$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft File: 023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft (raw, json) Hash identifier: l5t1RyVrhDdp1PSdzS9nf5hUMf4uCwu5tj8CqInfeV8= Subject key identifier: E6:BB:4A:BC:BE:7A:FD:45:1B:BC:3C:10:17:38:42:DD:DF:C3:FC:10 Authority key identifier: 02:3D:AF:79:3C:D2:BA:F6:C7:BC:7A:45:A1:3D:F2:36:B7:40:16:61 Certificate issuer: /CN=023DAF793CD2BAF6C7BC7A45A13DF236B7401661 Certificate serial: 6049E60B7D0DFADC69E89017062A267F2D664F98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft Manifest number: 0235 Signing time: Wed 04 Jun 2025 11:22:01 +0000 Manifest this update: Wed 04 Jun 2025 11:17:01 +0000 Manifest next update: Sat 07 Jun 2025 17:36:01 +0000 Files and hashes: 1: 023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl (hash: zyRSNuJC0VW+KhT32pE8cG7YjmTnZCXHPNkcE2w6Nq0=) 2: 3130332e3134392e3132302e302f32332d3234203d3e20313430303233.roa (hash: RZP1u67IkDY1VxYw8axwNJaL5jYZcoL8kOhW1c7O+Eg=) 3: 3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa (hash: zVGnPMz6FjIWNaiokQGONx21w4m18vhd71uDshC7eyA=) 4: 3130332e3134392e3132302e302f32332d3233203d3e20313339393532.roa (hash: TIp9WHuUqK5QCHJsHK2qMd4Di3b+YgT1J52ydC6PYvs=) 5: 3130332e3134392e3132302e302f32332d3233203d3e2037373133.roa (hash: yOR4ha1iNJToiWgXnk0oG7heqETlfk80W41Jvd2P1xg=) 6: 3130332e3134392e3132302e302f32342d3234203d3e2037373133.roa (hash: Q49EnVockO7Wf1pEkALOtAUiauf7qPnxOjOocdL9Yus=) 7: 3130332e3134392e3132312e302f32342d3234203d3e20313339393532.roa (hash: s6MFeDXqeIkTAot5lzYFNGxoGgi1Yjw/2CsMKFqccxU=) 8: 3130332e3134392e3132302e302f32342d3234203d3e20313339393532.roa (hash: fr8+FrmlPGl8AfQlow8lySzaZVznKtOBprgMvRW46vw=) 9: 3130332e3134392e3132302e302f32332d3233203d3e20313430303233.roa (hash: B08azy3XQsiTZf5UppG1ngPrOYAEwHH6x3322yJGfrI=) 10: 3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa (hash: 2gVCxg+hDmKkdBfr1IN+Jz7t1loTVbupLhThyLDp4zk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 17:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:49:e6:0b:7d:0d:fa:dc:69:e8:90:17:06:2a:26:7f:2d:66:4f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023DAF793CD2BAF6C7BC7A45A13DF236B7401661 Validity Not Before: Jun 4 11:17:01 2025 GMT Not After : Jun 7 17:36:01 2025 GMT Subject: CN=E6BB4ABCBE7AFD451BBC3C10173842DDDFC3FC10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c3:31:17:60:c9:15:c4:68:74:2f:aa:01:b9: 61:6e:60:da:82:2a:34:4f:92:3c:37:d9:f2:b8:f0: d8:32:0b:b3:fe:b4:a5:6c:cc:8d:01:a3:68:4d:40: 3f:b0:45:e6:e0:4c:3d:71:ce:ba:f9:84:bf:e4:00: 83:7e:36:92:ae:90:32:5b:56:bd:c8:82:fc:24:ac: 9f:c2:9d:5e:49:c0:20:b3:66:c6:af:40:be:63:76: 38:f2:84:b0:3e:cc:2f:3c:5f:39:b5:13:2a:59:83: 33:0d:50:65:74:94:3d:5c:0d:14:b0:1b:aa:b9:29: a0:ba:fb:00:51:2d:1d:2e:33:63:d4:7f:2c:84:40: 15:af:ee:25:ed:7b:32:45:3d:d4:2c:60:bc:3c:44: 6a:65:b5:21:0e:69:a3:c0:12:35:f4:e4:da:9d:ae: 2b:7a:b1:5b:a6:73:0a:06:e4:b6:70:3a:56:ab:81: 55:3e:f7:d8:c1:d4:5f:5c:08:bc:cc:e9:9a:f7:af: 90:83:1d:28:dc:61:55:2e:b4:e9:e9:04:97:23:22: ed:c5:d4:a6:90:df:af:51:a7:fa:1a:08:8b:fc:55: 0e:5c:41:6b:a0:f6:a8:94:7a:62:28:02:7f:c3:4e: 50:c5:3f:c9:48:41:f2:2a:98:15:6a:9b:8c:75:db: fa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:BB:4A:BC:BE:7A:FD:45:1B:BC:3C:10:17:38:42:DD:DF:C3:FC:10 X509v3 Authority Key Identifier: keyid:02:3D:AF:79:3C:D2:BA:F6:C7:BC:7A:45:A1:3D:F2:36:B7:40:16:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:e0:09:af:e6:61:5c:ab:63:04:57:78:4d:ae:4b:da:ab:25: 33:98:c6:2a:0a:10:7a:71:26:92:35:2a:2e:af:7c:7c:4f:a1: 3f:19:3b:1d:6f:9f:b8:9a:c2:b6:f3:39:43:99:27:f6:4d:ee: ec:ed:d7:b6:8e:84:2b:63:19:1a:1e:e6:46:5c:b7:c9:52:bb: 56:8e:65:fe:06:d7:3e:93:04:96:de:83:03:a8:96:86:13:4b: 78:70:b4:55:99:73:4c:10:5a:df:87:b2:3a:45:90:e7:dc:44: 3d:a6:28:8b:aa:1c:c3:1d:74:8d:13:49:5c:f0:e4:d1:df:45: 9c:95:be:d7:ce:a0:19:c1:f3:db:ec:82:5f:86:40:2c:13:5a: df:5f:07:d9:c9:06:b1:ea:ae:e6:82:e1:0e:0f:5f:68:ae:67: cd:8b:62:e7:98:e9:08:69:d1:cb:d8:6f:a4:92:e2:d3:06:8f: ec:76:20:71:45:05:90:c9:56:b2:42:fd:c0:de:15:34:7c:ff: e8:50:54:82:68:d3:4f:fa:8f:e1:27:a2:b7:63:53:63:d6:2a: a4:14:7f:be:5e:f0:3c:62:e0:1d:b4:b9:51:29:22:d1:19:e0: 3c:cb:2b:49:49:e1:4e:a8:c8:63:9b:2c:47:da:ef:62:03:18: be:97:08:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYEnmC30N+txp6JAXBiomfy1mT5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYyMzZC NzQwMTY2MTAeFw0yNTA2MDQxMTE3MDFaFw0yNTA2MDcxNzM2MDFaMDMxMTAvBgNV BAMTKEU2QkI0QUJDQkU3QUZENDUxQkJDM0MxMDE3Mzg0MkREREZDM0ZDMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIwzEXYMkVxGh0L6oBuWFuYNqC KjRPkjw32fK48NgyC7P+tKVszI0Bo2hNQD+wRebgTD1xzrr5hL/kAIN+NpKukDJb Vr3IgvwkrJ/CnV5JwCCzZsavQL5jdjjyhLA+zC88Xzm1EypZgzMNUGV0lD1cDRSw G6q5KaC6+wBRLR0uM2PUfyyEQBWv7iXtezJFPdQsYLw8RGpltSEOaaPAEjX05Nqd rit6sVumcwoG5LZwOlargVU+99jB1F9cCLzM6Zr3r5CDHSjcYVUutOnpBJcjIu3F 1KaQ369Rp/oaCIv8VQ5cQWug9qiUemIoAn/DTlDFP8lIQfIqmBVqm4x12/rfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5rtKvL56/UUbvDwQFzhC3d/D/BAwHwYDVR0j BBgwFoAUAj2veTzSuvbHvHpFoT3yNrdAFmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQwZTY0MC0yMmU5LTQ0MWMtODYzNC1mOTUyNTMwN2RhNzYvMC8wMjNEQUY3OTND RDJCQUY2QzdCQzdBNDVBMTNERjIzNkI3NDAxNjYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYyMzZCNzQw MTY2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhkMGU2NDAtMjJlOS00NDFjLTg2 MzQtZjk1MjUzMDdkYTc2LzAvMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYy MzZCNzQwMTY2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbgCa/mYVyrYwRXeE2uS9qrJTOYxioKEHpx JpI1Ki6vfHxPoT8ZOx1vn7iawrbzOUOZJ/ZN7uzt17aOhCtjGRoe5kZct8lSu1aO Zf4G1z6TBJbegwOoloYTS3hwtFWZc0wQWt+HsjpFkOfcRD2mKIuqHMMddI0TSVzw 5NHfRZyVvtfOoBnB89vsgl+GQCwTWt9fB9nJBrHqruaC4Q4PX2iuZ82LYueY6Qhp 0cvYb6SS4tMGj+x2IHFFBZDJVrJC/cDeFTR8/+hQVIJo00/6j+EnordjU2PWKqQU f75e8Dxi4B20uVEpItEZ4DzLK0lJ4U6oyGObLEfa72IDGL6XCJs= -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:57 2025 by rpki-client