$ rpki-client -vvf repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft File: 0FA41B65D1881666013C9683E40575E68E5DC0A5.mft (raw, json) Hash identifier: xQB7Zwah3aUIdEbYX6TUjodFYxMDVS80q4zuqkTKOO0= Subject key identifier: D2:FF:D3:B1:AD:42:0A:CE:53:F7:86:30:C5:72:51:1E:C1:67:A2:EF Authority key identifier: 0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 Certificate issuer: /CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Certificate serial: 4FCDD6C3ECE0FCB0B8C18ADD14D6DB19820490D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft Manifest number: 04F6 Signing time: Sat 28 Jun 2025 08:41:01 +0000 Manifest this update: Sat 28 Jun 2025 08:36:01 +0000 Manifest next update: Tue 01 Jul 2025 17:32:01 +0000 Files and hashes: 1: 3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa (hash: E/D2Cv8nys+Xw52/1AbUQ7ljKhbTpvG2KMsVr5WOMsA=) 2: 0FA41B65D1881666013C9683E40575E68E5DC0A5.crl (hash: qXl9LO/QQ1ZdnDz1HAGzC8hZP1cAxHaiAnXEsp00zCw=) 3: 3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (hash: VyhY07ev3HZs4lJdDII/xjr5IV8edk9Khb+3ZQ71QT4=) 4: 323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa (hash: 96iMJoj+cFMvtnyIVwYET8bE27HKdbaW3rJ7KX7hPqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 17:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:cd:d6:c3:ec:e0:fc:b0:b8:c1:8a:dd:14:d6:db:19:82:04:90:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Validity Not Before: Jun 28 08:36:01 2025 GMT Not After : Jul 1 17:32:01 2025 GMT Subject: CN=D2FFD3B1AD420ACE53F78630C572511EC167A2EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a4:8a:47:f0:16:7c:ae:10:26:1a:5d:f5:9b: ef:ff:42:9e:e6:0c:3a:0e:69:5d:5f:e2:4e:c7:58: d9:1f:0b:26:d3:c0:0b:6d:9c:44:d7:80:ed:9d:05: 95:6b:eb:92:38:42:04:20:f7:f5:24:94:4f:57:27: a6:b3:25:0d:05:65:cb:37:02:59:17:82:97:57:b1: 77:ca:9a:be:fd:b9:0c:6a:d4:7a:0d:a3:83:bc:c6: 30:12:46:51:f6:70:71:e9:25:75:d4:e6:4f:66:f4: cd:34:af:42:d2:25:ba:49:df:bf:75:86:54:23:a1: 55:85:12:d7:95:5e:75:ee:f5:21:46:54:ab:36:48: 6a:5b:b8:f6:0d:98:54:30:a7:14:95:4b:15:31:46: f6:c7:04:72:95:b7:f5:0b:f4:d9:9a:a9:2d:29:2b: 96:af:76:b8:60:95:a6:3e:51:8b:42:6d:c7:b2:1c: 39:f7:c9:f2:1c:25:24:80:bf:80:29:45:c0:75:7e: 73:32:1e:8b:e3:dd:17:85:e3:84:f3:48:78:1e:e0: f7:4c:40:a9:67:d4:c2:4c:15:62:a8:35:76:41:5a: 33:3d:f5:b3:7a:08:db:bf:83:4d:c4:67:cf:95:6f: 4f:9a:23:e2:23:e8:32:5a:81:7e:03:3a:25:d0:8f: 27:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FF:D3:B1:AD:42:0A:CE:53:F7:86:30:C5:72:51:1E:C1:67:A2:EF X509v3 Authority Key Identifier: keyid:0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:1c:da:86:8e:c3:61:f8:d9:67:55:ff:3a:74:30:99:69:5d: ac:c8:a2:fe:83:db:fe:3c:53:6c:82:db:13:bb:36:67:60:51: 5d:ec:fd:d9:ec:46:91:f6:4b:df:ea:68:9f:4d:46:2a:cb:4b: 11:36:87:b7:aa:1e:27:98:b0:78:39:fc:49:2b:ac:b7:8b:e5: 0a:68:00:53:bd:93:f6:10:ae:10:89:68:42:73:75:23:4c:a6: 59:da:d5:4e:0c:65:e0:a0:db:58:32:12:b0:a7:fb:e4:a1:1d: 3a:c2:f5:5f:9c:78:85:e3:30:75:9c:6b:85:fe:7f:33:68:45: 5a:9d:1e:c1:62:f9:af:71:aa:01:68:09:b3:30:d8:fb:e9:2d: f7:f1:5d:87:0c:4c:df:c3:03:6b:3b:ef:ba:4d:17:8f:43:ee: 77:e8:77:5c:ef:bf:42:5d:a6:ba:6d:59:92:30:49:33:f1:43: de:40:65:49:92:c2:98:d2:d7:d8:99:fe:bc:e1:53:4a:8b:ce: 9e:eb:e8:12:e4:0a:10:f7:b2:e4:e5:53:68:e6:e1:75:35:d1: c1:d7:c1:70:71:e8:9e:ca:07:c1:8c:fd:8c:98:c2:18:df:f9: a3:fd:b3:14:f1:6b:36:91:6c:ea:c3:4b:8e:1b:5e:bf:aa:2e: 99:bc:60:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT83Ww+zg/LC4wYrdFNbbGYIEkNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4 RTVEQzBBNTAeFw0yNTA2MjgwODM2MDFaFw0yNTA3MDExNzMyMDFaMDMxMTAvBgNV BAMTKEQyRkZEM0IxQUQ0MjBBQ0U1M0Y3ODYzMEM1NzI1MTFFQzE2N0EyRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxpIpH8BZ8rhAmGl31m+//Qp7m DDoOaV1f4k7HWNkfCybTwAttnETXgO2dBZVr65I4QgQg9/UklE9XJ6azJQ0FZcs3 AlkXgpdXsXfKmr79uQxq1HoNo4O8xjASRlH2cHHpJXXU5k9m9M00r0LSJbpJ3791 hlQjoVWFEteVXnXu9SFGVKs2SGpbuPYNmFQwpxSVSxUxRvbHBHKVt/UL9NmaqS0p K5avdrhglaY+UYtCbceyHDn3yfIcJSSAv4ApRcB1fnMyHovj3ReF44TzSHge4PdM QKln1MJMFWKoNXZBWjM99bN6CNu/g03EZ8+Vb0+aI+Ij6DJagX4DOiXQjydNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0v/Tsa1CCs5T94YwxXJRHsFnou8wHwYDVR0j BBgwFoAUD6QbZdGIFmYBPJaD5AV15o5dwKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk0ZDM3NS1mYzdkLTRkYzctYTFmMS1lMGIzYTU5ZmRmNzgvMC8wRkE0MUI2NUQx ODgxNjY2MDEzQzk2ODNFNDA1NzVFNjhFNURDMEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4RTVE QzBBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5NGQzNzUtZmM3ZC00ZGM3LWEx ZjEtZTBiM2E1OWZkZjc4LzAvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1 RTY4RTVEQzBBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUc2oaOw2H42WdV/zp0MJlpXazIov6D2/48 U2yC2xO7NmdgUV3s/dnsRpH2S9/qaJ9NRirLSxE2h7eqHieYsHg5/EkrrLeL5Qpo AFO9k/YQrhCJaEJzdSNMplna1U4MZeCg21gyErCn++ShHTrC9V+ceIXjMHWca4X+ fzNoRVqdHsFi+a9xqgFoCbMw2PvpLffxXYcMTN/DA2s777pNF49D7nfod1zvv0Jd prptWZIwSTPxQ95AZUmSwpjS19iZ/rzhU0qLzp7r6BLkChD3suTlU2jm4XU10cHX wXBx6J7KB8GM/YyYwhjf+aP9sxTxazaRbOrDS44bXr+qLpm8YHI= -----END CERTIFICATE-----Generated at Mon Jun 30 05:40:47 2025 by rpki-client