$ rpki-client -vvf repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft File: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft (raw, json) Hash identifier: sJupHSt6J1CExMo4j5nSGRsZ4oonAaYeYPbMZCOBbLk= Subject key identifier: EB:D1:0F:B4:D7:F8:AF:12:56:FD:20:13:C1:91:8C:19:5B:B7:C4:EC Authority key identifier: 0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E Certificate issuer: /CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Certificate serial: 66494B0300CE3DE477B57FC93D0D6895C320348D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft Manifest number: 017F Signing time: Tue 01 Jul 2025 00:01:00 +0000 Manifest this update: Mon 30 Jun 2025 23:56:00 +0000 Manifest next update: Fri 04 Jul 2025 10:29:00 +0000 Files and hashes: 1: 3130332e342e38302e302f32332d3233203d3e20313530323034.roa (hash: AgLvlSE1smWWR/jE1YysJDc3mDL4n9sETXp5KZ0HtjU=) 2: 3130332e342e38302e302f32342d3234203d3e20313530323034.roa (hash: uICRVqRri8R1EgyBPUsLQp4TscukJjiepoiJFR6/Ibc=) 3: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl (hash: 6VO/aBw4dLfuWhf2meij+rrgzY0mY/5uZ3PjmskU/bk=) 4: 3130332e342e38312e302f32342d3234203d3e20313530323034.roa (hash: IgBk8nUZZ29ZSChbWhRLqEMkR6u+A1fqdcf9ejFY80Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 10:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:49:4b:03:00:ce:3d:e4:77:b5:7f:c9:3d:0d:68:95:c3:20:34:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Validity Not Before: Jun 30 23:56:00 2025 GMT Not After : Jul 4 10:29:00 2025 GMT Subject: CN=EBD10FB4D7F8AF1256FD2013C1918C195BB7C4EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:f9:f8:47:7a:e5:29:e0:43:31:d7:24:33: 6c:c2:2f:24:d3:ab:01:44:74:8c:8e:4c:98:0c:98: 63:ff:e4:e4:b0:fb:75:1a:34:8d:21:a8:92:f1:53: c3:3c:87:54:d5:e2:21:da:81:eb:28:43:0c:bd:70: c2:81:b9:75:08:51:f8:c6:75:04:d0:a5:b1:76:71: 60:5f:1a:20:62:f4:64:13:22:2a:0e:65:16:fe:d6: ca:80:c3:f0:5a:9b:8d:af:75:57:91:c9:5a:d6:ba: ee:31:c8:2d:21:70:bb:c3:2d:ee:60:cd:1a:b3:49: d1:8e:0c:5c:c1:91:01:8d:2d:5e:e3:29:10:7e:17: 9b:fd:cc:94:ec:12:ff:2c:88:85:9d:ea:53:42:7a: 4e:75:e2:de:02:d7:ca:d9:20:04:35:86:3e:98:43: 66:06:2f:95:b6:ab:fb:c7:a8:7e:e7:98:40:56:da: fd:ac:d8:dc:11:3f:08:66:94:f5:2e:88:d7:3e:8a: ec:af:64:74:0b:b0:12:70:b6:12:13:12:a0:7f:6b: 54:4f:48:1d:e0:27:9b:ba:84:0a:49:00:87:d6:97: a0:ac:a4:0c:a2:ca:f5:c7:d1:d0:61:c2:0e:09:c4: 7e:0e:e9:33:9c:b9:12:e9:ff:73:f6:2f:64:2d:fb: 8e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D1:0F:B4:D7:F8:AF:12:56:FD:20:13:C1:91:8C:19:5B:B7:C4:EC X509v3 Authority Key Identifier: keyid:0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:1e:75:6f:08:15:26:7f:ca:a2:91:23:8d:67:07:91:30:b7: 9f:5f:9d:c0:7f:3e:88:3d:64:eb:3f:fc:89:b9:4b:4d:38:9a: dc:00:06:e2:00:d2:a5:49:1f:14:56:56:ab:9b:ee:bc:34:73: 04:f7:72:8d:cc:e9:0a:35:9f:bf:b0:51:4a:04:89:68:6c:79: 34:76:1d:c8:25:63:66:59:9e:3b:24:8b:1d:2f:6f:eb:db:ba: 51:16:86:7e:ef:9a:01:04:e6:4a:49:06:8a:d9:d9:41:5c:d3: 66:eb:bd:c6:40:00:5c:ca:c7:92:71:ec:88:74:c8:1c:fd:09: 6f:f7:54:e0:88:cd:0a:d0:97:41:c8:76:f8:27:a2:32:c9:10: 7a:30:c5:c0:2e:8c:50:8c:b9:7f:4a:b1:c9:cb:03:88:af:55: 5e:ec:69:56:67:32:fd:5b:47:6e:e8:69:da:7d:77:76:f9:cf: 28:e5:da:f9:39:a2:86:1e:7b:63:61:23:73:61:05:bf:ea:a4: cc:9e:93:f9:31:d6:fe:76:dc:37:7f:04:a1:59:c3:60:a5:31: e5:e4:4c:2f:37:92:86:ee:40:6e:de:ad:8a:37:aa:8c:da:2f: cb:b8:6a:7c:de:a2:0d:d1:da:f6:6a:89:c7:8c:94:c8:1a:e4: 87:81:bd:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZklLAwDOPeR3tX/JPQ1olcMgNI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJG QTAwMUE0RTAeFw0yNTA2MzAyMzU2MDBaFw0yNTA3MDQxMDI5MDBaMDMxMTAvBgNV BAMTKEVCRDEwRkI0RDdGOEFGMTI1NkZEMjAxM0MxOTE4QzE5NUJCN0M0RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCquvn4R3rlKeBDMdckM2zCLyTT qwFEdIyOTJgMmGP/5OSw+3UaNI0hqJLxU8M8h1TV4iHagesoQwy9cMKBuXUIUfjG dQTQpbF2cWBfGiBi9GQTIioOZRb+1sqAw/Bam42vdVeRyVrWuu4xyC0hcLvDLe5g zRqzSdGODFzBkQGNLV7jKRB+F5v9zJTsEv8siIWd6lNCek514t4C18rZIAQ1hj6Y Q2YGL5W2q/vHqH7nmEBW2v2s2NwRPwhmlPUuiNc+iuyvZHQLsBJwthITEqB/a1RP SB3gJ5u6hApJAIfWl6CspAyiyvXH0dBhwg4JxH4O6TOcuRLp/3P2L2Qt+47XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU69EPtNf4rxJW/SATwZGMGVu3xOwwHwYDVR0j BBgwFoAUDi56nPEcaS7I5W8DUnvfkvoAGk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDE5NTg5YS1kNTI1LTQwZmMtODk0YS0xMmU0NDAxMGUzZTQvMC8wRTJFN0E5Q0Yx MUM2OTJFQzhFNTZGMDM1MjdCREY5MkZBMDAxQTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJGQTAw MUE0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAxOTU4OWEtZDUyNS00MGZjLTg5 NGEtMTJlNDQwMTBlM2U0LzAvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRG OTJGQTAwMUE0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkedW8IFSZ/yqKRI41nB5Ewt59fncB/Pog9 ZOs//Im5S004mtwABuIA0qVJHxRWVqub7rw0cwT3co3M6Qo1n7+wUUoEiWhseTR2 HcglY2ZZnjskix0vb+vbulEWhn7vmgEE5kpJBorZ2UFc02brvcZAAFzKx5Jx7Ih0 yBz9CW/3VOCIzQrQl0HIdvgnojLJEHowxcAujFCMuX9KscnLA4ivVV7saVZnMv1b R27oadp9d3b5zyjl2vk5ooYee2NhI3NhBb/qpMyek/kx1v523Dd/BKFZw2ClMeXk TC83kobuQG7erYo3qozaL8u4anzeog3R2vZqiceMlMga5IeBvR0= -----END CERTIFICATE-----Generated at Wed Jul 2 16:41:07 2025 by rpki-client