$ rpki-client -vvf repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft File: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft (raw, json) Hash identifier: 465pG65liBTQ4+qHsrvgX8GJHAelv+FPqOxUSCLdw1w= Subject key identifier: F2:46:C8:A8:56:06:76:8F:B2:5F:E4:94:D2:4D:EF:78:A1:F8:29:45 Authority key identifier: 0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E Certificate issuer: /CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Certificate serial: 591F067A9022E3355F1DDACB5CAF1E1DBD0D93F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft Manifest number: 028A Signing time: Mon 21 Jul 2025 21:20:44 +0000 Manifest this update: Mon 21 Jul 2025 21:15:44 +0000 Manifest next update: Fri 25 Jul 2025 05:56:44 +0000 Files and hashes: 1: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: WfXT/rfuqOQCtkSuVOvx3HMgMVWsirCiP4VcVNJi+gw=) 2: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl (hash: lgK3RHT53itOIaKtV0QbSLAtLF+3brF3A+nE0k0kjtY=) 3: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: v7MhMAJXwywfKNpvZVGmK8aNTXn4lXBf1MXFy8E2vnM=) 4: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: CqE5ZCzeVRm7AAgS0qiGljnG3wqud2DW58oPqVZ6WJg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 03:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:1f:06:7a:90:22:e3:35:5f:1d:da:cb:5c:af:1e:1d:bd:0d:93:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Validity Not Before: Jul 21 21:15:44 2025 GMT Not After : Jul 25 05:56:44 2025 GMT Subject: CN=F246C8A85606768FB25FE494D24DEF78A1F82945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8d:26:3b:fe:29:46:45:72:04:b7:aa:85:fd: 1f:46:02:3d:bc:1f:cb:66:d0:5a:a0:b5:4b:f3:98: 01:93:1e:ae:08:3f:77:01:4b:14:46:01:a6:17:d9: 57:16:2c:8e:5c:9f:3c:f6:6d:17:d4:12:f9:3a:d0: f7:fc:b1:e8:4c:a8:8d:93:06:b9:a2:de:aa:d3:4f: 5e:0a:da:92:8c:f2:a1:0e:d8:51:0d:68:5c:0d:10: 39:20:cd:4d:90:21:bf:a9:76:a6:75:fc:c4:34:f0: 3a:c7:8c:a8:86:d9:3a:da:38:75:bf:4e:04:42:9b: aa:be:8c:0b:6d:40:e6:96:e6:ad:ad:8a:f3:73:55: f2:04:13:5f:a3:79:eb:ff:9d:f3:92:3e:07:4f:5c: 11:46:d8:f4:13:a8:0e:1d:51:d1:70:62:4b:af:4b: cf:ff:66:ad:d0:fa:b9:0e:72:25:84:39:c4:01:7c: f3:bc:31:fc:ce:cc:17:88:05:b6:05:ae:e7:40:92: a3:3f:0f:bb:8c:3b:2e:5d:80:44:ba:83:a4:8a:bd: b8:d1:41:9e:e3:4e:6c:9a:c6:5c:55:43:71:e8:37: 10:d0:89:96:84:4b:22:b2:91:50:d1:36:14:10:59: 34:79:27:8c:d8:a7:a0:66:bb:52:d6:b0:90:50:ea: 14:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:46:C8:A8:56:06:76:8F:B2:5F:E4:94:D2:4D:EF:78:A1:F8:29:45 X509v3 Authority Key Identifier: keyid:0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:93:18:b0:6e:08:d6:d9:45:29:10:80:f6:f6:6e:0c:85:fe: 10:f5:c3:8d:18:c2:9c:23:d1:cd:26:93:f1:9a:f9:d1:58:ae: 21:ed:52:24:19:af:b6:e3:1f:0b:ee:b6:76:26:5e:c7:f3:fe: 25:5c:52:79:16:c0:1b:14:29:ec:a5:9f:c5:94:d5:d5:b5:bf: 37:2b:52:e4:83:44:67:74:03:92:4c:ee:54:29:15:62:91:b0: 67:19:18:76:44:10:51:f0:73:2b:74:7a:bb:d2:a9:26:5c:2b: 8d:79:5f:7b:a4:45:37:ca:e9:ef:3d:ef:07:6a:30:1a:64:c6: 9b:7d:45:aa:07:fd:4f:c8:c6:05:c0:b4:83:e8:7d:46:ae:41: 4e:8a:71:a0:7a:94:95:ba:50:c0:74:07:c2:06:73:78:36:79: 76:d5:a9:0c:b2:02:79:85:b5:34:fc:17:43:6e:85:59:ba:b5: f1:37:42:44:d6:97:c2:eb:53:67:2f:39:65:cc:29:a2:d3:29: a7:69:1e:33:4e:56:f3:ff:c7:bd:62:07:6d:13:14:eb:6c:62: 4e:e7:c1:7a:2b:6f:89:de:bd:08:6f:d8:37:de:f2:87:8d:45: 1d:59:c2:13:4e:4f:ae:bb:2b:9f:4d:15:69:69:30:f2:dd:b4: d0:b8:b5:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWR8GepAi4zVfHdrLXK8eHb0Nk/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENE Mjg1MDI5RTAeFw0yNTA3MjEyMTE1NDRaFw0yNTA3MjUwNTU2NDRaMDMxMTAvBgNV BAMTKEYyNDZDOEE4NTYwNjc2OEZCMjVGRTQ5NEQyNERFRjc4QTFGODI5NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCijSY7/ilGRXIEt6qF/R9GAj28 H8tm0FqgtUvzmAGTHq4IP3cBSxRGAaYX2VcWLI5cnzz2bRfUEvk60Pf8sehMqI2T Brmi3qrTT14K2pKM8qEO2FENaFwNEDkgzU2QIb+pdqZ1/MQ08DrHjKiG2TraOHW/ TgRCm6q+jAttQOaW5q2tivNzVfIEE1+jeev/nfOSPgdPXBFG2PQTqA4dUdFwYkuv S8//Zq3Q+rkOciWEOcQBfPO8MfzOzBeIBbYFrudAkqM/D7uMOy5dgES6g6SKvbjR QZ7jTmyaxlxVQ3HoNxDQiZaESyKykVDRNhQQWTR5J4zYp6Bmu1LWsJBQ6hSRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8kbIqFYGdo+yX+SU0k3veKH4KUUwHwYDVR0j BBgwFoAUDQXve6cdZAt4T3LH2PD03NKFAp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWI4NjA0Zi0zOTVhLTQyYmUtYjk5Ny1lODBmYzFkZjkwZjkvMC8wRDA1RUY3QkE3 MUQ2NDBCNzg0RjcyQzdEOEYwRjREQ0QyODUwMjlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENEMjg1 MDI5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODliODYwNGYtMzk1YS00MmJlLWI5 OTctZTgwZmMxZGY5MGY5LzAvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0 RENEMjg1MDI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuTGLBuCNbZRSkQgPb2bgyF/hD1w40Ywpwj 0c0mk/Ga+dFYriHtUiQZr7bjHwvutnYmXsfz/iVcUnkWwBsUKeyln8WU1dW1vzcr UuSDRGd0A5JM7lQpFWKRsGcZGHZEEFHwcyt0ervSqSZcK415X3ukRTfK6e897wdq MBpkxpt9RaoH/U/IxgXAtIPofUauQU6KcaB6lJW6UMB0B8IGc3g2eXbVqQyyAnmF tTT8F0NuhVm6tfE3QkTWl8LrU2cvOWXMKaLTKadpHjNOVvP/x71iB20TFOtsYk7n wXorb4nevQhv2Dfe8oeNRR1ZwhNOT667K59NFWlpMPLdtNC4tbA= -----END CERTIFICATE-----Generated at Tue Jul 22 04:31:22 2025 by rpki-client