$ rpki-client -vvf repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft File: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft (raw, json) Hash identifier: q1wWy4xHbk5/v/SLgCeN0NIWfOVb147sHbiW7dzXTkA= Subject key identifier: B8:1B:DB:61:7C:8E:96:53:A3:A5:AF:6A:CF:F9:FE:D2:2F:AE:13:B8 Authority key identifier: 0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 Certificate issuer: /CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Certificate serial: 7D674A9AF0A8AEBD0679107E329466315450C4FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft Manifest number: 0287 Signing time: Sun 29 Jun 2025 18:32:15 +0000 Manifest this update: Sun 29 Jun 2025 18:27:15 +0000 Manifest next update: Thu 03 Jul 2025 05:23:15 +0000 Files and hashes: 1: 3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa (hash: HpSArK9wKsGD/4QjsHQDEChpbO5zQMtEgV2WhSH9EBo=) 2: 3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa (hash: tNCrkyzG4AciCmgimqvIw2bQeulAylk5FoXAJrDEuic=) 3: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl (hash: Y485zfDbsuVc9KxP1VUdqXo4WMNKXqSk0yTH8T72UDc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 05:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:67:4a:9a:f0:a8:ae:bd:06:79:10:7e:32:94:66:31:54:50:c4:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Validity Not Before: Jun 29 18:27:15 2025 GMT Not After : Jul 3 05:23:15 2025 GMT Subject: CN=B81BDB617C8E9653A3A5AF6ACFF9FED22FAE13B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b2:fd:49:04:78:71:35:27:fb:f9:75:18:44: 81:30:7b:6e:3e:88:29:1f:60:db:67:a0:68:11:f2: d1:1f:75:41:aa:6d:83:17:ea:e8:f6:72:3a:72:53: 6b:4e:9c:39:35:30:8a:8d:a2:e1:0c:f4:3f:31:ae: a8:e6:73:82:ff:0c:74:f4:0e:4e:7f:51:21:95:90: 87:84:87:d8:f9:92:fc:ee:1f:7b:de:3c:09:64:26: 48:3a:38:1c:af:af:b8:39:00:58:33:37:39:4e:43: c7:2c:7d:0f:34:b9:e1:a2:e5:b0:66:41:b3:32:ad: 04:1a:1e:48:df:33:3d:6d:94:e1:12:d7:6c:e4:82: 8c:d5:97:32:ca:41:58:4c:6d:44:c7:c9:9c:f8:24: 30:9d:6a:35:43:be:49:2d:bf:45:40:b7:f1:9c:a2: 4d:fd:92:95:ab:f3:e6:6e:b9:a9:64:e8:80:28:c6: 50:3f:e0:24:e5:2e:dd:cb:dc:77:97:80:9e:02:a3: 38:6f:d5:95:81:87:b7:df:84:47:f5:d8:b5:d2:a1: a5:a1:33:31:31:1d:67:92:30:83:37:c3:11:ca:dc: 6a:0c:1e:fc:39:de:50:3d:cf:b1:18:d7:91:96:07: 09:03:05:51:25:57:f8:84:d7:b0:13:63:8a:d7:a6: b9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1B:DB:61:7C:8E:96:53:A3:A5:AF:6A:CF:F9:FE:D2:2F:AE:13:B8 X509v3 Authority Key Identifier: keyid:0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:6d:0d:ae:07:c8:07:4d:07:51:fc:32:fe:af:14:cb:fd:8a: 51:62:ba:a1:80:c1:7c:9f:db:6c:f9:69:af:47:e0:76:08:48: 4e:6c:fa:5f:44:f9:62:d5:22:6b:1e:6d:48:82:15:6f:a7:ae: b3:c4:c7:93:ab:7f:7b:c1:56:b0:f2:e8:3a:dd:a9:7f:57:eb: 44:cd:64:f5:f6:9b:33:d6:2e:56:71:9f:54:d3:73:a4:68:fb: 8f:8b:bf:78:03:28:84:d7:35:a6:03:7c:97:d5:2a:be:92:17: 70:e1:41:dd:53:3f:a6:78:97:1c:a3:fc:b5:c8:a8:d6:1e:71: a4:0b:df:eb:fe:c5:99:3f:d5:d7:33:90:88:70:e1:41:df:91: 47:23:4c:71:e3:76:28:3c:9d:2f:92:22:46:5a:09:bb:58:b3: 8a:c2:3a:5c:f0:f3:6e:5a:b6:a6:88:eb:d3:80:3c:7a:3f:12: 90:9f:d1:b0:af:ef:89:83:0b:d1:cd:50:2f:be:cf:2d:6a:41: 7d:a0:eb:6c:be:45:48:bb:ef:b0:a0:a2:6c:42:79:d8:44:09: e8:57:f7:10:e7:7f:17:26:9b:e0:0b:10:22:0d:78:96:23:2c: a1:20:fc:1a:b7:0e:51:c0:71:f2:15:06:f3:18:a3:1e:f0:43: 96:9c:ae:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfWdKmvCorr0GeRB+MpRmMVRQxP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2 Q0VGNzE1MTAeFw0yNTA2MjkxODI3MTVaFw0yNTA3MDMwNTIzMTVaMDMxMTAvBgNV BAMTKEI4MUJEQjYxN0M4RTk2NTNBM0E1QUY2QUNGRjlGRUQyMkZBRTEzQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFsv1JBHhxNSf7+XUYRIEwe24+ iCkfYNtnoGgR8tEfdUGqbYMX6uj2cjpyU2tOnDk1MIqNouEM9D8xrqjmc4L/DHT0 Dk5/USGVkIeEh9j5kvzuH3vePAlkJkg6OByvr7g5AFgzNzlOQ8csfQ80ueGi5bBm QbMyrQQaHkjfMz1tlOES12zkgozVlzLKQVhMbUTHyZz4JDCdajVDvkktv0VAt/Gc ok39kpWr8+Zuualk6IAoxlA/4CTlLt3L3HeXgJ4Cozhv1ZWBh7ffhEf12LXSoaWh MzExHWeSMIM3wxHK3GoMHvw53lA9z7EY15GWBwkDBVElV/iE17ATY4rXprl5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuBvbYXyOllOjpa9qz/n+0i+uE7gwHwYDVR0j BBgwFoAUDDwRP5gNgA+tX8Rn7n8QgGzvcVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTU3YTNiZi00ODIzLTQ2MDktODVjZC03NzU3MGJmMTg1ODAvMC8wQzNDMTEzRjk4 MEQ4MDBGQUQ1RkM0NjdFRTdGMTA4MDZDRUY3MTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2Q0VG NzE1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk1N2EzYmYtNDgyMy00NjA5LTg1 Y2QtNzc1NzBiZjE4NTgwLzAvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEw ODA2Q0VGNzE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFtDa4HyAdNB1H8Mv6vFMv9ilFiuqGAwXyf 22z5aa9H4HYISE5s+l9E+WLVImsebUiCFW+nrrPEx5Orf3vBVrDy6DrdqX9X60TN ZPX2mzPWLlZxn1TTc6Ro+4+Lv3gDKITXNaYDfJfVKr6SF3DhQd1TP6Z4lxyj/LXI qNYecaQL3+v+xZk/1dczkIhw4UHfkUcjTHHjdig8nS+SIkZaCbtYs4rCOlzw825a tqaI69OAPHo/EpCf0bCv74mDC9HNUC++zy1qQX2g62y+RUi777CgomxCedhECehX 9xDnfxcmm+ALECINeJYjLKEg/Bq3DlHAcfIVBvMYox7wQ5acrnE= -----END CERTIFICATE-----Generated at Wed Jul 2 05:32:41 2025 by rpki-client