$ rpki-client -vvf repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft File: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft (raw, json) Hash identifier: Uu1YO3lIwpxVfjG8HXTyYCE7MUFLx3nRRFuCP/UM7Bk= Subject key identifier: 3B:62:6C:9B:D6:8F:6A:5E:67:BA:BF:1F:34:2E:C6:F4:C7:54:92:E8 Authority key identifier: 0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E Certificate issuer: /CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Certificate serial: 1065CB21596CEBA63AA4B0A939E9C2B31BB6BEC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft Manifest number: 0298 Signing time: Fri 22 Aug 2025 03:50:45 +0000 Manifest this update: Fri 22 Aug 2025 03:45:45 +0000 Manifest next update: Mon 25 Aug 2025 11:47:45 +0000 Files and hashes: 1: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: CqE5ZCzeVRm7AAgS0qiGljnG3wqud2DW58oPqVZ6WJg=) 2: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl (hash: yeyIokWVGNRZZMPiKwnDp1ZDob1hAkxBPVi6aCxF0xw=) 3: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: WfXT/rfuqOQCtkSuVOvx3HMgMVWsirCiP4VcVNJi+gw=) 4: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: v7MhMAJXwywfKNpvZVGmK8aNTXn4lXBf1MXFy8E2vnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:65:cb:21:59:6c:eb:a6:3a:a4:b0:a9:39:e9:c2:b3:1b:b6:be:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Validity Not Before: Aug 22 03:45:45 2025 GMT Not After : Aug 25 11:47:45 2025 GMT Subject: CN=3B626C9BD68F6A5E67BABF1F342EC6F4C75492E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1f:83:13:d3:0b:29:05:37:20:f4:62:b7:47: 8b:a7:1d:da:6f:a1:be:c4:dc:c3:13:65:51:6e:eb: 61:05:60:90:c8:96:9d:c0:a5:4b:80:65:ae:29:e2: 2e:70:a7:65:69:36:59:e7:65:36:16:01:66:51:c8: cc:f7:69:16:43:0b:d4:d2:fd:8a:11:a2:a0:be:57: fa:b0:90:1e:99:88:e6:4d:a9:98:e2:85:ce:ef:8f: c1:84:a5:f6:a7:17:d7:88:fc:64:3a:fa:22:08:63: 4e:d7:1f:0c:6b:d2:e6:df:79:7d:5a:3c:1e:22:34: a9:5e:1b:6f:ca:92:80:69:a2:3a:cd:e5:62:38:2a: b7:03:6e:3d:0d:a2:4c:0e:e3:fd:4d:47:c2:b3:e1: d0:97:63:39:21:14:9a:44:88:9d:7a:6b:2e:50:fd: 1a:8a:d1:f2:d4:c2:ff:60:a4:a8:04:68:1e:77:ce: b1:c3:05:c1:c9:68:06:24:8a:02:67:b7:74:1f:6c: cf:27:09:58:32:7d:bb:38:29:53:86:2f:18:97:32: b2:3c:ca:4e:cd:3e:14:10:15:a4:33:27:1b:2c:4b: 8e:6f:26:6e:9b:67:4a:50:a2:d6:ee:db:e7:b4:9e: e7:7a:7e:67:e3:c9:19:06:c1:bf:d2:53:b0:14:5e: 57:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:62:6C:9B:D6:8F:6A:5E:67:BA:BF:1F:34:2E:C6:F4:C7:54:92:E8 X509v3 Authority Key Identifier: keyid:0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:6f:94:79:a9:2a:8a:04:85:2f:7b:09:6f:b7:3f:b3:a4:d1: 0f:72:e2:e4:5f:d5:55:c4:33:80:ed:ef:1c:72:a6:86:a2:76: 77:77:6d:cf:94:61:1b:16:21:8c:41:f5:7a:dd:59:08:d5:4e: 8b:43:7d:c3:fc:79:cc:41:d0:69:96:33:7d:09:e4:5f:de:90: d3:9a:b9:77:62:b7:d8:71:be:fd:bb:2a:80:81:48:d9:5f:13: 1a:c4:d8:d0:c9:61:c3:6c:54:9e:2f:48:b9:51:b8:40:5a:a7: 4f:38:ed:1d:0a:e7:5d:5d:ae:46:b6:74:8f:26:a1:03:e1:50: 9d:c6:f3:97:ea:0d:8a:09:be:dd:3d:01:d8:7a:31:ba:b8:59: 55:61:21:a9:cb:3d:e9:5e:1d:52:1c:3a:15:8c:ac:3c:c7:0d: fc:59:98:61:4b:16:e9:e3:c8:fd:aa:05:5a:ea:45:06:a1:9c: 92:d0:02:3f:8a:af:d1:9f:95:c4:de:f8:86:af:16:ef:e3:7e: b3:7e:ee:52:c8:53:59:9b:c5:6e:cb:1d:af:aa:90:12:2e:11: 9e:5f:03:88:2f:a7:24:30:74:4d:0e:49:32:5c:ed:ac:04:2b: 24:b3:3d:54:57:84:9b:a7:59:49:e6:77:40:a7:1d:1a:e3:6d: 32:1d:17:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEGXLIVls66Y6pLCpOenCsxu2vsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENE Mjg1MDI5RTAeFw0yNTA4MjIwMzQ1NDVaFw0yNTA4MjUxMTQ3NDVaMDMxMTAvBgNV BAMTKDNCNjI2QzlCRDY4RjZBNUU2N0JBQkYxRjM0MkVDNkY0Qzc1NDkyRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMH4MT0wspBTcg9GK3R4unHdpv ob7E3MMTZVFu62EFYJDIlp3ApUuAZa4p4i5wp2VpNlnnZTYWAWZRyMz3aRZDC9TS /YoRoqC+V/qwkB6ZiOZNqZjihc7vj8GEpfanF9eI/GQ6+iIIY07XHwxr0ubfeX1a PB4iNKleG2/KkoBpojrN5WI4KrcDbj0NokwO4/1NR8Kz4dCXYzkhFJpEiJ16ay5Q /RqK0fLUwv9gpKgEaB53zrHDBcHJaAYkigJnt3QfbM8nCVgyfbs4KVOGLxiXMrI8 yk7NPhQQFaQzJxssS45vJm6bZ0pQotbu2+e0nud6fmfjyRkGwb/SU7AUXledAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO2Jsm9aPal5nur8fNC7G9MdUkugwHwYDVR0j BBgwFoAUDQXve6cdZAt4T3LH2PD03NKFAp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWI4NjA0Zi0zOTVhLTQyYmUtYjk5Ny1lODBmYzFkZjkwZjkvMC8wRDA1RUY3QkE3 MUQ2NDBCNzg0RjcyQzdEOEYwRjREQ0QyODUwMjlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENEMjg1 MDI5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODliODYwNGYtMzk1YS00MmJlLWI5 OTctZTgwZmMxZGY5MGY5LzAvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0 RENEMjg1MDI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtvlHmpKooEhS97CW+3P7Ok0Q9y4uRf1VXE M4Dt7xxypoaidnd3bc+UYRsWIYxB9XrdWQjVTotDfcP8ecxB0GmWM30J5F/ekNOa uXdit9hxvv27KoCBSNlfExrE2NDJYcNsVJ4vSLlRuEBap0847R0K511drka2dI8m oQPhUJ3G85fqDYoJvt09Adh6Mbq4WVVhIanLPeleHVIcOhWMrDzHDfxZmGFLFunj yP2qBVrqRQahnJLQAj+Kr9GflcTe+IavFu/jfrN+7lLIU1mbxW7LHa+qkBIuEZ5f A4gvpyQwdE0OSTJc7awEKySzPVRXhJunWUnmd0CnHRrjbTIdFz8= -----END CERTIFICATE-----Generated at Sat Aug 23 20:08:15 2025 by rpki-client