$ rpki-client -vvf repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft File: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft (raw, json) Hash identifier: +Dz0yl7RzPw8arP50z9jTmGL2OtU7PSs02VcrbfiIDA= Subject key identifier: 1E:38:9A:81:05:F8:D1:D9:92:11:87:29:93:41:2F:09:F9:CA:42:AA Authority key identifier: 0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C Certificate issuer: /CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Certificate serial: 7E42776697BC1178313E175289315F983E8C4CD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft Manifest number: 0503 Signing time: Fri 22 Aug 2025 06:31:16 +0000 Manifest this update: Fri 22 Aug 2025 06:26:16 +0000 Manifest next update: Mon 25 Aug 2025 14:10:16 +0000 Files and hashes: 1: 3130332e37372e3135362e302f32342d3234203d3e20313530393432.roa (hash: mutFIy9cyMdV34tHn/8oq/u/DLJVfOqwJjG4+C2iVbI=) 2: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl (hash: cnHFabc0Ug8gXBXDBqHoE5XvuuSd6WQXfkrP9wKbHZ0=) 3: 3130332e37372e3135362e302f32322d3234203d3e20313530393432.roa (hash: xsKvhGKuMBIEnxPyQJ6c1MbwsbCuaDw/dOSB6iinnF8=) 4: 3130332e37372e3135382e302f32342d3234203d3e20313530393432.roa (hash: t8s5ystlDMfZCpSFPrSjj+O0ZGC5ZqPSgcrBHxoO7nw=) 5: 323430373a396338303a3a2f33322d3438203d3e20313335343834.roa (hash: PjdoU1IlaOBuAqcQYAfTUBsBWxQvsuLv55cXKjpLDcw=) 6: 3130332e37372e3135392e302f32342d3234203d3e20313530393432.roa (hash: loCe/wiZD3uLK0lxj/ON/hC7aF16TlJ0k6a7aHCbdJk=) 7: 3130332e37372e3135372e302f32342d3234203d3e20313530393432.roa (hash: 3IbW6k7SAGrr4pbFBGvz2rrnQK3BJBcsh2+owUjptuk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 14:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:42:77:66:97:bc:11:78:31:3e:17:52:89:31:5f:98:3e:8c:4c:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Validity Not Before: Aug 22 06:26:16 2025 GMT Not After : Aug 25 14:10:16 2025 GMT Subject: CN=1E389A8105F8D1D99211872993412F09F9CA42AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f0:c0:02:41:d7:b1:ea:bc:50:d0:28:2d:52: c3:f9:f5:44:13:fd:cc:41:10:10:0b:05:3b:97:30: 44:44:5f:4f:04:28:83:36:d8:a4:85:e1:cf:a7:b9: df:3e:ef:33:02:db:36:6d:a1:1b:26:ab:44:59:bc: 57:b9:a8:1d:db:ce:91:78:c2:57:8b:a3:5a:7d:67: e0:b4:11:47:28:3a:d0:66:61:19:c6:8f:9d:13:a2: a2:56:79:d9:63:d8:d2:1b:49:df:40:ec:f2:82:10: 47:13:18:53:3a:fc:61:3b:ee:ca:39:f1:c4:b0:99: 83:a8:e9:75:35:37:e0:7f:8f:73:52:6a:57:16:8a: 27:78:9a:41:0e:34:64:8a:10:40:91:76:b2:52:95: 1a:ad:a7:af:0a:6d:dd:48:17:4b:9e:d0:8e:79:f1: 4f:3b:b0:75:c9:59:df:df:e6:f4:45:7f:f5:95:88: 17:d3:2f:69:83:c1:94:2c:85:f2:05:2c:c8:e5:61: 7a:8e:0d:03:7f:62:dd:c7:89:69:21:8b:d9:06:c3: f8:74:f4:da:e8:c6:f4:c3:ee:d2:64:58:60:6e:28: 95:9c:35:e7:58:db:de:2b:d2:fa:36:72:30:f3:ae: 64:45:56:79:6c:6e:8c:ad:55:31:de:9e:91:c3:14: a5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:38:9A:81:05:F8:D1:D9:92:11:87:29:93:41:2F:09:F9:CA:42:AA X509v3 Authority Key Identifier: keyid:0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:8a:1a:80:4d:c9:ca:8f:2e:9a:2c:81:43:82:90:07:72:ba: 5b:f5:0a:89:58:2b:7d:ba:a2:fc:16:76:dd:61:80:c5:a5:55: 75:e4:91:20:be:5b:1b:0c:51:2e:0f:1c:fb:4d:cd:da:2b:a2: cb:23:3c:17:bc:8c:a1:bd:4d:c3:03:6f:bc:e9:80:c9:23:7a: ba:cd:28:e0:62:3e:7d:63:99:b1:c1:bc:82:ae:69:3a:1a:e3: 46:61:69:1f:94:91:95:d5:c0:85:2e:b9:3e:30:e8:0d:e7:d0: 11:c9:45:9c:92:10:7b:71:dd:dd:2c:a2:4d:d5:1a:0b:d7:85: 60:5a:a7:34:32:8f:22:bf:73:3c:85:5e:c4:8a:74:72:b7:fc: 9d:eb:2c:69:20:65:00:de:26:fb:93:d6:9f:24:e7:6e:7f:56: ee:fc:5b:93:c6:af:de:92:b3:b7:fd:63:ed:c4:7b:7a:bd:0a: 11:87:28:e7:74:2d:70:df:9a:33:df:52:e9:65:49:29:77:99: 9a:9a:ae:02:5a:27:2a:84:c8:92:27:b6:b5:7a:c2:e2:2f:b1: 6d:76:e1:ab:01:cd:d7:c7:24:71:36:fe:fb:c5:7d:d4:29:4c: af:ad:74:0d:db:a3:bf:01:a9:51:b9:34:9d:b4:2a:62:cc:ac: 3c:54:10:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfkJ3Zpe8EXgxPhdSiTFfmD6MTNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5 Nzk3RUE2QzAeFw0yNTA4MjIwNjI2MTZaFw0yNTA4MjUxNDEwMTZaMDMxMTAvBgNV BAMTKDFFMzg5QTgxMDVGOEQxRDk5MjExODcyOTkzNDEyRjA5RjlDQTQyQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL8MACQdex6rxQ0CgtUsP59UQT /cxBEBALBTuXMEREX08EKIM22KSF4c+nud8+7zMC2zZtoRsmq0RZvFe5qB3bzpF4 wleLo1p9Z+C0EUcoOtBmYRnGj50ToqJWedlj2NIbSd9A7PKCEEcTGFM6/GE77so5 8cSwmYOo6XU1N+B/j3NSalcWiid4mkEONGSKEECRdrJSlRqtp68Kbd1IF0ue0I55 8U87sHXJWd/f5vRFf/WViBfTL2mDwZQshfIFLMjlYXqODQN/Yt3HiWkhi9kGw/h0 9NroxvTD7tJkWGBuKJWcNedY294r0vo2cjDzrmRFVnlsboytVTHenpHDFKUDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHjiagQX40dmSEYcpk0EvCfnKQqowHwYDVR0j BBgwFoAUDoY3wj/X/Rq/kbAl5IBAkJeX6mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzNmMjI4OC04OGNmLTRkMmItYmJhNi1hMDNkZDVmODM3NjEvMC8wRTg2MzdDMjNG RDdGRDFBQkY5MUIwMjVFNDgwNDA5MDk3OTdFQTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5Nzk3 RUE2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWMzZjIyODgtODhjZi00ZDJiLWJi YTYtYTAzZGQ1ZjgzNzYxLzAvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQw OTA5Nzk3RUE2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKKGoBNycqPLposgUOCkAdyulv1ColYK326 ovwWdt1hgMWlVXXkkSC+WxsMUS4PHPtNzdorossjPBe8jKG9TcMDb7zpgMkjerrN KOBiPn1jmbHBvIKuaToa40ZhaR+UkZXVwIUuuT4w6A3n0BHJRZySEHtx3d0sok3V GgvXhWBapzQyjyK/czyFXsSKdHK3/J3rLGkgZQDeJvuT1p8k525/Vu78W5PGr96S s7f9Y+3Ee3q9ChGHKOd0LXDfmjPfUullSSl3mZqargJaJyqEyJIntrV6wuIvsW12 4asBzdfHJHE2/vvFfdQpTK+tdA3bo78BqVG5NJ20KmLMrDxUEJQ= -----END CERTIFICATE-----Generated at Sat Aug 23 16:07:25 2025 by rpki-client