$ rpki-client -vvf repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft File: 0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft (raw, json) Hash identifier: u1wVbFPG76twHOXub4xhKYuZ8GUByTeFSC0f197OhW4= Subject key identifier: 3C:D6:2F:36:DE:1B:34:AA:5F:90:B1:C0:5E:5C:7D:C0:14:FC:44:4E Authority key identifier: 0F:1B:D9:D5:5C:81:21:58:AF:58:CE:47:05:3A:C6:A1:6F:57:16:F5 Certificate issuer: /CN=0F1BD9D55C812158AF58CE47053AC6A16F5716F5 Certificate serial: 628E8FD3ACBF238D006AAD114E109CA40D779D5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft Manifest number: 0128 Signing time: Sat 23 Aug 2025 16:01:14 +0000 Manifest this update: Sat 23 Aug 2025 15:56:14 +0000 Manifest next update: Tue 26 Aug 2025 22:27:14 +0000 Files and hashes: 1: 0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl (hash: XZiNAa8a/FVa03Cx22jCnNrEb9kB2HzlI/2eJGp5rNk=) 2: 3230332e3131312e3235342e302f32332d3234203d3e20313531393931.roa (hash: lxplHllIEQbjFSzZnnx3SEX7vaIurCC8TrKQIq2OFQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 22:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:8e:8f:d3:ac:bf:23:8d:00:6a:ad:11:4e:10:9c:a4:0d:77:9d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F1BD9D55C812158AF58CE47053AC6A16F5716F5 Validity Not Before: Aug 23 15:56:14 2025 GMT Not After : Aug 26 22:27:14 2025 GMT Subject: CN=3CD62F36DE1B34AA5F90B1C05E5C7DC014FC444E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:71:5e:12:9a:0d:6d:ec:6c:ca:98:fa:01:67: ee:c6:fc:4c:8b:6f:4f:2b:49:b9:e3:75:38:60:be: 49:53:02:66:1a:84:c6:31:23:61:bf:4e:77:f2:ea: a0:e1:a1:b3:00:a7:f0:ab:7d:d4:a9:c1:e8:fd:14: a0:51:34:92:36:76:62:93:69:16:27:4d:1c:9c:5c: fe:e1:b5:0e:6c:d5:a5:06:56:bb:03:78:ac:63:d0: 56:f0:3f:6a:bb:76:15:fe:98:05:e6:51:8a:c7:ab: 25:9b:a8:01:aa:4d:9c:5c:a0:f0:ab:20:00:aa:10: 2f:b8:c9:3a:dd:20:4f:e5:89:66:1c:e8:07:45:77: ef:02:4d:af:19:1d:a9:45:28:87:3d:e3:c7:83:ad: 7d:3d:0c:c2:67:1c:c2:9f:f8:0c:99:25:76:f0:45: d6:cc:87:cc:72:17:16:32:8e:f6:f8:97:4b:82:8a: ee:38:6a:56:0d:81:5b:c1:d6:7d:de:df:48:06:c6: 97:03:3b:63:24:e6:2b:16:f5:2c:47:28:5a:6a:e4: ad:21:e5:a7:f4:d1:6e:8b:65:4a:ea:2b:ba:5a:84: a2:3b:48:36:0e:48:fa:4b:bb:4d:3f:f1:de:f6:2c: d6:b2:27:02:6d:41:db:33:1c:13:e8:43:24:bc:86: 4d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D6:2F:36:DE:1B:34:AA:5F:90:B1:C0:5E:5C:7D:C0:14:FC:44:4E X509v3 Authority Key Identifier: keyid:0F:1B:D9:D5:5C:81:21:58:AF:58:CE:47:05:3A:C6:A1:6F:57:16:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:4f:6b:80:e2:a6:17:c3:d0:dc:87:0f:9e:ad:c5:8c:b9:7c: fa:40:23:f8:65:46:b5:27:16:eb:96:e5:95:a5:d9:4a:ab:d6: d8:d1:ec:94:25:78:41:1f:25:27:22:20:24:0f:70:da:d4:02: a3:31:d0:f6:03:37:69:50:87:e1:f5:e0:0e:f8:bc:92:f9:44: 3c:ac:9b:f8:a0:d3:71:1b:d0:38:cf:6c:24:5d:74:16:39:0a: 70:88:2b:2b:0c:a7:1d:ac:45:f2:c3:3b:34:01:86:2e:35:d3: 9b:de:ab:d8:8e:98:f7:96:3a:4e:1b:b0:89:6e:56:dc:cd:22: 94:ad:12:e7:55:b1:03:c3:c5:de:e6:ba:4c:a1:ca:62:0b:46: e6:93:d9:d3:69:7d:ae:f2:58:c1:07:4f:55:a4:02:92:0f:66: 77:4e:cf:7d:a7:f2:a8:96:9c:59:da:63:40:b8:07:c3:2e:14: ad:2b:91:11:1b:be:20:fa:b8:ba:59:45:fd:62:01:4e:1b:fc: 7d:b0:73:3b:08:2f:64:80:97:f6:9e:4b:78:17:3c:41:a3:3b: 7b:83:ec:31:49:c2:5c:bf:74:22:83:ed:08:d4:73:e8:93:18: d3:1c:91:69:ef:c9:06:3f:27:09:32:a1:51:36:4f:97:c9:04: 4e:60:f5:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYo6P06y/I40Aaq0RThCcpA13nVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2QTE2 RjU3MTZGNTAeFw0yNTA4MjMxNTU2MTRaFw0yNTA4MjYyMjI3MTRaMDMxMTAvBgNV BAMTKDNDRDYyRjM2REUxQjM0QUE1RjkwQjFDMDVFNUM3REMwMTRGQzQ0NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3cV4Smg1t7GzKmPoBZ+7G/EyL b08rSbnjdThgvklTAmYahMYxI2G/Tnfy6qDhobMAp/CrfdSpwej9FKBRNJI2dmKT aRYnTRycXP7htQ5s1aUGVrsDeKxj0FbwP2q7dhX+mAXmUYrHqyWbqAGqTZxcoPCr IACqEC+4yTrdIE/liWYc6AdFd+8CTa8ZHalFKIc948eDrX09DMJnHMKf+AyZJXbw RdbMh8xyFxYyjvb4l0uCiu44alYNgVvB1n3e30gGxpcDO2Mk5isW9SxHKFpq5K0h 5af00W6LZUrqK7pahKI7SDYOSPpLu00/8d72LNayJwJtQdszHBPoQyS8hk1RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPNYvNt4bNKpfkLHAXlx9wBT8RE4wHwYDVR0j BBgwFoAUDxvZ1VyBIVivWM5HBTrGoW9XFvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGUzNzdiOS01ODg5LTRjYjMtYTRjOS0wODcxMmI0ZjY2ZmMvMC8wRjFCRDlENTVD ODEyMTU4QUY1OENFNDcwNTNBQzZBMTZGNTcxNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2QTE2RjU3 MTZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRlMzc3YjktNTg4OS00Y2IzLWE0 YzktMDg3MTJiNGY2NmZjLzAvMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2 QTE2RjU3MTZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdPa4DiphfD0NyHD56txYy5fPpAI/hlRrUn FuuW5ZWl2Uqr1tjR7JQleEEfJSciICQPcNrUAqMx0PYDN2lQh+H14A74vJL5RDys m/ig03Eb0DjPbCRddBY5CnCIKysMpx2sRfLDOzQBhi4105veq9iOmPeWOk4bsIlu VtzNIpStEudVsQPDxd7mukyhymILRuaT2dNpfa7yWMEHT1WkApIPZndOz32n8qiW nFnaY0C4B8MuFK0rkREbviD6uLpZRf1iAU4b/H2wczsIL2SAl/aeS3gXPEGjO3uD 7DFJwly/dCKD7QjUc+iTGNMckWnvyQY/JwkyoVE2T5fJBE5g9YE= -----END CERTIFICATE-----Generated at Sat Aug 23 19:26:37 2025 by rpki-client