$ rpki-client -vvf repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft File: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft (raw, json) Hash identifier: Xft6ZbcU9EKH6PTQLOItficU4of8vx8ZS7ENcKG3NKA= Subject key identifier: 8E:90:F6:94:0F:F3:8E:E4:7F:62:33:36:04:B4:9A:80:82:3F:3C:D4 Authority key identifier: 0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF Certificate issuer: /CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Certificate serial: 533109C6C7534163B3D7FBE986C58B8A86AEF167 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft Manifest number: 0278 Signing time: Sat 18 Oct 2025 21:01:58 +0000 Manifest this update: Sat 18 Oct 2025 20:56:58 +0000 Manifest next update: Wed 22 Oct 2025 00:43:58 +0000 Files and hashes: 1: 3130332e3234312e3230362e302f32342d3234203d3e20313332363738.roa (hash: R3N3/32j1HA8MrNIZSao7bewuBwwVHmgTfIW6Qbgz1c=) 2: 3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa (hash: 1qZsE00rwmGlzOMKTEF7EolFAH+CLupX31RHggUVtOs=) 3: 3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa (hash: 2PxEI59kNreJnYBeFqozYQ5subadmwmaBV8ky/IxUfI=) 4: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl (hash: INYatVh1s1vNtUbvHU+zm59XW8h+ccDX/3KA2ESIo4s=) 5: 3130332e3234312e3230372e302f32342d3234203d3e20313332363738.roa (hash: t19S9PQfVzWHZc7PL9Ucb7apMMw/h9xU9QuPzuFz/Mk=) 6: 323030313a6466333a373030303a3a2f34382d3438203d3e20313332363738.roa (hash: mAFJTZEnZNfr7PARi8AMi8BJVScVXavpsJWltGWztr8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:31:09:c6:c7:53:41:63:b3:d7:fb:e9:86:c5:8b:8a:86:ae:f1:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Validity Not Before: Oct 18 20:56:58 2025 GMT Not After : Oct 22 00:43:58 2025 GMT Subject: CN=8E90F6940FF38EE47F62333604B49A80823F3CD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:47:db:08:e1:e5:c9:4e:d1:34:7a:57:f1:de: 60:5f:1f:29:fc:cb:23:35:f9:6a:7c:05:9f:ce:74: 85:98:29:cb:c1:3e:6c:b4:e6:87:5f:08:98:0a:e7: 0b:ad:9e:fb:6c:e8:80:09:91:42:cc:30:21:8a:46: ec:b0:ac:f7:23:e4:13:7d:26:4a:49:28:c5:cd:99: 4c:81:0e:1d:2d:9d:3c:3c:7f:a8:b2:93:40:99:db: 88:bd:be:f4:8c:60:3a:f7:07:d2:47:4e:79:d6:5c: 3d:75:4e:1b:2f:56:da:9b:9d:ee:b0:26:7b:37:b1: 28:6a:33:41:dd:d4:ff:47:4b:e3:c4:d9:d2:5a:3d: a2:1b:d7:b2:cb:d0:1d:27:66:00:89:0b:34:8e:2e: 74:94:ea:e2:68:52:5e:46:ef:94:79:18:d5:6b:d9: 43:e4:9f:77:01:6b:af:b6:e5:15:f4:ee:4a:2c:49: 8e:8e:10:d9:b4:d0:e8:45:b9:7f:28:a4:d4:49:2c: 3b:a1:9a:dc:85:06:f7:ed:cd:79:fa:21:c3:4b:93: 5a:0f:98:9c:ed:e9:2f:81:60:20:89:71:52:3d:13: fd:86:49:79:35:b3:e2:d1:41:ab:c0:13:f5:e9:31: 67:f4:72:89:1d:5b:7e:39:53:09:05:c1:9e:49:b5: 96:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:90:F6:94:0F:F3:8E:E4:7F:62:33:36:04:B4:9A:80:82:3F:3C:D4 X509v3 Authority Key Identifier: keyid:0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:53:9d:c6:62:8d:3b:34:06:a3:b2:3e:e6:2e:d3:24:74:40: 00:80:f1:cf:33:4c:19:d8:be:fd:5c:46:51:0e:e1:3a:2c:0b: 2c:8d:5d:19:ca:8c:03:30:be:17:bd:82:7e:89:de:91:0d:5e: a6:bc:cb:6f:8a:d7:a0:2a:f9:8c:b3:d9:ad:f9:ec:61:af:cc: 93:34:37:03:48:bd:4f:de:9b:a6:15:75:05:86:a9:87:3b:a3: 00:8a:5e:d5:ae:56:c0:c3:22:e7:23:de:d7:81:3a:51:69:1d: 25:44:67:b8:25:12:c3:b0:75:9e:a3:ea:5c:48:cf:64:61:70: aa:bf:ad:b0:25:46:6d:5b:f1:4c:d5:84:92:83:e5:a0:2b:b2: 4e:4e:03:36:90:4e:81:cd:33:05:5e:7a:ba:d8:f0:29:50:02: f1:39:af:1d:8d:93:ad:88:1a:fe:da:ed:1a:e0:cb:33:75:24: 2e:99:50:19:65:01:ba:8f:96:2e:df:cc:cf:82:fe:7c:79:f1: 2f:d6:24:0f:d7:a8:28:e3:0a:f6:68:8d:a3:92:63:bb:4a:8f: 73:13:09:07:6f:3e:c9:46:81:76:42:35:69:07:3d:e5:45:7a: 4c:47:0e:75:66:18:34:53:7a:42:b8:aa:dd:1b:4a:74:55:39: 58:32:88:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUzEJxsdTQWOz1/vphsWLioau8WcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZB NDAxRUNDRjAeFw0yNTEwMTgyMDU2NThaFw0yNTEwMjIwMDQzNThaMDMxMTAvBgNV BAMTKDhFOTBGNjk0MEZGMzhFRTQ3RjYyMzMzNjA0QjQ5QTgwODIzRjNDRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuR9sI4eXJTtE0elfx3mBfHyn8 yyM1+Wp8BZ/OdIWYKcvBPmy05odfCJgK5wutnvts6IAJkULMMCGKRuywrPcj5BN9 JkpJKMXNmUyBDh0tnTw8f6iyk0CZ24i9vvSMYDr3B9JHTnnWXD11ThsvVtqbne6w Jns3sShqM0Hd1P9HS+PE2dJaPaIb17LL0B0nZgCJCzSOLnSU6uJoUl5G75R5GNVr 2UPkn3cBa6+25RX07kosSY6OENm00OhFuX8opNRJLDuhmtyFBvftzXn6IcNLk1oP mJzt6S+BYCCJcVI9E/2GSXk1s+LRQavAE/XpMWf0cokdW345UwkFwZ5JtZb1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjpD2lA/zjuR/YjM2BLSagII/PNQwHwYDVR0j BBgwFoAUC6+WZwZgyU+7Pjh+8VBeb6QB7M8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWEwY2Y5YS1jNTdkLTQzOTUtOTI0OS1iZmNmNDY3MjQyODIvMC8wQkFGOTY2NzA2 NjBDOTRGQkIzRTM4N0VGMTUwNUU2RkE0MDFFQ0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZBNDAx RUNDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVhMGNmOWEtYzU3ZC00Mzk1LTky NDktYmZjZjQ2NzI0MjgyLzAvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVF NkZBNDAxRUNDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVTncZijTs0BqOyPuYu0yR0QACA8c8zTBnY vv1cRlEO4TosCyyNXRnKjAMwvhe9gn6J3pENXqa8y2+K16Aq+Yyz2a357GGvzJM0 NwNIvU/em6YVdQWGqYc7owCKXtWuVsDDIucj3teBOlFpHSVEZ7glEsOwdZ6j6lxI z2RhcKq/rbAlRm1b8UzVhJKD5aArsk5OAzaQToHNMwVeerrY8ClQAvE5rx2Nk62I Gv7a7RrgyzN1JC6ZUBllAbqPli7fzM+C/nx58S/WJA/XqCjjCvZojaOSY7tKj3MT CQdvPslGgXZCNWkHPeVFekxHDnVmGDRTekK4qt0bSnRVOVgyiIc= -----END CERTIFICATE-----Generated at Mon Oct 20 09:26:28 2025 by rpki-client