$ rpki-client -vvf repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft File: 0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft (raw, json) Hash identifier: o+0B4p6kj3dnkm5HYjEsZ0kEg2bS772ClzJSLg9HL18= Subject key identifier: CF:B9:00:13:13:D0:26:0E:5B:8F:E8:21:DB:6E:C4:FF:B8:ED:68:3B Authority key identifier: 0E:1F:EF:A1:7B:36:15:40:F7:3B:24:95:37:DF:0B:5C:4F:93:B4:B9 Certificate issuer: /CN=0E1FEFA17B361540F73B249537DF0B5C4F93B4B9 Certificate serial: 088A551E87018040B441976D3E748725FFA06545 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft Manifest number: AA Signing time: Fri 22 Aug 2025 10:30:59 +0000 Manifest this update: Fri 22 Aug 2025 10:25:59 +0000 Manifest next update: Mon 25 Aug 2025 21:05:59 +0000 Files and hashes: 1: 0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.crl (hash: lc0wGNrtB6OU5QRLm20K+R0bnhsAghunLsWUoXomTcg=) 2: 33362e35302e39362e302f32342d3234203d3e20313532333536.roa (hash: 0YTgb847tvQJ6aYcLp7rUu/koq2efZafX5EfBrU5MeY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.crl rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:8a:55:1e:87:01:80:40:b4:41:97:6d:3e:74:87:25:ff:a0:65:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E1FEFA17B361540F73B249537DF0B5C4F93B4B9 Validity Not Before: Aug 22 10:25:59 2025 GMT Not After : Aug 25 21:05:59 2025 GMT Subject: CN=CFB9001313D0260E5B8FE821DB6EC4FFB8ED683B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:19:84:f4:03:a2:3b:5c:bc:7a:82:ed:65: 95:d1:52:35:0b:51:bd:18:48:b6:f0:4b:8d:51:6f: 69:ce:53:39:f9:80:23:61:47:d1:c0:c1:5e:67:47: 93:eb:bb:3b:10:dd:d3:08:1b:27:db:0a:2d:e8:5d: 6b:b4:cf:ad:3f:ba:14:a0:2b:6a:80:b9:00:c3:8b: 18:30:1e:de:c2:3e:3c:61:57:68:02:58:33:69:ff: 6b:df:0a:8f:19:a2:e5:41:7f:a9:58:be:ab:ed:a6: 3b:ce:a7:29:b6:8b:b9:7c:5b:9d:0f:d3:87:51:58: 9e:d8:1d:0e:f2:5a:8c:17:cc:6a:53:51:d2:85:73: 38:15:ea:fc:28:b6:6b:c7:89:bc:19:06:91:90:ef: 09:44:5f:e2:35:b9:b0:d3:17:d4:9f:57:29:bd:c6: b3:01:61:77:26:80:29:4d:f3:19:5e:f4:8e:b7:90: de:11:ee:1c:6d:2d:83:82:8a:6f:3f:09:8c:7a:3b: c6:c3:aa:41:bc:24:84:58:5f:2f:78:88:7d:84:fc: 65:9f:99:21:63:d4:1c:39:f1:e4:16:3b:23:02:ab: 10:6e:c2:a2:60:b1:2c:9b:1f:4b:6d:2a:2c:14:c8: 55:fd:9b:1e:48:c6:28:be:dc:8c:23:8f:ca:e2:8c: 0d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B9:00:13:13:D0:26:0E:5B:8F:E8:21:DB:6E:C4:FF:B8:ED:68:3B X509v3 Authority Key Identifier: keyid:0E:1F:EF:A1:7B:36:15:40:F7:3B:24:95:37:DF:0B:5C:4F:93:B4:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:df:64:ba:1f:79:e0:73:db:8c:6d:9a:86:4a:d6:f7:2c:bc: 35:c9:73:38:8b:ee:a2:d3:98:39:80:f2:fa:9a:d6:e7:7d:c9: 7f:a9:94:a4:d1:2f:49:ee:47:7a:49:05:48:6b:88:c7:bc:3c: 4d:b5:a4:7c:54:5e:ba:07:08:5e:d3:7e:9f:32:b3:7b:a3:f3: 2b:b6:7c:c5:d9:78:8c:82:d3:09:e4:96:e5:2c:98:d1:be:eb: 39:ba:d2:92:a8:0a:02:ac:ed:19:a2:d0:ca:b0:c4:da:cd:20: 6b:ea:8a:3d:5b:9d:d0:23:c0:6c:71:f1:d6:80:f0:26:35:a8: 84:47:87:54:27:b1:28:d3:79:39:28:88:63:24:00:e0:df:86: a0:6e:ba:01:4f:af:d2:80:e2:98:d6:65:bc:44:6c:21:e0:96: 52:86:7a:52:d1:1d:48:ab:f6:77:8c:7a:6c:bf:38:a1:64:e2: 0c:5e:b6:7d:6a:53:0c:08:ff:9e:e3:80:84:0d:6a:5d:ab:54: 78:3e:98:4e:6c:8e:f3:65:6a:ee:ae:1f:7d:cb:40:cc:42:2e: 97:14:34:47:83:22:64:e9:cd:93:9b:4b:91:24:27:27:48:03: 36:61:85:91:ac:d1:56:97:ac:e4:ac:5a:27:98:3a:9b:72:22: dd:ad:d2:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCIpVHocBgEC0QZdtPnSHJf+gZUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUxRkVGQTE3QjM2MTU0MEY3M0IyNDk1MzdERjBCNUM0 RjkzQjRCOTAeFw0yNTA4MjIxMDI1NTlaFw0yNTA4MjUyMTA1NTlaMDMxMTAvBgNV BAMTKENGQjkwMDEzMTNEMDI2MEU1QjhGRTgyMURCNkVDNEZGQjhFRDY4M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1EhmE9AOiO1y8eoLtZZXRUjUL Ub0YSLbwS41Rb2nOUzn5gCNhR9HAwV5nR5PruzsQ3dMIGyfbCi3oXWu0z60/uhSg K2qAuQDDixgwHt7CPjxhV2gCWDNp/2vfCo8ZouVBf6lYvqvtpjvOpym2i7l8W50P 04dRWJ7YHQ7yWowXzGpTUdKFczgV6vwotmvHibwZBpGQ7wlEX+I1ubDTF9SfVym9 xrMBYXcmgClN8xle9I63kN4R7hxtLYOCim8/CYx6O8bDqkG8JIRYXy94iH2E/GWf mSFj1Bw58eQWOyMCqxBuwqJgsSybH0ttKiwUyFX9mx5Ixii+3Iwjj8rijA3pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz7kAExPQJg5bj+gh227E/7jtaDswHwYDVR0j BBgwFoAUDh/voXs2FUD3OySVN98LXE+TtLkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDkwZDg2Yi0wYjBkLTQ1NmYtODQxYS1iZmRiOWQ4MDdmYjcvMC8wRTFGRUZBMTdC MzYxNTQwRjczQjI0OTUzN0RGMEI1QzRGOTNCNEI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEUxRkVGQTE3QjM2MTU0MEY3M0IyNDk1MzdERjBCNUM0Rjkz QjRCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ5MGQ4NmItMGIwZC00NTZmLTg0 MWEtYmZkYjlkODA3ZmI3LzAvMEUxRkVGQTE3QjM2MTU0MEY3M0IyNDk1MzdERjBC NUM0RjkzQjRCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvfZLofeeBz24xtmoZK1vcsvDXJcziL7qLT mDmA8vqa1ud9yX+plKTRL0nuR3pJBUhriMe8PE21pHxUXroHCF7Tfp8ys3uj8yu2 fMXZeIyC0wnkluUsmNG+6zm60pKoCgKs7Rmi0MqwxNrNIGvqij1bndAjwGxx8daA 8CY1qIRHh1QnsSjTeTkoiGMkAODfhqBuugFPr9KA4pjWZbxEbCHgllKGelLRHUir 9neMemy/OKFk4gxetn1qUwwI/57jgIQNal2rVHg+mE5sjvNlau6uH33LQMxCLpcU NEeDImTpzZObS5EkJydIAzZhhZGs0VaXrOSsWieYOptyIt2t0uM= -----END CERTIFICATE-----Generated at Sat Aug 23 12:21:56 2025 by rpki-client