$ rpki-client -vvf repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft File: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft (raw, json) Hash identifier: eXQYvcc5mjlMbHcyaCt5HxMWYSwXn0uOc7Evis+Gg04= Subject key identifier: 4C:2C:DC:27:BA:80:87:68:A8:7C:E1:EB:29:51:43:D2:EA:B3:E1:33 Authority key identifier: 0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E Certificate issuer: /CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E Certificate serial: 64F4F7F284C81C2457B2FB5E27B05B6FDBBA4285 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft Manifest number: 0505 Signing time: Sun 07 Sep 2025 10:40:46 +0000 Manifest this update: Sun 07 Sep 2025 10:35:46 +0000 Manifest next update: Wed 10 Sep 2025 16:38:46 +0000 Files and hashes: 1: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl (hash: g1I12EWBKDMyqrDedc7Xas8Q2qXxAsA8836zrkCYwU4=) 2: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (hash: /0ivdWgJqnJaSVnUB+9OuvpQlcxcSIK1E90K9ZECaAA=) 3: 323030313a6466303a3232393a3a2f34382d3438203d3e20313331373738.roa (hash: Kw/2sJDovbqcLamhNn36qpz8RozjhJRdtUEEKJ4rTNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f4:f7:f2:84:c8:1c:24:57:b2:fb:5e:27:b0:5b:6f:db:ba:42:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E Validity Not Before: Sep 7 10:35:46 2025 GMT Not After : Sep 10 16:38:46 2025 GMT Subject: CN=4C2CDC27BA808768A87CE1EB295143D2EAB3E133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3b:91:87:91:6f:7f:06:ce:26:3d:59:a9:a5: c4:cd:7c:c8:08:9c:4a:e8:c9:cc:d8:df:3b:c4:0c: b2:42:f4:83:ed:42:bb:f8:6d:f5:8a:a6:f1:ef:86: 9c:b1:c9:25:fb:ee:53:86:94:c0:e2:fb:23:9f:a2: 29:f8:67:c7:92:57:d5:e9:95:fc:b7:11:71:17:38: 20:e7:4f:11:61:97:be:5e:79:a4:d2:93:48:e8:43: 0a:8a:e5:a0:df:18:38:82:23:5e:13:ab:d2:66:55: 89:eb:bf:50:65:92:ee:b3:3c:8a:b8:48:28:e7:6e: fb:60:6e:d3:e9:6e:3e:67:7a:f1:77:f0:af:5c:95: 24:6c:42:f4:21:5a:ad:3e:a2:80:31:15:b6:d0:f0: de:e7:37:6a:37:a1:56:90:f5:6b:fe:ab:73:a0:36: 12:db:c1:f0:15:c8:fb:ad:7f:08:d7:9e:d8:8c:c3: 08:7b:f3:d1:77:a6:38:94:3c:12:ae:d4:0b:80:35: c4:41:7e:6c:35:ff:0a:bd:cc:33:f0:ea:13:d6:37: 7e:7e:4b:95:ee:53:7b:fa:56:ff:f1:4f:19:54:60: 6d:9d:6e:20:bf:bb:69:05:88:2c:06:85:a0:51:21: 22:ec:ca:a5:15:92:f9:b8:68:f7:7f:53:56:34:d0: 9c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2C:DC:27:BA:80:87:68:A8:7C:E1:EB:29:51:43:D2:EA:B3:E1:33 X509v3 Authority Key Identifier: keyid:0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:2e:7f:8c:10:91:41:c8:09:3c:5b:dc:90:a9:80:62:72:2a: af:73:4b:9e:a3:58:68:5c:71:42:82:66:01:45:d2:3d:55:85: 6e:02:13:fa:cb:9b:1c:c1:a8:60:fe:d6:ba:a8:6d:f7:d7:af: a0:c6:fb:5a:2c:f1:60:26:93:2a:aa:a9:4a:1d:24:5d:a3:b4: 34:5f:83:e0:2c:cf:0d:ed:3c:4f:be:d8:9f:28:e1:94:0e:36: 1f:3e:e7:72:22:77:b7:db:bc:ab:2c:3d:d6:ec:e9:41:ba:09: 70:1c:59:93:91:be:d8:aa:9d:bb:9f:1a:df:08:26:2e:30:5a: 05:a1:99:63:3e:e9:e8:85:e6:40:66:20:5e:da:da:3b:9e:bf: b8:6a:f0:f1:90:b1:d0:81:ac:9b:15:1e:48:55:29:7f:e0:c3: 50:83:12:35:8b:55:d3:e5:4d:50:2a:c3:3c:d0:d0:46:05:f7: c7:98:d8:5c:df:50:7f:35:9a:42:c4:03:fc:28:f8:8d:80:99: c8:65:78:ea:1c:a4:36:03:11:da:0b:33:c3:cc:b0:9d:01:82: c0:26:eb:ec:c6:9f:d4:61:ec:c2:cf:69:f8:e1:e6:47:1e:71: 7d:22:08:52:80:d1:00:14:da:a9:77:c0:9c:cd:83:6b:4c:0d: 4f:ae:51:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZPT38oTIHCRXsvteJ7Bbb9u6QoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2 QUI1Njk1RTAeFw0yNTA5MDcxMDM1NDZaFw0yNTA5MTAxNjM4NDZaMDMxMTAvBgNV BAMTKDRDMkNEQzI3QkE4MDg3NjhBODdDRTFFQjI5NTE0M0QyRUFCM0UxMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVO5GHkW9/Bs4mPVmppcTNfMgI nEroyczY3zvEDLJC9IPtQrv4bfWKpvHvhpyxySX77lOGlMDi+yOfoin4Z8eSV9Xp lfy3EXEXOCDnTxFhl75eeaTSk0joQwqK5aDfGDiCI14Tq9JmVYnrv1Blku6zPIq4 SCjnbvtgbtPpbj5nevF38K9clSRsQvQhWq0+ooAxFbbQ8N7nN2o3oVaQ9Wv+q3Og NhLbwfAVyPutfwjXntiMwwh789F3pjiUPBKu1AuANcRBfmw1/wq9zDPw6hPWN35+ S5XuU3v6Vv/xTxlUYG2dbiC/u2kFiCwGhaBRISLsyqUVkvm4aPd/U1Y00JwfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTCzcJ7qAh2iofOHrKVFD0uqz4TMwHwYDVR0j BBgwFoAUD/5fGfvrVIn/zN83/v4KDGq1aV4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmFlNThhYy01OTE3LTQwNjktOWE2Yy04M2RjMWJhMzIxMjYvMC8wRkZFNUYxOUZC RUI1NDg5RkZDQ0RGMzdGRUZFMEEwQzZBQjU2OTVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2QUI1 Njk1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJhZTU4YWMtNTkxNy00MDY5LTlh NmMtODNkYzFiYTMyMTI2LzAvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBB MEM2QUI1Njk1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMEuf4wQkUHICTxb3JCpgGJyKq9zS56jWGhc cUKCZgFF0j1VhW4CE/rLmxzBqGD+1rqobffXr6DG+1os8WAmkyqqqUodJF2jtDRf g+Aszw3tPE++2J8o4ZQONh8+53Iid7fbvKssPdbs6UG6CXAcWZORvtiqnbufGt8I Ji4wWgWhmWM+6eiF5kBmIF7a2juev7hq8PGQsdCBrJsVHkhVKX/gw1CDEjWLVdPl TVAqwzzQ0EYF98eY2FzfUH81mkLEA/wo+I2AmchleOocpDYDEdoLM8PMsJ0BgsAm 6+zGn9Rh7MLPafjh5kcecX0iCFKA0QAU2ql3wJzNg2tMDU+uUfE= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:14 2025 by rpki-client