$ rpki-client -vvf repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft File: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft (raw, json) Hash identifier: gM3Axd4GbzshGgl95Yu5Jo+FIvow7zsqh4eKZVWstRc= Subject key identifier: F2:6F:6D:DA:E9:6D:F4:5D:4D:07:EE:6A:EE:77:99:51:F6:7F:27:C7 Authority key identifier: 0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 Certificate issuer: /CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Certificate serial: 3CFDE36904E99DD2BD5F6CE73BDFB91EF7712C26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft Manifest number: 036E Signing time: Sun 20 Jul 2025 04:02:10 +0000 Manifest this update: Sun 20 Jul 2025 03:57:10 +0000 Manifest next update: Wed 23 Jul 2025 06:51:10 +0000 Files and hashes: 1: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: 5kmhgTgeSHUwhas6AKT+9HvbtryMe4lzQT0rPZxLy0k=) 2: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl (hash: rCiduyi7m9Hhj4FKU2tCCT2Hvq75yRydzxHsiz9srq8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 06:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:fd:e3:69:04:e9:9d:d2:bd:5f:6c:e7:3b:df:b9:1e:f7:71:2c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Validity Not Before: Jul 20 03:57:10 2025 GMT Not After : Jul 23 06:51:10 2025 GMT Subject: CN=F26F6DDAE96DF45D4D07EE6AEE779951F67F27C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a2:d0:c3:ef:dc:28:77:14:09:4b:bf:fc:ab: a6:e5:0d:b5:a2:b9:da:2a:65:f7:f8:32:e1:ec:d6: e8:83:3f:d4:fe:67:3d:ed:cc:b5:e9:29:b1:82:e9: b4:03:44:10:3e:5f:d7:83:da:2c:f9:93:1d:5d:bb: 9f:0f:de:d5:e2:87:4f:d8:ae:15:86:6d:83:bf:7e: 01:77:b1:01:22:56:aa:c4:4e:9b:bb:1f:98:3d:2f: ab:1b:6c:87:25:95:04:a4:5b:8c:7f:1b:f9:e4:2f: 69:0d:81:e1:df:be:b5:03:3e:10:21:3f:1f:5f:cb: a2:7e:e6:ef:98:a6:55:ed:08:96:1f:af:12:d9:e0: 5c:18:88:cf:16:0b:8b:a6:f6:f0:40:00:2b:a1:9c: 87:f1:c6:b6:d6:92:52:88:c5:a0:72:2b:aa:20:a3: 50:a8:7a:cb:ab:1f:68:33:b0:c0:b9:2b:fe:63:b1: a1:82:0b:2b:05:ff:28:02:68:e2:fb:70:97:c8:8f: 49:4e:07:03:b0:c9:88:f6:ae:21:1e:0f:72:a6:27: 2e:81:e9:73:61:c0:50:ad:96:20:57:a4:41:ea:d9: 87:5e:3d:c9:4a:96:c2:a2:bd:89:fc:34:f4:41:22: 61:71:f1:b3:26:20:8c:50:13:83:68:f7:4a:5e:4d: d4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:6F:6D:DA:E9:6D:F4:5D:4D:07:EE:6A:EE:77:99:51:F6:7F:27:C7 X509v3 Authority Key Identifier: keyid:0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:df:ed:72:8e:2c:0e:3b:44:7d:c5:c5:39:aa:ae:6d:34:4a: e6:70:1e:bd:ee:8e:55:be:fc:29:5a:84:5f:e0:af:3e:16:29: 67:78:65:58:ee:22:8a:23:1b:9b:5c:7b:8c:6b:3a:98:36:30: 82:70:b3:21:90:10:f3:2a:8f:93:f7:01:1a:d7:fc:f3:7a:57: 82:92:32:c0:06:40:4b:2b:2d:aa:a7:d2:42:c5:a6:a0:a0:50: 82:3a:52:bb:10:ea:7e:a9:b9:83:c0:0e:8a:d7:95:cf:55:77: 27:c9:5c:a9:9b:85:69:d7:f6:cb:b1:c1:62:ab:ce:78:88:c0: de:51:0e:d5:14:d9:56:7d:e3:f7:9b:15:67:cc:31:72:90:9c: a0:59:e3:d9:01:3c:de:8d:00:00:b7:2e:0e:5c:84:af:b3:e8: 90:b3:49:b7:ae:22:d8:be:80:ca:01:83:0b:65:1e:4c:2b:cf: 6a:56:7c:7f:01:36:15:3e:8a:6c:dd:f5:4b:06:de:9f:60:3d: 34:6b:74:ee:46:9c:05:f3:d4:d0:54:23:59:76:36:e0:9d:78: 8d:fe:b5:ac:3f:bc:cb:e7:e4:a4:7d:22:dd:8e:7a:9c:c2:70: 1b:0e:36:66:a0:79:e9:30:50:17:29:81:bf:5d:0e:65:f1:17: 40:ca:aa:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPP3jaQTpndK9X2znO9+5HvdxLCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVE Mzc3RkNDMjAeFw0yNTA3MjAwMzU3MTBaFw0yNTA3MjMwNjUxMTBaMDMxMTAvBgNV BAMTKEYyNkY2RERBRTk2REY0NUQ0RDA3RUU2QUVFNzc5OTUxRjY3RjI3QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDotDD79wodxQJS7/8q6blDbWi udoqZff4MuHs1uiDP9T+Zz3tzLXpKbGC6bQDRBA+X9eD2iz5kx1du58P3tXih0/Y rhWGbYO/fgF3sQEiVqrETpu7H5g9L6sbbIcllQSkW4x/G/nkL2kNgeHfvrUDPhAh Px9fy6J+5u+YplXtCJYfrxLZ4FwYiM8WC4um9vBAACuhnIfxxrbWklKIxaByK6og o1CoesurH2gzsMC5K/5jsaGCCysF/ygCaOL7cJfIj0lOBwOwyYj2riEeD3KmJy6B 6XNhwFCtliBXpEHq2YdePclKlsKivYn8NPRBImFx8bMmIIxQE4No90peTdRxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8m9t2ult9F1NB+5q7neZUfZ/J8cwHwYDVR0j BBgwFoAUDxZZvcMRdYRjrTzqI6frXtN3/MIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWIzZmU0NS1iNTg4LTRiYjctYWU5MC05MWY1N2Y1OTNjYjUvMC8wRjE2NTlCREMz MTE3NTg0NjNBRDNDRUEyM0E3RUI1RUQzNzdGQ0MyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVEMzc3 RkNDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDFiM2ZlNDUtYjU4OC00YmI3LWFl OTAtOTFmNTdmNTkzY2I1LzAvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VC NUVEMzc3RkNDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3f7XKOLA47RH3FxTmqrm00SuZwHr3ujlW+ /ClahF/grz4WKWd4ZVjuIoojG5tce4xrOpg2MIJwsyGQEPMqj5P3ARrX/PN6V4KS MsAGQEsrLaqn0kLFpqCgUII6UrsQ6n6puYPADorXlc9VdyfJXKmbhWnX9suxwWKr zniIwN5RDtUU2VZ94/ebFWfMMXKQnKBZ49kBPN6NAAC3Lg5chK+z6JCzSbeuIti+ gMoBgwtlHkwrz2pWfH8BNhU+imzd9UsG3p9gPTRrdO5GnAXz1NBUI1l2NuCdeI3+ taw/vMvn5KR9It2OepzCcBsONmageekwUBcpgb9dDmXxF0DKquU= -----END CERTIFICATE-----Generated at Sun Jul 20 21:55:17 2025 by rpki-client