$ rpki-client -vvf repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft File: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft (raw, json) Hash identifier: vtCa5HLEAEgZqcqEDKZ/IbiGNgObEDu1vGNwcFuAAwk= Subject key identifier: BD:D1:D4:75:62:BA:34:3D:2C:9D:02:F3:EB:CA:A8:B1:80:AE:8D:95 Authority key identifier: 0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 Certificate issuer: /CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Certificate serial: 3B56CFFECF7E83E7CEC17937599876352F0F8349 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft Manifest number: 037D Signing time: Fri 22 Aug 2025 11:52:11 +0000 Manifest this update: Fri 22 Aug 2025 11:47:11 +0000 Manifest next update: Mon 25 Aug 2025 20:17:11 +0000 Files and hashes: 1: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl (hash: MlIhug34SZJJK0Cv6cGxbF8KQ5G0Fqaw7UdXRP3Y7bM=) 2: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: 5kmhgTgeSHUwhas6AKT+9HvbtryMe4lzQT0rPZxLy0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:56:cf:fe:cf:7e:83:e7:ce:c1:79:37:59:98:76:35:2f:0f:83:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Validity Not Before: Aug 22 11:47:11 2025 GMT Not After : Aug 25 20:17:11 2025 GMT Subject: CN=BDD1D47562BA343D2C9D02F3EBCAA8B180AE8D95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5c:18:fb:9e:7b:c6:02:f1:76:3f:48:25:40: fc:2c:00:99:fe:fc:84:7c:62:e2:f9:c9:e0:60:8e: b7:b3:b7:59:8e:89:9e:7f:c3:6d:0d:8c:fc:e2:6a: 8b:70:9f:48:d2:99:4a:fb:58:20:6c:03:99:bb:a5: 9b:8c:5f:72:9e:f8:e0:c3:5a:92:81:8c:5a:4f:89: ff:60:f8:4f:5e:d8:b2:86:11:54:06:fd:d4:38:29: 27:41:22:32:d0:13:93:b3:a5:08:d0:0a:92:05:41: 2d:82:6c:40:41:3a:8b:87:ba:d9:c2:75:11:f9:d4: 41:ca:4c:09:d0:37:be:06:28:ac:a2:25:04:84:b3: aa:3e:51:4b:10:cd:cf:4f:1d:ba:92:84:51:3e:af: 9d:2d:f5:d0:dd:a5:e0:aa:6d:c9:d7:ed:07:e2:34: 8b:2b:08:88:b3:b7:20:a7:65:82:7d:b1:b4:8b:f7: 8e:b7:d8:31:b6:c0:5d:e6:92:4f:7c:5c:69:8e:1c: 09:18:99:04:0d:f0:c6:25:45:ee:2f:9d:9e:51:b0: 2f:05:14:5c:fe:bb:c5:d2:3f:ef:90:6c:65:dd:0f: 25:43:54:86:9f:87:95:8c:88:01:73:05:43:f4:8a: a7:d7:5d:cb:a8:69:d6:d4:82:a9:0d:6a:8e:07:e7: 9d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D1:D4:75:62:BA:34:3D:2C:9D:02:F3:EB:CA:A8:B1:80:AE:8D:95 X509v3 Authority Key Identifier: keyid:0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a3:de:d4:65:f1:b3:2f:ca:64:0e:ba:aa:18:e9:89:db:fe: 75:a6:ff:ab:ec:17:d0:65:ca:d0:02:f2:d7:19:fc:11:05:ad: a1:6f:f9:cf:4b:1d:17:08:ce:31:49:f7:9e:d2:8a:8f:02:39: 00:0e:82:71:b7:5d:c4:0f:0d:67:fe:73:cd:e9:3d:9f:4a:91: 5d:b8:57:26:62:b2:82:b6:1e:5b:da:13:44:cc:84:c6:a5:00: 4e:f0:17:00:be:d7:56:d1:39:bf:6b:49:55:60:2c:84:5d:53: 98:ba:38:81:bd:b7:46:b6:6a:f1:b6:ce:fe:71:55:f6:d8:9c: a9:27:02:53:24:af:b3:7e:27:73:5a:9d:b5:d3:94:1f:08:75: b9:43:72:da:ee:e3:0e:0c:56:37:b2:88:a3:31:f6:11:9c:35: 01:03:5d:10:44:d1:de:cf:55:50:2a:b8:9e:f3:41:75:72:4b: d5:e1:50:21:47:5e:77:e3:68:52:ff:bb:96:75:8e:48:c9:f4: e5:94:0b:21:0f:c4:fa:bb:64:9f:b0:6a:1f:52:11:fc:a7:b4: 89:09:fe:a8:91:3e:2f:d3:50:f9:f3:17:ee:50:a1:9e:e9:86: f8:73:08:7c:f2:85:0f:e7:f1:3b:34:bc:f7:9f:d2:51:e9:c0: 42:3f:57:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO1bP/s9+g+fOwXk3WZh2NS8Pg0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVE Mzc3RkNDMjAeFw0yNTA4MjIxMTQ3MTFaFw0yNTA4MjUyMDE3MTFaMDMxMTAvBgNV BAMTKEJERDFENDc1NjJCQTM0M0QyQzlEMDJGM0VCQ0FBOEIxODBBRThEOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUXBj7nnvGAvF2P0glQPwsAJn+ /IR8YuL5yeBgjrezt1mOiZ5/w20NjPziaotwn0jSmUr7WCBsA5m7pZuMX3Ke+ODD WpKBjFpPif9g+E9e2LKGEVQG/dQ4KSdBIjLQE5OzpQjQCpIFQS2CbEBBOouHutnC dRH51EHKTAnQN74GKKyiJQSEs6o+UUsQzc9PHbqShFE+r50t9dDdpeCqbcnX7Qfi NIsrCIiztyCnZYJ9sbSL94632DG2wF3mkk98XGmOHAkYmQQN8MYlRe4vnZ5RsC8F FFz+u8XSP++QbGXdDyVDVIafh5WMiAFzBUP0iqfXXcuoadbUgqkNao4H553XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvdHUdWK6ND0snQLz68qosYCujZUwHwYDVR0j BBgwFoAUDxZZvcMRdYRjrTzqI6frXtN3/MIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWIzZmU0NS1iNTg4LTRiYjctYWU5MC05MWY1N2Y1OTNjYjUvMC8wRjE2NTlCREMz MTE3NTg0NjNBRDNDRUEyM0E3RUI1RUQzNzdGQ0MyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVEMzc3 RkNDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDFiM2ZlNDUtYjU4OC00YmI3LWFl OTAtOTFmNTdmNTkzY2I1LzAvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VC NUVEMzc3RkNDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6j3tRl8bMvymQOuqoY6Ynb/nWm/6vsF9Bl ytAC8tcZ/BEFraFv+c9LHRcIzjFJ957Sio8COQAOgnG3XcQPDWf+c83pPZ9KkV24 VyZisoK2HlvaE0TMhMalAE7wFwC+11bROb9rSVVgLIRdU5i6OIG9t0a2avG2zv5x VfbYnKknAlMkr7N+J3NanbXTlB8IdblDctru4w4MVjeyiKMx9hGcNQEDXRBE0d7P VVAquJ7zQXVyS9XhUCFHXnfjaFL/u5Z1jkjJ9OWUCyEPxPq7ZJ+wah9SEfyntIkJ /qiRPi/TUPnzF+5QoZ7phvhzCHzyhQ/n8Ts0vPef0lHpwEI/V3M= -----END CERTIFICATE-----Generated at Sat Aug 23 15:33:04 2025 by rpki-client