$ rpki-client -vvf repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft File: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft (raw, json) Hash identifier: 6khZpuMy/0+FgsshDiqukMMPnpTo2WEez7Q4PphMOT8= Subject key identifier: 60:8E:50:87:1D:67:C1:9C:88:50:C0:32:75:70:DE:71:82:EF:F3:4E Authority key identifier: 0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF Certificate issuer: /CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Certificate serial: 29CEF3E3C8BD5DFFF7B64E57E4ECB8C7667E6632 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft Manifest number: 0265 Signing time: Sat 06 Sep 2025 03:02:01 +0000 Manifest this update: Sat 06 Sep 2025 02:57:01 +0000 Manifest next update: Tue 09 Sep 2025 13:16:01 +0000 Files and hashes: 1: 3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa (hash: 1qZsE00rwmGlzOMKTEF7EolFAH+CLupX31RHggUVtOs=) 2: 3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa (hash: 2PxEI59kNreJnYBeFqozYQ5subadmwmaBV8ky/IxUfI=) 3: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl (hash: 7D45ep/HopZx3jHPXsqN4Iu8z3seiSVTdarI/jL17UM=) 4: 3130332e3234312e3230362e302f32342d3234203d3e20313332363738.roa (hash: R3N3/32j1HA8MrNIZSao7bewuBwwVHmgTfIW6Qbgz1c=) 5: 3130332e3234312e3230372e302f32342d3234203d3e20313332363738.roa (hash: t19S9PQfVzWHZc7PL9Ucb7apMMw/h9xU9QuPzuFz/Mk=) 6: 323030313a6466333a373030303a3a2f34382d3438203d3e20313332363738.roa (hash: mAFJTZEnZNfr7PARi8AMi8BJVScVXavpsJWltGWztr8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 13:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ce:f3:e3:c8:bd:5d:ff:f7:b6:4e:57:e4:ec:b8:c7:66:7e:66:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Validity Not Before: Sep 6 02:57:01 2025 GMT Not After : Sep 9 13:16:01 2025 GMT Subject: CN=608E50871D67C19C8850C0327570DE7182EFF34E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8f:5e:b1:10:a4:5f:d6:7a:61:ad:75:13:cc: 25:ef:2c:b7:73:ac:f5:1d:6b:94:cd:72:19:c9:a8: d5:4c:1f:94:3f:8f:54:4b:34:80:1c:38:1a:3b:9b: 57:70:69:5a:aa:6d:7f:67:cd:02:e8:64:60:99:35: 43:07:56:f9:26:f5:13:ee:b5:86:1e:8c:79:2d:fe: 85:5d:8b:a9:80:59:da:d9:88:bd:d9:81:b4:5d:5b: 67:c8:fa:7f:65:06:e0:f0:ce:31:65:b1:df:9b:e2: d2:73:dd:4f:58:73:14:a8:e9:65:ac:97:14:46:86: d6:f6:50:82:0b:4b:cc:5e:c6:ff:db:03:12:1c:96: d7:e5:13:a8:89:10:bc:d0:ff:20:a1:38:5f:e3:27: e4:6a:a3:34:95:b2:11:ed:f5:b1:46:c9:60:c4:94: 8e:c6:18:a1:c8:7f:65:16:81:05:a8:84:8f:76:81: 4d:9e:00:46:d9:01:82:0a:4f:be:87:24:ad:f0:dd: 1e:aa:c9:e6:30:02:93:3b:65:f6:23:a9:a4:43:f1: 14:4b:9d:b9:56:06:04:70:06:36:68:2a:99:26:38: ab:43:b5:12:0a:a5:1f:0f:da:b0:97:6d:c9:cb:ad: b7:a1:f3:2d:69:47:19:37:f3:fa:2d:88:8d:b6:15: 6d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8E:50:87:1D:67:C1:9C:88:50:C0:32:75:70:DE:71:82:EF:F3:4E X509v3 Authority Key Identifier: keyid:0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:7a:17:cc:20:ef:c1:38:c1:40:5b:fc:b7:ca:7c:99:03:e6: 17:46:25:9f:99:6a:4a:e3:75:d8:9d:2d:c8:6e:74:f7:f2:cc: 5a:23:d1:0f:51:6c:d0:b2:b8:51:1f:45:62:74:cc:1f:dd:8c: fa:a2:d4:4b:fd:92:81:dc:6c:13:ad:e0:2b:9c:16:26:c3:22: c6:40:50:c2:9b:83:4f:fa:26:e7:95:3a:12:57:46:3e:27:39: 84:f0:3a:e5:33:91:94:24:ba:25:af:58:5b:21:9a:8b:3b:3b: 35:bd:40:6f:cc:ca:8d:4a:da:18:30:e8:24:50:41:2e:eb:61: 4b:08:19:22:98:c8:fe:a0:1f:07:d7:75:0c:8a:43:35:26:ae: fd:0e:46:69:d9:03:2b:70:69:df:15:77:18:eb:4b:80:d6:31: f8:16:87:d0:0b:4a:6b:bd:ec:50:ec:84:4c:18:8b:c8:51:2c: f8:31:60:c7:8e:18:0a:fa:0e:82:c0:98:02:f2:0f:53:a2:f7: b5:50:c8:99:17:90:7b:1a:1f:56:d7:8c:c8:6a:f7:a4:c7:f9: 68:fc:c2:2b:ed:2e:fe:19:46:10:b3:c3:03:96:cd:c6:fd:3e: bf:8f:97:d4:4b:cb:37:00:a8:63:0b:c3:a4:0a:5b:e9:ea:6a: cf:28:a5:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKc7z48i9Xf/3tk5X5Oy4x2Z+ZjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZB NDAxRUNDRjAeFw0yNTA5MDYwMjU3MDFaFw0yNTA5MDkxMzE2MDFaMDMxMTAvBgNV BAMTKDYwOEU1MDg3MUQ2N0MxOUM4ODUwQzAzMjc1NzBERTcxODJFRkYzNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfj16xEKRf1nphrXUTzCXvLLdz rPUda5TNchnJqNVMH5Q/j1RLNIAcOBo7m1dwaVqqbX9nzQLoZGCZNUMHVvkm9RPu tYYejHkt/oVdi6mAWdrZiL3ZgbRdW2fI+n9lBuDwzjFlsd+b4tJz3U9YcxSo6WWs lxRGhtb2UIILS8xexv/bAxIcltflE6iJELzQ/yChOF/jJ+RqozSVshHt9bFGyWDE lI7GGKHIf2UWgQWohI92gU2eAEbZAYIKT76HJK3w3R6qyeYwApM7ZfYjqaRD8RRL nblWBgRwBjZoKpkmOKtDtRIKpR8P2rCXbcnLrbeh8y1pRxk38/otiI22FW3vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYI5Qhx1nwZyIUMAydXDecYLv804wHwYDVR0j BBgwFoAUC6+WZwZgyU+7Pjh+8VBeb6QB7M8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWEwY2Y5YS1jNTdkLTQzOTUtOTI0OS1iZmNmNDY3MjQyODIvMC8wQkFGOTY2NzA2 NjBDOTRGQkIzRTM4N0VGMTUwNUU2RkE0MDFFQ0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZBNDAx RUNDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVhMGNmOWEtYzU3ZC00Mzk1LTky NDktYmZjZjQ2NzI0MjgyLzAvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVF NkZBNDAxRUNDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACh6F8wg78E4wUBb/LfKfJkD5hdGJZ+Zakrj ddidLchudPfyzFoj0Q9RbNCyuFEfRWJ0zB/djPqi1Ev9koHcbBOt4CucFibDIsZA UMKbg0/6JueVOhJXRj4nOYTwOuUzkZQkuiWvWFshmos7OzW9QG/Myo1K2hgw6CRQ QS7rYUsIGSKYyP6gHwfXdQyKQzUmrv0ORmnZAytwad8VdxjrS4DWMfgWh9ALSmu9 7FDshEwYi8hRLPgxYMeOGAr6DoLAmALyD1Oi97VQyJkXkHsaH1bXjMhq96TH+Wj8 wivtLv4ZRhCzwwOWzcb9Pr+Pl9RLyzcAqGMLw6QKW+nqas8opdc= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:21 2025 by rpki-client