$ rpki-client -vvf repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft File: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft (raw, json) Hash identifier: oboylbJWHkAQQhxbbH1Xzh1aSiYNYv09Zx6hBzeloXY= Subject key identifier: C7:8D:37:0F:69:48:1B:A4:D7:5C:74:50:A2:C1:6F:64:3B:5E:73:7F Authority key identifier: 0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C Certificate issuer: /CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Certificate serial: 5299296C6E53D3431FF9E29A4E11FDA3B00414EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft Manifest number: 04F6 Signing time: Thu 24 Jul 2025 10:41:15 +0000 Manifest this update: Thu 24 Jul 2025 10:36:15 +0000 Manifest next update: Sun 27 Jul 2025 14:44:15 +0000 Files and hashes: 1: 3130332e37372e3135362e302f32342d3234203d3e20313530393432.roa (hash: mutFIy9cyMdV34tHn/8oq/u/DLJVfOqwJjG4+C2iVbI=) 2: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl (hash: uI8A+sl/j/99soPXVGIQHRE9QPT8J/su57DztM0nJ6E=) 3: 323430373a396338303a3a2f33322d3438203d3e20313335343834.roa (hash: PjdoU1IlaOBuAqcQYAfTUBsBWxQvsuLv55cXKjpLDcw=) 4: 3130332e37372e3135392e302f32342d3234203d3e20313530393432.roa (hash: loCe/wiZD3uLK0lxj/ON/hC7aF16TlJ0k6a7aHCbdJk=) 5: 3130332e37372e3135372e302f32342d3234203d3e20313530393432.roa (hash: 3IbW6k7SAGrr4pbFBGvz2rrnQK3BJBcsh2+owUjptuk=) 6: 3130332e37372e3135382e302f32342d3234203d3e20313530393432.roa (hash: t8s5ystlDMfZCpSFPrSjj+O0ZGC5ZqPSgcrBHxoO7nw=) 7: 3130332e37372e3135362e302f32322d3234203d3e20313530393432.roa (hash: xsKvhGKuMBIEnxPyQJ6c1MbwsbCuaDw/dOSB6iinnF8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:99:29:6c:6e:53:d3:43:1f:f9:e2:9a:4e:11:fd:a3:b0:04:14:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Validity Not Before: Jul 24 10:36:15 2025 GMT Not After : Jul 27 14:44:15 2025 GMT Subject: CN=C78D370F69481BA4D75C7450A2C16F643B5E737F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:d7:e5:2b:0c:b6:eb:23:9d:33:90:c3:0d:17: 6c:c6:c9:5c:b8:38:62:1d:04:b8:09:69:df:87:58: 31:3b:90:92:62:e2:2a:a7:af:60:12:4d:93:b9:32: e7:f0:26:29:1e:a9:8b:07:e4:a7:c5:0b:22:52:39: 79:59:e0:f2:84:4f:f1:5f:b9:41:06:0e:be:b9:13: 6a:9e:c0:7b:a9:79:66:d6:84:76:52:69:07:2d:47: 55:6f:b5:68:23:38:9b:79:0f:45:cf:52:b9:ac:f2: 32:c4:c3:19:04:c8:35:9d:37:78:ad:22:ec:89:60: 04:44:69:28:c9:b2:73:1c:7b:64:1d:10:f1:4d:62: 2c:49:55:ec:a8:c0:91:15:a2:de:19:bc:e5:0d:89: 50:b2:7c:1c:3b:2d:e7:73:e1:8d:64:8b:bd:5a:c0: 23:56:50:3a:87:8b:91:73:e3:e0:5c:95:c0:e9:fc: 9f:0f:b0:c1:91:4b:fa:c6:eb:09:f4:c6:95:0c:d3: b8:15:c8:40:75:a9:45:cf:5a:e7:c5:f3:cf:56:38: 75:b9:13:88:07:d7:aa:38:86:37:c6:41:1e:ce:ac: ca:01:0d:a8:ca:cd:d9:3a:b6:22:dc:c1:47:32:a7: f4:49:34:c5:a7:55:51:3d:c0:57:77:a2:f0:ef:84: 04:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8D:37:0F:69:48:1B:A4:D7:5C:74:50:A2:C1:6F:64:3B:5E:73:7F X509v3 Authority Key Identifier: keyid:0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:09:53:93:d8:6c:97:39:03:3f:22:84:36:17:27:b4:c0:b0: 40:02:cc:ae:b0:be:84:e8:88:91:22:4b:ab:93:aa:1b:a5:60: e7:6a:4a:53:ed:59:0c:62:6d:50:06:a7:99:b3:04:42:dc:63: 0c:cc:f1:a4:3f:fb:79:3f:9d:b9:7e:92:e1:33:36:7e:61:0f: 2e:16:d3:c5:18:90:73:8c:3c:c7:76:d2:18:4c:8b:12:88:89: 03:d0:c6:c3:7d:4a:dc:b7:ae:0a:b0:ac:87:54:d8:76:e0:dc: 65:48:ef:2b:a5:0a:7c:90:76:90:48:57:70:9d:c8:1a:ce:59: 58:9b:95:d9:cf:a5:63:97:91:68:a2:ea:65:d7:7c:f6:9e:b8: f0:6f:ff:c0:36:35:2e:43:d4:53:c9:f0:f3:ea:48:5d:8e:5e: 65:e0:d1:87:a6:49:b0:c1:22:cb:d5:12:c1:13:73:64:69:83: 46:5b:81:d1:93:08:a3:7e:8d:15:8f:88:12:00:f6:fa:36:df: ef:a8:7f:68:7e:ac:27:2c:e6:15:8e:4f:9b:ca:e6:2f:8d:74: f4:6a:e0:f0:11:23:cf:0c:04:d5:72:47:33:d7:11:4f:bc:e1: 76:9b:61:62:50:28:06:73:4d:d7:da:44:61:c4:a0:55:03:3c: 9b:f8:ab:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUpkpbG5T00Mf+eKaThH9o7AEFO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5 Nzk3RUE2QzAeFw0yNTA3MjQxMDM2MTVaFw0yNTA3MjcxNDQ0MTVaMDMxMTAvBgNV BAMTKEM3OEQzNzBGNjk0ODFCQTRENzVDNzQ1MEEyQzE2RjY0M0I1RTczN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD41+UrDLbrI50zkMMNF2zGyVy4 OGIdBLgJad+HWDE7kJJi4iqnr2ASTZO5MufwJikeqYsH5KfFCyJSOXlZ4PKET/Ff uUEGDr65E2qewHupeWbWhHZSaQctR1VvtWgjOJt5D0XPUrms8jLEwxkEyDWdN3it IuyJYAREaSjJsnMce2QdEPFNYixJVeyowJEVot4ZvOUNiVCyfBw7Ledz4Y1ki71a wCNWUDqHi5Fz4+BclcDp/J8PsMGRS/rG6wn0xpUM07gVyEB1qUXPWufF889WOHW5 E4gH16o4hjfGQR7OrMoBDajKzdk6tiLcwUcyp/RJNMWnVVE9wFd3ovDvhAQJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx403D2lIG6TXXHRQosFvZDtec38wHwYDVR0j BBgwFoAUDoY3wj/X/Rq/kbAl5IBAkJeX6mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzNmMjI4OC04OGNmLTRkMmItYmJhNi1hMDNkZDVmODM3NjEvMC8wRTg2MzdDMjNG RDdGRDFBQkY5MUIwMjVFNDgwNDA5MDk3OTdFQTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5Nzk3 RUE2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWMzZjIyODgtODhjZi00ZDJiLWJi YTYtYTAzZGQ1ZjgzNzYxLzAvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQw OTA5Nzk3RUE2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUJU5PYbJc5Az8ihDYXJ7TAsEACzK6wvoTo iJEiS6uTqhulYOdqSlPtWQxibVAGp5mzBELcYwzM8aQ/+3k/nbl+kuEzNn5hDy4W 08UYkHOMPMd20hhMixKIiQPQxsN9Sty3rgqwrIdU2Hbg3GVI7yulCnyQdpBIV3Cd yBrOWVibldnPpWOXkWii6mXXfPaeuPBv/8A2NS5D1FPJ8PPqSF2OXmXg0YemSbDB IsvVEsETc2Rpg0ZbgdGTCKN+jRWPiBIA9vo23++of2h+rCcs5hWOT5vK5i+NdPRq 4PARI88MBNVyRzPXEU+84XabYWJQKAZzTdfaRGHEoFUDPJv4q5M= -----END CERTIFICATE-----Generated at Sat Jul 26 07:43:59 2025 by rpki-client