$ rpki-client -vvf repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft File: 0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft (raw, json) Hash identifier: n2H5BiujtkGboNfQ13ES1nuAkEOSoXkhH77bL4Z915s= Subject key identifier: 37:06:42:C0:9C:47:61:40:94:BD:A1:F6:55:D0:CD:11:E0:6F:DB:4E Authority key identifier: 0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8 Certificate issuer: /CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8 Certificate serial: 0A35FC249FF58CB1EF5937B26314E98C02F5361E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft Manifest number: 023B Signing time: Sat 18 Oct 2025 17:21:19 +0000 Manifest this update: Sat 18 Oct 2025 17:16:19 +0000 Manifest next update: Wed 22 Oct 2025 03:59:19 +0000 Files and hashes: 1: 0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl (hash: 7UCZf+7kyuVcd1v+bRiGAHVSR8sNnKUXmOzSME4qn/U=) 2: 3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa (hash: kHBDyPefqsguh5TCEwR1/CilgDV5vN4olgvGsk/91XM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 03:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:35:fc:24:9f:f5:8c:b1:ef:59:37:b2:63:14:e9:8c:02:f5:36:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8 Validity Not Before: Oct 18 17:16:19 2025 GMT Not After : Oct 22 03:59:19 2025 GMT Subject: CN=370642C09C47614094BDA1F655D0CD11E06FDB4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:25:f7:22:0f:9c:2f:38:18:5c:c0:7d:2a:0c: ac:25:02:37:51:2b:02:b0:98:0c:5c:1f:25:21:0f: 9e:38:10:e4:b5:cf:1c:f0:fe:e3:07:7f:62:bc:57: f5:62:35:7c:45:23:09:59:e5:ec:f5:0b:74:89:72: fc:7d:93:00:39:69:8f:58:f2:de:ff:99:4d:a4:33: 03:f6:c6:08:20:97:11:7b:d6:b9:bc:9c:86:ac:9d: a7:6b:38:86:51:57:f3:63:cc:eb:cf:07:18:39:e8: 73:fd:74:c0:df:6e:e8:a3:da:49:09:18:a8:26:52: b3:a7:dd:3a:01:72:f5:eb:cb:cd:f7:de:d5:67:d1: 94:5f:4b:9e:9b:d5:79:00:95:75:81:a3:17:a8:f6: 22:8d:5e:17:25:79:29:6f:c9:d6:53:0d:3c:be:78: 88:6b:df:10:a6:d0:3d:44:9a:9c:0d:39:01:08:fe: 08:43:05:46:3f:08:2d:a0:97:0e:f4:2e:93:d7:23: f9:9a:f8:99:fa:38:34:5a:74:89:8e:83:b3:94:c8: 2a:e5:f2:d3:6f:03:71:d1:56:0a:5b:5c:5b:b2:be: ff:08:19:38:ce:ad:7c:4c:5f:e1:ce:01:64:9a:a2: 00:c1:ad:6a:c5:dc:88:cd:9d:0f:8d:31:c9:18:ed: d5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:06:42:C0:9C:47:61:40:94:BD:A1:F6:55:D0:CD:11:E0:6F:DB:4E X509v3 Authority Key Identifier: keyid:0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:1b:ac:44:40:34:44:06:5e:28:08:7b:64:4b:44:a2:3b:f4: 08:19:ee:33:52:27:e0:16:dd:61:da:ce:4c:ba:9b:be:2c:7d: 01:33:56:8d:37:37:15:86:e8:b9:91:84:01:8f:30:49:4d:38: 87:54:f5:3c:93:2f:46:3d:96:a7:4b:bc:d0:07:98:11:89:28: 9f:b8:d6:be:2d:25:ff:e4:e2:ac:eb:21:10:c9:da:86:b4:11: 9b:0c:c7:2c:05:00:3f:3f:92:0b:ef:f2:36:66:46:ae:de:07: c8:26:8e:e5:65:90:23:de:4e:44:89:21:de:65:ed:1f:d9:f3: b7:ce:63:ad:d4:9d:91:a4:f3:9e:2a:8d:3b:d1:09:20:62:0b: 33:7a:eb:1b:1e:86:3a:80:d8:66:19:5d:c4:8f:72:f8:85:25: 52:cb:79:1c:9f:3f:2f:2d:6c:c2:d5:d9:f7:97:01:2f:7e:c3: a3:87:f0:67:94:96:44:86:95:37:7a:24:2f:77:5a:82:ea:fa: da:0d:d0:c5:ef:4c:d6:22:35:e1:10:24:67:d2:67:49:f7:3e: 16:8a:08:25:a3:d5:5a:d0:5d:36:67:4f:58:f8:05:05:37:20: 27:3d:9b:4f:e0:1d:a4:81:cc:e8:dc:7b:bc:ba:46:f8:6b:c2: f1:a0:d7:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCjX8JJ/1jLHvWTeyYxTpjAL1Nh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjky N0U4MTVFODAeFw0yNTEwMTgxNzE2MTlaFw0yNTEwMjIwMzU5MTlaMDMxMTAvBgNV BAMTKDM3MDY0MkMwOUM0NzYxNDA5NEJEQTFGNjU1RDBDRDExRTA2RkRCNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrJfciD5wvOBhcwH0qDKwlAjdR KwKwmAxcHyUhD544EOS1zxzw/uMHf2K8V/ViNXxFIwlZ5ez1C3SJcvx9kwA5aY9Y 8t7/mU2kMwP2xggglxF71rm8nIasnadrOIZRV/NjzOvPBxg56HP9dMDfbuij2kkJ GKgmUrOn3ToBcvXry8333tVn0ZRfS56b1XkAlXWBoxeo9iKNXhcleSlvydZTDTy+ eIhr3xCm0D1EmpwNOQEI/ghDBUY/CC2glw70LpPXI/ma+Jn6ODRadImOg7OUyCrl 8tNvA3HRVgpbXFuyvv8IGTjOrXxMX+HOAWSaogDBrWrF3IjNnQ+NMckY7dWJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNwZCwJxHYUCUvaH2VdDNEeBv204wHwYDVR0j BBgwFoAUDCBg5B3GrP9UkoaNmxdqKSfoFegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGExNGUzYS01YmUwLTQ2ZDEtOTAzYy0wNTliMGI2ODg4MjEvMC8wQzIwNjBFNDFE QzZBQ0ZGNTQ5Mjg2OEQ5QjE3NkEyOTI3RTgxNUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjkyN0U4 MTVFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMTRlM2EtNWJlMC00NmQxLTkw M2MtMDU5YjBiNjg4ODIxLzAvMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZB MjkyN0U4MTVFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALUbrERANEQGXigIe2RLRKI79AgZ7jNSJ+AW 3WHazky6m74sfQEzVo03NxWG6LmRhAGPMElNOIdU9TyTL0Y9lqdLvNAHmBGJKJ+4 1r4tJf/k4qzrIRDJ2oa0EZsMxywFAD8/kgvv8jZmRq7eB8gmjuVlkCPeTkSJId5l 7R/Z87fOY63UnZGk854qjTvRCSBiCzN66xsehjqA2GYZXcSPcviFJVLLeRyfPy8t bMLV2feXAS9+w6OH8GeUlkSGlTd6JC93WoLq+toN0MXvTNYiNeEQJGfSZ0n3PhaK CCWj1VrQXTZnT1j4BQU3ICc9m0/gHaSBzOjce7y6RvhrwvGg11c= -----END CERTIFICATE-----Generated at Mon Oct 20 14:20:54 2025 by rpki-client