$ rpki-client -vvf repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft File: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft (raw, json) Hash identifier: aMIvwckHx1RSUhgwwQOsmoCaSRUl2sw+XCYGJ/hPqik= Subject key identifier: 90:42:96:63:1C:D2:51:D6:FD:A0:A6:29:09:8C:E2:47:FC:35:50:A3 Authority key identifier: 0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 Certificate issuer: /CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Certificate serial: 38ED3D4465694A2B7A5695B4C8CEB0DCACC5EFDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft Manifest number: 04E8 Signing time: Sun 29 Jun 2025 07:31:49 +0000 Manifest this update: Sun 29 Jun 2025 07:26:49 +0000 Manifest next update: Wed 02 Jul 2025 15:31:49 +0000 Files and hashes: 1: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl (hash: yhyREq7PLVvy1+BwDtNPGgsrGQJ3FwCU0CRfbpLNNw8=) 2: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: hqaKmxf71nI6HTBMvNY3G6OZQcwY11nDuhu6Wp5x5hA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ed:3d:44:65:69:4a:2b:7a:56:95:b4:c8:ce:b0:dc:ac:c5:ef:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Validity Not Before: Jun 29 07:26:49 2025 GMT Not After : Jul 2 15:31:49 2025 GMT Subject: CN=904296631CD251D6FDA0A629098CE247FC3550A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:e6:37:c3:b6:9d:1a:dc:52:dd:dd:86:17: 49:be:77:3d:02:af:61:cb:19:71:90:7a:21:e5:aa: f3:a8:20:3a:b9:96:d0:31:f6:43:8a:16:b9:7d:e7: fb:54:46:51:0f:fa:0e:c8:14:f1:ca:3a:eb:b0:dd: 5b:b1:5f:44:48:b9:ea:f9:9f:61:ab:35:07:4e:4e: f4:9f:cf:f2:85:a7:05:17:cc:4c:e1:93:7e:6f:d3: a8:7c:d9:98:d7:e2:59:1e:59:4f:0d:45:dd:05:6d: 4f:38:2f:d1:4a:9b:ba:3b:eb:6c:cb:10:38:66:b4: 75:70:bb:f1:3f:26:f3:a3:26:19:de:0f:3e:3c:f6: e8:f4:ec:97:b8:36:9e:4f:52:6f:21:2a:2d:8d:c8: b4:88:e9:35:7a:29:f7:9c:8b:c0:7f:44:fa:f4:7e: 41:97:7c:50:77:e4:39:44:8b:95:2b:14:c7:64:4a: 20:43:3a:63:bb:74:a8:1a:93:72:56:75:b3:df:c1: 24:b1:af:ad:59:ed:80:4e:11:8d:9c:5c:6e:c6:90: d7:6c:b2:54:7f:a6:2d:34:c0:23:39:06:dd:ff:05: 54:bc:15:72:87:1b:d5:6c:97:52:e7:7b:74:48:9e: 3b:41:de:3b:22:e8:1c:33:af:d8:6f:a0:d2:4a:32: 04:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:42:96:63:1C:D2:51:D6:FD:A0:A6:29:09:8C:E2:47:FC:35:50:A3 X509v3 Authority Key Identifier: keyid:0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:0b:54:ce:02:19:14:99:2a:0f:b3:6d:50:1a:45:10:bf:81: cc:c9:84:ed:55:bd:c3:01:8b:ee:b6:02:49:2c:a4:06:3a:27: 95:2b:08:99:32:1f:d8:64:93:a9:33:a7:60:15:d7:06:96:62: 6d:45:9a:06:4f:dd:af:b1:15:fc:a6:8c:a3:e2:85:3f:e0:97: 6d:3f:ab:d8:db:4c:75:41:c4:06:bb:71:64:04:d1:d9:a0:b3: 4d:8b:7a:fc:1c:cb:3f:2b:fd:2f:8a:b2:53:d3:90:1a:5a:f2: 7f:e0:5d:3a:42:43:f2:a9:34:16:bc:11:f6:ed:18:99:2b:4e: 9f:1e:7d:44:24:b5:16:d3:77:2a:f1:2d:d9:e0:f8:35:7a:16: 43:a4:40:78:33:b9:2b:52:bb:0f:29:74:7b:6e:b3:4f:c5:63: d3:1c:8f:7b:69:8f:4e:6c:62:99:f9:d4:a9:02:e1:ba:f3:73: f8:b9:c6:ca:11:69:f9:48:a7:75:0d:b2:a6:e7:26:aa:e7:74: 9f:50:cd:a0:27:24:8a:94:8d:14:67:6f:ea:1d:5c:ad:17:c1: 57:ed:8f:71:ca:36:be:d5:bb:ed:ad:ff:a3:f2:3c:f9:fb:ee: 70:64:7b:b0:03:8d:20:85:2e:64:3e:b7:9e:15:fa:e2:44:a4: 6d:c1:bd:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOO09RGVpSit6VpW0yM6w3KzF79swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUz QTIzRDEzNzAeFw0yNTA2MjkwNzI2NDlaFw0yNTA3MDIxNTMxNDlaMDMxMTAvBgNV BAMTKDkwNDI5NjYzMUNEMjUxRDZGREEwQTYyOTA5OENFMjQ3RkMzNTUwQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7tuY3w7adGtxS3d2GF0m+dz0C r2HLGXGQeiHlqvOoIDq5ltAx9kOKFrl95/tURlEP+g7IFPHKOuuw3VuxX0RIuer5 n2GrNQdOTvSfz/KFpwUXzEzhk35v06h82ZjX4lkeWU8NRd0FbU84L9FKm7o762zL EDhmtHVwu/E/JvOjJhneDz489uj07Je4Np5PUm8hKi2NyLSI6TV6Kfeci8B/RPr0 fkGXfFB35DlEi5UrFMdkSiBDOmO7dKgak3JWdbPfwSSxr61Z7YBOEY2cXG7GkNds slR/pi00wCM5Bt3/BVS8FXKHG9Vsl1Lne3RInjtB3jsi6Bwzr9hvoNJKMgS5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkEKWYxzSUdb9oKYpCYziR/w1UKMwHwYDVR0j BBgwFoAUDfgfDumbLgbbbK7gXMMBvjoj0TcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjZlYTIyMS03N2I3LTQ3OTEtYThhOC1iNTE2NGIwMGYxYzUvMC8wREY4MUYwRUU5 OUIyRTA2REI2Q0FFRTA1Q0MzMDFCRTNBMjNEMTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUzQTIz RDEzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y2ZWEyMjEtNzdiNy00NzkxLWE4 YTgtYjUxNjRiMDBmMWM1LzAvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAx QkUzQTIzRDEzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJALVM4CGRSZKg+zbVAaRRC/gczJhO1VvcMB i+62AkkspAY6J5UrCJkyH9hkk6kzp2AV1waWYm1FmgZP3a+xFfymjKPihT/gl20/ q9jbTHVBxAa7cWQE0dmgs02Levwcyz8r/S+KslPTkBpa8n/gXTpCQ/KpNBa8Efbt GJkrTp8efUQktRbTdyrxLdng+DV6FkOkQHgzuStSuw8pdHtus0/FY9Mcj3tpj05s Ypn51KkC4brzc/i5xsoRaflIp3UNsqbnJqrndJ9QzaAnJIqUjRRnb+odXK0XwVft j3HKNr7Vu+2t/6PyPPn77nBke7ADjSCFLmQ+t54V+uJEpG3BvWk= -----END CERTIFICATE-----Generated at Sun Jun 29 18:27:10 2025 by rpki-client