$ rpki-client -vvf repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft File: 0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft (raw, json) Hash identifier: yhaysQZPlYSDpGV6q6LQuSIlOJXUOJ6Zrebw4XRRwpM= Subject key identifier: 47:68:D8:3D:B2:28:E8:83:95:C8:A6:36:CC:0C:AC:D8:59:7E:64:FD Authority key identifier: 0A:1D:E6:FD:88:BB:9E:F4:E3:49:C1:77:4D:A9:26:E4:23:26:47:96 Certificate issuer: /CN=0A1DE6FD88BB9EF4E349C1774DA926E423264796 Certificate serial: 6B1379C31C7DB9B090A7EE5928894E128AF9C59A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft Manifest number: 04F2 Signing time: Tue 22 Jul 2025 05:32:05 +0000 Manifest this update: Tue 22 Jul 2025 05:27:05 +0000 Manifest next update: Fri 25 Jul 2025 05:50:05 +0000 Files and hashes: 1: 323030313a6466343a343938303a3a2f34382d3438203d3e20313430343633.roa (hash: ALvwx2swtpbz8NGxp51wtfjrJRECE+XKLqFSLUrMbz4=) 2: 0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl (hash: wvX9cMQTICUi7MOgFMMgg9khU6Lv91Dv7LH2WTLLK7s=) 3: 3130332e3135332e3133312e302f32342d3234203d3e20313430343633.roa (hash: qjM6zOskUgB5aVouJZ8bw8PRtPD9BsEaccD1Oe43xX4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 05:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:13:79:c3:1c:7d:b9:b0:90:a7:ee:59:28:89:4e:12:8a:f9:c5:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DE6FD88BB9EF4E349C1774DA926E423264796 Validity Not Before: Jul 22 05:27:05 2025 GMT Not After : Jul 25 05:50:05 2025 GMT Subject: CN=4768D83DB228E88395C8A636CC0CACD8597E64FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3f:46:1b:a4:5f:72:fd:db:ed:e4:b5:3d:d6: 13:01:38:7a:e2:e7:0b:2d:cd:30:24:46:60:5c:35: b0:d5:ab:62:35:94:42:11:c0:a0:41:19:95:5e:bb: e2:ef:07:d9:1e:14:05:aa:b2:25:d7:4e:70:5e:2e: 7c:f3:61:72:8d:c6:9b:26:e7:08:1b:3a:32:10:61: 98:cc:4e:6e:c6:1a:32:e7:fc:91:dd:03:f6:1c:d4: ef:b6:46:93:11:e2:1e:d5:7c:07:14:83:2e:28:e7: c1:25:66:10:98:93:b9:1a:b5:1b:25:7e:3f:60:e3: 71:76:2b:12:69:c8:e7:fd:50:d1:2c:e4:7c:02:73: 38:71:d6:e2:96:6a:b6:bb:71:51:cf:c1:76:08:70: b4:1e:7c:20:96:ee:43:84:2b:59:55:87:bd:6a:e5: 10:ec:cb:00:81:74:b2:e4:a5:ab:cf:21:bb:59:19: 75:54:88:db:53:35:82:0e:e8:6d:19:02:67:10:d9: 2e:48:c7:98:5f:47:2c:c0:31:09:01:68:3b:b2:07: b2:61:25:b7:b3:e3:cc:08:15:29:4e:0a:c0:15:16: 8d:96:43:02:ff:34:d2:b3:10:7d:e4:e4:4d:85:aa: ba:0c:c8:be:ba:fc:06:c8:14:0c:4d:32:da:d4:0d: f8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:68:D8:3D:B2:28:E8:83:95:C8:A6:36:CC:0C:AC:D8:59:7E:64:FD X509v3 Authority Key Identifier: keyid:0A:1D:E6:FD:88:BB:9E:F4:E3:49:C1:77:4D:A9:26:E4:23:26:47:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:b4:18:64:05:b0:40:e4:fb:fe:ff:c3:79:2c:6e:30:b7:0e: 00:0a:68:61:9b:99:6c:56:fc:03:58:f7:04:aa:ed:54:a8:f9: cb:87:80:19:54:e6:9d:1d:c5:46:d0:6a:d1:8c:33:36:37:67: c7:59:17:9e:ab:a8:23:2c:02:04:ca:ff:e3:57:b3:d9:db:79: 31:94:b4:5a:52:6f:d7:20:7e:a2:fc:8d:11:dd:ed:1a:ab:49: 5f:f8:7c:39:a4:59:0b:99:43:2c:de:bd:23:bf:93:87:ca:e9: b8:84:d0:d7:e9:0b:56:6e:19:97:d3:2f:91:6b:f7:3d:56:a3: 23:f2:52:92:78:c7:77:ae:e7:ba:ca:40:4c:2b:60:30:41:bf: 5e:6b:7e:36:55:7b:b7:85:61:38:e7:7e:7f:24:de:04:2d:06: ca:93:b0:ff:ca:09:1b:36:2e:c2:04:61:77:95:6d:a7:3b:03: a8:5a:35:8e:1e:a7:56:e3:19:a4:fb:22:2d:69:2b:15:3a:b4: 3e:88:5d:be:0c:80:73:61:90:54:10:11:e6:80:67:78:23:8a: 5d:5c:8f:d1:55:33:1d:50:7c:75:f1:7e:01:0e:42:5e:6b:a1: cb:cd:57:dc:63:4e:75:bd:b9:5f:d5:b4:d3:c9:e5:4a:15:4a: 15:28:50:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaxN5wxx9ubCQp+5ZKIlOEor5xZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2RTQy MzI2NDc5NjAeFw0yNTA3MjIwNTI3MDVaFw0yNTA3MjUwNTUwMDVaMDMxMTAvBgNV BAMTKDQ3NjhEODNEQjIyOEU4ODM5NUM4QTYzNkNDMENBQ0Q4NTk3RTY0RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqP0YbpF9y/dvt5LU91hMBOHri 5wstzTAkRmBcNbDVq2I1lEIRwKBBGZVeu+LvB9keFAWqsiXXTnBeLnzzYXKNxpsm 5wgbOjIQYZjMTm7GGjLn/JHdA/Yc1O+2RpMR4h7VfAcUgy4o58ElZhCYk7katRsl fj9g43F2KxJpyOf9UNEs5HwCczhx1uKWara7cVHPwXYIcLQefCCW7kOEK1lVh71q 5RDsywCBdLLkpavPIbtZGXVUiNtTNYIO6G0ZAmcQ2S5Ix5hfRyzAMQkBaDuyB7Jh Jbez48wIFSlOCsAVFo2WQwL/NNKzEH3k5E2FqroMyL66/AbIFAxNMtrUDfi5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR2jYPbIo6IOVyKY2zAys2Fl+ZP0wHwYDVR0j BBgwFoAUCh3m/Yi7nvTjScF3Takm5CMmR5YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTFlMGJkNy0yODFhLTRlYmEtYjk4Yy04MjkzOTMyN2RkZDcvMC8wQTFERTZGRDg4 QkI5RUY0RTM0OUMxNzc0REE5MjZFNDIzMjY0Nzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2RTQyMzI2 NDc5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWExZTBiZDctMjgxYS00ZWJhLWI5 OGMtODI5MzkzMjdkZGQ3LzAvMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2 RTQyMzI2NDc5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGS0GGQFsEDk+/7/w3ksbjC3DgAKaGGbmWxW /ANY9wSq7VSo+cuHgBlU5p0dxUbQatGMMzY3Z8dZF56rqCMsAgTK/+NXs9nbeTGU tFpSb9cgfqL8jRHd7RqrSV/4fDmkWQuZQyzevSO/k4fK6biE0NfpC1ZuGZfTL5Fr 9z1WoyPyUpJ4x3eu57rKQEwrYDBBv15rfjZVe7eFYTjnfn8k3gQtBsqTsP/KCRs2 LsIEYXeVbac7A6haNY4ep1bjGaT7Ii1pKxU6tD6IXb4MgHNhkFQQEeaAZ3gjil1c j9FVMx1QfHXxfgEOQl5rocvNV9xjTnW9uV/VtNPJ5UoVShUoUBQ= -----END CERTIFICATE-----Generated at Wed Jul 23 02:06:19 2025 by rpki-client