$ rpki-client -vvf repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft File: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft (raw, json) Hash identifier: 7t/EzN5R0RHh1YJVDsX4zdT/AppmtSG0bnKDhdClaWQ= Subject key identifier: 77:D3:85:BA:47:98:E9:68:43:A5:62:02:FE:CC:1A:DC:7F:B6:5C:94 Authority key identifier: 0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF Certificate issuer: /CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Certificate serial: 53F2C056B3806528E47FBA897FB618B7634696C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft Manifest number: 023C Signing time: Thu 05 Jun 2025 06:41:59 +0000 Manifest this update: Thu 05 Jun 2025 06:36:59 +0000 Manifest next update: Sun 08 Jun 2025 12:23:59 +0000 Files and hashes: 1: 3130332e3234312e3230372e302f32342d3234203d3e20313332363738.roa (hash: t19S9PQfVzWHZc7PL9Ucb7apMMw/h9xU9QuPzuFz/Mk=) 2: 3130332e3234312e3230362e302f32342d3234203d3e20313332363738.roa (hash: R3N3/32j1HA8MrNIZSao7bewuBwwVHmgTfIW6Qbgz1c=) 3: 3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa (hash: 2PxEI59kNreJnYBeFqozYQ5subadmwmaBV8ky/IxUfI=) 4: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl (hash: 2rez79VlxYkReAfc4I5hkqyBVoVpbp4G3o7Bq3klsJ8=) 5: 3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa (hash: 1qZsE00rwmGlzOMKTEF7EolFAH+CLupX31RHggUVtOs=) 6: 323030313a6466333a373030303a3a2f34382d3438203d3e20313332363738.roa (hash: mAFJTZEnZNfr7PARi8AMi8BJVScVXavpsJWltGWztr8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 12:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f2:c0:56:b3:80:65:28:e4:7f:ba:89:7f:b6:18:b7:63:46:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Validity Not Before: Jun 5 06:36:59 2025 GMT Not After : Jun 8 12:23:59 2025 GMT Subject: CN=77D385BA4798E96843A56202FECC1ADC7FB65C94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4f:82:23:9a:28:4e:a0:d5:6a:52:67:f3:c4: 40:7b:39:e1:fe:fb:bf:8f:ab:1f:b9:78:d3:3f:11: 9d:7a:2b:1c:5a:73:4e:a2:be:b0:50:6d:51:9e:5b: 7f:9e:0a:19:30:1f:bd:42:b3:4a:f9:28:f1:99:42: 29:80:01:80:1b:14:44:8e:78:3c:a3:42:03:d2:54: ce:07:54:b4:1e:bc:f5:1b:98:4d:e8:58:e0:6d:c9: 20:6b:b4:be:99:7b:f4:3a:fb:19:31:f6:31:93:71: 4c:d5:49:da:a0:b6:8c:b8:77:57:ab:a9:ce:6f:74: 78:33:b0:49:41:f5:94:db:cc:22:bc:5f:32:fc:d7: b6:87:51:2d:10:25:48:40:f1:46:25:af:55:61:d7: 6a:0b:24:81:31:f2:b0:fe:09:36:06:ae:92:ad:4f: 14:83:5b:79:a1:3a:d8:fb:ce:51:b4:a3:6d:ed:d1: 74:15:19:46:eb:3a:09:92:13:b0:dd:05:84:c0:84: 85:5a:b6:e8:3d:e9:c9:b1:60:08:ea:31:d5:f9:8f: db:88:d6:11:32:62:d9:f2:9c:d7:a2:b4:1a:40:14: 55:63:ae:63:cb:b8:3d:72:0e:07:d6:7f:9b:44:97: 21:52:78:36:8d:85:aa:f7:d6:89:e8:17:d7:74:c3: 8a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D3:85:BA:47:98:E9:68:43:A5:62:02:FE:CC:1A:DC:7F:B6:5C:94 X509v3 Authority Key Identifier: keyid:0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:06:5b:8e:82:34:e4:83:d1:e2:79:d0:ea:ef:c4:3e:0c:16: 62:ae:d6:9f:80:72:50:00:e0:42:47:6d:1d:5a:47:a5:0d:f7: 27:4c:8e:22:95:de:03:3e:25:ba:c1:d4:41:05:fc:31:1b:1d: c2:67:e2:88:f9:81:ec:06:c2:be:f3:01:dc:60:79:44:48:77: cf:ce:ff:dc:24:e7:66:b3:55:fe:d2:41:fb:5f:a8:f8:97:e7: 9a:b4:15:8c:eb:9d:7c:b8:94:3d:f4:ca:94:f4:38:ba:f6:67: 70:10:99:60:84:81:a4:f1:95:54:8d:0d:97:0e:8d:54:3f:72: d9:6a:39:b8:77:62:97:b8:57:36:d5:90:94:67:24:33:73:82: b6:ad:b0:38:86:15:cb:47:6b:21:39:21:87:52:d0:46:22:80: 29:8a:40:ce:fe:b3:68:35:79:40:84:c9:e2:8c:ba:bb:84:7e: d7:f2:12:e9:56:6b:05:91:6b:f8:c8:5b:37:df:38:f1:76:d7: a1:1a:6a:ef:d5:78:b4:da:d8:55:ad:c8:a3:c8:1e:c5:ce:67: 2b:08:ac:1a:c8:f7:d7:81:74:1d:77:06:93:66:bf:eb:f7:54: d9:8d:d2:61:6e:78:c9:63:e7:60:9f:b6:5a:10:c2:e8:72:cd: 60:a2:30:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU/LAVrOAZSjkf7qJf7YYt2NGlsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZB NDAxRUNDRjAeFw0yNTA2MDUwNjM2NTlaFw0yNTA2MDgxMjIzNTlaMDMxMTAvBgNV BAMTKDc3RDM4NUJBNDc5OEU5Njg0M0E1NjIwMkZFQ0MxQURDN0ZCNjVDOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgT4IjmihOoNVqUmfzxEB7OeH+ +7+Pqx+5eNM/EZ16Kxxac06ivrBQbVGeW3+eChkwH71Cs0r5KPGZQimAAYAbFESO eDyjQgPSVM4HVLQevPUbmE3oWOBtySBrtL6Ze/Q6+xkx9jGTcUzVSdqgtoy4d1er qc5vdHgzsElB9ZTbzCK8XzL817aHUS0QJUhA8UYlr1Vh12oLJIEx8rD+CTYGrpKt TxSDW3mhOtj7zlG0o23t0XQVGUbrOgmSE7DdBYTAhIVatug96cmxYAjqMdX5j9uI 1hEyYtnynNeitBpAFFVjrmPLuD1yDgfWf5tElyFSeDaNhar31onoF9d0w4rxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd9OFukeY6WhDpWIC/swa3H+2XJQwHwYDVR0j BBgwFoAUC6+WZwZgyU+7Pjh+8VBeb6QB7M8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWEwY2Y5YS1jNTdkLTQzOTUtOTI0OS1iZmNmNDY3MjQyODIvMC8wQkFGOTY2NzA2 NjBDOTRGQkIzRTM4N0VGMTUwNUU2RkE0MDFFQ0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZBNDAx RUNDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVhMGNmOWEtYzU3ZC00Mzk1LTky NDktYmZjZjQ2NzI0MjgyLzAvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVF NkZBNDAxRUNDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIoGW46CNOSD0eJ50OrvxD4MFmKu1p+AclAA 4EJHbR1aR6UN9ydMjiKV3gM+JbrB1EEF/DEbHcJn4oj5gewGwr7zAdxgeURId8/O /9wk52azVf7SQftfqPiX55q0FYzrnXy4lD30ypT0OLr2Z3AQmWCEgaTxlVSNDZcO jVQ/ctlqObh3Ype4VzbVkJRnJDNzgratsDiGFctHayE5IYdS0EYigCmKQM7+s2g1 eUCEyeKMuruEftfyEulWawWRa/jIWzffOPF216Eaau/VeLTa2FWtyKPIHsXOZysI rBrI99eBdB13BpNmv+v3VNmN0mFueMlj52CftloQwuhyzWCiMGk= -----END CERTIFICATE-----Generated at Thu Jun 5 18:14:10 2025 by rpki-client