$ rpki-client -vvf repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft File: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft (raw, json) Hash identifier: yJmiTCYKJeLVIZUM4h3xxxbxgERJmXkkDYIW2Ql88dY= Subject key identifier: D9:A8:57:93:2E:8D:8E:7A:A7:D3:D7:BC:C4:A2:BD:8E:CD:83:61:FD Authority key identifier: 0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E Certificate issuer: /CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Certificate serial: 76F8517BC5FFEDF655F3C87DEA5A8C517284DCAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft Manifest number: 026A Signing time: Fri 09 May 2025 19:40:44 +0000 Manifest this update: Fri 09 May 2025 19:35:44 +0000 Manifest next update: Mon 12 May 2025 21:59:44 +0000 Files and hashes: 1: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: CqE5ZCzeVRm7AAgS0qiGljnG3wqud2DW58oPqVZ6WJg=) 2: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: WfXT/rfuqOQCtkSuVOvx3HMgMVWsirCiP4VcVNJi+gw=) 3: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: v7MhMAJXwywfKNpvZVGmK8aNTXn4lXBf1MXFy8E2vnM=) 4: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl (hash: f/JbRVfzau2GxR7I+IVEc+e0W+ztngSSmfXYMMj/ylY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 21:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:f8:51:7b:c5:ff:ed:f6:55:f3:c8:7d:ea:5a:8c:51:72:84:dc:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Validity Not Before: May 9 19:35:44 2025 GMT Not After : May 12 21:59:44 2025 GMT Subject: CN=D9A857932E8D8E7AA7D3D7BCC4A2BD8ECD8361FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7c:6c:db:2d:b2:4c:91:71:9e:5c:cd:4c:57: 12:7f:eb:c6:30:ba:38:80:0b:4c:0f:03:a7:32:67: c0:45:93:0c:8b:91:ac:f2:12:36:56:e5:5e:b7:3c: ad:d2:e7:c8:55:da:fa:06:ac:35:f6:e8:ab:ce:0a: 47:a2:12:25:9a:40:77:4b:54:9f:22:0c:fe:f6:41: 83:ae:dc:a5:1b:6d:f2:f9:90:64:14:09:1b:3c:ac: f6:ad:1c:25:33:8f:f0:78:92:26:aa:44:98:d8:85: 6a:50:f7:c5:5b:0b:86:7a:96:2b:db:22:9e:d8:40: 6e:9c:1c:65:a8:3b:39:fd:de:90:15:55:d8:87:04: ff:b6:31:0e:61:e8:e1:d2:5a:8d:37:9c:2d:26:a8: 04:85:70:b2:15:f3:6c:90:1f:57:6f:29:b6:e9:5e: 25:eb:dd:57:0b:bc:7e:ec:7f:df:ad:06:a0:2f:ea: 2f:79:77:37:0d:47:31:01:9b:1b:81:e3:da:a3:6c: 9d:28:57:0e:0b:fc:f0:99:99:04:ce:4a:44:1b:c0: af:00:8d:8e:c3:2d:4f:00:d7:20:d3:8d:69:c6:20: 10:f7:d3:1b:a1:6f:18:a8:ec:7c:eb:d1:0c:a6:b6: 94:97:05:84:3f:26:c0:d9:75:ad:de:b0:11:bf:aa: 22:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A8:57:93:2E:8D:8E:7A:A7:D3:D7:BC:C4:A2:BD:8E:CD:83:61:FD X509v3 Authority Key Identifier: keyid:0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:68:2a:a5:66:6e:be:f3:da:02:45:5c:25:f8:46:76:59:95: d0:4b:75:88:01:34:9e:fe:d8:97:09:b6:0a:68:af:96:4b:51: 33:64:12:0d:3c:55:38:7b:e4:a2:19:7d:d2:7b:43:fc:b4:bb: 95:e9:02:cb:8e:c9:c8:db:35:9f:10:00:3a:6e:ca:5c:7b:47: 6a:0d:fc:15:7a:d7:9c:ab:b0:f1:c4:fb:58:d0:96:30:6c:77: 8c:25:35:14:fd:d2:f0:79:ad:a8:1d:a5:9f:c9:3f:13:a2:ca: f0:0a:31:0e:08:e7:93:70:92:55:50:04:23:c8:60:1e:01:ea: 5b:09:27:f0:c6:e5:2a:fa:0e:dd:81:5b:c2:a0:cf:42:2f:df: 28:17:5a:bb:ed:1e:89:9c:56:4f:08:bd:6d:24:dd:02:50:da: 8d:be:c2:5c:1b:16:dd:ff:f2:ca:c9:56:b7:ed:a7:74:50:2b: 8e:a8:2a:3a:ae:ef:2a:df:1c:93:f8:08:c9:15:46:69:f6:ca: 15:08:a6:7d:01:7d:b8:f3:76:a2:dc:d8:37:21:b9:d7:21:b7: d5:b3:99:24:29:40:59:10:2f:78:1d:55:0a:69:b5:14:af:12: 89:1c:16:94:7b:91:a3:c1:13:4b:fe:d8:73:00:f3:be:29:a2: b3:e6:b0:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdvhRe8X/7fZV88h96lqMUXKE3KowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENE Mjg1MDI5RTAeFw0yNTA1MDkxOTM1NDRaFw0yNTA1MTIyMTU5NDRaMDMxMTAvBgNV BAMTKEQ5QTg1NzkzMkU4RDhFN0FBN0QzRDdCQ0M0QTJCRDhFQ0Q4MzYxRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEfGzbLbJMkXGeXM1MVxJ/68Yw ujiAC0wPA6cyZ8BFkwyLkazyEjZW5V63PK3S58hV2voGrDX26KvOCkeiEiWaQHdL VJ8iDP72QYOu3KUbbfL5kGQUCRs8rPatHCUzj/B4kiaqRJjYhWpQ98VbC4Z6livb Ip7YQG6cHGWoOzn93pAVVdiHBP+2MQ5h6OHSWo03nC0mqASFcLIV82yQH1dvKbbp XiXr3VcLvH7sf9+tBqAv6i95dzcNRzEBmxuB49qjbJ0oVw4L/PCZmQTOSkQbwK8A jY7DLU8A1yDTjWnGIBD30xuhbxio7Hzr0QymtpSXBYQ/JsDZda3esBG/qiILAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ahXky6Njnqn09e8xKK9js2DYf0wHwYDVR0j BBgwFoAUDQXve6cdZAt4T3LH2PD03NKFAp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWI4NjA0Zi0zOTVhLTQyYmUtYjk5Ny1lODBmYzFkZjkwZjkvMC8wRDA1RUY3QkE3 MUQ2NDBCNzg0RjcyQzdEOEYwRjREQ0QyODUwMjlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENEMjg1 MDI5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODliODYwNGYtMzk1YS00MmJlLWI5 OTctZTgwZmMxZGY5MGY5LzAvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0 RENEMjg1MDI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFoKqVmbr7z2gJFXCX4RnZZldBLdYgBNJ7+ 2JcJtgpor5ZLUTNkEg08VTh75KIZfdJ7Q/y0u5XpAsuOycjbNZ8QADpuylx7R2oN /BV615yrsPHE+1jQljBsd4wlNRT90vB5ragdpZ/JPxOiyvAKMQ4I55NwklVQBCPI YB4B6lsJJ/DG5Sr6Dt2BW8Kgz0Iv3ygXWrvtHomcVk8IvW0k3QJQ2o2+wlwbFt3/ 8srJVrftp3RQK46oKjqu7yrfHJP4CMkVRmn2yhUIpn0BfbjzdqLc2Dchudcht9Wz mSQpQFkQL3gdVQpptRSvEokcFpR7kaPBE0v+2HMA874porPmsCQ= -----END CERTIFICATE-----Generated at Sat May 10 07:18:14 2025 by rpki-client