$ rpki-client -vvf repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft File: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft (raw, json) Hash identifier: 3kBPTTXpy4EZjqWpwDgkystdpdKQ9e6nz9CeUD7k+wU= Subject key identifier: D7:B1:10:E1:8D:A5:6C:03:92:7B:4E:AF:C4:B0:A7:6A:01:C4:8B:82 Authority key identifier: 0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E Certificate issuer: /CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Certificate serial: 3944B62BCA26C16BDDE66E450483AB9D57BBDBB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft Manifest number: 0252 Signing time: Mon 30 Jun 2025 08:51:26 +0000 Manifest this update: Mon 30 Jun 2025 08:46:26 +0000 Manifest next update: Thu 03 Jul 2025 16:59:26 +0000 Files and hashes: 1: 3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa (hash: YWX6JkhyJIKKQ9YUHXcRrPZ6Zd5X2q+5JRi/csbFgGQ=) 2: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl (hash: 7CLmDJKGgHQllplo/Pbz1/m2Rt8cfw3ylWabQpkwYME=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 16:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:44:b6:2b:ca:26:c1:6b:dd:e6:6e:45:04:83:ab:9d:57:bb:db:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Validity Not Before: Jun 30 08:46:26 2025 GMT Not After : Jul 3 16:59:26 2025 GMT Subject: CN=D7B110E18DA56C03927B4EAFC4B0A76A01C48B82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a0:f6:4d:62:e9:13:51:a0:ef:6f:8f:34:25: 8d:23:99:d3:0a:29:22:39:51:49:95:e7:75:18:03: 5d:92:df:a6:db:ab:9c:a5:f7:c5:87:fe:de:7b:fc: 29:3e:60:fd:4b:fd:ae:25:f6:f0:98:a1:14:dd:d7: 1b:9e:16:55:45:5e:c7:d5:d3:d9:da:52:4e:cd:22: 1b:48:ca:e0:b9:78:52:8a:8c:20:d0:21:bf:75:df: b4:52:7b:bc:2d:06:4d:92:5b:f3:73:24:f0:9d:aa: e0:1b:0d:92:19:de:1a:99:3a:05:03:70:42:e7:27: 4b:f5:e2:f7:3e:a3:fb:a1:46:9c:f5:27:34:f4:b6: bf:73:75:ad:bb:cc:a2:63:86:60:f0:08:f4:67:fa: 80:c5:1a:24:de:3f:86:0a:42:cd:ec:3c:c7:c7:17: cf:ea:59:64:bd:69:cd:44:0a:ab:b7:59:94:38:44: f5:b2:17:d8:18:45:47:16:eb:8f:c5:d5:2f:f1:17: 67:bf:e2:29:58:8b:63:f4:9b:04:ba:a7:91:5b:6a: 1f:20:e2:06:04:f9:e3:e8:fb:d7:67:04:10:33:46: ce:74:02:be:31:d2:74:37:75:6b:3a:83:e4:28:ef: d0:be:a2:75:a1:21:f5:ee:79:f7:63:e2:ca:08:79: f9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B1:10:E1:8D:A5:6C:03:92:7B:4E:AF:C4:B0:A7:6A:01:C4:8B:82 X509v3 Authority Key Identifier: keyid:0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ba:6d:5d:81:64:a7:bd:f7:e0:b1:d7:9d:fd:7f:6f:3f:0f: 75:54:6e:98:c5:32:fb:2d:1c:bd:a6:65:c5:04:48:d5:2a:83: df:80:e3:dd:33:a4:e5:00:0e:99:be:af:d9:7f:48:16:fe:3e: b1:19:77:ec:37:e2:76:0e:3c:19:d3:36:fe:ba:cf:35:a2:bb: 56:5a:8e:e6:c2:e8:c6:48:10:6f:63:05:45:c9:7d:39:f1:b9: 40:11:6a:01:41:91:16:3a:17:eb:c9:24:ea:7b:7b:fe:b5:f9: 12:b3:28:2c:3e:45:20:c5:ab:41:49:f8:4b:f0:b4:23:40:f9: 46:9b:2d:da:c1:ef:8a:e5:45:40:6b:2d:a6:94:be:26:65:74: 87:83:76:0c:35:89:84:89:40:b9:6c:13:d3:53:9c:e7:0a:85: 02:d8:f7:d1:31:91:56:34:5a:53:ce:00:fb:65:5b:8a:fc:97: f6:b8:3b:0a:27:6f:34:b6:e7:79:40:c0:23:e4:c4:70:55:fe: f5:a5:50:b8:b3:c9:69:5f:90:2d:c2:d3:27:13:68:f4:10:56: 76:c1:3e:83:91:f9:98:e6:95:26:21:fd:99:d4:66:f2:6e:2d: 26:fe:cf:89:31:bf:db:b9:2a:5a:ee:4c:b9:e3:10:bb:e5:91: 5f:4f:18:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOUS2K8omwWvd5m5FBIOrnVe727gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQy ODAwRjkzRTAeFw0yNTA2MzAwODQ2MjZaFw0yNTA3MDMxNjU5MjZaMDMxMTAvBgNV BAMTKEQ3QjExMEUxOERBNTZDMDM5MjdCNEVBRkM0QjBBNzZBMDFDNDhCODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZoPZNYukTUaDvb480JY0jmdMK KSI5UUmV53UYA12S36bbq5yl98WH/t57/Ck+YP1L/a4l9vCYoRTd1xueFlVFXsfV 09naUk7NIhtIyuC5eFKKjCDQIb9137RSe7wtBk2SW/NzJPCdquAbDZIZ3hqZOgUD cELnJ0v14vc+o/uhRpz1JzT0tr9zda27zKJjhmDwCPRn+oDFGiTeP4YKQs3sPMfH F8/qWWS9ac1ECqu3WZQ4RPWyF9gYRUcW64/F1S/xF2e/4ilYi2P0mwS6p5Fbah8g 4gYE+ePo+9dnBBAzRs50Ar4x0nQ3dWs6g+Qo79C+onWhIfXuefdj4soIefmzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU17EQ4Y2lbAOSe06vxLCnagHEi4IwHwYDVR0j BBgwFoAUCodKTLX4pG30UBtj+lSH9CgA+T4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODAzNWIxMi02Y2EzLTRmZDItYjliMy0yNjBkNTczZTU3YzIvMC8wQTg3NEE0Q0I1 RjhBNDZERjQ1MDFCNjNGQTU0ODdGNDI4MDBGOTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQyODAw RjkzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgwMzViMTItNmNhMy00ZmQyLWI5 YjMtMjYwZDU3M2U1N2MyLzAvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3 RjQyODAwRjkzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+6bV2BZKe99+Cx1539f28/D3VUbpjFMvst HL2mZcUESNUqg9+A490zpOUADpm+r9l/SBb+PrEZd+w34nYOPBnTNv66zzWiu1Za jubC6MZIEG9jBUXJfTnxuUARagFBkRY6F+vJJOp7e/61+RKzKCw+RSDFq0FJ+Evw tCNA+UabLdrB74rlRUBrLaaUviZldIeDdgw1iYSJQLlsE9NTnOcKhQLY99ExkVY0 WlPOAPtlW4r8l/a4OwonbzS253lAwCPkxHBV/vWlULizyWlfkC3C0ycTaPQQVnbB PoOR+ZjmlSYh/ZnUZvJuLSb+z4kxv9u5KlruTLnjELvlkV9PGEg= -----END CERTIFICATE-----Generated at Tue Jul 1 20:37:52 2025 by rpki-client