$ rpki-client -vvf repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft File: 0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft (raw, json) Hash identifier: Yx5BAJadPSOl4YpDp9PY7xxkJAPHqP8UIGS5l8VSTaU= Subject key identifier: 9D:0A:28:D4:E9:26:7C:BB:75:52:6E:11:C0:B8:09:16:2A:DD:B9:C1 Authority key identifier: 0E:1F:EF:A1:7B:36:15:40:F7:3B:24:95:37:DF:0B:5C:4F:93:B4:B9 Certificate issuer: /CN=0E1FEFA17B361540F73B249537DF0B5C4F93B4B9 Certificate serial: 43AFEA36C8C3144E3472E70E9CA6CD6681B2BBF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft Manifest number: 92 Signing time: Mon 30 Jun 2025 12:30:57 +0000 Manifest this update: Mon 30 Jun 2025 12:25:57 +0000 Manifest next update: Thu 03 Jul 2025 15:21:57 +0000 Files and hashes: 1: 33362e35302e39362e302f32342d3234203d3e20313532333536.roa (hash: 1jhmsxzuBMRou1w2jeJEBWUYeRgbNNF2R/XtOjMGryg=) 2: 0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.crl (hash: T+MuP6QY9yEZt1L+8k6/tPgrsleR5jxKZ8jJ9yrbhcc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.crl rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:af:ea:36:c8:c3:14:4e:34:72:e7:0e:9c:a6:cd:66:81:b2:bb:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E1FEFA17B361540F73B249537DF0B5C4F93B4B9 Validity Not Before: Jun 30 12:25:57 2025 GMT Not After : Jul 3 15:21:57 2025 GMT Subject: CN=9D0A28D4E9267CBB75526E11C0B809162ADDB9C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f6:bc:b0:59:26:8c:6a:c9:0d:ec:59:dd:7d: 32:8e:8e:9c:da:89:d6:37:0c:a6:07:d6:93:97:b3: b9:0d:29:6a:30:98:36:1b:46:5b:93:3f:91:d6:89: 7c:b0:5c:92:e8:00:1b:dd:99:0a:82:10:9d:cf:ed: da:35:fa:46:2a:15:ba:32:34:a3:3d:d2:43:92:ec: 00:7b:98:4e:b8:19:9b:18:6b:b5:56:8f:a2:60:24: 48:a0:d8:c0:db:c2:9c:4e:2f:fa:56:7d:86:91:a8: 13:2d:4a:98:3a:62:94:a2:5a:28:fc:a3:ee:9e:6a: f8:47:61:4d:cd:62:ea:36:3d:30:46:90:d2:07:cd: 51:17:5c:56:02:07:0e:d2:45:96:11:48:23:85:2f: 24:2f:9c:d8:67:d0:d5:ea:c6:01:13:d5:a7:7d:4e: 54:8d:78:24:ae:a8:cf:21:05:42:95:fb:19:7a:c3: 3a:15:c9:96:1b:5a:ff:98:8f:a7:c2:07:17:48:fe: 33:d0:0a:77:82:c3:34:62:17:65:7f:23:d3:29:12: ad:77:93:c4:b6:74:33:ba:f4:75:cb:96:5a:48:ec: 18:cb:36:ec:82:f4:8c:0e:46:8d:44:2b:41:b7:b2: ba:2d:61:4f:5a:98:30:36:92:28:62:b1:53:68:7b: d4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0A:28:D4:E9:26:7C:BB:75:52:6E:11:C0:B8:09:16:2A:DD:B9:C1 X509v3 Authority Key Identifier: keyid:0E:1F:EF:A1:7B:36:15:40:F7:3B:24:95:37:DF:0B:5C:4F:93:B4:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:42:16:d9:f3:57:5f:2c:23:da:a9:05:4b:a2:43:e8:18:1a: fa:da:5e:84:03:b2:98:c2:ad:d7:2c:6d:56:0e:f8:d2:93:d4: 76:f9:4a:28:e0:51:58:95:9f:a3:2a:27:a8:1f:1a:80:6e:f3: e4:f0:86:84:a6:fb:19:76:bf:80:85:92:9e:76:93:d5:50:6d: 4b:e0:ed:c0:8b:67:2e:7a:bc:43:1e:36:62:0c:15:e3:11:c7: 55:70:b2:c5:a0:4f:20:b9:58:39:99:86:44:5a:72:b0:54:c2: 2a:ac:0c:86:cd:7a:61:e0:0c:36:e2:e9:85:f7:81:9d:1a:ff: 9f:bc:7a:90:b5:6b:13:97:bd:03:c3:9a:3e:78:41:06:bb:0b: 89:d6:88:ff:1b:95:5b:b8:c4:01:de:9e:31:9f:6f:55:d6:0d: cf:ac:89:9a:08:30:33:f8:d8:2c:53:ee:c7:10:10:c3:0f:bb: 9e:6b:cd:77:5c:5c:f8:d7:dd:d0:3a:1f:71:85:cd:08:e6:d2: 4e:1d:d7:33:7c:dd:b9:80:5b:2c:75:6b:48:92:36:01:11:c4: e7:59:a2:34:d1:87:f2:4e:3e:02:d9:09:9d:f8:a0:12:43:23: 32:d3:02:95:98:07:14:d9:4b:a2:14:57:b1:98:4d:17:b6:d0: 50:3d:e5:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ6/qNsjDFE40cucOnKbNZoGyu/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUxRkVGQTE3QjM2MTU0MEY3M0IyNDk1MzdERjBCNUM0 RjkzQjRCOTAeFw0yNTA2MzAxMjI1NTdaFw0yNTA3MDMxNTIxNTdaMDMxMTAvBgNV BAMTKDlEMEEyOEQ0RTkyNjdDQkI3NTUyNkUxMUMwQjgwOTE2MkFEREI5QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk9rywWSaMaskN7FndfTKOjpza idY3DKYH1pOXs7kNKWowmDYbRluTP5HWiXywXJLoABvdmQqCEJ3P7do1+kYqFboy NKM90kOS7AB7mE64GZsYa7VWj6JgJEig2MDbwpxOL/pWfYaRqBMtSpg6YpSiWij8 o+6eavhHYU3NYuo2PTBGkNIHzVEXXFYCBw7SRZYRSCOFLyQvnNhn0NXqxgET1ad9 TlSNeCSuqM8hBUKV+xl6wzoVyZYbWv+Yj6fCBxdI/jPQCneCwzRiF2V/I9MpEq13 k8S2dDO69HXLllpI7BjLNuyC9IwORo1EK0G3srotYU9amDA2kihisVNoe9TDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnQoo1OkmfLt1Um4RwLgJFirducEwHwYDVR0j BBgwFoAUDh/voXs2FUD3OySVN98LXE+TtLkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDkwZDg2Yi0wYjBkLTQ1NmYtODQxYS1iZmRiOWQ4MDdmYjcvMC8wRTFGRUZBMTdC MzYxNTQwRjczQjI0OTUzN0RGMEI1QzRGOTNCNEI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEUxRkVGQTE3QjM2MTU0MEY3M0IyNDk1MzdERjBCNUM0Rjkz QjRCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ5MGQ4NmItMGIwZC00NTZmLTg0 MWEtYmZkYjlkODA3ZmI3LzAvMEUxRkVGQTE3QjM2MTU0MEY3M0IyNDk1MzdERjBC NUM0RjkzQjRCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1CFtnzV18sI9qpBUuiQ+gYGvraXoQDspjC rdcsbVYO+NKT1Hb5SijgUViVn6MqJ6gfGoBu8+TwhoSm+xl2v4CFkp52k9VQbUvg 7cCLZy56vEMeNmIMFeMRx1VwssWgTyC5WDmZhkRacrBUwiqsDIbNemHgDDbi6YX3 gZ0a/5+8epC1axOXvQPDmj54QQa7C4nWiP8blVu4xAHenjGfb1XWDc+siZoIMDP4 2CxT7scQEMMPu55rzXdcXPjX3dA6H3GFzQjm0k4d1zN83bmAWyx1a0iSNgERxOdZ ojTRh/JOPgLZCZ34oBJDIzLTApWYBxTZS6IUV7GYTRe20FA95Xo= -----END CERTIFICATE-----Generated at Tue Jul 1 11:47:28 2025 by rpki-client