$ rpki-client -vvf repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft File: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft (raw, json) Hash identifier: IVDdzQcat3x2jvr2Q1qEJRslWEzoIgx2ZoUyG/XMvfw= Subject key identifier: 89:6E:AF:CE:94:C4:FD:4F:7F:62:BE:08:ED:5C:5E:95:14:DD:17:A9 Authority key identifier: 0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E Certificate issuer: /CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E Certificate serial: 5F312EA91A82AB7EF29AB4F9FFE941A3BD148ED7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft Manifest number: 04FE Signing time: Fri 22 Aug 2025 14:20:45 +0000 Manifest this update: Fri 22 Aug 2025 14:15:45 +0000 Manifest next update: Mon 25 Aug 2025 18:40:45 +0000 Files and hashes: 1: 323030313a6466303a3232393a3a2f34382d3438203d3e20313331373738.roa (hash: Kw/2sJDovbqcLamhNn36qpz8RozjhJRdtUEEKJ4rTNg=) 2: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (hash: /0ivdWgJqnJaSVnUB+9OuvpQlcxcSIK1E90K9ZECaAA=) 3: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl (hash: xM/bt6vvQD79tq3Nk91b3Bm4ykAGDyGRv+aYKNKOvPc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:31:2e:a9:1a:82:ab:7e:f2:9a:b4:f9:ff:e9:41:a3:bd:14:8e:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E Validity Not Before: Aug 22 14:15:45 2025 GMT Not After : Aug 25 18:40:45 2025 GMT Subject: CN=896EAFCE94C4FD4F7F62BE08ED5C5E9514DD17A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e0:95:01:a2:2f:dd:54:b4:ac:75:0d:c9:0c: b3:3e:58:5d:a4:91:4c:a0:14:d7:23:51:08:f5:a4: 3d:ef:5a:e1:37:0a:90:50:4e:77:02:8d:0f:ba:70: fd:da:e9:93:9f:94:33:0b:2b:10:83:0e:2b:ec:36: 2f:57:53:be:b6:19:71:7c:c8:11:9b:ca:77:d5:a9: 7b:3b:ff:1a:97:ba:2a:ea:9f:0c:f3:87:bc:07:33: d2:23:ab:08:a4:61:ea:07:57:84:72:88:75:f8:74: 73:c8:e4:51:29:88:7b:8c:2b:15:0f:7c:75:b8:c0: 67:7a:a7:7d:36:80:70:de:69:fe:fc:a6:4b:00:8b: 4d:7c:fa:ff:7f:31:48:7c:bc:41:6e:05:ad:b5:f0: 86:2f:3e:b6:9b:4c:d1:c0:a2:db:a9:aa:0c:98:85: 86:61:3d:0f:99:2a:b7:4c:0c:b9:21:11:29:9f:40: 6b:5f:a1:84:c7:67:bc:48:e6:f0:69:e7:e2:db:02: c5:36:03:b5:22:5f:49:bb:4f:51:37:8a:df:87:ff: d5:05:c8:36:29:89:17:cc:6a:f7:68:4e:c9:0d:ec: 33:ca:4d:43:53:e1:b7:25:a9:89:eb:72:ed:80:16: 99:a9:2d:10:b1:c2:d4:bb:8d:3d:63:af:8a:ed:98: 2b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6E:AF:CE:94:C4:FD:4F:7F:62:BE:08:ED:5C:5E:95:14:DD:17:A9 X509v3 Authority Key Identifier: keyid:0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:28:af:fd:04:43:6f:a3:f4:8a:97:84:d6:d0:50:04:67:16: ec:b5:29:8d:04:de:f9:15:39:6c:db:b3:29:a9:2a:86:fa:22: d2:0e:ff:df:2f:c8:94:92:82:1e:c6:d7:c9:89:6d:35:fe:9e: 0d:15:9b:57:a7:a5:16:52:28:0f:9d:8e:92:22:32:1c:26:df: 7d:50:eb:02:be:05:b4:aa:2e:7b:9a:a5:33:ed:52:ff:39:4d: a2:7d:92:33:2a:24:1a:22:7f:a4:4d:84:bb:07:8d:8a:d9:91: 66:1e:1a:de:ad:df:5c:43:f7:f7:16:49:b7:4c:4a:f7:ba:2a: 01:a3:5e:7c:d7:e2:d8:00:58:ee:ea:80:72:ee:7b:68:e7:ed: 91:35:6e:2b:72:f4:f7:07:2a:1c:b6:06:12:d5:49:22:9f:52: b8:42:8f:2c:c8:cd:88:92:35:69:53:d6:34:df:65:31:40:c2: 09:e5:01:d8:6c:27:fb:e4:f8:3c:9a:7c:9a:e9:16:de:be:33: 59:85:ca:67:e9:cf:e4:4b:cd:ed:1e:9b:a1:45:d8:ee:38:c4: 37:ba:11:dd:a4:a1:bc:81:da:d4:d4:02:1f:28:4b:13:77:ec: 84:39:70:d0:6c:25:9c:4e:96:ac:15:eb:79:3b:97:37:e1:22: 8c:c9:7a:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXzEuqRqCq37ymrT5/+lBo70UjtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2 QUI1Njk1RTAeFw0yNTA4MjIxNDE1NDVaFw0yNTA4MjUxODQwNDVaMDMxMTAvBgNV BAMTKDg5NkVBRkNFOTRDNEZENEY3RjYyQkUwOEVENUM1RTk1MTRERDE3QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv4JUBoi/dVLSsdQ3JDLM+WF2k kUygFNcjUQj1pD3vWuE3CpBQTncCjQ+6cP3a6ZOflDMLKxCDDivsNi9XU762GXF8 yBGbynfVqXs7/xqXuirqnwzzh7wHM9IjqwikYeoHV4RyiHX4dHPI5FEpiHuMKxUP fHW4wGd6p302gHDeaf78pksAi018+v9/MUh8vEFuBa218IYvPrabTNHAotupqgyY hYZhPQ+ZKrdMDLkhESmfQGtfoYTHZ7xI5vBp5+LbAsU2A7UiX0m7T1E3it+H/9UF yDYpiRfMavdoTskN7DPKTUNT4bclqYnrcu2AFpmpLRCxwtS7jT1jr4rtmCvLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiW6vzpTE/U9/Yr4I7VxelRTdF6kwHwYDVR0j BBgwFoAUD/5fGfvrVIn/zN83/v4KDGq1aV4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmFlNThhYy01OTE3LTQwNjktOWE2Yy04M2RjMWJhMzIxMjYvMC8wRkZFNUYxOUZC RUI1NDg5RkZDQ0RGMzdGRUZFMEEwQzZBQjU2OTVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2QUI1 Njk1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJhZTU4YWMtNTkxNy00MDY5LTlh NmMtODNkYzFiYTMyMTI2LzAvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBB MEM2QUI1Njk1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkor/0EQ2+j9IqXhNbQUARnFuy1KY0E3vkV OWzbsympKob6ItIO/98vyJSSgh7G18mJbTX+ng0Vm1enpRZSKA+djpIiMhwm331Q 6wK+BbSqLnuapTPtUv85TaJ9kjMqJBoif6RNhLsHjYrZkWYeGt6t31xD9/cWSbdM Sve6KgGjXnzX4tgAWO7qgHLue2jn7ZE1bity9PcHKhy2BhLVSSKfUrhCjyzIzYiS NWlT1jTfZTFAwgnlAdhsJ/vk+DyafJrpFt6+M1mFymfpz+RLze0em6FF2O44xDe6 Ed2kobyB2tTUAh8oSxN37IQ5cNBsJZxOlqwV63k7lzfhIozJejI= -----END CERTIFICATE-----Generated at Sat Aug 23 12:00:51 2025 by rpki-client