$ rpki-client -vvf repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft File: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft (raw, json) Hash identifier: J70jvdM8ODzTWtIqxc2EtDuyU4lBJqIE4+or6UJHk/o= Subject key identifier: 0F:F7:0C:8D:77:1B:64:D0:41:2E:BF:0B:C9:59:FB:51:DF:91:E6:0E Authority key identifier: 0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB Certificate issuer: /CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Certificate serial: 11846A308F2DB4EE01A3CFEEC3075068D0A7B4CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft Manifest number: 01B5 Signing time: Sun 01 Jun 2025 19:32:20 +0000 Manifest this update: Sun 01 Jun 2025 19:27:20 +0000 Manifest next update: Thu 05 Jun 2025 06:35:20 +0000 Files and hashes: 1: 3130332e31332e362e302f32332d3234203d3e2034383030.roa (hash: XE/brTNn9JtlPYNJFE9OluoH8MvpLDlsMKNBNlNadoE=) 2: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl (hash: mT6PYM9zemJxzE5+yNEgTvs5hXWFKXk8k6WvBX3y2NY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 06:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:84:6a:30:8f:2d:b4:ee:01:a3:cf:ee:c3:07:50:68:d0:a7:b4:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Validity Not Before: Jun 1 19:27:20 2025 GMT Not After : Jun 5 06:35:20 2025 GMT Subject: CN=0FF70C8D771B64D0412EBF0BC959FB51DF91E60E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ba:7f:4c:8f:92:99:0a:6f:70:c2:db:7e:e8: 25:68:3e:a0:db:36:bb:79:78:01:05:cb:43:c9:6e: 79:89:9e:5a:95:4a:d2:70:b4:02:df:d4:a9:03:de: b0:bb:05:74:81:cb:fc:9d:9c:07:85:53:cf:a2:5a: 51:3f:3b:9f:91:6b:ce:0e:b2:ce:f9:25:26:4d:47: a1:c5:cd:d5:a2:5f:1c:2c:16:96:ac:8c:af:2d:68: 99:cb:7b:0a:2b:d9:3b:9b:5f:55:c3:d2:23:7d:ce: 1c:6c:b0:02:79:98:c8:8f:4e:8f:5f:43:5e:5b:3b: 4a:07:9d:e5:2c:4e:ee:24:ef:5a:d6:ff:00:09:01: 43:0b:78:fe:8f:82:7c:c1:36:8d:1a:5d:dd:b5:c1: cb:8a:52:bf:e7:c6:96:25:49:d7:a0:ed:4b:e4:f0: 30:1a:3b:c0:e3:51:ca:2e:17:82:e9:4e:a0:2a:a8: 8e:c1:e0:31:f2:0b:29:13:7c:de:d1:b0:6a:23:ca: 9a:4e:b6:e5:0e:02:c0:9f:d6:53:36:78:a2:5e:0c: 79:a0:b3:ad:33:30:12:c9:a8:ab:3e:99:05:78:6d: b3:d8:8f:a0:db:48:c1:18:3b:0f:88:58:27:7f:3d: ac:be:e6:84:0a:26:98:79:98:69:7b:dc:a4:c9:cb: 69:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F7:0C:8D:77:1B:64:D0:41:2E:BF:0B:C9:59:FB:51:DF:91:E6:0E X509v3 Authority Key Identifier: keyid:0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:70:4b:0f:3a:e7:2a:bd:92:28:86:ab:d4:a6:da:59:0c:21: d4:af:5b:7e:e5:72:e6:02:48:d8:ae:85:ef:3e:1e:5f:99:25: dd:1e:ec:fb:78:30:84:ed:f7:fa:53:eb:4d:2d:0a:ba:cb:33: 78:a6:59:f3:e6:fe:e2:31:d9:b3:18:05:4f:84:05:5e:df:5a: a7:60:95:bf:4b:47:b4:5c:14:4e:fe:25:7c:96:15:04:e7:f5: 2e:6b:30:0a:f7:9e:a0:19:5d:0a:14:ea:41:e8:09:20:d5:47: ac:c2:3d:80:d1:36:64:e9:ca:f4:55:13:97:0d:3d:9a:5e:ca: 11:61:2b:a7:f0:9a:0f:f3:90:1e:94:78:72:0f:3f:de:9e:ff: 6f:fd:a7:3a:a9:49:1c:6f:66:a0:79:03:be:14:e9:de:c8:b9: 24:1f:c1:63:72:67:b8:05:ed:87:f3:73:1d:05:6f:09:3a:e4: 0e:a9:e8:21:96:99:5e:c5:0a:16:7d:c0:ea:52:c1:f3:b2:a6: e6:db:88:b6:1b:f8:77:02:07:b7:2c:7e:8b:87:b1:87:9a:3a: 12:38:72:be:51:d9:38:92:1f:90:fd:a9:4d:02:bb:25:4b:5f: f0:6d:fb:8f:d5:3d:84:39:57:8b:bf:77:e1:a4:14:12:37:f2: 38:a1:53:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEYRqMI8ttO4Bo8/uwwdQaNCntMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdF MEIwQURDQjAeFw0yNTA2MDExOTI3MjBaFw0yNTA2MDUwNjM1MjBaMDMxMTAvBgNV BAMTKDBGRjcwQzhENzcxQjY0RDA0MTJFQkYwQkM5NTlGQjUxREY5MUU2MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbun9Mj5KZCm9wwtt+6CVoPqDb Nrt5eAEFy0PJbnmJnlqVStJwtALf1KkD3rC7BXSBy/ydnAeFU8+iWlE/O5+Ra84O ss75JSZNR6HFzdWiXxwsFpasjK8taJnLewor2TubX1XD0iN9zhxssAJ5mMiPTo9f Q15bO0oHneUsTu4k71rW/wAJAUMLeP6PgnzBNo0aXd21wcuKUr/nxpYlSdeg7Uvk 8DAaO8DjUcouF4LpTqAqqI7B4DHyCykTfN7RsGojyppOtuUOAsCf1lM2eKJeDHmg s60zMBLJqKs+mQV4bbPYj6DbSMEYOw+IWCd/Pay+5oQKJph5mGl73KTJy2m/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD/cMjXcbZNBBLr8LyVn7Ud+R5g4wHwYDVR0j BBgwFoAUDNRE4MCNkuMrBUv39Hg6J+CwrcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjUwNmU3Mi04Yjg3LTQ3MDEtYTM2MC1hZWJlMjU4NDhmNzEvMC8wQ0Q0NDRFMEMw OEQ5MkUzMkIwNTRCRjdGNDc4M0EyN0UwQjBBRENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdFMEIw QURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY1MDZlNzItOGI4Ny00NzAxLWEz NjAtYWViZTI1ODQ4ZjcxLzAvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNB MjdFMEIwQURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKtwSw865yq9kiiGq9Sm2lkMIdSvW37lcuYC SNiuhe8+Hl+ZJd0e7Pt4MITt9/pT600tCrrLM3imWfPm/uIx2bMYBU+EBV7fWqdg lb9LR7RcFE7+JXyWFQTn9S5rMAr3nqAZXQoU6kHoCSDVR6zCPYDRNmTpyvRVE5cN PZpeyhFhK6fwmg/zkB6UeHIPP96e/2/9pzqpSRxvZqB5A74U6d7IuSQfwWNyZ7gF 7Yfzcx0Fbwk65A6p6CGWmV7FChZ9wOpSwfOypubbiLYb+HcCB7csfouHsYeaOhI4 cr5R2TiSH5D9qU0CuyVLX/Bt+4/VPYQ5V4u/d+GkFBI38jihU7U= -----END CERTIFICATE-----Generated at Tue Jun 3 23:54:42 2025 by rpki-client