$ rpki-client -vvf repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft File: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft (raw, json) Hash identifier: r+ty3kkjYtXjn3Wbgpsmet+kaw8Aduzyqvb9qzPGH4A= Subject key identifier: DF:CC:99:80:A5:30:2E:C9:6C:20:24:E0:9B:F2:73:D0:3F:2F:46:43 Authority key identifier: 0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF Certificate issuer: /CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Certificate serial: 035E6CB6917A4EB8D3FDA797B44CD7052F9DF8D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft Manifest number: 0246 Signing time: Sat 28 Jun 2025 19:42:06 +0000 Manifest this update: Sat 28 Jun 2025 19:37:06 +0000 Manifest next update: Tue 01 Jul 2025 20:36:06 +0000 Files and hashes: 1: 3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa (hash: 2PxEI59kNreJnYBeFqozYQ5subadmwmaBV8ky/IxUfI=) 2: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl (hash: YX4TYBcgxV+Oi7LO6hNxmlPBbTooHlNQMjPCwjSDIzQ=) 3: 3130332e3234312e3230362e302f32342d3234203d3e20313332363738.roa (hash: R3N3/32j1HA8MrNIZSao7bewuBwwVHmgTfIW6Qbgz1c=) 4: 3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa (hash: 1qZsE00rwmGlzOMKTEF7EolFAH+CLupX31RHggUVtOs=) 5: 3130332e3234312e3230372e302f32342d3234203d3e20313332363738.roa (hash: t19S9PQfVzWHZc7PL9Ucb7apMMw/h9xU9QuPzuFz/Mk=) 6: 323030313a6466333a373030303a3a2f34382d3438203d3e20313332363738.roa (hash: mAFJTZEnZNfr7PARi8AMi8BJVScVXavpsJWltGWztr8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 20:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:5e:6c:b6:91:7a:4e:b8:d3:fd:a7:97:b4:4c:d7:05:2f:9d:f8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Validity Not Before: Jun 28 19:37:06 2025 GMT Not After : Jul 1 20:36:06 2025 GMT Subject: CN=DFCC9980A5302EC96C2024E09BF273D03F2F4643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e5:2e:35:08:c4:df:87:a8:74:af:59:65:49: a7:9a:5b:3b:d6:45:27:bf:17:d8:b6:af:1c:0f:3e: 17:e6:b6:fd:ec:6c:cc:f5:4a:58:b7:81:19:f9:be: 14:e4:6a:e3:a5:49:8c:9f:ae:59:bc:5a:34:eb:b4: 1e:ee:04:f7:ed:65:5c:85:42:e4:77:03:4f:d2:4d: 41:52:0f:cf:24:03:33:75:c4:bd:1d:bd:4b:c2:04: e2:5b:bd:e6:92:5a:9b:a6:90:12:05:2c:38:71:ae: 47:d9:db:82:d1:d2:ff:f4:fd:c7:ce:0b:c2:56:4d: de:3e:63:6e:5a:f8:7f:61:6e:00:11:75:1b:74:de: 10:22:54:7b:84:91:38:a3:3a:87:02:2a:a5:9d:83: fa:c6:db:08:bb:d7:04:73:50:d4:7e:00:1c:b1:e7: 26:c1:2a:e6:15:a7:2b:5e:c9:0c:81:10:86:5c:a0: 41:94:57:41:d9:3e:c5:25:15:84:d8:df:b0:5d:0b: 76:f8:e4:5c:68:dc:6d:7d:83:3a:ae:fc:10:4f:da: 06:3e:5a:be:1b:d2:6d:4e:a2:c3:9a:bc:79:a2:14: 5b:51:80:90:87:93:a8:aa:b2:8c:35:fc:8b:2c:3d: 49:3d:43:45:a2:73:bc:0e:4e:c1:c6:8a:34:37:ce: cf:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CC:99:80:A5:30:2E:C9:6C:20:24:E0:9B:F2:73:D0:3F:2F:46:43 X509v3 Authority Key Identifier: keyid:0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:3f:d9:d6:97:9d:a3:48:81:2c:a8:7b:23:15:ac:be:01:fd: cb:64:17:fe:f3:35:bd:75:4b:92:15:b0:23:29:ea:1d:89:6a: d9:4d:3c:90:4c:b3:ef:e0:d3:61:47:a8:c6:1b:5f:3d:21:8c: 76:70:89:8c:60:4e:0f:06:56:4f:7d:0b:ec:9e:a3:d1:c7:c4: b2:ae:60:fe:5d:1c:eb:9d:c7:33:a6:18:aa:6c:fa:de:6a:c2: a3:88:04:3c:1a:02:45:90:1a:f0:2e:d1:8b:90:4a:3e:7c:a1: bf:91:ff:ef:98:d2:b0:39:a0:3c:c4:52:5b:6b:e7:0f:e2:58: d6:7d:16:c7:ee:69:7b:25:a1:93:63:c5:a3:29:21:1c:e1:3b: 6a:56:31:5b:fc:14:35:d0:c2:72:0a:cf:78:f5:94:ec:7e:ba: ac:93:2f:77:aa:eb:98:0b:f3:8e:90:2d:71:c5:74:65:33:57: 49:71:39:d9:cb:90:9a:15:28:11:3e:df:19:bf:15:c7:dd:d2: cd:0e:e0:73:ad:e4:22:68:8f:64:56:9b:c0:f1:4d:f3:51:73: 85:06:60:09:8e:98:29:cb:ca:5c:4a:85:e0:0e:78:a4:48:59: 1a:72:f8:8e:a4:dd:f1:14:8f:cf:97:15:50:c6:ac:06:68:ce: 14:cb:dc:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA15stpF6TrjT/aeXtEzXBS+d+NAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZB NDAxRUNDRjAeFw0yNTA2MjgxOTM3MDZaFw0yNTA3MDEyMDM2MDZaMDMxMTAvBgNV BAMTKERGQ0M5OTgwQTUzMDJFQzk2QzIwMjRFMDlCRjI3M0QwM0YyRjQ2NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa5S41CMTfh6h0r1llSaeaWzvW RSe/F9i2rxwPPhfmtv3sbMz1Sli3gRn5vhTkauOlSYyfrlm8WjTrtB7uBPftZVyF QuR3A0/STUFSD88kAzN1xL0dvUvCBOJbveaSWpumkBIFLDhxrkfZ24LR0v/0/cfO C8JWTd4+Y25a+H9hbgARdRt03hAiVHuEkTijOocCKqWdg/rG2wi71wRzUNR+AByx 5ybBKuYVpyteyQyBEIZcoEGUV0HZPsUlFYTY37BdC3b45Fxo3G19gzqu/BBP2gY+ Wr4b0m1OosOavHmiFFtRgJCHk6iqsow1/IssPUk9Q0Wic7wOTsHGijQ3zs/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU38yZgKUwLslsICTgm/Jz0D8vRkMwHwYDVR0j BBgwFoAUC6+WZwZgyU+7Pjh+8VBeb6QB7M8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWEwY2Y5YS1jNTdkLTQzOTUtOTI0OS1iZmNmNDY3MjQyODIvMC8wQkFGOTY2NzA2 NjBDOTRGQkIzRTM4N0VGMTUwNUU2RkE0MDFFQ0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZBNDAx RUNDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVhMGNmOWEtYzU3ZC00Mzk1LTky NDktYmZjZjQ2NzI0MjgyLzAvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVF NkZBNDAxRUNDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFU/2daXnaNIgSyoeyMVrL4B/ctkF/7zNb11 S5IVsCMp6h2JatlNPJBMs+/g02FHqMYbXz0hjHZwiYxgTg8GVk99C+yeo9HHxLKu YP5dHOudxzOmGKps+t5qwqOIBDwaAkWQGvAu0YuQSj58ob+R/++Y0rA5oDzEUltr 5w/iWNZ9FsfuaXsloZNjxaMpIRzhO2pWMVv8FDXQwnIKz3j1lOx+uqyTL3eq65gL 846QLXHFdGUzV0lxOdnLkJoVKBE+3xm/Fcfd0s0O4HOt5CJoj2RWm8DxTfNRc4UG YAmOmCnLylxKheAOeKRIWRpy+I6k3fEUj8+XFVDGrAZozhTL3Bw= -----END CERTIFICATE-----Generated at Sun Jun 29 18:43:44 2025 by rpki-client