$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft File: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft (raw, json) Hash identifier: A4Z9LCi3YNVgTGPhnBfBevouD0LEz5JoixU1cb53BNE= Subject key identifier: 32:21:E1:9A:70:07:A8:61:71:78:CC:68:F7:A7:D8:E5:63:3D:90:36 Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Certificate serial: 7F3053BAA8F2630CC90B5B50818028C1922C145C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft Manifest number: 6B Signing time: Thu 05 Jun 2025 17:00:38 +0000 Manifest this update: Thu 05 Jun 2025 16:55:38 +0000 Manifest next update: Sun 08 Jun 2025 22:08:38 +0000 Files and hashes: 1: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl (hash: xtyh71oDTY9jt03++PJ0PqqjmQJb1eqJX+cSlcJL4ww=) 2: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: VEUp2w3yPHnRqBLCf0zsUoh5RoZ8ZNdZE7XgU6xqQTk=) 3: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: 1gjKyDW4KHd430zjH8eS6Hf0gzUPhwcmOJ+5ePkv/wI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 22:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:30:53:ba:a8:f2:63:0c:c9:0b:5b:50:81:80:28:c1:92:2c:14:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Validity Not Before: Jun 5 16:55:38 2025 GMT Not After : Jun 8 22:08:38 2025 GMT Subject: CN=3221E19A7007A8617178CC68F7A7D8E5633D9036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2e:3c:55:78:c5:70:02:e4:c1:fd:79:e1:f2: 6e:8d:0c:87:be:b8:be:fe:be:6f:e5:2e:b6:9d:fc: 52:a7:fd:56:40:2a:d2:79:cd:6e:f6:3f:6d:64:f5: 4a:9f:39:4c:e0:1d:6b:5f:c1:6b:80:9b:33:20:a0: 32:d1:68:a5:3e:96:3a:b1:61:66:a4:f4:e9:b4:a8: 78:74:42:81:b4:4c:7a:f9:24:0c:01:a2:49:07:0f: c9:c7:59:6c:51:cd:2d:2a:ba:c3:10:cb:56:5d:34: 34:85:c5:20:44:02:70:a1:24:0d:45:16:4b:e6:47: 6d:e9:a1:8e:29:61:60:d4:34:93:e0:33:68:5a:44: d5:d2:21:3c:da:b6:fb:4a:8a:32:3f:65:a2:9c:3f: 44:f1:9e:08:69:b2:7c:36:75:d1:53:e1:8b:f4:4a: e3:46:a2:d1:68:e0:1c:04:26:58:ea:39:1a:0b:fc: ee:8f:44:89:d1:f7:66:98:8b:86:b1:f4:31:4d:fd: 1d:86:d5:d4:9e:43:ed:12:d7:d7:89:c5:51:53:2b: 1c:a1:9e:bc:af:7f:0b:33:0c:9a:30:a5:be:f9:df: e7:35:c6:ab:cb:3e:7b:21:fa:35:01:40:87:03:ce: 8c:4a:2a:6a:e9:29:f8:09:bf:d4:80:19:4a:79:83: f1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:21:E1:9A:70:07:A8:61:71:78:CC:68:F7:A7:D8:E5:63:3D:90:36 X509v3 Authority Key Identifier: keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f6:62:28:d7:6c:f5:b2:b1:11:b0:5a:f7:1a:2e:5a:c0:a7: d7:4f:a6:25:2d:b2:b4:12:c4:f0:79:9f:e4:28:12:83:8c:59: 73:8a:7c:25:55:4f:17:0d:7e:f3:f6:c8:10:2c:b2:29:64:02: 9f:aa:0d:61:de:8d:ca:e5:bd:b3:b7:f9:f8:6d:32:17:3b:b4: 52:de:dd:71:ef:b9:29:2c:76:7a:85:64:c3:e9:92:78:35:63: 3c:6d:9c:8a:2c:9a:65:67:f7:06:a0:7d:93:3d:5f:6b:86:03: a5:0e:af:31:8f:1c:40:73:80:12:8f:53:5e:cd:78:c7:08:af: 25:5b:6c:da:bf:32:c7:02:61:f8:df:86:55:ee:7c:4f:4c:c1: d7:11:4c:8a:3e:95:82:ec:9c:d2:88:0c:6f:4b:3c:bc:fc:12: 9b:c5:09:ed:fe:7e:7b:2c:c0:8d:39:fc:ba:33:e8:a8:98:a3: a5:b6:cb:b4:41:ca:b9:de:ab:bb:7c:0d:52:4c:6c:76:b8:6c: 1d:07:0e:fb:b4:1f:63:e6:ab:90:96:30:3e:eb:e7:35:fd:f3: 9b:a1:c7:91:61:32:f4:e1:d6:b9:ac:e0:a5:9d:31:91:f4:e0: fa:55:0f:c0:33:85:70:94:70:f5:c7:c5:d1:f9:34:12:97:e5: d9:5b:93:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfzBTuqjyYwzJC1tQgYAowZIsFFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0Ez RjVDMjhGNDAeFw0yNTA2MDUxNjU1MzhaFw0yNTA2MDgyMjA4MzhaMDMxMTAvBgNV BAMTKDMyMjFFMTlBNzAwN0E4NjE3MTc4Q0M2OEY3QTdEOEU1NjMzRDkwMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOLjxVeMVwAuTB/Xnh8m6NDIe+ uL7+vm/lLrad/FKn/VZAKtJ5zW72P21k9UqfOUzgHWtfwWuAmzMgoDLRaKU+ljqx YWak9Om0qHh0QoG0THr5JAwBokkHD8nHWWxRzS0qusMQy1ZdNDSFxSBEAnChJA1F FkvmR23poY4pYWDUNJPgM2haRNXSITzatvtKijI/ZaKcP0Txnghpsnw2ddFT4Yv0 SuNGotFo4BwEJljqORoL/O6PRInR92aYi4ax9DFN/R2G1dSeQ+0S19eJxVFTKxyh nryvfwszDJowpb753+c1xqvLPnsh+jUBQIcDzoxKKmrpKfgJv9SAGUp5g/HVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMiHhmnAHqGFxeMxo96fY5WM9kDYwHwYDVR0j BBgwFoAUI0dahrtcUV3dd1O2VV4mej9cKPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8yMzQ3NUE4NkJC NUM1MTVEREQ3NzUzQjY1NTVFMjY3QTNGNUMyOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0EzRjVD MjhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2 N0EzRjVDMjhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGr2YijXbPWysRGwWvcaLlrAp9dPpiUtsrQS xPB5n+QoEoOMWXOKfCVVTxcNfvP2yBAssilkAp+qDWHejcrlvbO3+fhtMhc7tFLe 3XHvuSksdnqFZMPpkng1YzxtnIosmmVn9wagfZM9X2uGA6UOrzGPHEBzgBKPU17N eMcIryVbbNq/MscCYfjfhlXufE9MwdcRTIo+lYLsnNKIDG9LPLz8EpvFCe3+fnss wI05/Loz6KiYo6W2y7RByrneq7t8DVJMbHa4bB0HDvu0H2Pmq5CWMD7r5zX985uh x5FhMvTh1rms4KWdMZH04PpVD8AzhXCUcPXHxdH5NBKX5dlbk8w= -----END CERTIFICATE-----Generated at Sat Jun 7 12:34:13 2025 by rpki-client