$ rpki-client -vvf repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft File: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft (raw, json) Hash identifier: D96roUfGtOvYaCsANCKVY6XeZgr7lvkS+6lMNWERbEo= Subject key identifier: D6:38:CB:E8:F0:F9:B6:F9:46:24:66:9D:79:F0:CD:BB:C8:00:93:51 Authority key identifier: 0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F Certificate issuer: /CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Certificate serial: 26C3F54701FE17824CE6ED5C26F0EE7857BB2AF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft Manifest number: 04E7 Signing time: Sun 29 Jun 2025 07:30:04 +0000 Manifest this update: Sun 29 Jun 2025 07:25:04 +0000 Manifest next update: Wed 02 Jul 2025 12:12:04 +0000 Files and hashes: 1: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl (hash: VrXCBBnQ1uw95ITBTkKrmRTgSewYYZTDeoeyvWJcLcA=) 2: 3130332e3134302e3130382e302f32342d3234203d3e203538333639.roa (hash: TU9zvXhzWTJdHe9aJGaZ4ESWd+R9UnSTLhOnKf2ldQw=) 3: 3130332e3134302e3130392e302f32342d3234203d3e203538333639.roa (hash: BUjAtiDKImhm44uw2SFH6kSw2t9lwdf9XIcal9kQ1mg=) 4: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (hash: 3sAJshp+EPOwtrV5/4YJuemXpZyIihe64Jp+iK5G1jY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:c3:f5:47:01:fe:17:82:4c:e6:ed:5c:26:f0:ee:78:57:bb:2a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Validity Not Before: Jun 29 07:25:04 2025 GMT Not After : Jul 2 12:12:04 2025 GMT Subject: CN=D638CBE8F0F9B6F94624669D79F0CDBBC8009351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:04:44:5c:5d:ec:16:49:9a:da:1d:16:d0:84: 66:25:ac:7a:e2:90:48:d6:46:de:7d:8e:03:94:77: 48:43:fe:e0:ac:f4:1d:39:ad:22:3d:f9:86:b3:73: 88:d9:91:c1:26:ad:5f:0c:96:fd:c5:d2:1d:75:c6: b5:8a:a0:9d:65:17:a6:35:cf:4d:f1:0e:63:ac:28: 18:73:47:74:be:11:31:c7:7d:e6:e3:26:1f:50:c8: 22:b2:c4:d6:95:97:e2:b0:76:da:a5:68:66:4a:75: 40:3a:ed:8a:36:b3:60:aa:44:50:43:a2:46:4a:32: 9d:fa:b6:5f:2d:d4:07:e5:a3:52:7e:2f:9e:38:bf: 0e:4e:32:4a:d9:ee:35:96:58:2e:4a:de:b0:79:c5: c6:51:90:6a:24:94:53:63:cf:e3:79:98:4c:3e:f4: 67:02:32:52:1f:fc:4c:19:a6:60:86:09:45:bb:dd: e6:a7:4d:17:e2:e1:cc:c5:f9:1d:6d:c5:26:13:85: 63:03:55:33:02:94:e1:c4:9b:44:63:9f:63:97:79: 36:e6:61:3b:88:ae:da:c4:e0:e0:d6:71:f8:c3:d2: ea:83:70:1e:c4:d4:7d:47:28:95:15:d5:5b:f8:44: 6b:2a:62:3e:f3:63:19:d7:0f:f8:2a:61:08:3f:c3: 84:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:38:CB:E8:F0:F9:B6:F9:46:24:66:9D:79:F0:CD:BB:C8:00:93:51 X509v3 Authority Key Identifier: keyid:0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:7a:e2:cf:49:ce:c0:8f:80:62:eb:98:96:3b:8f:e3:e4:98: c7:75:81:a4:62:1c:75:9d:b6:bd:5c:69:f5:a8:b6:b5:3c:f8: 3e:05:72:46:67:58:05:58:1e:4d:61:b8:a7:56:a9:02:de:43: 37:68:68:47:73:28:95:57:0c:0d:8b:aa:4d:3c:43:6b:8c:35: aa:b8:58:d3:85:0a:42:8b:70:e1:33:eb:e2:90:ac:13:53:35: 6e:1d:10:b7:96:9e:cb:53:a5:2e:35:55:8f:80:cb:e9:ba:aa: f9:2a:dc:5a:6a:a1:db:ec:3b:2b:ab:5d:22:f9:f3:80:3b:22: 61:83:b1:ab:d4:b7:90:a7:9a:25:2b:d4:41:90:bf:3e:ae:3c: 33:56:23:51:1b:4d:88:46:24:13:2d:a1:95:6f:53:8a:e0:3c: 84:ad:bd:98:6e:af:42:86:d9:bd:af:57:de:4e:2d:d7:d6:10: 16:29:8a:6a:b5:58:79:4c:88:2a:12:0d:e2:ee:a9:78:15:bb: 5a:57:70:37:72:99:48:ce:48:f9:f1:de:aa:49:23:7d:02:6e: 49:a0:c6:55:69:85:8b:58:44:4e:aa:c1:c5:9f:91:52:9f:71: 0e:8d:39:d0:6f:d5:e5:4c:76:f9:c9:3f:d6:a1:48:69:f0:b6: 1c:90:87:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJsP1RwH+F4JM5u1cJvDueFe7KvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3 NDVDRDk3RjAeFw0yNTA2MjkwNzI1MDRaFw0yNTA3MDIxMjEyMDRaMDMxMTAvBgNV BAMTKEQ2MzhDQkU4RjBGOUI2Rjk0NjI0NjY5RDc5RjBDREJCQzgwMDkzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvBERcXewWSZraHRbQhGYlrHri kEjWRt59jgOUd0hD/uCs9B05rSI9+Yazc4jZkcEmrV8Mlv3F0h11xrWKoJ1lF6Y1 z03xDmOsKBhzR3S+ETHHfebjJh9QyCKyxNaVl+KwdtqlaGZKdUA67Yo2s2CqRFBD okZKMp36tl8t1Aflo1J+L544vw5OMkrZ7jWWWC5K3rB5xcZRkGoklFNjz+N5mEw+ 9GcCMlIf/EwZpmCGCUW73eanTRfi4czF+R1txSYThWMDVTMClOHEm0Rjn2OXeTbm YTuIrtrE4ODWcfjD0uqDcB7E1H1HKJUV1Vv4RGsqYj7zYxnXD/gqYQg/w4RxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1jjL6PD5tvlGJGadefDNu8gAk1EwHwYDVR0j BBgwFoAUDV3NVEaUu+jbmdLY2rmDFHRc2X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTRhMjFiOS1mOTEyLTQxZjMtYjYyYy0xMjE3NTgxYzk0OGEvMC8wRDVEQ0Q1NDQ2 OTRCQkU4REI5OUQyRDhEQUI5ODMxNDc0NUNEOTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3NDVD RDk3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0YTIxYjktZjkxMi00MWYzLWI2 MmMtMTIxNzU4MWM5NDhhLzAvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgz MTQ3NDVDRDk3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHt64s9JzsCPgGLrmJY7j+PkmMd1gaRiHHWd tr1cafWotrU8+D4FckZnWAVYHk1huKdWqQLeQzdoaEdzKJVXDA2Lqk08Q2uMNaq4 WNOFCkKLcOEz6+KQrBNTNW4dELeWnstTpS41VY+Ay+m6qvkq3FpqodvsOyurXSL5 84A7ImGDsavUt5CnmiUr1EGQvz6uPDNWI1EbTYhGJBMtoZVvU4rgPIStvZhur0KG 2b2vV95OLdfWEBYpimq1WHlMiCoSDeLuqXgVu1pXcDdymUjOSPnx3qpJI30Cbkmg xlVphYtYRE6qwcWfkVKfcQ6NOdBv1eVMdvnJP9ahSGnwthyQh74= -----END CERTIFICATE-----Generated at Mon Jun 30 00:48:54 2025 by rpki-client