$ rpki-client -vvf repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft File: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft (raw, json) Hash identifier: d8zoyYsnFe0djVxjtjU9fa0/nmYR0VHQux2CeGGb7pM= Subject key identifier: 41:E0:AF:51:52:C4:B0:6C:77:86:D3:F6:B3:FC:47:1E:0B:0B:0C:F1 Authority key identifier: 0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E Certificate issuer: /CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E Certificate serial: 59BEFDE8EB80CCEC55CFBB3E6554BC0B2A162661 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft Manifest number: 04DB Signing time: Wed 04 Jun 2025 12:40:46 +0000 Manifest this update: Wed 04 Jun 2025 12:35:46 +0000 Manifest next update: Sat 07 Jun 2025 20:24:46 +0000 Files and hashes: 1: 323030313a6466303a3232393a3a2f34382d3438203d3e20313331373738.roa (hash: Kw/2sJDovbqcLamhNn36qpz8RozjhJRdtUEEKJ4rTNg=) 2: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (hash: /0ivdWgJqnJaSVnUB+9OuvpQlcxcSIK1E90K9ZECaAA=) 3: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl (hash: gxJvQTLEWgKznz8XoTPv0MYvPCpcVkFtjVI91sTzdA0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:be:fd:e8:eb:80:cc:ec:55:cf:bb:3e:65:54:bc:0b:2a:16:26:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E Validity Not Before: Jun 4 12:35:46 2025 GMT Not After : Jun 7 20:24:46 2025 GMT Subject: CN=41E0AF5152C4B06C7786D3F6B3FC471E0B0B0CF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:39:e1:b3:dc:bd:fd:c9:f9:db:35:97:54:cf: ef:89:b7:f5:d4:52:ef:9d:c6:8f:c9:b3:40:92:0f: 12:59:77:84:ac:33:f9:43:01:bd:b1:28:46:cc:a0: 7c:38:39:d5:2c:e3:31:25:95:55:b6:bc:fa:f3:23: ef:c6:97:1f:72:90:c8:eb:00:15:dd:83:32:33:ef: 16:ce:ec:ff:71:0f:c8:08:43:bd:15:13:d5:c4:43: 5a:71:9b:21:cf:fd:8f:35:0a:44:7f:b5:d2:28:b2: 9b:d4:e2:99:9f:22:6e:5b:53:8e:de:fd:bf:0b:be: df:a0:72:19:d4:14:94:92:62:88:bc:d1:89:11:de: 75:9c:32:64:e9:ec:e3:f3:b2:41:4a:7d:1f:75:54: 91:a2:c0:a6:b1:0f:ac:2b:b1:3b:da:04:e8:96:af: 0a:d3:ee:9d:09:5d:56:90:9c:af:6d:df:36:52:e1: eb:61:68:8a:4c:bd:00:6c:f4:72:25:c6:2d:88:29: 1d:8c:da:37:a1:21:ce:1c:f9:1b:b2:b7:f0:4a:4d: 9a:33:e9:37:e4:eb:e0:fb:1f:65:82:0d:63:02:31: 28:66:63:d6:52:51:61:4d:87:94:db:2b:df:ee:03: 78:e4:56:c3:da:1e:99:f0:0e:25:c7:52:3c:4c:5c: 88:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E0:AF:51:52:C4:B0:6C:77:86:D3:F6:B3:FC:47:1E:0B:0B:0C:F1 X509v3 Authority Key Identifier: keyid:0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:da:23:c2:71:58:53:5f:1c:78:88:5c:ee:08:e4:ed:7d:fc: a2:96:9a:bb:1d:bb:75:3a:9d:28:45:56:ba:5d:27:2b:87:24: 24:81:ff:da:c4:af:da:cb:19:9b:9d:f8:54:45:c5:10:69:2b: 0f:17:61:46:77:fc:f4:c0:ba:eb:ad:b9:bb:a8:07:22:58:96: 83:8e:94:1f:8f:84:a6:36:93:96:46:64:c5:15:99:c8:2f:f1: ce:b0:a3:5f:1f:62:6d:35:77:3a:7f:df:20:c1:d5:8f:43:f4: b1:f9:c9:38:0d:84:0b:1b:33:13:f0:5b:8d:35:76:e8:0c:07: f7:de:4d:5f:ee:22:da:c0:39:2c:86:8b:14:c7:80:41:b8:69: bd:84:5f:93:75:77:37:a2:f7:45:cd:6a:7b:93:e6:9c:ba:35: 31:65:44:66:07:cc:33:cc:22:c2:df:1e:18:80:e8:8d:a3:94: eb:28:3d:5b:c6:4f:8e:e0:ae:55:cd:cc:4a:a3:a3:fc:ca:a4: 40:1b:b6:a2:3a:94:e0:8f:22:ca:68:0f:6b:07:32:e0:7e:b8: cc:be:f0:c9:a2:5d:80:6e:c6:e2:33:d8:2e:c4:d2:62:71:14: 22:5c:78:9d:36:cc:35:be:c7:6b:57:2c:6b:2d:cd:f4:f0:87: 2c:f0:53:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWb796OuAzOxVz7s+ZVS8CyoWJmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2 QUI1Njk1RTAeFw0yNTA2MDQxMjM1NDZaFw0yNTA2MDcyMDI0NDZaMDMxMTAvBgNV BAMTKDQxRTBBRjUxNTJDNEIwNkM3Nzg2RDNGNkIzRkM0NzFFMEIwQjBDRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwOeGz3L39yfnbNZdUz++Jt/XU Uu+dxo/Js0CSDxJZd4SsM/lDAb2xKEbMoHw4OdUs4zEllVW2vPrzI+/Glx9ykMjr ABXdgzIz7xbO7P9xD8gIQ70VE9XEQ1pxmyHP/Y81CkR/tdIospvU4pmfIm5bU47e /b8Lvt+gchnUFJSSYoi80YkR3nWcMmTp7OPzskFKfR91VJGiwKaxD6wrsTvaBOiW rwrT7p0JXVaQnK9t3zZS4ethaIpMvQBs9HIlxi2IKR2M2jehIc4c+Ruyt/BKTZoz 6Tfk6+D7H2WCDWMCMShmY9ZSUWFNh5TbK9/uA3jkVsPaHpnwDiXHUjxMXIj7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQeCvUVLEsGx3htP2s/xHHgsLDPEwHwYDVR0j BBgwFoAUD/5fGfvrVIn/zN83/v4KDGq1aV4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmFlNThhYy01OTE3LTQwNjktOWE2Yy04M2RjMWJhMzIxMjYvMC8wRkZFNUYxOUZC RUI1NDg5RkZDQ0RGMzdGRUZFMEEwQzZBQjU2OTVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2QUI1 Njk1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJhZTU4YWMtNTkxNy00MDY5LTlh NmMtODNkYzFiYTMyMTI2LzAvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBB MEM2QUI1Njk1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjaI8JxWFNfHHiIXO4I5O19/KKWmrsdu3U6 nShFVrpdJyuHJCSB/9rEr9rLGZud+FRFxRBpKw8XYUZ3/PTAuuutubuoByJYloOO lB+PhKY2k5ZGZMUVmcgv8c6wo18fYm01dzp/3yDB1Y9D9LH5yTgNhAsbMxPwW401 dugMB/feTV/uItrAOSyGixTHgEG4ab2EX5N1dzei90XNanuT5py6NTFlRGYHzDPM IsLfHhiA6I2jlOsoPVvGT47grlXNzEqjo/zKpEAbtqI6lOCPIspoD2sHMuB+uMy+ 8MmiXYBuxuIz2C7E0mJxFCJceJ02zDW+x2tXLGstzfTwhyzwU60= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:09 2025 by rpki-client