$ rpki-client -vvf repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft File: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft (raw, json) Hash identifier: o5jOOFAyBPt0+v7yWnGulGuD1ldqSMXVB5en7wdLDdY= Subject key identifier: 60:09:9E:77:B7:D2:26:64:5A:2A:11:7F:12:C7:67:99:6F:01:4D:D2 Authority key identifier: 0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E Certificate issuer: /CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Certificate serial: 4CFD3B97D252413330B122C59B29D48C2298376E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft Manifest number: 0280 Signing time: Sun 29 Jun 2025 00:30:44 +0000 Manifest this update: Sun 29 Jun 2025 00:25:44 +0000 Manifest next update: Wed 02 Jul 2025 10:21:44 +0000 Files and hashes: 1: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: WfXT/rfuqOQCtkSuVOvx3HMgMVWsirCiP4VcVNJi+gw=) 2: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl (hash: ARlwSzPTa+QSSsEYxy3ifAB+r3D7ZHRqy/Ue7nDf/Co=) 3: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: v7MhMAJXwywfKNpvZVGmK8aNTXn4lXBf1MXFy8E2vnM=) 4: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: CqE5ZCzeVRm7AAgS0qiGljnG3wqud2DW58oPqVZ6WJg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 10:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:fd:3b:97:d2:52:41:33:30:b1:22:c5:9b:29:d4:8c:22:98:37:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Validity Not Before: Jun 29 00:25:44 2025 GMT Not After : Jul 2 10:21:44 2025 GMT Subject: CN=60099E77B7D226645A2A117F12C767996F014DD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0b:d2:11:94:97:8d:0a:79:bb:36:2c:11:53: 2e:cd:bc:72:7a:b5:f9:9f:c7:bb:4a:e7:de:58:92: b0:2d:68:11:6b:4f:a0:ed:7a:a7:b3:b6:ee:f1:31: 3f:18:20:a6:a4:64:0b:18:a4:8d:c2:03:70:a1:44: 81:2b:11:cc:31:9c:81:05:71:e3:af:73:fa:e0:0f: 53:39:98:a0:d7:c8:b7:0b:11:c5:b6:e1:ed:0a:b3: e0:c8:ed:0c:c2:6f:92:96:32:de:97:44:18:c2:2f: 34:c2:d8:31:e7:d2:e1:49:f3:45:96:12:5a:44:db: 53:c9:64:6e:0e:cf:43:a9:b9:8f:f3:b8:4e:7b:1b: f8:3d:06:51:1a:e7:cf:8f:12:94:11:71:98:a2:a6: c3:c2:c9:58:87:5d:09:6e:e4:ba:5b:a3:7d:fd:c6: 65:8b:3a:23:95:f2:21:56:6d:a6:45:7d:92:c4:da: 89:f6:0b:0f:b0:7c:65:e0:ae:27:65:3f:7f:4c:4e: ca:ec:26:94:27:18:b0:6c:4a:40:70:d0:6c:7f:6e: 8d:66:e5:14:42:a2:fd:7b:ad:96:94:a3:ea:18:1b: fa:f4:5e:67:a5:fc:08:00:08:1c:c7:7b:e7:02:28: da:ad:dd:9f:e6:ea:2d:f3:06:0b:8a:5c:d3:52:1c: d3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:09:9E:77:B7:D2:26:64:5A:2A:11:7F:12:C7:67:99:6F:01:4D:D2 X509v3 Authority Key Identifier: keyid:0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:12:41:4c:0b:83:f4:62:a3:06:ff:bb:64:f0:51:90:05:b8: 1e:e2:c6:cd:8b:87:a7:ee:7b:1c:63:a7:b3:07:20:83:8e:3e: 39:2f:c3:e0:05:3c:00:d4:72:af:60:3d:32:10:55:56:89:c7: e6:2a:1c:f3:86:9b:3e:f5:c6:a4:90:05:10:e2:dd:0b:16:d0: 1e:71:ef:06:3e:6a:24:22:3f:88:7b:a5:ce:71:54:81:c3:14: b0:19:3b:fd:6a:1d:03:e7:f1:51:ee:69:ca:b7:d7:dc:31:5e: ee:03:17:19:48:a8:36:0c:c3:6e:49:02:b9:e8:23:88:3b:29: e2:88:ba:c5:87:63:77:62:6b:c8:b4:8e:10:b7:c1:5e:0f:5f: a4:31:b6:cc:b6:18:87:2e:09:c3:fc:c2:f2:db:e9:25:b6:20: 4f:61:6f:e2:32:ee:6c:14:7f:bc:8e:3b:2d:89:34:bf:61:c0: 8b:4b:ed:7e:7f:5a:22:2d:9d:4a:d2:c1:ba:2e:11:34:5c:9b: 16:ca:19:5f:d3:c9:31:1a:1b:3c:0d:85:42:c4:f9:52:f1:77: d4:9e:8a:0a:94:ed:3d:27:39:b0:58:5d:24:cc:91:11:6b:6a: 3e:e0:0d:2d:68:53:10:cb:f8:1b:03:d2:3a:cc:26:5e:ff:12: 11:b4:1e:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTP07l9JSQTMwsSLFmynUjCKYN24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENE Mjg1MDI5RTAeFw0yNTA2MjkwMDI1NDRaFw0yNTA3MDIxMDIxNDRaMDMxMTAvBgNV BAMTKDYwMDk5RTc3QjdEMjI2NjQ1QTJBMTE3RjEyQzc2Nzk5NkYwMTRERDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGC9IRlJeNCnm7NiwRUy7NvHJ6 tfmfx7tK595YkrAtaBFrT6Dteqeztu7xMT8YIKakZAsYpI3CA3ChRIErEcwxnIEF ceOvc/rgD1M5mKDXyLcLEcW24e0Ks+DI7QzCb5KWMt6XRBjCLzTC2DHn0uFJ80WW ElpE21PJZG4Oz0OpuY/zuE57G/g9BlEa58+PEpQRcZiipsPCyViHXQlu5Lpbo339 xmWLOiOV8iFWbaZFfZLE2on2Cw+wfGXgridlP39MTsrsJpQnGLBsSkBw0Gx/bo1m 5RRCov17rZaUo+oYG/r0Xmel/AgACBzHe+cCKNqt3Z/m6i3zBguKXNNSHNMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYAmed7fSJmRaKhF/EsdnmW8BTdIwHwYDVR0j BBgwFoAUDQXve6cdZAt4T3LH2PD03NKFAp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWI4NjA0Zi0zOTVhLTQyYmUtYjk5Ny1lODBmYzFkZjkwZjkvMC8wRDA1RUY3QkE3 MUQ2NDBCNzg0RjcyQzdEOEYwRjREQ0QyODUwMjlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENEMjg1 MDI5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODliODYwNGYtMzk1YS00MmJlLWI5 OTctZTgwZmMxZGY5MGY5LzAvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0 RENEMjg1MDI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABISQUwLg/Riowb/u2TwUZAFuB7ixs2Lh6fu exxjp7MHIIOOPjkvw+AFPADUcq9gPTIQVVaJx+YqHPOGmz71xqSQBRDi3QsW0B5x 7wY+aiQiP4h7pc5xVIHDFLAZO/1qHQPn8VHuacq319wxXu4DFxlIqDYMw25JArno I4g7KeKIusWHY3dia8i0jhC3wV4PX6Qxtsy2GIcuCcP8wvLb6SW2IE9hb+Iy7mwU f7yOOy2JNL9hwItL7X5/WiItnUrSwbouETRcmxbKGV/TyTEaGzwNhULE+VLxd9Se igqU7T0nObBYXSTMkRFraj7gDS1oUxDL+BsD0jrMJl7/EhG0HgQ= -----END CERTIFICATE-----Generated at Mon Jun 30 17:08:13 2025 by rpki-client