:02:9d:b6:05:a7:f7:1e: 8a:7a:83:cf:d1:63:34:63:3c:93:d7:0f:8f:f1:73:88:fc:a8: 4f:2d:8f:85:4b:f9:10:e8:1a:c2:a6:9f:cf:01:e3:eb:3b:a1: 3f:bc:4f:c0:7b:a2:3a:fe:3b:64:d7:d2:57:2f:26:10:2c:16: b3:8a:2d:f2:ee:9d:02:07:ed:02:64:87:65:72:a1:d4:dd:7d: 1c:a4:89:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdFeR/wf0qAlYdOFWkMTaiTj8yaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUw NURERjIzRDAeFw0yNTA5MDcxNjU2NDhaFw0yNTA5MTEwNDQzNDhaMDMxMTAvBgNV BAMTKEY2REE1MDMzRUNBMEEwN0RGQTNFNDA1NjY5NjRFQkJFMDNBMUE4NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+XqLiCdyfETFqD34VS6pqSWzH ORuZpWZU8A5+gmsHjvhYuyMx+Wf01zP1WzDK5J4d2n0pt0vBNBFQh/viQ7xv2Ex/ CEjIW2FXWQoDUzKmBMzhAbDGX31UZtXnZVUMMsYKYOnvMB2u1UT9vMB+gc9JshMS JPLS8PMGeFQKWF5E6hy7pfCp/ZeYO3eWwm/f8Y0N0kjbA2OZGEJ75fyjIHOGw1fp v5LJU/3aGf8iy1uTV98mT7m7qeabmEJQz76uHDH126kzX3gsr+u7ZZNHyczTA6/N kMUSAzDXXwB/Y6DV///2TzvXHCrfx/66sbGq/dUx2U57KYzZmm5BYz24CLgRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9tpQM+ygoH36PkBWaWTrvgOhqFMwHwYDVR0j BBgwFoAUIzrybX2ubDWesDrVxvtLTgXd8j0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTVlYWM5Ny0zMWI1LTRmMzMtODJmNC01MjQxNDcwY2JiYmUvMC8yMzNBRjI2RDdE QUU2QzM1OUVCMDNBRDVDNkZCNEI0RTA1RERGMjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUwNURE RjIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU1ZWFjOTctMzFiNS00ZjMzLTgy ZjQtNTI0MTQ3MGNiYmJlLzAvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRC NEUwNURERjIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+u9lf5qQ+OVxzkRVdK7Az1vCr8Fm/RY4y6 OXjiutmw4TGnbpjPmstWimHdIPWYH9YF6Qr2PpUYgninrJuKPhkGcETgufopB7BF gZFA56dks6gpJ1M96qXH2ndRr6/NLAwtARXIpuZF5125yChc88lo4mYY4hzgGhNd 6xDTnBNCsh5TsqGAniKK0KicDt/YkUIPWFfFY1ahIEPyQuJb9TXraWUvfBWIu/QM WGi/Ap22Baf3Hop6g8/RYzRjPJPXD4/xc4j8qE8tj4VL+RDoGsKmn88B4+s7oT+8 T8B7ojr+O2TX0lcvJhAsFrOKLfLunQIH7QJkh2VyodTdfRykiQs= -----END CERTIFICATE-----Generated at Tue Sep 9 05:31:51 2025 by rpki-client