$ rpki-client -vvf repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft File: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft (raw, json) Hash identifier: Ek+DVy1SioqMRktKQiZAnRELZPdlEuZtkCC5dxt71VU= Subject key identifier: 47:03:DB:42:80:D6:11:F5:16:34:3B:82:31:8B:24:02:16:2D:74:3C Authority key identifier: 0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 Certificate issuer: /CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Certificate serial: 1788B296E0832280C9BD5F41DA761F7B7FD49A1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft Manifest number: 0292 Signing time: Thu 24 Jul 2025 07:26:17 +0000 Manifest this update: Thu 24 Jul 2025 07:21:17 +0000 Manifest next update: Sun 27 Jul 2025 16:11:17 +0000 Files and hashes: 1: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl (hash: o7k1V6nxxXbatSayMIL3H1Vc9eBwzxESofy7QNzg0og=) 2: 3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa (hash: tNCrkyzG4AciCmgimqvIw2bQeulAylk5FoXAJrDEuic=) 3: 3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa (hash: HpSArK9wKsGD/4QjsHQDEChpbO5zQMtEgV2WhSH9EBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:88:b2:96:e0:83:22:80:c9:bd:5f:41:da:76:1f:7b:7f:d4:9a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Validity Not Before: Jul 24 07:21:17 2025 GMT Not After : Jul 27 16:11:17 2025 GMT Subject: CN=4703DB4280D611F516343B82318B2402162D743C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:56:b5:69:61:5f:85:6d:ae:d2:0d:6f:c8:9e: e6:59:e9:b7:5d:d6:7b:e9:ef:28:96:e1:be:ae:8b: dc:94:88:ee:f7:ff:54:91:e8:aa:47:f5:30:67:12: 21:9b:6d:cf:a1:ea:27:e5:f7:8a:60:66:73:43:6d: e6:1a:ea:45:2e:62:5e:21:a0:46:9d:28:00:b1:21: 38:b4:79:01:37:ac:0f:6a:e4:72:e6:ad:54:40:21: f6:29:c5:16:4b:40:20:5a:78:dc:d1:41:42:d0:89: 5a:5a:06:9e:83:9d:63:5e:c0:e4:93:8f:6c:e2:21: d8:f7:24:61:3e:a7:85:b4:18:36:9d:a7:ea:21:b4: bc:2f:19:fa:84:1d:74:64:69:b0:43:ca:69:b1:44: db:5a:9f:6c:65:76:74:ed:97:12:3a:91:a4:2f:5b: 62:19:da:e4:6e:d6:b2:d6:69:e8:34:40:06:fc:a0: a2:72:1b:a8:ae:d0:f2:8a:cf:e1:0d:a1:14:7b:dd: e2:a0:fb:eb:e2:16:93:9f:a3:86:5c:7a:bb:31:46: ff:01:60:44:f2:81:40:3e:cd:b4:88:31:38:86:32: 37:11:4a:77:93:78:b1:98:9a:79:82:5b:b1:d2:62: 7e:3e:1a:09:99:d7:97:62:e8:6f:b0:13:90:b1:3e: f1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:03:DB:42:80:D6:11:F5:16:34:3B:82:31:8B:24:02:16:2D:74:3C X509v3 Authority Key Identifier: keyid:0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:aa:42:c2:a8:df:eb:b2:5b:84:1d:6d:5f:2e:64:cf:38:8d: 49:9e:ef:62:85:1d:82:5f:12:6e:17:e6:01:13:e2:25:e9:2c: 67:81:4b:59:49:63:2e:45:7c:59:22:c5:18:49:72:08:7a:62: 1c:51:a0:ab:29:ff:54:7b:8f:16:e5:36:fa:f7:44:36:0d:43: f4:f0:59:77:3b:e3:a8:ac:40:62:c1:0a:f8:72:9e:d3:32:ba: 8b:34:fc:b6:36:1a:52:62:91:ff:4b:02:4e:d1:a6:17:6e:0e: cb:a6:8c:49:92:2a:1d:54:75:ac:38:fa:8c:89:ed:1a:c1:8d: 0c:29:32:42:45:76:5c:8c:24:8f:90:4b:17:35:5f:91:6d:66: ac:a5:4b:33:a8:1c:37:77:57:de:e9:96:19:18:33:70:fa:0d: 68:f2:b1:77:4f:5d:8e:34:7f:38:2d:71:28:2d:93:8e:49:d6: e5:73:7d:fb:21:17:46:1c:e9:9d:31:87:78:f3:7c:8d:58:0b: c3:5a:9d:86:06:c0:9b:09:eb:04:9c:89:e5:41:b3:63:a5:b5: ff:bc:5f:13:4f:9e:88:cd:82:dc:65:fa:7e:97:07:71:a9:10: 17:4c:f5:27:d0:9e:ab:76:e9:37:86:71:79:07:ea:15:98:75: f8:aa:c1:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF4iyluCDIoDJvV9B2nYfe3/Umh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2 Q0VGNzE1MTAeFw0yNTA3MjQwNzIxMTdaFw0yNTA3MjcxNjExMTdaMDMxMTAvBgNV BAMTKDQ3MDNEQjQyODBENjExRjUxNjM0M0I4MjMxOEIyNDAyMTYyRDc0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwVrVpYV+Fba7SDW/InuZZ6bdd 1nvp7yiW4b6ui9yUiO73/1SR6KpH9TBnEiGbbc+h6ifl94pgZnNDbeYa6kUuYl4h oEadKACxITi0eQE3rA9q5HLmrVRAIfYpxRZLQCBaeNzRQULQiVpaBp6DnWNewOST j2ziIdj3JGE+p4W0GDadp+ohtLwvGfqEHXRkabBDymmxRNtan2xldnTtlxI6kaQv W2IZ2uRu1rLWaeg0QAb8oKJyG6iu0PKKz+ENoRR73eKg++viFpOfo4ZcersxRv8B YETygUA+zbSIMTiGMjcRSneTeLGYmnmCW7HSYn4+GgmZ15di6G+wE5CxPvG7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURwPbQoDWEfUWNDuCMYskAhYtdDwwHwYDVR0j BBgwFoAUDDwRP5gNgA+tX8Rn7n8QgGzvcVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTU3YTNiZi00ODIzLTQ2MDktODVjZC03NzU3MGJmMTg1ODAvMC8wQzNDMTEzRjk4 MEQ4MDBGQUQ1RkM0NjdFRTdGMTA4MDZDRUY3MTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2Q0VG NzE1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk1N2EzYmYtNDgyMy00NjA5LTg1 Y2QtNzc1NzBiZjE4NTgwLzAvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEw ODA2Q0VGNzE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuqQsKo3+uyW4QdbV8uZM84jUme72KFHYJf Em4X5gET4iXpLGeBS1lJYy5FfFkixRhJcgh6YhxRoKsp/1R7jxblNvr3RDYNQ/Tw WXc746isQGLBCvhyntMyuos0/LY2GlJikf9LAk7RphduDsumjEmSKh1Udaw4+oyJ 7RrBjQwpMkJFdlyMJI+QSxc1X5FtZqylSzOoHDd3V97plhkYM3D6DWjysXdPXY40 fzgtcSgtk45J1uVzffshF0Yc6Z0xh3jzfI1YC8NanYYGwJsJ6wScieVBs2Oltf+8 XxNPnojNgtxl+n6XB3GpEBdM9SfQnqt26TeGcXkH6hWYdfiqweM= -----END CERTIFICATE-----Generated at Sat Jul 26 01:55:55 2025 by rpki-client