$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft File: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft (raw, json) Hash identifier: CjD+3NTXMTsX1ZeWpKBTbW96t5k44oqD1rE/yrgAxnQ= Subject key identifier: A0:15:C9:BE:76:E8:CC:75:1B:45:92:E8:70:3E:12:F2:E7:FC:D6:E6 Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 Certificate issuer: /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Certificate serial: 5605371471D83DEB84B7715E9B23915BE0C671B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft Manifest number: 0532 Signing time: Sat 23 Aug 2025 07:10:52 +0000 Manifest this update: Sat 23 Aug 2025 07:05:52 +0000 Manifest next update: Tue 26 Aug 2025 08:47:52 +0000 Files and hashes: 1: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: nj7nwkg4jEji5skSyGq127SyeIEToj2AxAchD/5z7y0=) 2: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: zHFuXcJsHRS8oU5g73vyR9ezkdJAc6jv+r1NZhBGTU4=) 3: 3131302e37362e3134382e302f32332d3234203d3e20313430343831.roa (hash: Mo+ywRg/G9o+M5ufzONjfakS+qPVaicNW0HrvAATwhk=) 4: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: ymwaUvhXT8JXSJrNzjbP7gt7yXJ53LxTJX8Voq/f/74=) 5: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: QhseuehbmAg1CgvzVHn3OnXvEwbOGfNyxdByQxi2PSM=) 6: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: l79vjEoCDRYp7Imq4o09nFUUOawBLUlHdvJpjB5kQuE=) 7: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: wSzeEeUlQ9dVeDBBx0XlYcJDAiPM7sQsbdx5J/YQ+rE=) 8: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl (hash: Jcb+tc+C6CFXDRVjyrkbwrpEloNUmqJA1JCG+VPGnO8=) 9: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: 8rPJ4nXTJ70Up3y89jTvrnK5p5EQ4mjAGK2p65JUucA=) 10: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: eUGLFIbBQXUlbrF2iA2Xszdo9Zh7AGLGsZzJrRkvT6k=) 11: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: /Pgqw6Rs+ajT828waAS0R/dEt8fu2pWuzGj9i8zT3Rk=) 12: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: 6L28DKU2IWYtA3lRV3VTpPyJ/UkW+g97L32zaXfZ124=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:05:37:14:71:d8:3d:eb:84:b7:71:5e:9b:23:91:5b:e0:c6:71:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Validity Not Before: Aug 23 07:05:52 2025 GMT Not After : Aug 26 08:47:52 2025 GMT Subject: CN=A015C9BE76E8CC751B4592E8703E12F2E7FCD6E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fd:9a:86:1f:47:20:c0:9c:85:e9:91:83:87: eb:a1:71:2e:6a:f9:7c:e3:71:8a:ed:24:a1:64:db: 31:17:b2:8a:ef:35:c9:4a:83:e0:f2:6c:04:85:c1: 10:ec:25:94:df:0d:b6:e8:a8:7f:35:58:a5:0d:5d: 85:e7:04:cc:da:d5:02:e9:7c:26:64:04:30:99:87: 56:cf:71:37:ca:a2:ad:98:d2:45:43:9a:77:5d:ed: 44:dc:fc:f9:91:2d:35:78:89:a7:8c:a0:4b:85:fa: 1c:32:ed:55:8a:99:a2:64:c1:17:0b:41:e3:91:28: 24:7b:9c:39:a3:38:74:eb:0d:9c:c5:9a:c5:a3:bc: e4:e9:3d:80:4c:ef:93:c3:8e:28:28:9f:e3:56:e4: 85:85:12:cd:13:4f:9b:4e:c5:7c:fc:b7:26:91:83: 8d:8e:bc:36:16:6e:4a:35:d3:db:21:36:ee:25:be: 6b:18:de:bf:d0:aa:a7:1b:6d:0a:f3:2b:40:5f:3b: cb:b3:1f:cb:41:db:71:9a:ed:35:a7:c3:11:f6:b1: 4e:0e:ab:f8:f2:50:15:c9:a5:70:a8:2d:36:40:ae: bb:44:c4:2f:06:6d:df:70:9a:41:62:4e:ca:84:63: e4:df:f5:54:02:31:bc:c6:e6:e2:ab:ba:a3:71:dd: 9b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:15:C9:BE:76:E8:CC:75:1B:45:92:E8:70:3E:12:F2:E7:FC:D6:E6 X509v3 Authority Key Identifier: keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:12:7f:11:33:e6:6e:83:23:ab:61:c3:16:ab:8c:31:eb:b5: b5:73:d2:94:a7:20:11:8a:1e:ae:e7:e4:21:8b:06:b8:c4:df: 7b:f0:6c:1e:39:1f:c2:54:c2:bb:66:c3:df:8a:b6:50:ba:33: fc:53:1f:41:94:2c:dd:51:e5:fe:07:0c:37:8d:56:c7:b1:be: e5:a4:51:70:cf:c6:cd:cd:92:b5:f4:5f:92:5e:26:1a:1d:3d: c4:41:97:50:b7:a0:07:1f:93:98:09:59:93:ab:6c:2d:e5:f2: c1:49:a2:37:0a:ae:2d:bb:59:69:1e:8b:41:f6:1c:06:b9:60: b1:2f:10:a7:c5:f2:04:a3:01:c1:94:94:2a:cc:cf:5b:22:6b: f1:34:d0:c8:5c:dd:9b:98:e8:05:bc:08:4c:2a:99:0b:4a:6e: 37:19:34:d7:9d:a2:9c:b6:6e:24:26:80:86:82:eb:04:6c:94: df:e8:b5:ae:03:00:1b:fb:b5:71:8c:da:96:2a:c6:f7:cb:84: 69:09:65:1c:ab:35:e7:6a:5a:33:3f:11:ea:46:d1:82:d5:04: 7a:4c:02:41:dc:b6:23:9b:8d:90:5e:05:d3:90:de:47:8a:e5: 23:b9:eb:c0:26:6a:65:5c:2e:57:8e:c6:d1:53:07:d8:46:a0: d0:d5:d2:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVgU3FHHYPeuEt3FemyORW+DGcbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1 MUJDMTdBMjAeFw0yNTA4MjMwNzA1NTJaFw0yNTA4MjYwODQ3NTJaMDMxMTAvBgNV BAMTKEEwMTVDOUJFNzZFOENDNzUxQjQ1OTJFODcwM0UxMkYyRTdGQ0Q2RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/ZqGH0cgwJyF6ZGDh+uhcS5q +XzjcYrtJKFk2zEXsorvNclKg+DybASFwRDsJZTfDbboqH81WKUNXYXnBMza1QLp fCZkBDCZh1bPcTfKoq2Y0kVDmndd7UTc/PmRLTV4iaeMoEuF+hwy7VWKmaJkwRcL QeORKCR7nDmjOHTrDZzFmsWjvOTpPYBM75PDjigon+NW5IWFEs0TT5tOxXz8tyaR g42OvDYWbko109shNu4lvmsY3r/QqqcbbQrzK0BfO8uzH8tB23Ga7TWnwxH2sU4O q/jyUBXJpXCoLTZArrtExC8Gbd9wmkFiTsqEY+Tf9VQCMbzG5uKruqNx3Zs5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoBXJvnbozHUbRZLocD4S8uf81uYwHwYDVR0j BBgwFoAUD9BE1hNIyI3c/8Tzwzv7xFG8F6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjU0OGJhZC03ZmVkLTQxZmQtYjQyZS03ODAzNzJjNDUyNTUvMC8wRkQwNDRENjEz NDhDODhERENGRkM0RjNDMzNCRkJDNDUxQkMxN0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1MUJD MTdBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGI1NDhiYWQtN2ZlZC00MWZkLWI0 MmUtNzgwMzcyYzQ1MjU1LzAvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZC QzQ1MUJDMTdBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADISfxEz5m6DI6thwxarjDHrtbVz0pSnIBGK Hq7n5CGLBrjE33vwbB45H8JUwrtmw9+KtlC6M/xTH0GULN1R5f4HDDeNVsexvuWk UXDPxs3NkrX0X5JeJhodPcRBl1C3oAcfk5gJWZOrbC3l8sFJojcKri27WWkei0H2 HAa5YLEvEKfF8gSjAcGUlCrMz1sia/E00Mhc3ZuY6AW8CEwqmQtKbjcZNNedopy2 biQmgIaC6wRslN/ota4DABv7tXGM2pYqxvfLhGkJZRyrNedqWjM/EepG0YLVBHpM AkHctiObjZBeBdOQ3keK5SO568AmamVcLleOxtFTB9hGoNDV0oo= -----END CERTIFICATE-----Generated at Sat Aug 23 12:19:46 2025 by rpki-client