$ rpki-client -vvf repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft File: 0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft (raw, json) Hash identifier: q9endRFPzDMzFPOol+v5y7J/VxinYw9UEUz7Rv9VXT8= Subject key identifier: 39:6E:0C:A9:29:FB:C3:14:75:FE:90:8F:73:64:41:64:3B:61:E9:A5 Authority key identifier: 0F:1B:D9:D5:5C:81:21:58:AF:58:CE:47:05:3A:C6:A1:6F:57:16:F5 Certificate issuer: /CN=0F1BD9D55C812158AF58CE47053AC6A16F5716F5 Certificate serial: 4439E78F8835E52067E2D74ECD07AF00910C0B89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft Manifest number: 0112 Signing time: Fri 04 Jul 2025 03:11:12 +0000 Manifest this update: Fri 04 Jul 2025 03:06:12 +0000 Manifest next update: Mon 07 Jul 2025 10:33:12 +0000 Files and hashes: 1: 3230332e3131312e3235342e302f32332d3234203d3e20313531393931.roa (hash: lxplHllIEQbjFSzZnnx3SEX7vaIurCC8TrKQIq2OFQI=) 2: 0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl (hash: zbTbo6Il1Cnwo9iCpZSSfKcjt2x4PyXALCYN69fNxkI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 10:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:39:e7:8f:88:35:e5:20:67:e2:d7:4e:cd:07:af:00:91:0c:0b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F1BD9D55C812158AF58CE47053AC6A16F5716F5 Validity Not Before: Jul 4 03:06:12 2025 GMT Not After : Jul 7 10:33:12 2025 GMT Subject: CN=396E0CA929FBC31475FE908F736441643B61E9A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:97:ed:e6:ca:e7:e5:e3:73:03:88:f8:84:35: e8:a6:95:c8:51:e9:b6:a6:c3:2c:17:22:31:9a:2d: 8b:3f:a4:c9:c8:07:54:ec:88:95:ba:a4:8a:53:e3: 86:58:a9:17:5e:9f:f8:a1:78:b2:47:48:a2:5e:0e: de:31:8e:70:0a:34:1e:d4:07:ae:c8:58:6c:a8:59: e4:ab:4d:60:59:45:ce:9f:f4:6d:02:2b:34:4b:bd: cf:0b:c6:27:49:41:59:6a:13:3d:f6:e6:69:72:2b: 32:85:cc:8a:4b:1b:89:39:f9:67:f2:c3:54:a9:96: ee:b1:d4:71:09:50:3a:7d:76:df:a5:5d:fc:a9:f2: 0a:ab:e5:53:c5:5f:3c:5f:b5:c7:c0:d2:d6:24:cb: f8:c5:c9:e8:69:62:ce:2c:0b:ab:3b:89:5b:b5:63: ab:8a:cc:7c:2a:10:24:5d:60:db:6e:a7:43:13:02: ef:ee:b7:da:31:05:28:1f:c5:21:df:ce:43:30:cb: 65:08:b2:01:14:d5:10:87:08:d1:bc:44:65:b6:31: 31:42:a1:95:0e:bd:c8:c3:52:9d:7b:5c:b8:be:cf: 46:14:46:ff:15:e3:10:39:8b:c0:fe:49:d9:b0:42: 39:2b:60:84:42:41:59:e1:79:7c:74:43:42:4f:0f: b1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6E:0C:A9:29:FB:C3:14:75:FE:90:8F:73:64:41:64:3B:61:E9:A5 X509v3 Authority Key Identifier: keyid:0F:1B:D9:D5:5C:81:21:58:AF:58:CE:47:05:3A:C6:A1:6F:57:16:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:92:10:45:ae:c9:2a:3a:8e:33:d3:88:54:c5:a1:1e:1c:9a: 9e:af:3f:2a:63:8c:ba:7f:49:7f:0f:93:a2:c5:5e:16:f3:ad: fe:d8:ac:f3:a1:26:5e:84:ca:85:f2:e8:28:18:7c:15:93:ee: 03:8e:9a:b8:bb:f3:d7:30:dd:5a:f6:53:2d:08:a6:8a:ad:92: 46:36:50:3f:06:b1:0a:65:3c:b8:9b:9d:6a:31:83:ca:86:c3: 41:7d:0e:b6:4d:45:b7:65:50:0f:42:f5:83:90:ef:95:32:e9: 65:aa:c5:04:15:d6:05:af:78:4a:30:0e:b2:87:48:f9:6e:92: 3b:da:35:64:28:72:41:89:69:38:68:4d:df:42:0b:da:e8:b0: e2:80:3c:08:23:88:8c:27:2c:96:83:bd:fa:e0:1d:d4:60:94: 84:95:39:9e:83:fe:16:36:ea:d6:bf:a9:d3:82:42:dd:3d:a0: 13:82:a6:26:0a:62:77:01:8e:1d:bc:d6:81:27:33:5c:ee:8b: c3:9f:55:7c:79:9a:06:44:15:5b:48:b8:64:da:a4:64:f2:7a: 27:2f:3b:95:1e:af:7a:6c:64:4f:a5:8e:e0:81:ba:05:2d:6e: 17:0d:01:08:dc:f1:43:2e:d1:17:b9:c4:71:bd:81:6a:28:d9: ac:b2:01:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURDnnj4g15SBn4tdOzQevAJEMC4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2QTE2 RjU3MTZGNTAeFw0yNTA3MDQwMzA2MTJaFw0yNTA3MDcxMDMzMTJaMDMxMTAvBgNV BAMTKDM5NkUwQ0E5MjlGQkMzMTQ3NUZFOTA4RjczNjQ0MTY0M0I2MUU5QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGl+3myufl43MDiPiENeimlchR 6bamwywXIjGaLYs/pMnIB1TsiJW6pIpT44ZYqRden/iheLJHSKJeDt4xjnAKNB7U B67IWGyoWeSrTWBZRc6f9G0CKzRLvc8LxidJQVlqEz325mlyKzKFzIpLG4k5+Wfy w1Splu6x1HEJUDp9dt+lXfyp8gqr5VPFXzxftcfA0tYky/jFyehpYs4sC6s7iVu1 Y6uKzHwqECRdYNtup0MTAu/ut9oxBSgfxSHfzkMwy2UIsgEU1RCHCNG8RGW2MTFC oZUOvcjDUp17XLi+z0YURv8V4xA5i8D+SdmwQjkrYIRCQVnheXx0Q0JPD7EXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOW4MqSn7wxR1/pCPc2RBZDth6aUwHwYDVR0j BBgwFoAUDxvZ1VyBIVivWM5HBTrGoW9XFvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGUzNzdiOS01ODg5LTRjYjMtYTRjOS0wODcxMmI0ZjY2ZmMvMC8wRjFCRDlENTVD ODEyMTU4QUY1OENFNDcwNTNBQzZBMTZGNTcxNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2QTE2RjU3 MTZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRlMzc3YjktNTg4OS00Y2IzLWE0 YzktMDg3MTJiNGY2NmZjLzAvMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2 QTE2RjU3MTZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSSEEWuySo6jjPTiFTFoR4cmp6vPypjjLp/ SX8Pk6LFXhbzrf7YrPOhJl6EyoXy6CgYfBWT7gOOmri789cw3Vr2Uy0IpoqtkkY2 UD8GsQplPLibnWoxg8qGw0F9DrZNRbdlUA9C9YOQ75Uy6WWqxQQV1gWveEowDrKH SPlukjvaNWQockGJaThoTd9CC9rosOKAPAgjiIwnLJaDvfrgHdRglISVOZ6D/hY2 6ta/qdOCQt09oBOCpiYKYncBjh281oEnM1zui8OfVXx5mgZEFVtIuGTapGTyeicv O5Uer3psZE+ljuCBugUtbhcNAQjc8UMu0Re5xHG9gWoo2ayyAU4= -----END CERTIFICATE-----Generated at Sun Jul 6 00:11:18 2025 by rpki-client