$ rpki-client -vvf repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft File: 0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft (raw, json) Hash identifier: 8aAJ1WSLYXr5b91fk432at9GtR/bTTEQWXeFZRKoHPg= Subject key identifier: AF:21:AC:74:BA:3C:F4:5E:5F:B7:08:64:E3:8D:6C:5F:10:FF:92:69 Authority key identifier: 0A:1D:E6:FD:88:BB:9E:F4:E3:49:C1:77:4D:A9:26:E4:23:26:47:96 Certificate issuer: /CN=0A1DE6FD88BB9EF4E349C1774DA926E423264796 Certificate serial: 4AFD36ECFCBCD267EC3AAB7C5BB5896DB42132D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft Manifest number: 04F3 Signing time: Thu 24 Jul 2025 05:52:04 +0000 Manifest this update: Thu 24 Jul 2025 05:47:04 +0000 Manifest next update: Sun 27 Jul 2025 07:26:04 +0000 Files and hashes: 1: 0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl (hash: ZuHmuWDPtYWN8TF03ba808fLJUr5x+xFAgQh+jbQhg0=) 2: 3130332e3135332e3133312e302f32342d3234203d3e20313430343633.roa (hash: qjM6zOskUgB5aVouJZ8bw8PRtPD9BsEaccD1Oe43xX4=) 3: 323030313a6466343a343938303a3a2f34382d3438203d3e20313430343633.roa (hash: ALvwx2swtpbz8NGxp51wtfjrJRECE+XKLqFSLUrMbz4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 07:26:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:fd:36:ec:fc:bc:d2:67:ec:3a:ab:7c:5b:b5:89:6d:b4:21:32:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DE6FD88BB9EF4E349C1774DA926E423264796 Validity Not Before: Jul 24 05:47:04 2025 GMT Not After : Jul 27 07:26:04 2025 GMT Subject: CN=AF21AC74BA3CF45E5FB70864E38D6C5F10FF9269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:bb:68:94:00:a5:f3:17:8e:61:ef:57:19:f0: 73:7d:b7:a0:26:e4:cd:f3:4f:c4:4d:cc:3a:71:cc: b1:28:56:3b:58:22:96:0e:55:d4:5b:8d:9a:6b:2c: 1c:c3:e2:e3:6a:7c:7d:f8:db:e8:e8:13:f9:85:cd: 37:36:33:f9:b5:7c:d4:9e:78:ca:06:2f:73:5f:02: 62:cc:a8:13:bd:78:e9:e3:e7:67:5d:12:cc:d4:00: a5:0d:0e:fd:52:c5:75:9e:42:21:cf:ed:4f:27:e5: c1:25:38:5c:ab:41:7e:07:79:62:89:d4:aa:39:f7: ba:bc:62:ac:e2:1d:ac:6e:a0:22:f5:69:a6:10:15: 2e:b2:1a:8a:1a:2d:19:2b:a9:07:0a:8c:7f:65:15: 5a:d8:bf:bf:8b:33:8c:09:33:6f:17:28:ee:26:1a: eb:e1:4c:ad:46:a8:d2:5f:74:c7:8e:e4:9c:a6:3a: a1:1c:1d:c2:84:73:95:7e:63:0f:f1:1c:42:9f:22: ad:25:66:06:15:d8:0a:5f:7b:89:2a:a7:bb:95:9e: 0b:0f:eb:5b:11:87:8b:71:b7:11:64:c1:84:03:51: cb:6f:57:c3:6a:90:8b:cd:7d:78:8f:04:b4:f1:07: b1:70:d5:f6:6e:83:ca:bc:12:90:ae:52:da:55:8c: 5f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:21:AC:74:BA:3C:F4:5E:5F:B7:08:64:E3:8D:6C:5F:10:FF:92:69 X509v3 Authority Key Identifier: keyid:0A:1D:E6:FD:88:BB:9E:F4:E3:49:C1:77:4D:A9:26:E4:23:26:47:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:90:e9:4f:e2:6d:ce:12:e3:a0:e8:51:ab:79:18:7b:96:03: e6:e4:1b:1e:ed:51:56:e6:5f:26:a7:a6:4d:8b:db:ec:97:a5: 6a:9e:58:34:32:52:08:30:57:79:19:7e:5c:91:be:98:ef:c5: f3:fa:18:8e:25:a8:f1:74:69:6a:18:71:e3:62:6e:2a:8a:12: 06:91:f1:29:12:9a:06:a6:42:46:9c:0c:7c:56:15:00:b7:27: 73:87:c9:bd:a7:de:51:c3:3c:b4:ef:75:45:12:df:fd:64:98: f0:ad:a8:2c:e4:a6:80:36:e5:55:2f:4a:08:17:47:c4:8d:f4: 07:de:a6:fe:c6:49:7c:14:df:ee:45:24:a1:89:40:16:77:db: 9f:5c:a0:42:51:ee:0a:e0:80:de:92:ea:2e:1e:da:ec:d1:98: 21:af:d2:2e:fb:68:d8:36:cf:76:fa:8d:32:db:c5:5a:7e:7b: 1a:e7:29:9d:10:5a:4c:c6:21:61:bc:52:7c:ca:c7:ed:93:f6: a3:d7:3b:e9:7d:9e:e2:d6:b2:05:7d:de:a1:76:25:fd:95:67: 03:2f:f8:20:ae:dd:54:5f:10:c8:b6:80:60:89:d1:a8:2e:69: 7c:1a:df:1b:b9:b0:1d:f1:a1:0f:32:8a:a6:81:19:7e:0e:26: 1c:cd:0b:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSv027Py80mfsOqt8W7WJbbQhMtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2RTQy MzI2NDc5NjAeFw0yNTA3MjQwNTQ3MDRaFw0yNTA3MjcwNzI2MDRaMDMxMTAvBgNV BAMTKEFGMjFBQzc0QkEzQ0Y0NUU1RkI3MDg2NEUzOEQ2QzVGMTBGRjkyNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuu2iUAKXzF45h71cZ8HN9t6Am 5M3zT8RNzDpxzLEoVjtYIpYOVdRbjZprLBzD4uNqfH342+joE/mFzTc2M/m1fNSe eMoGL3NfAmLMqBO9eOnj52ddEszUAKUNDv1SxXWeQiHP7U8n5cElOFyrQX4HeWKJ 1Ko597q8YqziHaxuoCL1aaYQFS6yGooaLRkrqQcKjH9lFVrYv7+LM4wJM28XKO4m GuvhTK1GqNJfdMeO5JymOqEcHcKEc5V+Yw/xHEKfIq0lZgYV2Apfe4kqp7uVngsP 61sRh4txtxFkwYQDUctvV8NqkIvNfXiPBLTxB7Fw1fZug8q8EpCuUtpVjF85AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUryGsdLo89F5ftwhk441sXxD/kmkwHwYDVR0j BBgwFoAUCh3m/Yi7nvTjScF3Takm5CMmR5YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTFlMGJkNy0yODFhLTRlYmEtYjk4Yy04MjkzOTMyN2RkZDcvMC8wQTFERTZGRDg4 QkI5RUY0RTM0OUMxNzc0REE5MjZFNDIzMjY0Nzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2RTQyMzI2 NDc5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWExZTBiZDctMjgxYS00ZWJhLWI5 OGMtODI5MzkzMjdkZGQ3LzAvMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2 RTQyMzI2NDc5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+Q6U/ibc4S46DoUat5GHuWA+bkGx7tUVbm Xyanpk2L2+yXpWqeWDQyUggwV3kZflyRvpjvxfP6GI4lqPF0aWoYceNibiqKEgaR 8SkSmgamQkacDHxWFQC3J3OHyb2n3lHDPLTvdUUS3/1kmPCtqCzkpoA25VUvSggX R8SN9Afepv7GSXwU3+5FJKGJQBZ3259coEJR7grggN6S6i4e2uzRmCGv0i77aNg2 z3b6jTLbxVp+exrnKZ0QWkzGIWG8UnzKx+2T9qPXO+l9nuLWsgV93qF2Jf2VZwMv +CCu3VRfEMi2gGCJ0aguaXwa3xu5sB3xoQ8yiqaBGX4OJhzNCwE= -----END CERTIFICATE-----Generated at Thu Jul 24 12:06:43 2025 by rpki-client