$ rpki-client -vvf repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft File: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft (raw, json) Hash identifier: yGiKV8pJZ1zgVHn6FmNQ7ohV0sEvZykzi2JXw7PmQRk= Subject key identifier: CE:1A:F3:57:AC:98:F0:B8:29:1A:A7:54:FF:21:15:B2:5B:96:DB:C7 Authority key identifier: 0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E Certificate issuer: /CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E Certificate serial: 798A4D77794C9F746542091B762797E013F11168 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft Manifest number: 04EF Signing time: Sat 19 Jul 2025 07:40:45 +0000 Manifest this update: Sat 19 Jul 2025 07:35:45 +0000 Manifest next update: Tue 22 Jul 2025 16:57:45 +0000 Files and hashes: 1: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl (hash: 5WF8bdBYlkUal3LdQ0b4tLE398ZNEcDeG+Rh3b2d/a0=) 2: 323030313a6466303a3232393a3a2f34382d3438203d3e20313331373738.roa (hash: Kw/2sJDovbqcLamhNn36qpz8RozjhJRdtUEEKJ4rTNg=) 3: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (hash: /0ivdWgJqnJaSVnUB+9OuvpQlcxcSIK1E90K9ZECaAA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 16:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:8a:4d:77:79:4c:9f:74:65:42:09:1b:76:27:97:e0:13:f1:11:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E Validity Not Before: Jul 19 07:35:45 2025 GMT Not After : Jul 22 16:57:45 2025 GMT Subject: CN=CE1AF357AC98F0B8291AA754FF2115B25B96DBC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f1:63:85:82:e9:80:ed:84:4e:b6:e3:12:aa: 22:ab:ce:cd:7e:1d:6d:42:cf:10:51:a4:d5:62:62: 6e:bd:0c:e2:d6:66:41:a7:6d:2d:83:4d:17:ce:33: c0:ab:c4:47:9b:47:73:24:8e:a5:c8:9b:da:d4:2a: 71:7a:66:16:21:0f:18:e4:5d:be:53:9c:97:c9:9d: c4:51:16:81:62:e2:97:c1:8d:4b:d4:2d:2e:8f:27: 30:41:d0:6c:1d:12:86:9b:96:84:da:81:6f:96:7a: d1:01:42:5f:08:57:87:6f:35:bc:0d:86:c8:69:f4: 37:e7:cd:e9:53:9e:f8:66:4d:38:8b:e6:7b:66:5a: 5c:cd:83:1c:f9:fd:f7:79:4b:3a:4d:b4:bc:0c:69: 62:0f:f3:71:2b:87:98:81:01:6d:fc:68:92:7d:19: 12:0a:71:34:2b:06:65:2f:c9:bf:6b:d5:cf:ff:20: e6:a4:bf:17:7c:9d:56:ce:17:ca:3b:6c:cf:8d:d9: ac:4d:19:bd:cd:0d:f8:cf:51:36:26:18:46:40:ad: 5e:50:68:4c:3e:a5:8e:37:22:be:d4:cc:46:ae:d8: 17:dc:70:ef:d1:9e:92:6e:f8:e7:56:30:f1:03:08: 94:10:68:82:78:58:23:c6:93:7f:09:09:3d:dd:29: 2d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1A:F3:57:AC:98:F0:B8:29:1A:A7:54:FF:21:15:B2:5B:96:DB:C7 X509v3 Authority Key Identifier: keyid:0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:5d:2d:3b:1a:2e:81:f3:06:4c:e6:44:ac:a8:c8:a8:97:c0: 25:49:c5:27:9a:56:60:18:8f:7a:37:eb:b7:ed:2b:e3:b2:59: f6:d5:12:82:26:d5:1d:d3:06:fa:d4:26:35:f3:bc:b7:a5:cf: 01:12:c6:94:68:2a:e2:fa:db:54:30:80:40:73:a9:95:fe:70: 9f:2e:03:a4:dc:fb:f8:ee:9a:ad:21:42:62:6a:75:03:73:a0: d6:2b:57:14:b1:11:3e:d3:03:1c:65:75:d4:e6:82:fe:8a:2d: 2e:b9:22:cc:0c:4b:ca:dd:47:d5:b6:a4:c0:b3:79:f3:91:ea: 61:6a:53:8d:6d:2c:cb:de:5b:80:c0:6b:05:7f:05:3e:21:22: 7e:75:62:fd:9f:06:82:0e:3a:ca:26:18:09:a8:0d:0a:55:b7: 37:6e:5d:e4:0c:40:6a:2d:ca:10:7b:46:52:5f:a1:68:5f:33: e6:5b:be:cf:96:72:cc:16:7e:97:c9:c0:50:6a:72:86:d1:20: 9e:bc:bb:b5:a3:20:83:d6:21:05:66:81:46:74:fc:2c:dd:22: 96:cd:cd:4a:30:a4:85:e2:06:40:bc:db:3f:53:e0:21:a9:a1: 0b:10:f9:dd:ff:67:d1:c7:d0:ba:8f:86:77:20:be:dc:52:5d: 70:1f:9e:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeYpNd3lMn3RlQgkbdieX4BPxEWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2 QUI1Njk1RTAeFw0yNTA3MTkwNzM1NDVaFw0yNTA3MjIxNjU3NDVaMDMxMTAvBgNV BAMTKENFMUFGMzU3QUM5OEYwQjgyOTFBQTc1NEZGMjExNUIyNUI5NkRCQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF8WOFgumA7YROtuMSqiKrzs1+ HW1CzxBRpNViYm69DOLWZkGnbS2DTRfOM8CrxEebR3MkjqXIm9rUKnF6ZhYhDxjk Xb5TnJfJncRRFoFi4pfBjUvULS6PJzBB0GwdEoabloTagW+WetEBQl8IV4dvNbwN hshp9DfnzelTnvhmTTiL5ntmWlzNgxz5/fd5SzpNtLwMaWIP83Erh5iBAW38aJJ9 GRIKcTQrBmUvyb9r1c//IOakvxd8nVbOF8o7bM+N2axNGb3NDfjPUTYmGEZArV5Q aEw+pY43Ir7UzEau2BfccO/RnpJu+OdWMPEDCJQQaIJ4WCPGk38JCT3dKS15AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzhrzV6yY8LgpGqdU/yEVsluW28cwHwYDVR0j BBgwFoAUD/5fGfvrVIn/zN83/v4KDGq1aV4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmFlNThhYy01OTE3LTQwNjktOWE2Yy04M2RjMWJhMzIxMjYvMC8wRkZFNUYxOUZC RUI1NDg5RkZDQ0RGMzdGRUZFMEEwQzZBQjU2OTVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2QUI1 Njk1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJhZTU4YWMtNTkxNy00MDY5LTlh NmMtODNkYzFiYTMyMTI2LzAvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBB MEM2QUI1Njk1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZdLTsaLoHzBkzmRKyoyKiXwCVJxSeaVmAY j3o367ftK+OyWfbVEoIm1R3TBvrUJjXzvLelzwESxpRoKuL621QwgEBzqZX+cJ8u A6Tc+/jumq0hQmJqdQNzoNYrVxSxET7TAxxlddTmgv6KLS65IswMS8rdR9W2pMCz efOR6mFqU41tLMveW4DAawV/BT4hIn51Yv2fBoIOOsomGAmoDQpVtzduXeQMQGot yhB7RlJfoWhfM+Zbvs+WcswWfpfJwFBqcobRIJ68u7WjIIPWIQVmgUZ0/CzdIpbN zUowpIXiBkC82z9T4CGpoQsQ+d3/Z9HH0LqPhncgvtxSXXAfnvI= -----END CERTIFICATE-----Generated at Sun Jul 20 23:56:21 2025 by rpki-client