$ rpki-client -vvf repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft File: 0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft (raw, json) Hash identifier: E6Yl6QvzWgGp4lSCb4NLjBraz+Kh61gPk1tWGnU/zto= Subject key identifier: 94:03:6B:E3:A3:A3:A6:FF:54:E7:17:EA:FD:2F:4D:93:35:83:45:2F Authority key identifier: 0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81 Certificate issuer: /CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581 Certificate serial: 6146D6B415E43DF0052D7ADF15D272C8C3932090 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft Manifest number: F1 Signing time: Sat 23 Aug 2025 09:41:20 +0000 Manifest this update: Sat 23 Aug 2025 09:36:20 +0000 Manifest next update: Tue 26 Aug 2025 13:12:20 +0000 Files and hashes: 1: 3130332e3235322e3130302e302f32342d3234203d3e203539313437.roa (hash: YM9KbHhAudmxJLriUiNFwnyRKQIeMezebhltKdO9iVg=) 2: 3130332e3235322e3130312e302f32342d3234203d3e203539313437.roa (hash: MWGkE6CsRSWqMBYLVPUy9HMPTSzmfg1RhCwIFa2snrk=) 3: 0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl (hash: vls/UfGJ0qvZbo8Fe4EjFdwj6nvBIi6/sxLXr+d1oug=) 4: 3130332e3235322e3130302e302f32332d3233203d3e203539313437.roa (hash: 7Av//tJaFwT8z6GFSW7uk6ehjT5V0e5+FTRipECyI0I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:46:d6:b4:15:e4:3d:f0:05:2d:7a:df:15:d2:72:c8:c3:93:20:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581 Validity Not Before: Aug 23 09:36:20 2025 GMT Not After : Aug 26 13:12:20 2025 GMT Subject: CN=94036BE3A3A3A6FF54E717EAFD2F4D933583452F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1e:99:1f:0d:ae:78:93:f2:9a:b1:09:cf:92: 04:b8:a0:e2:ea:d7:c8:a7:20:5c:99:b4:ce:16:9b: f3:b0:c4:9e:28:f7:55:5c:37:74:02:4a:71:15:68: d5:96:22:25:b7:a9:8c:16:a4:7c:f2:51:ae:e1:25: 94:cf:9e:af:3f:ac:d9:55:61:a4:70:3e:63:4d:35: 56:ea:10:31:3b:5d:61:da:64:ab:35:b3:f6:89:e9: a9:75:b7:28:28:32:19:f1:4d:8d:e3:91:41:88:55: 19:58:64:aa:0b:6a:42:fc:32:c2:ef:12:45:a4:98: 5c:84:1b:ce:0d:ad:25:0e:34:f1:3b:61:ec:80:75: 9d:31:9d:41:76:3a:af:f8:c1:36:93:f1:74:ad:de: 73:79:06:ac:6d:ac:37:15:3a:2f:6f:8a:56:43:29: e6:7b:1f:b4:d6:e2:b0:fc:bd:6a:08:2a:ad:7a:63: 4a:1f:75:4a:60:18:24:2b:87:80:5d:bb:a3:50:a5: 53:8b:1c:c8:1c:de:08:20:6f:5e:27:ce:9a:46:11: 9b:ab:b2:93:1f:b4:8d:03:cb:c9:0a:a2:d3:84:4d: 79:2f:1c:56:39:7a:3e:0a:5a:52:ec:d8:02:94:c3: 6c:14:d4:ad:1c:3e:d0:ff:0d:b0:a2:62:ad:78:a6: 40:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:03:6B:E3:A3:A3:A6:FF:54:E7:17:EA:FD:2F:4D:93:35:83:45:2F X509v3 Authority Key Identifier: keyid:0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:51:7a:32:f3:5c:b9:29:df:83:98:d2:b3:b5:3e:f4:de:68: c4:b4:8d:d4:20:5d:39:1b:c7:2a:fe:57:7b:07:11:d4:ba:22: 88:5e:9c:c7:71:1b:92:56:f8:00:ff:f0:ef:5a:fd:2d:3a:d9: 2c:70:f1:c9:51:d8:86:65:e3:e7:7e:ee:12:19:0a:99:bb:d3: fb:02:ff:9f:1e:e4:7b:84:c6:7b:a4:bb:49:80:ef:65:34:86: 82:bd:23:a1:ad:64:01:c5:97:54:ce:66:77:01:48:21:f8:13: 17:36:1a:7a:f4:ff:fe:68:f7:81:89:c3:81:9f:13:2a:9a:66: 27:7f:87:50:9c:56:ac:5e:70:c4:1c:b5:c6:69:83:13:a6:d2: 87:b2:08:b7:bc:27:f3:81:90:39:6d:c6:cc:cd:b4:d3:8c:ea: 9a:fd:a8:ff:4c:ef:93:26:28:62:19:2e:2b:54:2f:e2:30:09: 55:3d:66:cd:e1:0c:8c:d4:e2:53:48:a0:bf:29:7d:d8:75:2d: 05:22:ee:c0:bc:ae:42:c0:af:8e:8a:fb:64:78:0d:e2:4f:42: 36:92:4a:62:e0:72:9f:a5:0f:5c:d3:2a:d8:91:22:9c:b1:ea: ba:6c:51:66:24:a4:77:fe:e0:b1:8f:84:39:cf:62:8f:23:8e: 52:22:1a:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYUbWtBXkPfAFLXrfFdJyyMOTIJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU3QkYyQ0UyN0Q4OTlEOEU5ODVEQkQ5MzExREY4QjI1 MEM1ODU4MTAeFw0yNTA4MjMwOTM2MjBaFw0yNTA4MjYxMzEyMjBaMDMxMTAvBgNV BAMTKDk0MDM2QkUzQTNBM0E2RkY1NEU3MTdFQUZEMkY0RDkzMzU4MzQ1MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGHpkfDa54k/KasQnPkgS4oOLq 18inIFyZtM4Wm/OwxJ4o91VcN3QCSnEVaNWWIiW3qYwWpHzyUa7hJZTPnq8/rNlV YaRwPmNNNVbqEDE7XWHaZKs1s/aJ6al1tygoMhnxTY3jkUGIVRlYZKoLakL8MsLv EkWkmFyEG84NrSUONPE7YeyAdZ0xnUF2Oq/4wTaT8XSt3nN5BqxtrDcVOi9vilZD KeZ7H7TW4rD8vWoIKq16Y0ofdUpgGCQrh4Bdu6NQpVOLHMgc3gggb14nzppGEZur spMftI0Dy8kKotOETXkvHFY5ej4KWlLs2AKUw2wU1K0cPtD/DbCiYq14pkANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlANr46Ojpv9U5xfq/S9NkzWDRS8wHwYDVR0j BBgwFoAUDnvyzifYmdjphdvZMR34slDFhYEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGM1NTAzNC01ZjM2LTQxNzMtYjY0Yy1hOTc1ZTMyMzEzOGEvMC8wRTdCRjJDRTI3 RDg5OUQ4RTk4NURCRDkzMTFERjhCMjUwQzU4NTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU3QkYyQ0UyN0Q4OTlEOEU5ODVEQkQ5MzExREY4QjI1MEM1 ODU4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBjNTUwMzQtNWYzNi00MTczLWI2 NGMtYTk3NWUzMjMxMzhhLzAvMEU3QkYyQ0UyN0Q4OTlEOEU5ODVEQkQ5MzExREY4 QjI1MEM1ODU4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBRejLzXLkp34OY0rO1PvTeaMS0jdQgXTkb xyr+V3sHEdS6IohenMdxG5JW+AD/8O9a/S062Sxw8clR2IZl4+d+7hIZCpm70/sC /58e5HuExnuku0mA72U0hoK9I6GtZAHFl1TOZncBSCH4Exc2Gnr0//5o94GJw4Gf EyqaZid/h1CcVqxecMQctcZpgxOm0oeyCLe8J/OBkDltxszNtNOM6pr9qP9M75Mm KGIZLitUL+IwCVU9Zs3hDIzU4lNIoL8pfdh1LQUi7sC8rkLAr46K+2R4DeJPQjaS SmLgcp+lD1zTKtiRIpyx6rpsUWYkpHf+4LGPhDnPYo8jjlIiGpU= -----END CERTIFICATE-----Generated at Sat Aug 23 16:28:44 2025 by rpki-client