$ rpki-client -vvf repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft File: 0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft (raw, json) Hash identifier: 3pxCa8m4sRVMFlrTPxKeyeFX5wOANKqsHOXgh2WCjHo= Subject key identifier: 5E:8C:1E:34:EC:B5:C8:8D:10:EA:CC:89:3E:E6:F2:E4:78:4D:F9:FE Authority key identifier: 0F:1B:D9:D5:5C:81:21:58:AF:58:CE:47:05:3A:C6:A1:6F:57:16:F5 Certificate issuer: /CN=0F1BD9D55C812158AF58CE47053AC6A16F5716F5 Certificate serial: 52A03B1A543FEA8133E09E200DB47F0D6F332628 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft Manifest number: 0119 Signing time: Sun 20 Jul 2025 01:01:12 +0000 Manifest this update: Sun 20 Jul 2025 00:56:12 +0000 Manifest next update: Wed 23 Jul 2025 03:49:12 +0000 Files and hashes: 1: 0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl (hash: i/Fd1aDlCv4P74FhvEtTKjhyg7rgX7JY92rpvAJe+dA=) 2: 3230332e3131312e3235342e302f32332d3234203d3e20313531393931.roa (hash: lxplHllIEQbjFSzZnnx3SEX7vaIurCC8TrKQIq2OFQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 03:49:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a0:3b:1a:54:3f:ea:81:33:e0:9e:20:0d:b4:7f:0d:6f:33:26:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F1BD9D55C812158AF58CE47053AC6A16F5716F5 Validity Not Before: Jul 20 00:56:12 2025 GMT Not After : Jul 23 03:49:12 2025 GMT Subject: CN=5E8C1E34ECB5C88D10EACC893EE6F2E4784DF9FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d8:d0:3e:67:6b:61:a0:60:9d:7a:da:b6:0a: 3e:eb:8d:ca:8d:39:06:67:44:01:61:e3:28:f2:15: 2b:ed:99:c7:a7:95:13:ef:8c:72:1f:94:79:57:db: 2b:fe:b5:10:68:43:e8:fe:34:45:d4:3d:6f:42:12: a7:e4:16:86:7f:90:af:ec:66:c3:73:50:71:21:13: 7a:a1:d0:a4:cc:3c:af:9b:00:6d:2a:17:81:e6:aa: 76:95:a3:be:50:73:7c:9f:f0:b4:1e:dc:37:1b:90: 69:e9:59:7d:88:3a:5a:bf:f6:0a:9e:dd:c8:0f:9d: 35:dc:ab:be:1b:f1:59:52:29:9a:3d:e7:09:14:ab: 4d:3f:9f:71:33:64:d9:cc:49:a4:8e:8e:c4:30:96: 80:24:39:2a:41:be:a4:c7:93:4d:c4:8d:e9:d4:b8: 2d:02:c5:c8:f7:a5:d6:a1:4f:52:ba:c7:53:df:4a: fe:50:ff:8b:7d:f6:75:bf:f8:99:7e:af:b8:9d:31: 2a:51:6b:5f:9d:7d:fe:bf:03:f3:2b:94:d9:d4:fb: 39:26:b7:69:59:7a:83:a4:26:bd:c4:f8:05:a9:f7: 28:09:08:9a:41:94:1e:75:98:0f:85:ed:8f:08:d8: dc:df:ba:1a:c0:2e:1d:8c:b7:99:92:0e:b5:a4:62: 44:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8C:1E:34:EC:B5:C8:8D:10:EA:CC:89:3E:E6:F2:E4:78:4D:F9:FE X509v3 Authority Key Identifier: keyid:0F:1B:D9:D5:5C:81:21:58:AF:58:CE:47:05:3A:C6:A1:6F:57:16:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:36:d9:68:55:e0:f8:7b:5d:fb:f2:17:79:e0:58:36:84:fe: 15:49:4b:cc:e5:6f:dc:67:8e:33:ad:7d:1c:19:b1:ab:01:41: 16:ff:73:87:59:95:f9:5a:ed:ff:72:9b:29:9e:ee:8f:47:b5: 67:d9:bb:3e:44:2f:05:10:4b:d9:cd:a0:a2:75:90:3f:75:66: d8:a7:43:25:20:c0:73:85:98:be:f4:45:1e:79:c4:65:42:60: f4:19:c5:2f:83:a9:14:41:62:43:dc:9a:54:5d:55:21:b7:c5: ba:86:a4:7f:ed:56:32:55:1b:a5:1e:97:94:30:a7:b3:e5:4f: 49:78:63:00:2c:17:0b:eb:57:8b:a6:ec:44:ed:1e:c2:f4:78: 42:6b:fa:d0:ed:3c:ad:8d:21:28:af:af:32:39:77:c3:ba:24: 1f:cd:23:9e:51:3e:0b:8e:48:65:1c:aa:24:9c:d0:85:8a:d2: a3:66:1d:22:93:4c:ac:8a:d0:c2:38:b2:bd:34:df:2f:49:90: 11:71:b2:5d:e7:fc:46:20:db:b3:0a:2f:50:fa:2e:58:5c:54: a7:75:7e:4e:c7:98:8d:8c:96:ce:74:3a:e7:5a:a1:af:e4:be: 8a:fc:fe:c1:95:8b:4f:3d:2e:20:02:a7:2a:0d:98:c8:44:35: c7:22:b6:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUqA7GlQ/6oEz4J4gDbR/DW8zJigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2QTE2 RjU3MTZGNTAeFw0yNTA3MjAwMDU2MTJaFw0yNTA3MjMwMzQ5MTJaMDMxMTAvBgNV BAMTKDVFOEMxRTM0RUNCNUM4OEQxMEVBQ0M4OTNFRTZGMkU0Nzg0REY5RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv2NA+Z2thoGCdetq2Cj7rjcqN OQZnRAFh4yjyFSvtmcenlRPvjHIflHlX2yv+tRBoQ+j+NEXUPW9CEqfkFoZ/kK/s ZsNzUHEhE3qh0KTMPK+bAG0qF4HmqnaVo75Qc3yf8LQe3DcbkGnpWX2IOlq/9gqe 3cgPnTXcq74b8VlSKZo95wkUq00/n3EzZNnMSaSOjsQwloAkOSpBvqTHk03EjenU uC0Cxcj3pdahT1K6x1PfSv5Q/4t99nW/+Jl+r7idMSpRa1+dff6/A/MrlNnU+zkm t2lZeoOkJr3E+AWp9ygJCJpBlB51mA+F7Y8I2NzfuhrALh2Mt5mSDrWkYkR7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXoweNOy1yI0Q6syJPuby5HhN+f4wHwYDVR0j BBgwFoAUDxvZ1VyBIVivWM5HBTrGoW9XFvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGUzNzdiOS01ODg5LTRjYjMtYTRjOS0wODcxMmI0ZjY2ZmMvMC8wRjFCRDlENTVD ODEyMTU4QUY1OENFNDcwNTNBQzZBMTZGNTcxNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2QTE2RjU3 MTZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRlMzc3YjktNTg4OS00Y2IzLWE0 YzktMDg3MTJiNGY2NmZjLzAvMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2 QTE2RjU3MTZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD822WhV4Ph7XfvyF3ngWDaE/hVJS8zlb9xn jjOtfRwZsasBQRb/c4dZlfla7f9ymyme7o9HtWfZuz5ELwUQS9nNoKJ1kD91Ztin QyUgwHOFmL70RR55xGVCYPQZxS+DqRRBYkPcmlRdVSG3xbqGpH/tVjJVG6Uel5Qw p7PlT0l4YwAsFwvrV4um7ETtHsL0eEJr+tDtPK2NISivrzI5d8O6JB/NI55RPguO SGUcqiSc0IWK0qNmHSKTTKyK0MI4sr003y9JkBFxsl3n/EYg27MKL1D6LlhcVKd1 fk7HmI2Mls50Oudaoa/kvor8/sGVi089LiACpyoNmMhENccitm4= -----END CERTIFICATE-----Generated at Mon Jul 21 03:05:39 2025 by rpki-client