$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft File: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft (raw, json) Hash identifier: gJRSB7pTofrEQdbDLnv6IYllR9rktrbSVDm3JRxwrHY= Subject key identifier: FB:42:37:3C:B3:7D:76:8E:83:A3:7F:37:DA:F6:30:E8:C4:59:57:12 Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Certificate serial: 70993C4C2DC7934EB94908BC7558EB672BA021A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft Manifest number: 90 Signing time: Thu 28 Aug 2025 15:40:36 +0000 Manifest this update: Thu 28 Aug 2025 15:35:36 +0000 Manifest next update: Mon 01 Sep 2025 03:20:36 +0000 Files and hashes: 1: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: 1gjKyDW4KHd430zjH8eS6Hf0gzUPhwcmOJ+5ePkv/wI=) 2: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: VEUp2w3yPHnRqBLCf0zsUoh5RoZ8ZNdZE7XgU6xqQTk=) 3: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl (hash: aeUf9ji3z3aaDUgdW9kTNsWu7TpGoEZ4jkTeNJC7mnw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 03:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:99:3c:4c:2d:c7:93:4e:b9:49:08:bc:75:58:eb:67:2b:a0:21:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Validity Not Before: Aug 28 15:35:36 2025 GMT Not After : Sep 1 03:20:36 2025 GMT Subject: CN=FB42373CB37D768E83A37F37DAF630E8C4595712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1e:48:78:b3:0c:59:eb:67:8b:a6:b6:4b:63: 28:07:e0:ff:0b:11:1f:1d:ac:43:af:0c:0b:b8:e0: bd:77:cc:c6:2b:06:05:1d:c8:17:67:c4:29:30:37: 3c:43:c7:23:a3:3f:49:28:4b:d7:5f:cd:5b:b1:c8: 6e:d5:e8:80:dd:f6:0d:f0:bc:79:8d:61:fb:d2:2c: 03:c6:64:98:09:01:85:96:ed:4d:fd:30:d7:33:cb: 75:9a:8f:72:de:4c:70:d3:59:d5:ce:55:85:ac:22: b5:e9:eb:22:9e:69:43:03:b5:1e:72:84:75:60:5d: 54:3d:51:00:0e:26:cc:80:f3:9c:b2:96:98:bb:36: 5d:93:20:9c:8a:d0:84:bd:da:f3:b1:09:f7:7d:15: 85:df:eb:98:f8:0c:5a:4d:b7:0a:9c:22:c1:db:9f: fa:1f:a3:f8:10:b3:d7:57:54:02:c3:60:03:ff:56: b2:a7:60:d2:a3:68:e0:c9:2d:5b:ea:e8:4e:c0:fb: fa:b1:dd:d0:80:60:09:6e:6d:d1:72:cf:11:1f:b1: 0e:91:05:c8:9f:63:fd:af:0c:a6:fe:44:b5:87:1b: 3d:a1:da:df:6a:e7:34:99:4e:68:11:77:fb:2a:13: 9f:a6:a0:15:15:3e:b4:7a:cd:d1:15:40:8e:0d:d7: f4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:42:37:3C:B3:7D:76:8E:83:A3:7F:37:DA:F6:30:E8:C4:59:57:12 X509v3 Authority Key Identifier: keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:b7:a4:c9:b5:cb:fa:fa:e6:5e:0d:14:51:27:ec:e1:7a:47: 75:84:25:c1:05:ce:94:71:8a:df:88:b5:83:d8:95:aa:a7:e2: 7e:a8:22:3b:15:84:4c:11:bc:0f:ec:18:de:71:3e:ca:9e:cc: 14:57:b9:3c:fd:10:cc:07:a0:99:9b:83:04:92:9b:16:e5:16: 39:44:68:8c:4f:b4:52:f4:47:65:8d:c8:66:60:59:65:0b:a0: e2:e8:0b:fe:73:9c:a5:29:bf:d3:be:13:67:67:e2:b9:bc:37: db:37:fd:7d:7a:76:1b:49:6b:6e:a0:00:6f:06:ab:2a:4f:91: 09:62:db:3b:b0:d0:2e:1d:ae:3e:0a:06:75:df:e8:b1:55:48: 92:9e:8c:67:96:e8:0b:17:bb:20:a9:bf:19:14:62:73:f3:d7: 16:9b:d4:ac:e0:7d:09:82:8a:7f:78:8d:24:86:93:a8:26:03: d3:48:04:78:6f:71:1a:3c:b2:12:5e:df:d3:dc:c2:dd:46:6c: 64:7f:f3:36:1a:0f:81:77:0e:ca:75:ab:6f:e8:25:a4:39:60: a2:08:a7:3a:2f:b1:98:0b:c4:52:91:d2:39:ed:e6:fb:5a:d7: b8:c8:9c:cd:f5:99:c4:b3:d4:ab:30:95:77:31:c3:8c:4b:79: 2d:6b:46:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcJk8TC3Hk065SQi8dVjrZyugIaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0Ez RjVDMjhGNDAeFw0yNTA4MjgxNTM1MzZaFw0yNTA5MDEwMzIwMzZaMDMxMTAvBgNV BAMTKEZCNDIzNzNDQjM3RDc2OEU4M0EzN0YzN0RBRjYzMEU4QzQ1OTU3MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFHkh4swxZ62eLprZLYygH4P8L ER8drEOvDAu44L13zMYrBgUdyBdnxCkwNzxDxyOjP0koS9dfzVuxyG7V6IDd9g3w vHmNYfvSLAPGZJgJAYWW7U39MNczy3Waj3LeTHDTWdXOVYWsIrXp6yKeaUMDtR5y hHVgXVQ9UQAOJsyA85yylpi7Nl2TIJyK0IS92vOxCfd9FYXf65j4DFpNtwqcIsHb n/ofo/gQs9dXVALDYAP/VrKnYNKjaODJLVvq6E7A+/qx3dCAYAlubdFyzxEfsQ6R BcifY/2vDKb+RLWHGz2h2t9q5zSZTmgRd/sqE5+moBUVPrR6zdEVQI4N1/RtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+0I3PLN9do6Do3832vYw6MRZVxIwHwYDVR0j BBgwFoAUI0dahrtcUV3dd1O2VV4mej9cKPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8yMzQ3NUE4NkJC NUM1MTVEREQ3NzUzQjY1NTVFMjY3QTNGNUMyOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0EzRjVD MjhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2 N0EzRjVDMjhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALa3pMm1y/r65l4NFFEn7OF6R3WEJcEFzpRx it+ItYPYlaqn4n6oIjsVhEwRvA/sGN5xPsqezBRXuTz9EMwHoJmbgwSSmxblFjlE aIxPtFL0R2WNyGZgWWULoOLoC/5znKUpv9O+E2dn4rm8N9s3/X16dhtJa26gAG8G qypPkQli2zuw0C4drj4KBnXf6LFVSJKejGeW6AsXuyCpvxkUYnPz1xab1KzgfQmC in94jSSGk6gmA9NIBHhvcRo8shJe39Pcwt1GbGR/8zYaD4F3Dsp1q2/oJaQ5YKII pzovsZgLxFKR0jnt5vta17jInM31mcSz1KswlXcxw4xLeS1rRh8= -----END CERTIFICATE-----Generated at Sun Aug 31 04:06:16 2025 by rpki-client