$ rpki-client -vvf repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft File: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft (raw, json) Hash identifier: kIEs7P4qom4Ne53FTy3g70V29ZRG+MoMSgKoKWbPBgU= Subject key identifier: BF:CE:EA:4A:DA:39:14:51:FE:1F:47:36:CB:9B:01:D5:5E:AB:79:B9 Authority key identifier: 0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 Certificate issuer: /CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Certificate serial: 07038A0D83E9A9363D5EDED96A1F082B22FD2952 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft Manifest number: 029F Signing time: Sat 23 Aug 2025 08:12:22 +0000 Manifest this update: Sat 23 Aug 2025 08:07:22 +0000 Manifest next update: Tue 26 Aug 2025 13:15:22 +0000 Files and hashes: 1: 3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa (hash: tNCrkyzG4AciCmgimqvIw2bQeulAylk5FoXAJrDEuic=) 2: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl (hash: gpTDovWu4yFwsDDm9g2KmrDGq5Ia/Kb7I5mnrcie5mw=) 3: 3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa (hash: HpSArK9wKsGD/4QjsHQDEChpbO5zQMtEgV2WhSH9EBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:03:8a:0d:83:e9:a9:36:3d:5e:de:d9:6a:1f:08:2b:22:fd:29:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Validity Not Before: Aug 23 08:07:22 2025 GMT Not After : Aug 26 13:15:22 2025 GMT Subject: CN=BFCEEA4ADA391451FE1F4736CB9B01D55EAB79B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8b:ca:05:35:b7:06:f8:fd:74:67:14:70:8a: 63:c9:97:3b:67:3a:e5:9f:ce:b9:d4:ea:d4:00:ac: 73:c2:9e:81:9c:17:a0:52:6b:3e:ea:17:b0:c9:29: 78:6f:41:35:0f:fb:e8:a8:ca:5f:11:65:7f:0b:3b: 3b:67:00:3c:dc:34:ee:a4:40:a2:56:f9:20:cb:cd: 59:c0:6e:91:4a:26:cc:b6:d8:1a:09:18:03:4e:d7: c4:66:34:a0:fa:1a:6d:29:5b:c8:6f:c9:7d:52:fc: 71:53:78:7c:3b:07:3a:25:df:d1:91:02:f6:c7:b1: cc:09:ad:ee:a8:92:33:cc:be:bb:c3:61:23:99:c9: a5:45:68:d2:e6:7f:d7:b7:a5:05:2f:1b:f5:6c:f6: 1a:77:ad:63:c0:3b:fd:a3:0a:1a:c6:07:96:0b:82: 0d:39:7a:81:5b:cf:f6:12:f9:00:40:64:f0:82:7c: 37:3b:8a:db:1a:5b:74:20:16:60:cd:0c:25:fa:6f: d1:4e:f8:17:30:32:8c:30:26:e5:45:cd:c6:aa:b8: 79:45:d0:46:34:42:eb:ef:5f:a0:31:65:e4:55:05: d0:f5:69:cf:e6:c8:3b:6d:9f:89:61:9c:4c:34:c1: 72:da:8f:e3:29:94:5e:2d:f6:30:1c:9a:87:54:0e: 67:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CE:EA:4A:DA:39:14:51:FE:1F:47:36:CB:9B:01:D5:5E:AB:79:B9 X509v3 Authority Key Identifier: keyid:0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:95:92:a0:10:2d:22:76:ca:a8:68:11:50:99:20:1e:06:e4: 6e:d2:aa:0b:30:e3:e0:af:f7:59:50:d4:a5:86:af:4c:c4:cb: 73:83:a5:31:fd:32:23:15:1a:9a:72:9d:48:bf:c6:43:91:24: f0:85:9d:4b:e5:cf:35:0c:5e:f2:9f:70:8e:f8:8b:1c:8e:72: f6:b9:08:66:f0:49:db:c9:e4:81:9a:2e:1f:4a:c8:19:67:b9: 1f:7c:e0:91:cd:e2:11:36:e8:34:bd:51:e4:b4:c3:0e:61:81: 6f:9f:97:43:d3:3f:75:0a:42:34:fe:dc:ff:0a:14:80:f9:15: 4d:63:17:b4:96:47:a3:32:e0:64:59:b7:fb:a1:66:ca:f7:cc: 97:b9:f6:d6:c6:ea:d9:69:da:0b:94:79:9d:1f:77:ef:18:ec: a5:de:f9:65:51:db:d5:61:ee:46:cb:c7:0b:bd:8e:a4:48:d9: 92:1f:39:f4:31:c0:78:57:ef:2c:9b:78:82:1e:91:86:0d:c8: bb:fb:18:23:85:15:06:11:76:0d:66:99:74:b4:c1:fd:98:9c: d1:a7:2a:11:08:0e:ea:cb:7c:cf:2a:03:4e:c6:57:9d:37:6d: e7:0b:64:59:41:05:97:55:1d:5c:59:43:9e:3a:5e:37:85:e5: ec:ae:76:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBwOKDYPpqTY9Xt7Zah8IKyL9KVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2 Q0VGNzE1MTAeFw0yNTA4MjMwODA3MjJaFw0yNTA4MjYxMzE1MjJaMDMxMTAvBgNV BAMTKEJGQ0VFQTRBREEzOTE0NTFGRTFGNDczNkNCOUIwMUQ1NUVBQjc5QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEi8oFNbcG+P10ZxRwimPJlztn OuWfzrnU6tQArHPCnoGcF6BSaz7qF7DJKXhvQTUP++ioyl8RZX8LOztnADzcNO6k QKJW+SDLzVnAbpFKJsy22BoJGANO18RmNKD6Gm0pW8hvyX1S/HFTeHw7Bzol39GR AvbHscwJre6okjPMvrvDYSOZyaVFaNLmf9e3pQUvG/Vs9hp3rWPAO/2jChrGB5YL gg05eoFbz/YS+QBAZPCCfDc7itsaW3QgFmDNDCX6b9FO+BcwMowwJuVFzcaquHlF 0EY0QuvvX6AxZeRVBdD1ac/myDttn4lhnEw0wXLaj+MplF4t9jAcmodUDmeFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv87qSto5FFH+H0c2y5sB1V6rebkwHwYDVR0j BBgwFoAUDDwRP5gNgA+tX8Rn7n8QgGzvcVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTU3YTNiZi00ODIzLTQ2MDktODVjZC03NzU3MGJmMTg1ODAvMC8wQzNDMTEzRjk4 MEQ4MDBGQUQ1RkM0NjdFRTdGMTA4MDZDRUY3MTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2Q0VG NzE1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk1N2EzYmYtNDgyMy00NjA5LTg1 Y2QtNzc1NzBiZjE4NTgwLzAvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEw ODA2Q0VGNzE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGeVkqAQLSJ2yqhoEVCZIB4G5G7Sqgsw4+Cv 91lQ1KWGr0zEy3ODpTH9MiMVGppynUi/xkORJPCFnUvlzzUMXvKfcI74ixyOcva5 CGbwSdvJ5IGaLh9KyBlnuR984JHN4hE26DS9UeS0ww5hgW+fl0PTP3UKQjT+3P8K FID5FU1jF7SWR6My4GRZt/uhZsr3zJe59tbG6tlp2guUeZ0fd+8Y7KXe+WVR29Vh 7kbLxwu9jqRI2ZIfOfQxwHhX7yybeIIekYYNyLv7GCOFFQYRdg1mmXS0wf2YnNGn KhEIDurLfM8qA07GV503becLZFlBBZdVHVxZQ546XjeF5eyuds4= -----END CERTIFICATE-----Generated at Sat Aug 23 12:31:47 2025 by rpki-client