$ rpki-client -vvf repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft File: 0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft (raw, json) Hash identifier: xeEPilBhGxkV7qeFm4bsx2siHqHg8V3zz6ZebEtC53A= Subject key identifier: 08:87:6E:5B:34:FB:88:1D:A4:67:AE:52:89:2C:4A:C4:B4:D0:D6:27 Authority key identifier: 0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8 Certificate issuer: /CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8 Certificate serial: 7914CE28FDA0278C0AC1CE7B8CF66352F3BFC002 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft Manifest number: 0214 Signing time: Wed 23 Jul 2025 13:31:16 +0000 Manifest this update: Wed 23 Jul 2025 13:26:16 +0000 Manifest next update: Sat 26 Jul 2025 21:10:16 +0000 Files and hashes: 1: 0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl (hash: 2LYWt0k3cgfCqooA06Iwt/OJCa+G0SveO5C2UitilJY=) 2: 3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa (hash: kHBDyPefqsguh5TCEwR1/CilgDV5vN4olgvGsk/91XM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 21:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:14:ce:28:fd:a0:27:8c:0a:c1:ce:7b:8c:f6:63:52:f3:bf:c0:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8 Validity Not Before: Jul 23 13:26:16 2025 GMT Not After : Jul 26 21:10:16 2025 GMT Subject: CN=08876E5B34FB881DA467AE52892C4AC4B4D0D627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1e:c2:9a:30:53:1f:6f:8a:b2:f8:82:f0:02: f3:d7:74:e9:29:e8:0e:d0:b5:9c:ad:4e:21:bd:e7: 32:59:44:34:be:66:b8:46:1c:77:15:21:2b:05:2b: 12:6f:e7:a2:7f:68:46:be:85:14:33:08:bf:67:8d: eb:f3:2e:13:d2:a2:30:72:1c:52:55:dd:5f:da:72: 44:3f:f8:5a:de:33:38:d3:b1:7c:3f:b5:6e:37:e8: d7:80:89:c3:ec:8e:9f:c7:c8:e6:8b:6f:af:17:a4: b8:59:10:2d:0b:30:85:2d:05:38:1a:c8:38:71:7b: 93:02:c1:45:ed:1c:53:93:9c:ac:ce:a1:59:a2:ac: 98:64:52:14:02:d9:38:79:d8:bf:ee:84:e0:eb:21: 8f:57:df:6f:72:a4:e5:63:3d:45:52:36:d2:2a:19: 67:46:0e:90:95:c5:f0:28:d2:df:17:00:97:ff:ca: 9c:13:1a:5d:34:f7:c0:e7:ba:c1:fe:37:f3:71:15: fd:b5:c8:46:72:6e:77:ae:1e:2b:c8:e5:52:6c:23: 27:59:52:b2:d3:93:60:91:93:02:75:bd:19:be:c6: ca:bb:9d:01:e6:5a:46:79:e2:15:3f:cd:25:7e:29: 75:40:be:91:54:dd:78:f1:73:b9:4f:99:d4:57:ca: 31:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:87:6E:5B:34:FB:88:1D:A4:67:AE:52:89:2C:4A:C4:B4:D0:D6:27 X509v3 Authority Key Identifier: keyid:0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:3e:e1:3c:8c:94:37:a2:16:80:e6:86:12:51:c1:95:b9:c5: f8:b0:d6:b0:71:53:62:57:62:ed:40:fd:b3:0b:9d:0d:a9:83: 7d:79:7c:36:cb:a6:d1:94:b8:de:22:1f:ad:dd:3b:2e:f1:57: c2:e1:2c:d2:79:3c:3b:92:f9:0a:8d:7d:8f:b8:f7:eb:7b:bb: b0:2c:e2:f9:b8:a7:19:e6:44:f9:68:20:6c:af:25:ea:d3:36: 16:40:23:bd:f3:c1:10:c1:66:69:4a:1e:94:e1:b9:d1:ce:e8: 4d:fe:d6:14:e5:ba:0e:4f:d0:26:6c:d7:0f:d7:6a:e9:c9:bf: 5a:ac:8d:ea:58:86:da:00:c8:76:4e:2b:fd:8e:86:2b:0b:b1: 9c:8f:1e:53:39:37:d9:c8:1c:82:81:4b:a8:d6:72:a1:9a:9a: a1:bb:bf:bf:54:03:e6:d9:3d:5c:bf:9c:1d:10:18:ef:32:20: 26:49:35:3a:25:ff:d3:8d:63:46:ef:28:61:1b:79:da:85:f1: fe:99:be:ff:8b:38:49:2a:a3:4c:32:d9:67:9b:75:df:ba:63: 7e:3f:ee:60:7f:07:92:f9:f6:23:c5:78:b3:e5:c5:ed:d6:f6: 6f:87:43:a8:4a:92:05:d5:57:da:bd:7f:37:75:b1:f3:3f:0a: 14:dd:7b:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeRTOKP2gJ4wKwc57jPZjUvO/wAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjky N0U4MTVFODAeFw0yNTA3MjMxMzI2MTZaFw0yNTA3MjYyMTEwMTZaMDMxMTAvBgNV BAMTKDA4ODc2RTVCMzRGQjg4MURBNDY3QUU1Mjg5MkM0QUM0QjREMEQ2MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrHsKaMFMfb4qy+ILwAvPXdOkp 6A7QtZytTiG95zJZRDS+ZrhGHHcVISsFKxJv56J/aEa+hRQzCL9njevzLhPSojBy HFJV3V/ackQ/+FreMzjTsXw/tW436NeAicPsjp/HyOaLb68XpLhZEC0LMIUtBTga yDhxe5MCwUXtHFOTnKzOoVmirJhkUhQC2Th52L/uhODrIY9X329ypOVjPUVSNtIq GWdGDpCVxfAo0t8XAJf/ypwTGl0098DnusH+N/NxFf21yEZybneuHivI5VJsIydZ UrLTk2CRkwJ1vRm+xsq7nQHmWkZ54hU/zSV+KXVAvpFU3Xjxc7lPmdRXyjE3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCIduWzT7iB2kZ65SiSxKxLTQ1icwHwYDVR0j BBgwFoAUDCBg5B3GrP9UkoaNmxdqKSfoFegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGExNGUzYS01YmUwLTQ2ZDEtOTAzYy0wNTliMGI2ODg4MjEvMC8wQzIwNjBFNDFE QzZBQ0ZGNTQ5Mjg2OEQ5QjE3NkEyOTI3RTgxNUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjkyN0U4 MTVFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMTRlM2EtNWJlMC00NmQxLTkw M2MtMDU5YjBiNjg4ODIxLzAvMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZB MjkyN0U4MTVFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFI+4TyMlDeiFoDmhhJRwZW5xfiw1rBxU2JX Yu1A/bMLnQ2pg315fDbLptGUuN4iH63dOy7xV8LhLNJ5PDuS+QqNfY+49+t7u7As 4vm4pxnmRPloIGyvJerTNhZAI73zwRDBZmlKHpThudHO6E3+1hTlug5P0CZs1w/X aunJv1qsjepYhtoAyHZOK/2OhisLsZyPHlM5N9nIHIKBS6jWcqGamqG7v79UA+bZ PVy/nB0QGO8yICZJNTol/9ONY0bvKGEbedqF8f6Zvv+LOEkqo0wy2Webdd+6Y34/ 7mB/B5L59iPFeLPlxe3W9m+HQ6hKkgXVV9q9fzd1sfM/ChTdewg= -----END CERTIFICATE-----Generated at Thu Jul 24 12:05:45 2025 by rpki-client