$ rpki-client -vvf repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft File: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft (raw, json) Hash identifier: xTSjswtkOqBuMr6ZYFhaxTgFu3kxP5PXEiIdcyeLxLc= Subject key identifier: 67:EB:C8:DF:AA:B2:D6:2A:5C:20:25:93:D9:03:BA:FB:3C:27:10:C6 Authority key identifier: 0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C Certificate issuer: /CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Certificate serial: 62E3FCA8967BBA8FF7E676DDE6D96E24054D0CFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft Manifest number: 04EE Signing time: Mon 21 Jul 2025 22:41:29 +0000 Manifest this update: Mon 21 Jul 2025 22:36:29 +0000 Manifest next update: Fri 25 Jul 2025 00:02:29 +0000 Files and hashes: 1: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl (hash: 2D/YMTDQDT4bV9p9kJ1uNHGyGAQ5CKbTlboLSrd00wQ=) 2: 323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa (hash: ZCfIqpH3uC9vaXsU0X4IOAqNNWCL/kt97zzI3ZypMPI=) 3: 3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa (hash: MtpuQgaD3AVd7DaurQu06bLnX7K9XIzGJP+djliDNAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 00:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:e3:fc:a8:96:7b:ba:8f:f7:e6:76:dd:e6:d9:6e:24:05:4d:0c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Validity Not Before: Jul 21 22:36:29 2025 GMT Not After : Jul 25 00:02:29 2025 GMT Subject: CN=67EBC8DFAAB2D62A5C202593D903BAFB3C2710C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a5:ec:ed:f9:de:dd:a3:f8:90:b7:bb:92:b1: 26:cb:d1:37:61:8b:ca:fe:ca:a5:d3:f2:c8:f6:8f: 7f:64:48:7a:55:73:05:69:6a:82:34:a3:08:c5:76: 81:2e:03:98:e0:61:94:41:62:4c:d3:8c:82:b1:8d: bb:4e:a0:27:57:13:37:a8:d9:b3:83:53:6b:b6:36: aa:b8:29:e4:70:0c:e2:11:06:e6:47:09:1e:bb:ab: b2:54:65:0b:15:59:86:80:37:b3:ac:20:c8:e1:d7: d5:d2:bd:fc:55:7e:67:d9:d7:7f:a1:2b:2e:2c:23: a2:bc:4b:22:d9:1c:f1:2c:50:ef:7a:c9:eb:0d:de: 54:51:ef:ea:d7:b2:67:7c:6e:c9:42:0a:24:30:67: 2f:89:a0:7e:5d:dd:3d:7f:47:ae:9a:9b:c6:dd:6c: a1:0a:1c:5e:89:27:14:b7:cf:cc:32:e8:ac:10:da: 39:11:f5:c0:63:52:aa:ea:39:3b:ee:76:07:44:e3: 0d:03:01:5b:12:4b:7c:5a:7a:6a:0e:42:88:f8:e6: 95:5d:8e:e9:fb:b0:95:63:96:02:4f:38:1f:ee:07: dc:66:70:e8:52:b6:c5:80:87:32:1e:a6:57:ea:e1: e6:57:6b:91:f1:17:fa:fa:57:e8:f3:b0:00:c4:7a: c9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EB:C8:DF:AA:B2:D6:2A:5C:20:25:93:D9:03:BA:FB:3C:27:10:C6 X509v3 Authority Key Identifier: keyid:0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:0e:58:b2:d1:c7:31:60:fe:03:a0:0b:13:3d:e4:88:36:85: 5f:d9:21:ee:09:2d:6d:20:54:d3:be:6e:f6:1e:28:c1:98:a9: 90:3b:0c:b7:35:30:d5:47:8b:11:a7:6f:16:35:7e:a7:4c:92: e4:32:b7:f4:5b:b0:77:31:99:ab:54:ee:6d:be:a7:f1:69:d9: 5d:b6:e8:3e:a6:a4:3b:e4:61:4a:4d:e9:17:91:ce:91:d1:33: e6:b1:14:91:b1:ba:9d:74:b4:f9:dc:19:8e:13:d8:0e:f7:58: 1d:1a:ac:4c:3c:77:91:b6:4a:d1:82:f5:f9:f3:e5:07:19:a7: c3:75:0d:5f:ff:1e:39:36:c7:1e:28:cb:b3:86:5d:cd:19:4c: fb:c0:cd:12:df:5e:11:e9:ad:96:90:33:26:ef:10:4c:8c:ae: 34:47:01:e3:83:d5:ca:1f:88:ba:47:22:31:e6:ae:7a:f1:45: ae:8f:06:2f:9b:d9:e1:7d:2f:54:54:b0:ba:b0:ae:a8:76:19: 8c:b0:46:25:69:96:e5:55:f6:e0:86:01:40:98:71:da:9f:36: 2a:e1:b2:dd:a7:f9:dd:6b:c3:94:8a:37:e2:86:e1:18:80:40: 8c:57:12:e3:68:bb:ec:84:dd:d5:5e:74:65:18:9a:3b:72:f7: 86:ff:0c:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYuP8qJZ7uo/35nbd5tluJAVNDPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENBOUE2 MUExNjE1QzAeFw0yNTA3MjEyMjM2MjlaFw0yNTA3MjUwMDAyMjlaMDMxMTAvBgNV BAMTKDY3RUJDOERGQUFCMkQ2MkE1QzIwMjU5M0Q5MDNCQUZCM0MyNzEwQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCypezt+d7do/iQt7uSsSbL0Tdh i8r+yqXT8sj2j39kSHpVcwVpaoI0owjFdoEuA5jgYZRBYkzTjIKxjbtOoCdXEzeo 2bODU2u2Nqq4KeRwDOIRBuZHCR67q7JUZQsVWYaAN7OsIMjh19XSvfxVfmfZ13+h Ky4sI6K8SyLZHPEsUO96yesN3lRR7+rXsmd8bslCCiQwZy+JoH5d3T1/R66am8bd bKEKHF6JJxS3z8wy6KwQ2jkR9cBjUqrqOTvudgdE4w0DAVsSS3xaemoOQoj45pVd jun7sJVjlgJPOB/uB9xmcOhStsWAhzIeplfq4eZXa5HxF/r6V+jzsADEeskJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ+vI36qy1ipcICWT2QO6+zwnEMYwHwYDVR0j BBgwFoAUD+2iiPcnXepGmu9MI43KmmGhYVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzM3MGU2Zi1mMGM3LTRmNDAtOGJhNC1hMDFlNWQwYzc0ZTQvMC8wRkVEQTI4OEY3 Mjc1REVBNDY5QUVGNEMyMzhEQ0E5QTYxQTE2MTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENBOUE2MUEx NjE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMzNzBlNmYtZjBjNy00ZjQwLThi YTQtYTAxZTVkMGM3NGU0LzAvMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENB OUE2MUExNjE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQOWLLRxzFg/gOgCxM95Ig2hV/ZIe4JLW0g VNO+bvYeKMGYqZA7DLc1MNVHixGnbxY1fqdMkuQyt/RbsHcxmatU7m2+p/Fp2V22 6D6mpDvkYUpN6ReRzpHRM+axFJGxup10tPncGY4T2A73WB0arEw8d5G2StGC9fnz 5QcZp8N1DV//Hjk2xx4oy7OGXc0ZTPvAzRLfXhHprZaQMybvEEyMrjRHAeOD1cof iLpHIjHmrnrxRa6PBi+b2eF9L1RUsLqwrqh2GYywRiVpluVV9uCGAUCYcdqfNirh st2n+d1rw5SKN+KG4RiAQIxXEuNou+yE3dVedGUYmjty94b/DMM= -----END CERTIFICATE-----Generated at Wed Jul 23 12:27:31 2025 by rpki-client