$ rpki-client -vvf repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft File: 23093B0E58201D339EAA3983654297729EB3D7FD.mft (raw, json) Hash identifier: /Krm1Uhged2h5+qce5RCVgPtc1j3PxJyliiyW7NWhXk= Subject key identifier: 3A:19:B7:4C:BE:00:C1:AF:A4:65:4C:11:3C:15:41:EB:27:18:B3:68 Authority key identifier: 23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD Certificate issuer: /CN=23093B0E58201D339EAA3983654297729EB3D7FD Certificate serial: 30C800019AE7CA9F6A6D780DFB317D90BBEEE4A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft Manifest number: 023B Signing time: Thu 05 Jun 2025 06:42:20 +0000 Manifest this update: Thu 05 Jun 2025 06:37:20 +0000 Manifest next update: Sun 08 Jun 2025 11:35:20 +0000 Files and hashes: 1: 3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa (hash: OQRs+DvdssfbxLcADcws53iRv33QqeJjAKKK3zO8V5k=) 2: 3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa (hash: 36BE9n6WV91maxO5GlAf2fK0lfyiWZQfuF7lsrGEJUk=) 3: 23093B0E58201D339EAA3983654297729EB3D7FD.crl (hash: LqE3SRxyUJWniZvj0Pw7ZrY3Eune+JXXhoFcXCbKZI0=) 4: 3130332e3136362e3231322e302f32342d3234203d3e20313431393537.roa (hash: AwdKe4Y6MEUfnqDScIzMXI+Jh2SUVi5+YUpo0QrZJkc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 11:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:c8:00:01:9a:e7:ca:9f:6a:6d:78:0d:fb:31:7d:90:bb:ee:e4:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23093B0E58201D339EAA3983654297729EB3D7FD Validity Not Before: Jun 5 06:37:20 2025 GMT Not After : Jun 8 11:35:20 2025 GMT Subject: CN=3A19B74CBE00C1AFA4654C113C1541EB2718B368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:08:0e:07:0d:16:25:eb:26:7d:fc:a5:8e:27: b4:a6:12:3f:e0:39:98:33:42:b9:5f:df:34:22:cc: b4:03:f8:59:8a:1b:7b:27:ec:20:1e:09:1e:9c:28: ea:db:58:b2:25:a6:ca:bc:b3:44:b3:06:e1:a5:4f: 21:76:91:98:c8:29:1f:cc:ca:05:21:75:f9:2d:0f: 5d:d2:27:8b:d3:87:51:27:07:60:bb:70:74:14:3d: 47:97:1a:ac:a3:78:97:e2:75:37:a7:2c:86:92:15: 14:ca:c0:3a:d1:42:59:6f:18:2e:aa:9c:0b:13:2a: ef:61:31:ca:44:06:af:5b:27:a9:ac:d2:9f:a9:ef: 21:b9:75:f6:69:8d:ef:02:de:af:bc:dd:22:df:f1: 91:fd:43:75:51:6d:44:bf:da:bb:d3:c3:b7:05:e1: cc:ce:bf:50:68:19:0d:7e:a3:78:0f:8b:7d:79:d2: ba:7f:31:a2:61:df:9c:39:e4:e9:e5:dc:4d:2a:08: 98:6a:24:e5:bc:d1:fe:31:3e:9d:99:b4:bc:0b:3d: 7b:88:e3:4b:6b:cf:45:73:e9:7e:36:d4:91:69:9c: cc:53:58:36:94:2f:c8:96:9f:0b:b8:fb:f5:6b:1a: b7:5d:c9:21:45:01:59:bf:60:6e:b2:24:dd:40:dc: d1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:19:B7:4C:BE:00:C1:AF:A4:65:4C:11:3C:15:41:EB:27:18:B3:68 X509v3 Authority Key Identifier: keyid:23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:21:6f:ac:b7:76:b5:46:af:78:db:d8:9d:66:81:82:0d:8e: 5c:5e:e1:2a:c1:c8:2a:78:00:62:6a:2b:20:b8:a2:fd:39:a1: 78:24:5b:7e:07:8a:76:60:50:48:5b:9a:98:04:d6:04:e4:98: f1:03:43:71:0d:1a:8f:fe:f4:8b:73:0c:a2:72:18:85:07:6b: d8:c0:19:8b:b2:27:e3:26:6c:12:b0:50:04:d6:08:d5:4e:a5: 18:bd:8d:d6:06:57:38:e2:5a:f5:d9:54:67:17:3c:54:cc:bd: 50:5a:70:86:12:d4:b4:3e:0d:e1:c7:b0:3d:03:f9:4d:20:0c: b0:f7:61:28:bb:36:ae:47:b5:b9:12:1b:bb:3b:59:d1:a0:b6: 0a:62:59:ee:08:8d:00:55:ec:5b:f2:4a:3f:52:da:e0:c2:a6: 25:60:dc:d8:be:fc:d0:20:de:8e:a9:e7:25:01:07:4c:02:27: 52:d2:3c:f1:b2:cc:b4:7d:3c:dd:54:b0:03:8c:13:f0:cb:88: d8:52:7e:cc:20:30:16:3b:ed:8e:e3:09:7c:56:85:dc:81:d6: 67:45:2e:93:b1:56:2f:99:e7:48:f0:d0:6a:fa:3c:47:cf:4a: ff:c8:41:02:1f:e5:a1:55:70:4c:94:5a:4e:75:68:58:2f:99: 77:31:3b:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMMgAAZrnyp9qbXgN+zF9kLvu5KcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5 RUIzRDdGRDAeFw0yNTA2MDUwNjM3MjBaFw0yNTA2MDgxMTM1MjBaMDMxMTAvBgNV BAMTKDNBMTlCNzRDQkUwMEMxQUZBNDY1NEMxMTNDMTU0MUVCMjcxOEIzNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9CA4HDRYl6yZ9/KWOJ7SmEj/g OZgzQrlf3zQizLQD+FmKG3sn7CAeCR6cKOrbWLIlpsq8s0SzBuGlTyF2kZjIKR/M ygUhdfktD13SJ4vTh1EnB2C7cHQUPUeXGqyjeJfidTenLIaSFRTKwDrRQllvGC6q nAsTKu9hMcpEBq9bJ6ms0p+p7yG5dfZpje8C3q+83SLf8ZH9Q3VRbUS/2rvTw7cF 4czOv1BoGQ1+o3gPi3150rp/MaJh35w55Onl3E0qCJhqJOW80f4xPp2ZtLwLPXuI 40trz0Vz6X421JFpnMxTWDaUL8iWnwu4+/VrGrddySFFAVm/YG6yJN1A3NFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOhm3TL4Awa+kZUwRPBVB6ycYs2gwHwYDVR0j BBgwFoAUIwk7DlggHTOeqjmDZUKXcp6z1/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTk1YjdkNC0zYWFiLTRiODMtOTRiMi1jNDI2N2IyYWUwYTAvMC8yMzA5M0IwRTU4 MjAxRDMzOUVBQTM5ODM2NTQyOTc3MjlFQjNEN0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5RUIz RDdGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU5NWI3ZDQtM2FhYi00YjgzLTk0 YjItYzQyNjdiMmFlMGEwLzAvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3 NzI5RUIzRDdGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEhb6y3drVGr3jb2J1mgYINjlxe4SrByCp4 AGJqKyC4ov05oXgkW34HinZgUEhbmpgE1gTkmPEDQ3ENGo/+9ItzDKJyGIUHa9jA GYuyJ+MmbBKwUATWCNVOpRi9jdYGVzjiWvXZVGcXPFTMvVBacIYS1LQ+DeHHsD0D +U0gDLD3YSi7Nq5HtbkSG7s7WdGgtgpiWe4IjQBV7FvySj9S2uDCpiVg3Ni+/NAg 3o6p5yUBB0wCJ1LSPPGyzLR9PN1UsAOME/DLiNhSfswgMBY77Y7jCXxWhdyB1mdF LpOxVi+Z50jw0Gr6PEfPSv/IQQIf5aFVcEyUWk51aFgvmXcxO5s= -----END CERTIFICATE-----Generated at Thu Jun 5 18:15:27 2025 by rpki-client