$ rpki-client -vvf repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft File: 0FA41B65D1881666013C9683E40575E68E5DC0A5.mft (raw, json) Hash identifier: F42W3xJ99dw1iDYPNaeLRQNsC9Dzm+ebXEpn4AruOBk= Subject key identifier: E1:10:A7:E3:0C:70:D3:22:F1:F7:93:7B:ED:D9:0A:AA:23:DF:70:25 Authority key identifier: 0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 Certificate issuer: /CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Certificate serial: 70FD8F66ECDC0351D8EFBC7528E47DAECB3ACCDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft Manifest number: 0500 Signing time: Sun 20 Jul 2025 06:31:01 +0000 Manifest this update: Sun 20 Jul 2025 06:26:01 +0000 Manifest next update: Wed 23 Jul 2025 17:31:01 +0000 Files and hashes: 1: 0FA41B65D1881666013C9683E40575E68E5DC0A5.crl (hash: OZAruzsgNcplCc68c7PAQ1zQ1M0yq6Ycxfv57dEcvWg=) 2: 323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa (hash: 96iMJoj+cFMvtnyIVwYET8bE27HKdbaW3rJ7KX7hPqQ=) 3: 3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa (hash: tHhLDdHHbsCkG+UHT3p88TUY2+W5e4f+3agioxt0A6g=) 4: 3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (hash: 1h7fo52sVm4cJACJ1QTb5QR43dKEDAqoDnfictr7I+U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 17:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:fd:8f:66:ec:dc:03:51:d8:ef:bc:75:28:e4:7d:ae:cb:3a:cc:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Validity Not Before: Jul 20 06:26:01 2025 GMT Not After : Jul 23 17:31:01 2025 GMT Subject: CN=E110A7E30C70D322F1F7937BEDD90AAA23DF7025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b3:45:eb:c9:d5:03:57:16:23:d6:a2:97:82: 67:fa:42:78:33:e4:54:ee:6f:f1:db:6f:32:b5:64: 06:35:f6:71:01:51:64:2a:18:9a:81:b8:b0:35:b7: 9d:c6:99:9b:60:d7:6d:e2:30:2f:e8:39:7f:f8:e9: 46:a0:67:e9:d0:78:bf:d0:1a:67:d5:d3:da:f0:55: 96:6a:d5:67:05:43:4c:e2:e3:f9:3e:89:0e:a1:8a: 34:af:40:06:9c:cf:21:d0:27:11:02:2a:44:d7:3b: e9:72:aa:8b:23:f9:8d:9d:16:6e:82:61:c4:b5:cd: 40:5b:72:f0:1d:ee:74:39:c2:50:b5:d5:9a:41:bf: c3:72:84:1f:8e:41:0f:d6:b8:08:f1:c1:34:c6:5c: 8c:7a:ea:52:1d:c6:eb:dc:a8:38:a2:08:2c:f9:be: a7:cd:9d:e0:8a:73:44:b5:43:91:3d:8d:db:69:5a: f8:b3:4d:1c:da:83:6f:d8:3d:d2:14:05:3e:b6:1b: c7:73:37:11:a0:88:83:37:35:c5:bc:53:f3:29:58: 53:3f:af:88:9b:fc:26:19:44:e7:6e:93:82:89:05: b3:93:b8:af:8f:db:0b:54:12:84:b6:da:6b:77:ab: d4:7f:3c:bf:f0:c1:e2:f0:06:16:05:ef:7d:91:ce: fd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:10:A7:E3:0C:70:D3:22:F1:F7:93:7B:ED:D9:0A:AA:23:DF:70:25 X509v3 Authority Key Identifier: keyid:0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:5c:93:27:54:26:7a:82:6a:b1:43:7a:52:bf:1e:d2:00:40: 1e:ab:8c:8f:bc:3d:61:0d:03:6d:0f:f2:dd:85:77:fc:2e:6d: ab:00:a2:a6:18:58:87:b2:88:e5:70:2a:eb:a3:50:c6:9d:97: 47:12:63:56:be:09:69:bc:23:a1:5d:e2:05:54:70:e1:33:64: fd:f9:e3:23:7e:8c:1c:15:16:b1:52:13:36:11:9a:bb:9a:22: d8:14:16:be:87:ce:d5:f8:ec:90:bf:29:01:e3:55:54:a0:a0: 87:d2:8a:5d:aa:f7:bd:91:0f:17:b8:bb:f9:7f:c7:f8:aa:96: 4e:93:58:37:e8:bc:53:0e:d4:bc:db:65:5c:39:14:9c:3e:87: 45:0e:5b:d2:c6:37:42:1a:e7:45:5b:7d:57:4b:b0:d2:14:bf: ef:05:1d:00:bc:fd:51:92:d8:45:15:33:8a:71:50:7c:12:b6: e1:22:aa:95:0c:52:c0:8c:12:d6:a5:d5:8e:85:29:6a:e6:55: 96:27:00:06:19:07:06:e7:82:9c:0b:dd:f6:a7:dd:cd:40:c4: 3e:84:de:4f:bb:c1:14:db:6b:ba:67:50:10:d0:bc:1a:59:c4: 6d:22:e2:fa:cd:ab:8f:40:1b:33:8b:05:0d:47:0a:7e:ad:3a: e0:78:b9:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcP2PZuzcA1HY77x1KOR9rss6zNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4 RTVEQzBBNTAeFw0yNTA3MjAwNjI2MDFaFw0yNTA3MjMxNzMxMDFaMDMxMTAvBgNV BAMTKEUxMTBBN0UzMEM3MEQzMjJGMUY3OTM3QkVERDkwQUFBMjNERjcwMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFs0XrydUDVxYj1qKXgmf6Qngz 5FTub/HbbzK1ZAY19nEBUWQqGJqBuLA1t53GmZtg123iMC/oOX/46UagZ+nQeL/Q GmfV09rwVZZq1WcFQ0zi4/k+iQ6hijSvQAaczyHQJxECKkTXO+lyqosj+Y2dFm6C YcS1zUBbcvAd7nQ5wlC11ZpBv8NyhB+OQQ/WuAjxwTTGXIx66lIdxuvcqDiiCCz5 vqfNneCKc0S1Q5E9jdtpWvizTRzag2/YPdIUBT62G8dzNxGgiIM3NcW8U/MpWFM/ r4ib/CYZROduk4KJBbOTuK+P2wtUEoS22mt3q9R/PL/wweLwBhYF732Rzv3lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4RCn4wxw0yLx95N77dkKqiPfcCUwHwYDVR0j BBgwFoAUD6QbZdGIFmYBPJaD5AV15o5dwKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk0ZDM3NS1mYzdkLTRkYzctYTFmMS1lMGIzYTU5ZmRmNzgvMC8wRkE0MUI2NUQx ODgxNjY2MDEzQzk2ODNFNDA1NzVFNjhFNURDMEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4RTVE QzBBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5NGQzNzUtZmM3ZC00ZGM3LWEx ZjEtZTBiM2E1OWZkZjc4LzAvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1 RTY4RTVEQzBBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBckydUJnqCarFDelK/HtIAQB6rjI+8PWEN A20P8t2Fd/wubasAoqYYWIeyiOVwKuujUMadl0cSY1a+CWm8I6Fd4gVUcOEzZP35 4yN+jBwVFrFSEzYRmruaItgUFr6HztX47JC/KQHjVVSgoIfSil2q972RDxe4u/l/ x/iqlk6TWDfovFMO1LzbZVw5FJw+h0UOW9LGN0Ia50VbfVdLsNIUv+8FHQC8/VGS 2EUVM4pxUHwStuEiqpUMUsCMEtal1Y6FKWrmVZYnAAYZBwbngpwL3fan3c1AxD6E 3k+7wRTba7pnUBDQvBpZxG0i4vrNq49AGzOLBQ1HCn6tOuB4udA= -----END CERTIFICATE-----Generated at Sun Jul 20 21:58:08 2025 by rpki-client