$ rpki-client -vvf repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft File: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft (raw, json) Hash identifier: DqIw5QV/Gma+ByFLkeg4HB7w7bIHjzxK4HkWdHejYW4= Subject key identifier: 4C:C7:2D:F8:C5:6A:9D:7F:6E:2A:D0:72:86:F3:8C:09:85:1B:5D:19 Authority key identifier: 0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD Certificate issuer: /CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Certificate serial: 28C93A77DE72912E5B6CC3BED006B70187F7C479 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft Manifest number: 01B0 Signing time: Sun 20 Jul 2025 07:11:28 +0000 Manifest this update: Sun 20 Jul 2025 07:06:28 +0000 Manifest next update: Wed 23 Jul 2025 08:22:28 +0000 Files and hashes: 1: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: k4bVgZQwwhwXyEq21/fgsjgZLJvFrNFPkmTEg/UKHTM=) 2: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl (hash: D/B3EJOCFr68QyJveYCuRXOieLKitCZDKEHGmkb8WkY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 08:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c9:3a:77:de:72:91:2e:5b:6c:c3:be:d0:06:b7:01:87:f7:c4:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Validity Not Before: Jul 20 07:06:28 2025 GMT Not After : Jul 23 08:22:28 2025 GMT Subject: CN=4CC72DF8C56A9D7F6E2AD07286F38C09851B5D19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a9:ae:ac:b4:23:c9:8d:03:f0:d1:8c:bc:45: 01:d5:22:3c:aa:44:db:26:f0:4d:0b:28:0a:c1:37: 7f:c3:57:8d:b3:ed:10:5b:ef:14:d9:61:82:58:ef: 95:4f:7d:ed:6b:43:3d:bd:a8:9a:28:a8:80:4b:ca: d6:a8:e5:54:8c:f1:aa:e6:04:41:b1:39:98:70:74: 57:6b:86:18:38:36:c7:49:b4:ad:ee:53:5e:bb:53: 11:14:46:b5:f1:af:a1:c3:9c:a9:17:bc:de:7d:65: 57:8d:27:e9:b1:2b:41:e4:e0:dd:b5:6b:3d:88:71: aa:ce:f2:3f:59:7f:0d:45:30:d7:a0:07:9c:3c:bd: 99:1f:aa:15:06:4a:b2:69:1f:8d:ad:5b:30:13:be: 5d:3f:e0:79:9a:f1:d3:dc:53:b1:61:30:56:cc:81: 6f:cc:01:cd:10:12:ec:62:d8:99:be:28:83:ee:4d: cd:00:af:1d:19:49:62:16:e5:0c:42:dd:60:92:67: 6f:b4:f7:8c:6b:b7:78:95:ac:a2:4c:4e:f0:80:65: da:2f:2a:2b:9d:33:38:97:66:1d:0c:22:ec:4d:2b: 89:53:cb:d9:3e:da:a1:4f:29:94:91:db:b4:70:20: de:35:7c:4f:44:59:9f:df:70:89:87:98:5b:15:6b: d2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C7:2D:F8:C5:6A:9D:7F:6E:2A:D0:72:86:F3:8C:09:85:1B:5D:19 X509v3 Authority Key Identifier: keyid:0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:83:d2:f2:fa:fc:51:af:ce:f7:0b:cf:8c:69:7b:3d:45:b6: a0:1c:6b:b2:c1:31:6e:59:e9:e8:4d:60:cb:0b:cd:dc:a3:48: b7:f8:ac:09:e6:d7:76:46:9a:14:1d:93:05:5d:6a:a0:5b:27: 65:79:d6:db:b0:93:02:c8:27:55:0f:6c:9d:5e:04:ae:6c:16: 37:3f:d2:b9:ae:ce:35:86:a1:74:82:67:ee:8c:a4:0a:96:9e: 60:c4:a6:80:c7:4b:1f:d4:36:8e:45:3c:19:a3:50:45:06:2c: a5:eb:45:4a:c9:8a:aa:3c:f4:42:2f:dd:79:79:8b:c0:af:ab: ab:78:ff:6e:e3:a8:69:b3:d2:50:5d:69:a5:a1:77:21:40:d5: 73:e2:e9:8b:6f:11:0a:e0:e7:8f:36:f0:b6:c6:43:bd:de:78: 68:94:6a:30:58:a3:ee:ae:b9:cd:c3:2b:0f:d8:2d:e5:5d:7b: 7f:69:f0:22:81:58:fa:53:75:39:3f:4a:8d:e6:02:c6:28:c2: 23:78:62:7c:01:4b:ca:9d:ef:e5:65:4b:ef:7c:c1:f2:b7:18: 61:c8:ac:1b:d1:2d:2f:a6:86:1d:3f:14:35:46:6a:16:f6:3c: 51:da:80:a7:40:0e:28:99:5f:94:68:6b:23:be:e3:4c:75:73: b6:bc:4a:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKMk6d95ykS5bbMO+0Aa3AYf3xHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4 NUJGQURGRDAeFw0yNTA3MjAwNzA2MjhaFw0yNTA3MjMwODIyMjhaMDMxMTAvBgNV BAMTKDRDQzcyREY4QzU2QTlEN0Y2RTJBRDA3Mjg2RjM4QzA5ODUxQjVEMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbqa6stCPJjQPw0Yy8RQHVIjyq RNsm8E0LKArBN3/DV42z7RBb7xTZYYJY75VPfe1rQz29qJooqIBLytao5VSM8arm BEGxOZhwdFdrhhg4NsdJtK3uU167UxEURrXxr6HDnKkXvN59ZVeNJ+mxK0Hk4N21 az2IcarO8j9Zfw1FMNegB5w8vZkfqhUGSrJpH42tWzATvl0/4Hma8dPcU7FhMFbM gW/MAc0QEuxi2Jm+KIPuTc0Arx0ZSWIW5QxC3WCSZ2+094xrt3iVrKJMTvCAZdov KiudMziXZh0MIuxNK4lTy9k+2qFPKZSR27RwIN41fE9EWZ/fcImHmFsVa9LVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTMct+MVqnX9uKtByhvOMCYUbXRkwHwYDVR0j BBgwFoAUCh38tKQ4YeSnG81kV5IAVIW/rf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODVjYmQ5NS01NzRmLTQwNWItOGJkZS0wZGRiOWM5YmRkYmEvMC8wQTFERkNCNEE0 Mzg2MUU0QTcxQkNENjQ1NzkyMDA1NDg1QkZBREZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4NUJG QURGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAw NTQ4NUJGQURGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuD0vL6/FGvzvcLz4xpez1FtqAca7LBMW5Z 6ehNYMsLzdyjSLf4rAnm13ZGmhQdkwVdaqBbJ2V51tuwkwLIJ1UPbJ1eBK5sFjc/ 0rmuzjWGoXSCZ+6MpAqWnmDEpoDHSx/UNo5FPBmjUEUGLKXrRUrJiqo89EIv3Xl5 i8Cvq6t4/27jqGmz0lBdaaWhdyFA1XPi6YtvEQrg54828LbGQ73eeGiUajBYo+6u uc3DKw/YLeVde39p8CKBWPpTdTk/So3mAsYowiN4YnwBS8qd7+VlS+98wfK3GGHI rBvRLS+mhh0/FDVGahb2PFHagKdADiiZX5RoayO+40x1c7a8SnE= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:47 2025 by rpki-client