$ rpki-client -vvf repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft File: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft (raw, json) Hash identifier: I7jPnP2tlceqJKHsHloutv5ZwQI748LkUDRtmnqIxgE= Subject key identifier: BC:2C:B1:31:BD:86:28:8C:6D:16:F9:7C:AE:A9:B7:E8:E2:C6:BC:B8 Authority key identifier: 0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D Certificate issuer: /CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Certificate serial: 34A43D927E10C70DE9B1A1F3DD60F4083D26FE08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft Manifest number: 0190 Signing time: Thu 21 Aug 2025 08:31:51 +0000 Manifest this update: Thu 21 Aug 2025 08:26:51 +0000 Manifest next update: Sun 24 Aug 2025 17:38:51 +0000 Files and hashes: 1: 3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa (hash: 2Aghezf2z7P1qZlnkDBkv3wvvtG5c1l4SMgNAsKv8N0=) 2: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl (hash: w2D+CO+42Uc3kRM8yFQGDXwrfvmFyaJ3lkqKUtYYJ/4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a4:3d:92:7e:10:c7:0d:e9:b1:a1:f3:dd:60:f4:08:3d:26:fe:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Validity Not Before: Aug 21 08:26:51 2025 GMT Not After : Aug 24 17:38:51 2025 GMT Subject: CN=BC2CB131BD86288C6D16F97CAEA9B7E8E2C6BCB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:42:56:e4:fe:0a:cd:0f:d0:be:3f:43:1b:ec: cd:53:83:cd:29:aa:4a:e5:a8:3b:fc:30:39:0d:8e: db:b4:35:9a:4b:7b:9e:6c:bb:9f:c5:47:cc:e7:fc: c7:04:d8:df:bb:e2:20:de:0f:ca:0a:cd:06:dc:fb: 93:f7:4e:a4:20:78:d0:05:41:f4:1a:a0:ab:f4:d5: 92:03:3e:5f:c4:87:05:9d:c7:b3:00:65:7f:53:26: f3:62:79:88:02:d1:67:e0:31:98:52:9f:35:f4:01: b7:55:d9:50:64:68:bf:79:07:b0:95:67:4e:d3:95: 91:87:ca:bf:39:d2:15:3d:11:6a:c2:ca:26:4f:88: 49:80:e1:2f:e5:c2:b2:8b:4c:2c:fc:f4:7f:5e:d0: a9:ab:20:ec:cb:29:b3:b6:06:ee:14:fb:8a:32:7a: bd:72:f2:7e:7c:41:e6:d8:b8:6d:60:e2:35:18:42: a3:e3:25:fb:8c:6d:a2:d0:60:1c:f7:d3:f2:8c:7e: c6:78:2e:53:c7:07:5a:1f:77:8a:cd:bf:30:b6:d4: 08:15:0e:c5:33:5c:3b:be:7a:98:ce:df:7e:05:3c: 2a:2c:fc:94:79:38:4e:75:f1:1b:4d:41:42:3f:50: 00:7b:b7:89:5d:01:a4:48:25:96:be:ac:bb:4d:3a: 74:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:2C:B1:31:BD:86:28:8C:6D:16:F9:7C:AE:A9:B7:E8:E2:C6:BC:B8 X509v3 Authority Key Identifier: keyid:0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:17:c3:a1:7d:55:0d:a5:87:d0:12:45:49:97:ca:68:5d:d2: 84:a7:ba:00:a3:28:4b:32:d8:87:b9:76:cf:f1:6d:25:29:6d: 33:cd:c5:0f:e0:d6:a2:1a:29:a0:c5:9d:91:9f:64:8d:02:6d: 99:93:df:a9:be:40:ad:d3:ff:f4:8b:b9:29:42:c7:fd:79:4a: 3b:03:87:23:95:78:32:01:df:cb:36:74:e6:32:f9:13:b1:92: 81:76:94:f5:1b:39:ef:d6:77:16:c8:d7:17:e9:83:b5:dc:b4: ab:1e:5f:b2:b8:4e:a7:28:53:64:0c:25:05:06:b3:de:bb:31: 47:3e:78:48:cb:2e:76:2d:03:a8:ba:46:26:fd:ef:6d:85:c3: ea:ac:66:2f:8b:97:3f:6a:88:15:00:65:96:4b:c8:f8:f6:97: 7a:02:1f:bc:b5:4a:1e:f6:87:4d:cb:2d:d2:5f:0b:2a:34:02: 84:2c:8a:6a:2d:ae:a0:b9:13:9b:bf:f3:f3:db:65:73:9e:4f: 4e:d5:ff:0b:61:d2:23:47:98:78:6b:09:cc:66:c1:29:e6:be: 14:2a:3c:5f:67:03:2b:b8:cc:31:4e:88:ae:59:f6:04:65:2d: 23:dc:2f:2e:f2:8f:6a:4b:82:3f:52:32:f1:54:50:4a:bf:d4: 30:1b:6d:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNKQ9kn4Qxw3psaHz3WD0CD0m/ggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3 NDI1REM5RDAeFw0yNTA4MjEwODI2NTFaFw0yNTA4MjQxNzM4NTFaMDMxMTAvBgNV BAMTKEJDMkNCMTMxQkQ4NjI4OEM2RDE2Rjk3Q0FFQTlCN0U4RTJDNkJDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Qlbk/grND9C+P0Mb7M1Tg80p qkrlqDv8MDkNjtu0NZpLe55su5/FR8zn/McE2N+74iDeD8oKzQbc+5P3TqQgeNAF QfQaoKv01ZIDPl/EhwWdx7MAZX9TJvNieYgC0WfgMZhSnzX0AbdV2VBkaL95B7CV Z07TlZGHyr850hU9EWrCyiZPiEmA4S/lwrKLTCz89H9e0KmrIOzLKbO2Bu4U+4oy er1y8n58QebYuG1g4jUYQqPjJfuMbaLQYBz30/KMfsZ4LlPHB1ofd4rNvzC21AgV DsUzXDu+epjO334FPCos/JR5OE518RtNQUI/UAB7t4ldAaRIJZa+rLtNOnSZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvCyxMb2GKIxtFvl8rqm36OLGvLgwHwYDVR0j BBgwFoAUDyHD69UPyPQ/jKeocRQVb3Ql3J0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTkzMDE4ZS03MThmLTQ3NTctYTA4Ny05M2FkNzdiODE4MjEvMC8wRjIxQzNFQkQ1 MEZDOEY0M0Y4Q0E3QTg3MTE0MTU2Rjc0MjVEQzlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3NDI1 REM5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5MzAxOGUtNzE4Zi00NzU3LWEw ODctOTNhZDc3YjgxODIxLzAvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1 NkY3NDI1REM5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUXw6F9VQ2lh9ASRUmXymhd0oSnugCjKEsy 2Ie5ds/xbSUpbTPNxQ/g1qIaKaDFnZGfZI0CbZmT36m+QK3T//SLuSlCx/15SjsD hyOVeDIB38s2dOYy+ROxkoF2lPUbOe/WdxbI1xfpg7XctKseX7K4TqcoU2QMJQUG s967MUc+eEjLLnYtA6i6Rib9722Fw+qsZi+Llz9qiBUAZZZLyPj2l3oCH7y1Sh72 h03LLdJfCyo0AoQsimotrqC5E5u/8/PbZXOeT07V/wth0iNHmHhrCcxmwSnmvhQq PF9nAyu4zDFOiK5Z9gRlLSPcLy7yj2pLgj9SMvFUUEq/1DAbbcs= -----END CERTIFICATE-----Generated at Sat Aug 23 14:14:53 2025 by rpki-client