$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft File: 0A8E8E063785238467D4AD1F507CC97B30DBB959.mft (raw, json) Hash identifier: LO4za80dYiVglEVvlEIcJHIAeiE0kya3gd6cYst1O5I= Subject key identifier: C1:CA:75:A7:7D:F2:74:3D:9B:5D:D6:FA:D0:67:3C:2E:74:EF:C1:0D Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Certificate serial: 6CF1BCF888D3C1CCAF1DCD891AD527AE90AC586C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft Manifest number: 014F Signing time: Mon 30 Jun 2025 08:31:16 +0000 Manifest this update: Mon 30 Jun 2025 08:26:16 +0000 Manifest next update: Thu 03 Jul 2025 09:31:16 +0000 Files and hashes: 1: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: ZrrNvfIdpKFxME3MijZJjel9mkVCFWr1LKlyTLKuOmk=) 2: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: dY5S+6E2tTu7kTt3kud9rHyNZ8ICT/4MYY6A5gKdkm0=) 3: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: 34w8SIWSSd8kqURH0Jn+B/R9XKBmDHxtyVWAlqGJxJo=) 4: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: fuYAXhPxVSs3uQDGyVoloAUdGAB1vPzhCZLoObuSwWo=) 5: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: uxf3gr1qNXj16NXsE/3S99HOdYs6kHV+q6L/TWnS+ag=) 6: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: xhrHJkeZ6ORZKPQ3ePW270bQNoXqgZH/hWdzMzXe/Ng=) 7: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: cSd8oWkoy/PciTBhaM2sT+kEpSFLFHXqmquC1grDeYk=) 8: 0A8E8E063785238467D4AD1F507CC97B30DBB959.crl (hash: QAwl3MwAx3jc2BHiOeuef4w7azz3l10fEbHaRO1aEOo=) 9: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: vVX9J+iIt5S0zLOqjzNP9A3DgvrDc3RqZLM36XJo31Q=) 10: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: Mk93/Py1aNdqibCxnW5rDhu68jIUBJ5f2wQcM99902Q=) 11: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: z6Vlo67b6HowiJ4eNQMIImpcN0YW2LjWV36x2SeZA5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 09:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f1:bc:f8:88:d3:c1:cc:af:1d:cd:89:1a:d5:27:ae:90:ac:58:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Validity Not Before: Jun 30 08:26:16 2025 GMT Not After : Jul 3 09:31:16 2025 GMT Subject: CN=C1CA75A77DF2743D9B5DD6FAD0673C2E74EFC10D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:57:b9:18:45:96:e8:01:34:77:1f:02:ed:17: a5:1a:e0:cc:d4:11:58:39:61:9d:ea:91:0b:f5:83: 66:73:17:36:70:1c:63:b0:97:38:93:2b:a1:ec:cf: 71:7b:7b:aa:25:64:53:47:fb:06:0c:47:da:69:68: 30:29:94:b8:37:08:43:5d:13:66:03:92:c4:1a:39: 2e:21:bc:26:50:63:16:72:d2:dd:0e:d2:24:c4:e9: f3:77:c5:e9:cf:fa:5e:6a:2a:9d:30:85:f0:16:58: 64:5b:c6:7d:78:f1:c3:bf:66:26:3e:b0:8b:6f:81: 1b:82:75:32:92:89:66:4b:83:97:d9:50:53:5d:f8: cf:54:c8:2d:2e:11:f6:ae:be:0f:58:93:3b:00:dc: 2d:ce:a0:9d:e1:2f:a2:90:76:25:cc:24:c7:46:d4: 5c:d3:a2:87:30:00:4a:36:e7:4a:24:33:60:8a:63: 9a:ee:8a:3a:6d:15:a3:66:0d:78:01:23:2c:65:30: 09:73:28:03:14:fb:61:05:e2:b5:51:a3:eb:6e:dc: c7:0e:d1:14:bb:06:11:af:1a:4b:cd:6b:52:ef:d5: 42:49:7f:dd:f5:1e:c7:a8:33:fc:89:45:d2:f1:dd: 17:1d:1f:06:29:1c:41:ca:8e:1e:bc:b2:f8:80:0e: 3a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CA:75:A7:7D:F2:74:3D:9B:5D:D6:FA:D0:67:3C:2E:74:EF:C1:0D X509v3 Authority Key Identifier: keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:8d:43:86:d0:d1:c3:20:6e:e0:08:46:43:4d:f1:f4:4e:ab: 42:4b:92:a6:ba:da:57:a2:51:b9:16:a0:5b:e1:de:83:f7:64: 12:36:d1:e6:0a:4c:f7:a2:99:15:60:e6:96:89:e9:e4:ff:a6: f9:71:de:a8:46:48:d7:64:2c:94:3b:1c:b0:21:04:a3:e3:dc: f8:3d:b5:e7:b9:65:66:39:c1:5c:8d:2f:ba:3d:de:0a:3e:c9: 0e:e6:6a:01:2b:43:81:56:a7:b0:b0:aa:f6:ce:92:cb:ec:64: ce:68:62:eb:5a:bc:72:09:7f:b2:37:8b:62:3d:01:dd:bc:05: 46:11:b6:31:af:a2:37:6a:e5:88:a0:ba:cd:de:60:60:a3:16: a1:50:5b:53:62:30:fd:68:9f:31:2e:45:06:98:d3:99:dc:c5: c9:28:be:c5:1b:05:bc:31:97:9e:7a:47:50:65:f5:d6:ee:0b: c3:6d:d8:ed:72:82:a0:0e:93:01:ee:33:79:8d:22:79:85:a3: 04:f4:26:f3:25:51:6f:16:1b:e1:ed:e7:29:7a:3e:b0:43:e3: 32:0a:d9:b0:28:cb:c6:b3:7a:49:7a:5e:65:40:75:dd:fb:ba: 82:a6:4f:4f:a5:9a:d8:3e:8c:ef:27:bb:89:d8:db:46:54:49: a4:0a:07:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbPG8+IjTwcyvHc2JGtUnrpCsWGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz MERCQjk1OTAeFw0yNTA2MzAwODI2MTZaFw0yNTA3MDMwOTMxMTZaMDMxMTAvBgNV BAMTKEMxQ0E3NUE3N0RGMjc0M0Q5QjVERDZGQUQwNjczQzJFNzRFRkMxMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeV7kYRZboATR3HwLtF6Ua4MzU EVg5YZ3qkQv1g2ZzFzZwHGOwlziTK6Hsz3F7e6olZFNH+wYMR9ppaDAplLg3CENd E2YDksQaOS4hvCZQYxZy0t0O0iTE6fN3xenP+l5qKp0whfAWWGRbxn148cO/ZiY+ sItvgRuCdTKSiWZLg5fZUFNd+M9UyC0uEfauvg9YkzsA3C3OoJ3hL6KQdiXMJMdG 1FzToocwAEo250okM2CKY5ruijptFaNmDXgBIyxlMAlzKAMU+2EF4rVRo+tu3McO 0RS7BhGvGkvNa1Lv1UJJf931HseoM/yJRdLx3RcdHwYpHEHKjh68sviADjqfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwcp1p33ydD2bXdb60Gc8LnTvwQ0wHwYDVR0j BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3 ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC Qjk1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjlkNmFjYzYtMGFmMy00Yjk3LTk5 YTQtMGY0NWU4ZWNmNTc2LzAvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5 N0IzMERCQjk1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+NQ4bQ0cMgbuAIRkNN8fROq0JLkqa62lei UbkWoFvh3oP3ZBI20eYKTPeimRVg5paJ6eT/pvlx3qhGSNdkLJQ7HLAhBKPj3Pg9 tee5ZWY5wVyNL7o93go+yQ7magErQ4FWp7CwqvbOksvsZM5oYutavHIJf7I3i2I9 Ad28BUYRtjGvojdq5Yigus3eYGCjFqFQW1NiMP1onzEuRQaY05ncxckovsUbBbwx l556R1Bl9dbuC8Nt2O1ygqAOkwHuM3mNInmFowT0JvMlUW8WG+Ht5yl6PrBD4zIK 2bAoy8azekl6XmVAdd37uoKmT0+lmtg+jO8nu4nY20ZUSaQKB0I= -----END CERTIFICATE-----Generated at Mon Jun 30 10:39:58 2025 by rpki-client