$ rpki-client -vvf repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft File: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft (raw, json) Hash identifier: Fe5Ti/BNvGQBCarNC+/SA5YypNogPMVEI7+YtXXXydI= Subject key identifier: 12:57:0A:26:88:3E:94:CF:5A:25:05:00:5C:0B:CC:EA:40:29:AF:E6 Authority key identifier: 0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E Certificate issuer: /CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E Certificate serial: 220E00B177721B0AEA991F8AA8CB0D1FED7C7742 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft Manifest number: 04CF Signing time: Fri 09 May 2025 00:10:44 +0000 Manifest this update: Fri 09 May 2025 00:05:44 +0000 Manifest next update: Mon 12 May 2025 10:51:44 +0000 Files and hashes: 1: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (hash: jNblYOWXGZ9xpdk1D93yOMfg4jMrdJm4XYm7AukDLjw=) 2: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl (hash: CNiqmB9Wig6BHgomrLDtzSwYIm9UAFGyHpkQUILoaCk=) 3: 323030313a6466303a3232393a3a2f34382d3438203d3e20313331373738.roa (hash: 4nSQ/iGCwdxa7Cn3istPAWcahjYvD0wVk1MPIKQ3DRU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 10:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:0e:00:b1:77:72:1b:0a:ea:99:1f:8a:a8:cb:0d:1f:ed:7c:77:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E Validity Not Before: May 9 00:05:44 2025 GMT Not After : May 12 10:51:44 2025 GMT Subject: CN=12570A26883E94CF5A2505005C0BCCEA4029AFE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4c:b9:fd:d1:fc:c3:2d:12:29:85:f8:a9:bc: 5e:c6:56:a3:f7:2d:ce:93:3f:9d:3c:d0:7f:64:74: a4:5f:51:f3:25:bd:75:43:fa:07:20:29:de:47:24: 3b:84:77:58:49:b2:66:86:8c:7b:e3:fa:ab:02:ec: d4:72:e3:f6:e8:d8:e0:8e:d3:bf:2d:93:c0:36:7c: 0e:4b:8c:82:66:37:a1:39:77:2f:e1:83:c0:2d:de: 3d:e5:c1:92:97:70:8c:64:86:6f:7e:98:61:09:c2: a9:8d:49:42:2e:96:81:c6:81:fe:92:7d:e8:22:98: 16:0a:ec:d2:00:93:5b:a1:48:f0:55:34:b8:13:34: 1c:f8:db:9c:64:83:a1:34:3c:00:da:40:ca:c8:8b: 7a:f9:db:a2:79:fb:57:cf:30:17:0a:61:b6:92:14: 3d:a2:7f:e1:41:e2:a4:01:8f:53:96:09:b8:70:35: 3b:e0:fb:c8:00:8d:20:2f:dc:eb:38:4c:4e:16:fb: 90:d7:c3:35:63:c2:1d:4a:1f:58:df:95:73:2d:1e: c0:64:2f:02:45:6d:61:09:d8:82:82:69:ff:28:ed: 2b:46:e0:cd:d0:65:44:6a:2e:a3:f5:0e:d4:4f:ed: 3b:4f:0f:33:75:43:a5:4a:da:f8:da:c6:68:67:0b: ef:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:57:0A:26:88:3E:94:CF:5A:25:05:00:5C:0B:CC:EA:40:29:AF:E6 X509v3 Authority Key Identifier: keyid:0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:3d:27:8f:9f:a8:7d:72:f8:02:85:29:6f:9d:26:a3:3c:35: da:44:a2:0c:d5:d0:e4:08:b5:1e:63:38:c3:46:dc:d0:66:8c: 35:90:6e:da:1d:70:dd:2f:e3:a2:98:cf:2f:d3:ab:70:ab:a6: bf:a8:f0:d9:01:72:2c:14:f3:8f:4c:29:34:3d:f8:d9:0e:7a: 93:0b:3f:af:a3:11:06:db:a0:bc:e5:57:41:91:bf:75:37:03: eb:9a:3d:53:06:35:7a:00:db:84:ab:58:48:f5:9a:29:55:0d: e4:0c:50:39:16:a1:2a:c8:55:7f:95:b2:00:d8:b2:72:af:e0: 84:4f:f2:68:ce:6e:ca:15:58:95:65:e9:90:73:65:c7:a7:c7: 3f:eb:f4:8c:58:aa:ec:c1:e1:99:a8:71:3b:d9:00:83:02:5e: 85:af:e1:2b:d0:3a:77:c7:51:a5:c1:68:67:02:0d:d9:6b:0c: d5:b7:a9:db:e7:2d:e4:47:4b:c2:7b:85:36:a6:d2:41:54:6c: e8:a1:9d:cb:2d:ba:e8:91:ee:98:72:f9:3a:bd:a7:df:22:4b: a7:36:9e:2e:3c:6a:f1:88:18:1e:6c:bd:89:6c:d9:55:cd:eb: 0d:5c:7f:61:e5:e5:4d:8f:41:43:a7:7b:3f:37:55:28:1d:66: e0:ca:c9:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIg4AsXdyGwrqmR+KqMsNH+18d0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2 QUI1Njk1RTAeFw0yNTA1MDkwMDA1NDRaFw0yNTA1MTIxMDUxNDRaMDMxMTAvBgNV BAMTKDEyNTcwQTI2ODgzRTk0Q0Y1QTI1MDUwMDVDMEJDQ0VBNDAyOUFGRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLTLn90fzDLRIphfipvF7GVqP3 Lc6TP5080H9kdKRfUfMlvXVD+gcgKd5HJDuEd1hJsmaGjHvj+qsC7NRy4/bo2OCO 078tk8A2fA5LjIJmN6E5dy/hg8At3j3lwZKXcIxkhm9+mGEJwqmNSUIuloHGgf6S fegimBYK7NIAk1uhSPBVNLgTNBz425xkg6E0PADaQMrIi3r526J5+1fPMBcKYbaS FD2if+FB4qQBj1OWCbhwNTvg+8gAjSAv3Os4TE4W+5DXwzVjwh1KH1jflXMtHsBk LwJFbWEJ2IKCaf8o7StG4M3QZURqLqP1DtRP7TtPDzN1Q6VK2vjaxmhnC+8fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUElcKJog+lM9aJQUAXAvM6kApr+YwHwYDVR0j BBgwFoAUD/5fGfvrVIn/zN83/v4KDGq1aV4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmFlNThhYy01OTE3LTQwNjktOWE2Yy04M2RjMWJhMzIxMjYvMC8wRkZFNUYxOUZC RUI1NDg5RkZDQ0RGMzdGRUZFMEEwQzZBQjU2OTVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2QUI1 Njk1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJhZTU4YWMtNTkxNy00MDY5LTlh NmMtODNkYzFiYTMyMTI2LzAvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBB MEM2QUI1Njk1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGg9J4+fqH1y+AKFKW+dJqM8NdpEogzV0OQI tR5jOMNG3NBmjDWQbtodcN0v46KYzy/Tq3Crpr+o8NkBciwU849MKTQ9+NkOepML P6+jEQbboLzlV0GRv3U3A+uaPVMGNXoA24SrWEj1milVDeQMUDkWoSrIVX+VsgDY snKv4IRP8mjObsoVWJVl6ZBzZcenxz/r9IxYquzB4ZmocTvZAIMCXoWv4SvQOnfH UaXBaGcCDdlrDNW3qdvnLeRHS8J7hTam0kFUbOihncstuuiR7phy+Tq9p98iS6c2 ni48avGIGB5svYls2VXN6w1cf2Hl5U2PQUOnez83VSgdZuDKyYM= -----END CERTIFICATE-----Generated at Fri May 9 11:17:56 2025 by rpki-client