$ rpki-client -vvf repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft File: 0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft (raw, json) Hash identifier: qKtZcQDFlMXivEw5ASune4X3RaplvCa2os1sMmUg4s8= Subject key identifier: EE:85:AD:95:E3:EE:6C:20:2A:B7:F5:05:A4:34:B7:94:47:9A:3F:55 Authority key identifier: 0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8 Certificate issuer: /CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8 Certificate serial: 2D9251B8BFEF9F944D5F37637A5CB396B490A85E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft Manifest number: 020C Signing time: Sat 05 Jul 2025 16:11:17 +0000 Manifest this update: Sat 05 Jul 2025 16:06:17 +0000 Manifest next update: Tue 08 Jul 2025 20:02:17 +0000 Files and hashes: 1: 3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa (hash: kHBDyPefqsguh5TCEwR1/CilgDV5vN4olgvGsk/91XM=) 2: 0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl (hash: 8vqkJazss/vXYOT2lTf0s81nuVWIQFI1WdvFU5XPlb0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 20:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:92:51:b8:bf:ef:9f:94:4d:5f:37:63:7a:5c:b3:96:b4:90:a8:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8 Validity Not Before: Jul 5 16:06:17 2025 GMT Not After : Jul 8 20:02:17 2025 GMT Subject: CN=EE85AD95E3EE6C202AB7F505A434B794479A3F55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:74:51:a3:8d:6c:6b:77:ee:b0:d0:e6:ff:1b: b2:da:e7:98:76:9d:98:e6:06:5d:11:9c:a6:91:23: 2d:c8:20:1b:4e:c2:4c:df:4e:55:03:83:a8:db:6e: 07:d4:b3:ad:ca:c5:ec:fd:28:94:e1:f0:0e:34:5f: b6:cf:90:da:a3:44:0d:b8:94:53:6c:86:92:2c:7b: 0c:c1:ec:51:b0:f8:38:ac:90:53:51:7e:86:3f:b3: 92:30:07:19:5e:81:df:e5:f6:60:09:cc:41:16:4b: 3f:21:12:48:95:37:d6:c0:56:22:31:00:f5:8c:19: df:ed:d7:ef:de:4d:ab:aa:31:b3:f5:71:d2:fe:f6: 86:df:0c:22:08:c2:91:c1:8b:7f:01:7c:f7:1b:fb: 55:8c:20:ad:70:45:74:bd:7f:48:6d:6e:62:b6:cf: 70:d8:19:f7:93:9d:61:45:75:0b:bc:ae:ab:a4:0d: dc:ef:61:90:3b:0d:77:83:97:45:fa:c9:8c:6d:6d: a0:45:92:0b:4a:fa:cf:10:1d:7a:15:e8:ba:df:7f: 7f:73:0a:dc:8a:97:e7:96:87:2c:3a:a6:a9:76:b4: d9:f1:43:2f:61:51:58:39:35:9d:49:24:0d:41:e6: ef:3e:4a:51:c1:ee:d9:2e:8b:ae:05:28:d6:1a:b7: c1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:85:AD:95:E3:EE:6C:20:2A:B7:F5:05:A4:34:B7:94:47:9A:3F:55 X509v3 Authority Key Identifier: keyid:0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:cd:4e:cd:d3:76:44:5b:36:d4:5d:cc:a9:92:5a:39:ad:bd: 26:49:f2:67:fd:73:37:2b:1f:4b:a4:0f:48:fd:6a:5b:f9:86: 81:fd:58:78:07:a7:9e:c7:0d:95:f2:03:c0:11:bd:ea:e0:fe: 10:27:42:26:e6:f4:af:53:d7:fd:74:33:00:55:8d:5f:6a:99: 28:ac:bc:2f:57:d2:dd:7b:83:04:a6:60:8b:4c:cf:aa:b4:7d: 9b:ec:d1:a5:c9:49:37:6f:22:7d:ee:51:d4:e1:4e:1e:38:22: db:f8:86:93:23:4d:a7:5c:a7:1d:12:b3:c7:2c:70:6f:41:77: ef:98:c8:3a:4f:82:fc:69:89:c1:4f:6d:1c:7b:5c:92:7e:6c: a7:49:df:7c:a8:98:34:71:b5:78:1c:5b:c7:12:a0:69:7d:08: 28:36:7c:d0:60:aa:16:43:f1:f5:78:ba:2c:93:ad:7d:71:a0: 04:84:3b:4b:b7:1a:d9:e1:cf:3e:26:72:98:08:65:9d:28:6e: 0b:e3:c5:68:d5:2a:e5:b1:8d:3c:bf:5e:2a:7e:58:f5:72:f4: 7c:42:6d:3a:26:50:e0:3f:88:19:57:1e:08:c2:e8:72:1e:73: ae:6d:f4:8e:0c:46:57:20:2c:f5:14:6d:ec:c1:1b:5a:b5:ab: 7a:18:3d:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULZJRuL/vn5RNXzdjelyzlrSQqF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjky N0U4MTVFODAeFw0yNTA3MDUxNjA2MTdaFw0yNTA3MDgyMDAyMTdaMDMxMTAvBgNV BAMTKEVFODVBRDk1RTNFRTZDMjAyQUI3RjUwNUE0MzRCNzk0NDc5QTNGNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNdFGjjWxrd+6w0Ob/G7La55h2 nZjmBl0RnKaRIy3IIBtOwkzfTlUDg6jbbgfUs63Kxez9KJTh8A40X7bPkNqjRA24 lFNshpIsewzB7FGw+DiskFNRfoY/s5IwBxlegd/l9mAJzEEWSz8hEkiVN9bAViIx APWMGd/t1+/eTauqMbP1cdL+9obfDCIIwpHBi38BfPcb+1WMIK1wRXS9f0htbmK2 z3DYGfeTnWFFdQu8rqukDdzvYZA7DXeDl0X6yYxtbaBFkgtK+s8QHXoV6Lrff39z CtyKl+eWhyw6pql2tNnxQy9hUVg5NZ1JJA1B5u8+SlHB7tkui64FKNYat8F5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7oWtlePubCAqt/UFpDS3lEeaP1UwHwYDVR0j BBgwFoAUDCBg5B3GrP9UkoaNmxdqKSfoFegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGExNGUzYS01YmUwLTQ2ZDEtOTAzYy0wNTliMGI2ODg4MjEvMC8wQzIwNjBFNDFE QzZBQ0ZGNTQ5Mjg2OEQ5QjE3NkEyOTI3RTgxNUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjkyN0U4 MTVFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMTRlM2EtNWJlMC00NmQxLTkw M2MtMDU5YjBiNjg4ODIxLzAvMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZB MjkyN0U4MTVFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfNTs3TdkRbNtRdzKmSWjmtvSZJ8mf9czcr H0ukD0j9alv5hoH9WHgHp57HDZXyA8ARverg/hAnQibm9K9T1/10MwBVjV9qmSis vC9X0t17gwSmYItMz6q0fZvs0aXJSTdvIn3uUdThTh44Itv4hpMjTadcpx0Ss8cs cG9Bd++YyDpPgvxpicFPbRx7XJJ+bKdJ33yomDRxtXgcW8cSoGl9CCg2fNBgqhZD 8fV4uiyTrX1xoASEO0u3Gtnhzz4mcpgIZZ0obgvjxWjVKuWxjTy/Xip+WPVy9HxC bTomUOA/iBlXHgjC6HIec65t9I4MRlcgLPUUbezBG1q1q3oYPRg= -----END CERTIFICATE-----Generated at Sat Jul 5 21:00:20 2025 by rpki-client