$ rpki-client -vvf repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft File: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft (raw, json) Hash identifier: P1cj9L1oqTj98tp7RaKMoyxyMPRTyreznZkgo+7OgdY= Subject key identifier: 17:04:17:05:E9:47:FB:6F:6A:23:25:A8:D5:CC:98:D7:A2:54:47:4D Authority key identifier: 0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E Certificate issuer: /CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E Certificate serial: 3E3296AA3C279E88DB3949C7599C712E030BA882 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft Manifest number: 0518 Signing time: Mon 20 Oct 2025 06:50:46 +0000 Manifest this update: Mon 20 Oct 2025 06:45:46 +0000 Manifest next update: Thu 23 Oct 2025 09:26:46 +0000 Files and hashes: 1: 323030313a6466303a3232393a3a2f34382d3438203d3e20313331373738.roa (hash: Kw/2sJDovbqcLamhNn36qpz8RozjhJRdtUEEKJ4rTNg=) 2: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (hash: /0ivdWgJqnJaSVnUB+9OuvpQlcxcSIK1E90K9ZECaAA=) 3: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl (hash: b+QkeBt7zU+mJka+TOR71N4YmQTRswiBcwRcIgo13bo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:32:96:aa:3c:27:9e:88:db:39:49:c7:59:9c:71:2e:03:0b:a8:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E Validity Not Before: Oct 20 06:45:46 2025 GMT Not After : Oct 23 09:26:46 2025 GMT Subject: CN=17041705E947FB6F6A2325A8D5CC98D7A254474D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:63:8e:cf:f9:91:1d:fb:06:9c:fe:cd:87:f3: 5f:b3:d3:4f:d0:e9:b0:80:8a:d3:8d:fa:77:c7:16: cc:3e:ea:a7:f8:7c:b4:7b:e4:79:3b:cd:01:bd:39: bb:9d:54:7c:9e:08:95:d9:a0:e4:0e:e1:e9:57:03: 90:d6:6d:ba:89:69:67:fb:32:28:e9:8b:17:33:b0: 7d:f8:3e:91:98:c2:44:14:c5:05:5d:0e:84:ff:d9: 77:84:9a:76:5d:0f:08:5a:d1:7d:61:1b:49:e8:5c: 14:0b:2d:24:13:f1:a9:b6:cc:11:c7:35:fa:2f:bb: c9:c0:1d:bb:87:92:2b:62:7c:5e:e6:03:8f:35:2a: 80:eb:40:89:1f:e4:40:0c:af:4c:36:5a:71:13:ac: b9:06:cc:a8:f7:4b:df:4f:87:fc:11:d4:10:d7:89: 2b:8b:ee:b9:ea:ed:fe:97:8b:38:7b:c7:8e:d1:f7: 9c:6c:2f:ca:19:b5:89:2d:c7:6a:79:cc:47:f3:21: e5:c6:26:58:b6:65:31:38:df:40:d0:24:b7:91:a2: 89:c3:9a:05:8b:19:b0:af:76:fc:0b:28:1b:69:71: ef:3f:7c:72:71:8a:8c:b2:fa:48:7b:95:1d:5e:6d: d7:65:23:45:77:9a:73:4e:bf:a7:33:cc:d8:6c:f6: 7c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:04:17:05:E9:47:FB:6F:6A:23:25:A8:D5:CC:98:D7:A2:54:47:4D X509v3 Authority Key Identifier: keyid:0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ff:0c:31:d5:fc:6c:5e:f1:c4:05:d9:eb:cf:68:c8:2b:ef: d4:02:cb:b2:f5:c1:c0:7f:27:80:fa:92:a4:01:86:5e:f8:34: ba:25:a4:96:e3:e3:d7:62:74:1c:5e:72:a6:69:35:42:7e:81: 44:b9:b9:fc:3f:ec:c8:f5:f0:ba:1d:79:8f:d8:1f:09:8e:2b: c9:2e:ef:dc:e9:00:0f:d7:4f:76:fa:c2:4e:fd:b5:ba:60:05: 26:94:78:89:58:9b:c6:6c:7a:40:1f:b3:a8:6e:82:3e:25:4c: 68:b4:80:6a:88:fb:ff:77:32:59:ba:9f:6a:94:b7:f5:57:b9: 2f:07:fd:f9:77:ca:31:cb:32:d4:b1:56:30:80:cc:a7:e2:2a: e2:93:93:a2:06:30:0c:ac:6e:bb:3c:89:3f:99:38:55:57:d0: d8:b0:c1:f8:57:e6:18:a1:98:1c:51:2f:62:6d:d9:d6:25:ad: 0a:37:a3:be:83:db:9f:da:2d:70:46:bf:a3:77:71:fd:46:4a: 54:11:9b:ea:e4:62:82:7c:34:a9:3b:fc:42:0d:0d:cd:24:24: 95:91:cc:e7:fd:da:32:57:26:fb:92:6a:54:bf:49:15:72:f7: 9b:7f:79:9f:61:74:55:6c:d4:94:d1:d3:71:04:65:87:b7:be: ff:1c:58:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPjKWqjwnnojbOUnHWZxxLgMLqIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2 QUI1Njk1RTAeFw0yNTEwMjAwNjQ1NDZaFw0yNTEwMjMwOTI2NDZaMDMxMTAvBgNV BAMTKDE3MDQxNzA1RTk0N0ZCNkY2QTIzMjVBOEQ1Q0M5OEQ3QTI1NDQ3NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwY47P+ZEd+wac/s2H81+z00/Q 6bCAitON+nfHFsw+6qf4fLR75Hk7zQG9ObudVHyeCJXZoOQO4elXA5DWbbqJaWf7 MijpixczsH34PpGYwkQUxQVdDoT/2XeEmnZdDwha0X1hG0noXBQLLSQT8am2zBHH Nfovu8nAHbuHkitifF7mA481KoDrQIkf5EAMr0w2WnETrLkGzKj3S99Ph/wR1BDX iSuL7rnq7f6Xizh7x47R95xsL8oZtYktx2p5zEfzIeXGJli2ZTE430DQJLeRoonD mgWLGbCvdvwLKBtpce8/fHJxioyy+kh7lR1ebddlI0V3mnNOv6czzNhs9nz5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFwQXBelH+29qIyWo1cyY16JUR00wHwYDVR0j BBgwFoAUD/5fGfvrVIn/zN83/v4KDGq1aV4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmFlNThhYy01OTE3LTQwNjktOWE2Yy04M2RjMWJhMzIxMjYvMC8wRkZFNUYxOUZC RUI1NDg5RkZDQ0RGMzdGRUZFMEEwQzZBQjU2OTVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2QUI1 Njk1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJhZTU4YWMtNTkxNy00MDY5LTlh NmMtODNkYzFiYTMyMTI2LzAvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBB MEM2QUI1Njk1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACL/DDHV/Gxe8cQF2evPaMgr79QCy7L1wcB/ J4D6kqQBhl74NLolpJbj49didBxecqZpNUJ+gUS5ufw/7Mj18LodeY/YHwmOK8ku 79zpAA/XT3b6wk79tbpgBSaUeIlYm8ZsekAfs6hugj4lTGi0gGqI+/93Mlm6n2qU t/VXuS8H/fl3yjHLMtSxVjCAzKfiKuKTk6IGMAysbrs8iT+ZOFVX0NiwwfhX5hih mBxRL2Jt2dYlrQo3o76D25/aLXBGv6N3cf1GSlQRm+rkYoJ8NKk7/EINDc0kJJWR zOf92jJXJvuSalS/SRVy95t/eZ9hdFVs1JTR03EEZYe3vv8cWFI= -----END CERTIFICATE-----Generated at Mon Oct 20 14:42:53 2025 by rpki-client