$ rpki-client -vvf repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft File: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft (raw, json) Hash identifier: 4scFbq3rc2636XUUg+5Ju+q4D2TVvrHD+w02LvQVhz4= Subject key identifier: DB:DD:2D:AF:8C:A0:42:13:71:88:32:40:70:68:65:4C:6C:AC:58:A8 Authority key identifier: 0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C Certificate issuer: /CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Certificate serial: 7D28DA9A2EE31EC0499322FECEFC3D68233BDB54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft Manifest number: 04FC Signing time: Thu 21 Aug 2025 11:11:31 +0000 Manifest this update: Thu 21 Aug 2025 11:06:31 +0000 Manifest next update: Sun 24 Aug 2025 13:26:31 +0000 Files and hashes: 1: 323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa (hash: ZCfIqpH3uC9vaXsU0X4IOAqNNWCL/kt97zzI3ZypMPI=) 2: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl (hash: 7ztevxSf1hNYJ7T8cuZHS9cMJXYYcNhPwoIagZEiZvk=) 3: 3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa (hash: MtpuQgaD3AVd7DaurQu06bLnX7K9XIzGJP+djliDNAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:28:da:9a:2e:e3:1e:c0:49:93:22:fe:ce:fc:3d:68:23:3b:db:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Validity Not Before: Aug 21 11:06:31 2025 GMT Not After : Aug 24 13:26:31 2025 GMT Subject: CN=DBDD2DAF8CA04213718832407068654C6CAC58A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:92:ac:5c:70:f2:f7:16:1b:0c:3e:0e:75:c5: 42:81:98:8c:46:cf:18:12:36:8e:70:a5:d0:0f:00: 9b:37:be:fd:c7:d0:01:2c:91:66:d9:f7:68:e1:b8: 8d:13:a9:00:eb:bc:c1:53:4c:d3:b8:51:42:d5:ca: 21:11:d2:58:b7:8d:91:45:79:d9:ba:a0:dc:1b:1a: dc:92:70:f1:b3:3c:da:ad:42:d9:ac:bb:21:59:cd: ed:d9:26:69:0b:95:73:78:00:82:44:a0:bc:a6:e2: f4:f7:83:f2:ed:f3:33:10:95:46:69:19:4a:41:51: 18:e8:29:79:0e:b5:85:4a:7a:0a:68:3e:31:95:9e: 3f:ca:00:e9:18:f1:88:e3:93:0f:1c:5b:33:57:35: 61:f4:56:fa:1f:c6:27:f5:cf:93:69:b9:9b:76:07: 5d:81:c1:07:3b:27:99:d7:8b:bf:16:07:17:5d:87: d9:1c:7b:9d:01:5e:70:e1:88:68:c3:c7:75:c1:84: 24:d5:49:a4:bc:16:dc:f5:de:c0:02:b4:ef:37:e9: b2:b7:cd:02:2f:9a:6d:28:18:9a:1d:97:86:27:d3: 96:7c:54:a4:b7:c2:2e:a9:e7:ed:63:3d:99:32:eb: 3d:2a:ff:54:ac:5c:b6:ff:24:17:88:bc:e4:07:b0: 3c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DD:2D:AF:8C:A0:42:13:71:88:32:40:70:68:65:4C:6C:AC:58:A8 X509v3 Authority Key Identifier: keyid:0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:84:e3:8e:11:a1:ce:a6:bb:71:54:bc:b0:22:7e:f6:c2:13: 57:1c:a8:83:c2:bb:28:e1:5b:b5:64:1d:07:85:e4:ed:0b:5c: 0c:b6:cd:57:a6:8f:52:88:24:dc:8c:fa:d3:53:71:4c:5f:fa: 60:63:0f:87:b1:c3:e3:18:ec:3d:c2:93:41:3d:d8:94:e8:e9: 03:af:62:28:8e:dc:48:f5:1a:7c:6f:c3:5e:15:9a:b4:f6:c1: 3c:b3:4a:52:12:63:37:a8:3b:e0:59:eb:c0:a4:27:08:56:92: 55:1b:7a:09:9e:89:4e:49:42:c6:f0:b2:23:9f:e5:ea:d2:96: 72:c1:05:68:35:62:25:14:43:26:6a:eb:9c:fc:c5:18:68:7b: 12:89:57:bc:aa:a0:2f:e4:ac:d0:dc:fc:1b:07:70:e4:c8:18: 05:fc:b7:12:65:08:5b:2a:ab:10:3e:f4:69:ba:5d:d9:38:7c: 16:ba:c4:1a:a7:45:51:08:7f:9b:b4:35:3d:14:d9:fe:90:0d: 2d:f1:4d:59:ad:2c:3d:65:86:4d:5d:49:8a:c5:b5:fe:19:f4: 73:fc:86:fc:ad:43:c2:d2:09:30:2f:b0:6f:26:0f:92:03:e7: b5:91:99:45:2b:07:2d:9e:98:28:5b:7f:7e:47:c9:df:21:7b: 1f:25:e9:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfSjami7jHsBJkyL+zvw9aCM721QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENBOUE2 MUExNjE1QzAeFw0yNTA4MjExMTA2MzFaFw0yNTA4MjQxMzI2MzFaMDMxMTAvBgNV BAMTKERCREQyREFGOENBMDQyMTM3MTg4MzI0MDcwNjg2NTRDNkNBQzU4QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvkqxccPL3FhsMPg51xUKBmIxG zxgSNo5wpdAPAJs3vv3H0AEskWbZ92jhuI0TqQDrvMFTTNO4UULVyiER0li3jZFF edm6oNwbGtyScPGzPNqtQtmsuyFZze3ZJmkLlXN4AIJEoLym4vT3g/Lt8zMQlUZp GUpBURjoKXkOtYVKegpoPjGVnj/KAOkY8Yjjkw8cWzNXNWH0Vvofxif1z5NpuZt2 B12BwQc7J5nXi78WBxddh9kce50BXnDhiGjDx3XBhCTVSaS8Ftz13sACtO836bK3 zQIvmm0oGJodl4Yn05Z8VKS3wi6p5+1jPZky6z0q/1SsXLb/JBeIvOQHsDw9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU290tr4ygQhNxiDJAcGhlTGysWKgwHwYDVR0j BBgwFoAUD+2iiPcnXepGmu9MI43KmmGhYVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzM3MGU2Zi1mMGM3LTRmNDAtOGJhNC1hMDFlNWQwYzc0ZTQvMC8wRkVEQTI4OEY3 Mjc1REVBNDY5QUVGNEMyMzhEQ0E5QTYxQTE2MTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENBOUE2MUEx NjE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMzNzBlNmYtZjBjNy00ZjQwLThi YTQtYTAxZTVkMGM3NGU0LzAvMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENB OUE2MUExNjE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWE444Roc6mu3FUvLAifvbCE1ccqIPCuyjh W7VkHQeF5O0LXAy2zVemj1KIJNyM+tNTcUxf+mBjD4exw+MY7D3Ck0E92JTo6QOv YiiO3Ej1Gnxvw14VmrT2wTyzSlISYzeoO+BZ68CkJwhWklUbegmeiU5JQsbwsiOf 5erSlnLBBWg1YiUUQyZq65z8xRhoexKJV7yqoC/krNDc/BsHcOTIGAX8txJlCFsq qxA+9Gm6Xdk4fBa6xBqnRVEIf5u0NT0U2f6QDS3xTVmtLD1lhk1dSYrFtf4Z9HP8 hvytQ8LSCTAvsG8mD5ID57WRmUUrBy2emChbf35Hyd8hex8l6co= -----END CERTIFICATE-----Generated at Sat Aug 23 12:01:56 2025 by rpki-client