$ rpki-client -vvf repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft File: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft (raw, json) Hash identifier: eKRuH/5B6UIf8NL5P8j85CBSVrcofRYYmGqRkewrnjU= Subject key identifier: E7:99:50:73:ED:C1:C2:B7:F6:58:65:DF:E7:0C:D1:46:A2:93:26:77 Authority key identifier: 0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C Certificate issuer: /CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C Certificate serial: 17DA1FDD8AC8CBAA67B84192495819531075EFA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft Manifest number: 0121 Signing time: Sun 20 Jul 2025 14:51:44 +0000 Manifest this update: Sun 20 Jul 2025 14:46:44 +0000 Manifest next update: Wed 23 Jul 2025 16:35:44 +0000 Files and hashes: 1: 3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa (hash: zSZcK2ezC0OwcIoirCwbw8lg34i7IQmCM/PoAclIbTc=) 2: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl (hash: JoLVUG1t4DfXEkdFCbjKt2i+OBWM4SmqpauUm34e4WE=) 3: 323030313a6466303a663963303a3a2f34382d3438203d3e20313439393037.roa (hash: /A4c0t6Y98cg2lIq++5SQTiV0ECjCxcXz8yePuUy48U=) 4: 3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa (hash: /ZMRp/k5nyna7+OV16C6wftA6bpNJZQ65/zvr/LPUR4=) 5: 3130332e3139302e3131332e302f32342d3234203d3e20313439393037.roa (hash: 6BP6Wg9K2CydFqVw55iYNyq05rAdRjLr1zk9t4b5GKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:da:1f:dd:8a:c8:cb:aa:67:b8:41:92:49:58:19:53:10:75:ef:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C Validity Not Before: Jul 20 14:46:44 2025 GMT Not After : Jul 23 16:35:44 2025 GMT Subject: CN=E7995073EDC1C2B7F65865DFE70CD146A2932677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b8:13:3c:41:17:ef:3a:a6:12:33:0c:09:50: f8:42:e6:58:1e:1c:41:b1:a5:85:99:b2:dd:53:cf: 60:63:67:05:95:51:1f:9c:04:0e:91:a9:25:7d:cd: 57:ba:6c:7c:31:e2:c7:a2:e0:85:f2:11:81:0f:58: f2:f7:9a:2b:5f:96:a9:b8:4e:52:66:26:dc:4b:98: 5f:71:c9:ed:b1:3d:11:09:95:34:64:49:66:eb:f2: bf:82:60:28:19:ea:03:5d:3f:b0:ee:9d:f9:50:12: e3:82:9b:a4:2e:4c:76:f0:0f:30:17:73:63:a7:52: 4b:43:04:9a:16:4e:6a:08:1e:ed:f7:a2:06:b9:ef: 28:5f:97:32:72:1f:a5:1b:d7:f1:5a:fe:ed:44:04: 23:92:c9:78:2b:58:b2:41:ae:ec:81:90:e4:69:3d: 16:2c:24:de:2b:1e:be:e3:e6:43:18:11:a8:5b:cb: 85:a3:b2:ae:c5:a1:ec:5b:68:51:71:94:d4:c6:54: b0:42:8b:cc:88:27:e6:b5:ac:97:c5:32:51:8c:5e: c1:fc:1f:e0:e3:69:ed:ce:ee:1c:b0:a2:39:88:40: 88:80:df:be:0b:f4:04:c5:d0:79:9a:3a:e8:88:6e: a9:2a:65:68:5b:49:d9:4e:f5:e8:f6:64:90:41:33: 36:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:99:50:73:ED:C1:C2:B7:F6:58:65:DF:E7:0C:D1:46:A2:93:26:77 X509v3 Authority Key Identifier: keyid:0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:a6:41:16:cb:1e:92:ec:1a:6a:21:6e:d9:e7:61:ba:16:37: 4b:94:00:45:95:10:5e:7f:c7:6b:ad:9d:91:a8:9b:a1:80:16: 6d:44:19:e4:f6:00:5c:1c:96:67:39:da:31:95:50:9e:7e:c7: 1a:61:e4:1a:c8:aa:23:c7:1b:fd:ef:6c:50:58:c2:77:cc:c8: 71:17:c7:10:46:33:5c:41:1b:89:40:68:1f:15:30:48:12:b9: 38:4d:d5:13:8f:e3:4b:5d:66:8f:a6:db:15:ec:cf:d4:4c:1f: 6a:9d:8a:71:7d:35:8a:02:81:de:4b:37:38:2c:d0:cb:c8:03: a8:05:da:61:aa:09:50:9d:b9:41:0e:e8:b1:d6:f2:6e:71:a8: 23:50:5f:ec:11:21:b1:8d:e2:e0:58:3a:77:f6:32:b8:98:78: 93:40:8f:91:69:1b:4d:aa:04:85:9f:bf:2c:76:2d:28:c1:7f: d9:fb:8b:6c:09:d3:df:13:f2:2e:34:70:54:8f:25:e5:b1:7a: 22:11:9a:f0:20:97:c6:92:f1:09:6b:28:99:71:5b:97:b7:cb: c3:75:fa:58:52:48:2a:17:a5:63:b4:2b:cb:d2:f6:b0:64:51: c1:94:9c:16:64:77:5a:a1:6e:a7:62:bd:d6:2e:8b:4a:39:bf: 6c:2e:b4:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF9of3YrIy6pnuEGSSVgZUxB176cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBBQ0RC N0UwQkEwQzAeFw0yNTA3MjAxNDQ2NDRaFw0yNTA3MjMxNjM1NDRaMDMxMTAvBgNV BAMTKEU3OTk1MDczRURDMUMyQjdGNjU4NjVERkU3MENEMTQ2QTI5MzI2NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyuBM8QRfvOqYSMwwJUPhC5lge HEGxpYWZst1Tz2BjZwWVUR+cBA6RqSV9zVe6bHwx4sei4IXyEYEPWPL3mitflqm4 TlJmJtxLmF9xye2xPREJlTRkSWbr8r+CYCgZ6gNdP7DunflQEuOCm6QuTHbwDzAX c2OnUktDBJoWTmoIHu33oga57yhflzJyH6Ub1/Fa/u1EBCOSyXgrWLJBruyBkORp PRYsJN4rHr7j5kMYEahby4Wjsq7FoexbaFFxlNTGVLBCi8yIJ+a1rJfFMlGMXsH8 H+Djae3O7hywojmIQIiA374L9ATF0HmaOuiIbqkqZWhbSdlO9ej2ZJBBMzYHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU55lQc+3Bwrf2WGXf5wzRRqKTJncwHwYDVR0j BBgwFoAUDOHhEUbiUdDNUr2DehoKzbfgugwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDUxNmE3YS00MTk1LTQ0YjMtYTI0ZS1jZjhlZDU3OGQ3OTEvMC8wQ0UxRTExMTQ2 RTI1MUQwQ0Q1MkJEODM3QTFBMEFDREI3RTBCQTBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBBQ0RCN0Uw QkEwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjA1MTZhN2EtNDE5NS00NGIzLWEy NGUtY2Y4ZWQ1NzhkNzkxLzAvMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBB Q0RCN0UwQkEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMamQRbLHpLsGmohbtnnYboWN0uUAEWVEF5/ x2utnZGom6GAFm1EGeT2AFwclmc52jGVUJ5+xxph5BrIqiPHG/3vbFBYwnfMyHEX xxBGM1xBG4lAaB8VMEgSuThN1ROP40tdZo+m2xXsz9RMH2qdinF9NYoCgd5LNzgs 0MvIA6gF2mGqCVCduUEO6LHW8m5xqCNQX+wRIbGN4uBYOnf2MriYeJNAj5FpG02q BIWfvyx2LSjBf9n7i2wJ098T8i40cFSPJeWxeiIRmvAgl8aS8QlrKJlxW5e3y8N1 +lhSSCoXpWO0K8vS9rBkUcGUnBZkd1qhbqdivdYui0o5v2wutHM= -----END CERTIFICATE-----Generated at Mon Jul 21 23:17:22 2025 by rpki-client