$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft File: 0EAF2A0CD22523DB087375417038E4165075CA3E.mft (raw, json) Hash identifier: x8SSWblL7v6owItdZV5TjbdrINhafJEw31sWIe7SPPA= Subject key identifier: B5:71:B6:D5:78:32:5F:9F:FD:92:75:25:D1:06:EF:68:68:25:03:DA Authority key identifier: 0E:AF:2A:0C:D2:25:23:DB:08:73:75:41:70:38:E4:16:50:75:CA:3E Certificate issuer: /CN=0EAF2A0CD22523DB087375417038E4165075CA3E Certificate serial: 20D9E5564349B04FD69ED88492BEB576711D3B78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft Manifest number: C8 Signing time: Thu 24 Jul 2025 21:41:01 +0000 Manifest this update: Thu 24 Jul 2025 21:36:01 +0000 Manifest next update: Mon 28 Jul 2025 03:26:01 +0000 Files and hashes: 1: 0EAF2A0CD22523DB087375417038E4165075CA3E.crl (hash: URpMVJbsbN6DkZB6726x8Yc1fCAZ4UxCrJB7udqP5zA=) 2: 3135372e32302e34342e302f32342d3234203d3e20313532333932.roa (hash: LQj0jMPge82CwHOWS5fHIk0tBtvaFA1Hv5mniV+5odo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.crl rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d9:e5:56:43:49:b0:4f:d6:9e:d8:84:92:be:b5:76:71:1d:3b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAF2A0CD22523DB087375417038E4165075CA3E Validity Not Before: Jul 24 21:36:01 2025 GMT Not After : Jul 28 03:26:01 2025 GMT Subject: CN=B571B6D578325F9FFD927525D106EF68682503DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3f:93:8b:70:c4:d2:fb:ac:86:6b:86:8d:29: 14:4b:ea:7a:3a:9b:36:af:72:9f:de:c2:54:17:71: 52:eb:4e:8f:c1:1f:e3:b6:28:42:e7:51:20:c2:84: dd:72:97:9b:15:d8:f4:bb:b5:5a:e9:94:2f:ec:03: 92:51:05:a8:3b:42:33:2e:d2:2d:3f:fe:43:e3:1e: 77:2f:7c:b8:b0:0a:6e:01:b0:90:3a:7d:a1:72:9a: 5c:0f:a7:ac:71:1f:fb:bf:ad:37:ad:98:82:8b:f6: 79:73:63:2d:c6:14:fa:01:fc:fc:66:28:2a:e0:32: 81:9c:75:fd:f8:70:c5:93:5f:8c:cf:1b:ad:fc:a0: 54:7b:02:62:20:5a:8e:ae:48:8f:af:f6:b1:76:d2: d8:ff:5d:f8:7e:de:66:20:04:6f:10:fe:00:37:1d: 0c:eb:d2:0c:8f:ae:ac:ab:ce:98:39:b2:da:1a:11: 53:a6:67:d2:b1:c0:2a:da:32:59:aa:39:20:a0:75: 12:42:9a:9f:a0:09:a3:8f:74:63:3a:71:6d:1e:9d: d1:b8:a2:b3:14:da:36:c3:d1:80:d9:d2:02:be:64: 2a:92:c7:2c:08:de:49:aa:32:e6:8d:2c:e8:f5:12: 33:6e:55:db:f1:23:2f:bf:80:d5:8d:99:9b:d3:9a: ea:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:71:B6:D5:78:32:5F:9F:FD:92:75:25:D1:06:EF:68:68:25:03:DA X509v3 Authority Key Identifier: keyid:0E:AF:2A:0C:D2:25:23:DB:08:73:75:41:70:38:E4:16:50:75:CA:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:9e:7d:56:38:a7:13:e4:6d:ce:4e:95:d0:2d:a9:69:95:03: f5:f6:d1:d4:f5:a4:b8:c1:d7:25:e7:1b:b5:b6:12:25:be:31: b8:7c:a8:68:9b:8b:00:eb:70:9c:48:a2:cc:6b:7d:66:37:58: 2c:20:70:aa:c6:56:9b:e7:e1:90:3f:16:0e:29:58:03:7c:11: 81:aa:a8:c0:3d:db:a7:2f:6c:e3:7a:2f:69:3e:de:4d:89:47: f3:01:95:0d:c1:45:ec:c1:ec:0b:02:de:33:33:97:50:23:11: 0f:26:14:2b:64:10:f7:0f:6d:73:1d:33:d9:28:3b:80:f2:71: 58:ed:86:77:d8:c6:10:b5:f9:15:61:b2:88:6c:07:9a:8d:68: 22:87:9c:f2:9e:55:b2:fd:8c:60:09:3e:cb:2c:28:92:03:3f: 3e:cd:89:ed:e7:00:51:2f:e8:20:99:e3:ab:06:57:44:19:a6: 5a:fd:a4:65:06:0c:6c:90:e8:23:fc:a2:a6:08:ed:13:cc:a1: 4e:62:f7:26:ef:49:51:86:5d:7e:76:79:90:d4:b2:9e:47:da: 0a:d4:c5:aa:63:cb:c0:ba:d4:25:87:07:ab:e1:08:9f:9b:fb: 07:d2:14:53:59:20:a5:75:69:6b:b3:ce:5d:69:86:ac:6a:43: 6a:30:5f:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUINnlVkNJsE/WntiEkr61dnEdO3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBRjJBMENEMjI1MjNEQjA4NzM3NTQxNzAzOEU0MTY1 MDc1Q0EzRTAeFw0yNTA3MjQyMTM2MDFaFw0yNTA3MjgwMzI2MDFaMDMxMTAvBgNV BAMTKEI1NzFCNkQ1NzgzMjVGOUZGRDkyNzUyNUQxMDZFRjY4NjgyNTAzREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSP5OLcMTS+6yGa4aNKRRL6no6 mzavcp/ewlQXcVLrTo/BH+O2KELnUSDChN1yl5sV2PS7tVrplC/sA5JRBag7QjMu 0i0//kPjHncvfLiwCm4BsJA6faFymlwPp6xxH/u/rTetmIKL9nlzYy3GFPoB/Pxm KCrgMoGcdf34cMWTX4zPG638oFR7AmIgWo6uSI+v9rF20tj/Xfh+3mYgBG8Q/gA3 HQzr0gyPrqyrzpg5stoaEVOmZ9KxwCraMlmqOSCgdRJCmp+gCaOPdGM6cW0endG4 orMU2jbD0YDZ0gK+ZCqSxywI3kmqMuaNLOj1EjNuVdvxIy+/gNWNmZvTmuqpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtXG21XgyX5/9knUl0QbvaGglA9owHwYDVR0j BBgwFoAUDq8qDNIlI9sIc3VBcDjkFlB1yj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTg4ZGZmNy02YTkyLTQyOTMtODgwMC1iNTNlMmE5MThhY2EvMC8wRUFGMkEwQ0Qy MjUyM0RCMDg3Mzc1NDE3MDM4RTQxNjUwNzVDQTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEVBRjJBMENEMjI1MjNEQjA4NzM3NTQxNzAzOEU0MTY1MDc1 Q0EzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzAvMEVBRjJBMENEMjI1MjNEQjA4NzM3NTQxNzAzOEU0 MTY1MDc1Q0EzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6efVY4pxPkbc5OldAtqWmVA/X20dT1pLjB 1yXnG7W2EiW+Mbh8qGibiwDrcJxIosxrfWY3WCwgcKrGVpvn4ZA/Fg4pWAN8EYGq qMA926cvbON6L2k+3k2JR/MBlQ3BRezB7AsC3jMzl1AjEQ8mFCtkEPcPbXMdM9ko O4DycVjthnfYxhC1+RVhsohsB5qNaCKHnPKeVbL9jGAJPsssKJIDPz7Nie3nAFEv 6CCZ46sGV0QZplr9pGUGDGyQ6CP8oqYI7RPMoU5i9ybvSVGGXX52eZDUsp5H2grU xapjy8C61CWHB6vhCJ+b+wfSFFNZIKV1aWuzzl1phqxqQ2owX28= -----END CERTIFICATE-----Generated at Sun Jul 27 02:26:12 2025 by rpki-client