$ rpki-client -vvf repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft File: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft (raw, json) Hash identifier: o/3y2GGEQmrt37F+CZPNdYDkYy6PUTWFYu8xaHjzjjI= Subject key identifier: 8C:79:86:31:77:CF:AC:AB:80:37:0A:56:2C:ED:09:D3:4B:B5:A0:CC Authority key identifier: 0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E Certificate issuer: /CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Certificate serial: 67486E97CE59B0C093B7BE0C0EB7D88640C5BC44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft Manifest number: 029F Signing time: Sun 07 Sep 2025 01:40:44 +0000 Manifest this update: Sun 07 Sep 2025 01:35:44 +0000 Manifest next update: Wed 10 Sep 2025 05:26:44 +0000 Files and hashes: 1: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl (hash: JAuuZUr0dB9UtxCgyyeKY7zX//sRW18BPTqnoWPEnQc=) 2: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: CqE5ZCzeVRm7AAgS0qiGljnG3wqud2DW58oPqVZ6WJg=) 3: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: v7MhMAJXwywfKNpvZVGmK8aNTXn4lXBf1MXFy8E2vnM=) 4: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: WfXT/rfuqOQCtkSuVOvx3HMgMVWsirCiP4VcVNJi+gw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 05:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:48:6e:97:ce:59:b0:c0:93:b7:be:0c:0e:b7:d8:86:40:c5:bc:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Validity Not Before: Sep 7 01:35:44 2025 GMT Not After : Sep 10 05:26:44 2025 GMT Subject: CN=8C79863177CFACAB80370A562CED09D34BB5A0CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:59:ed:33:3c:3a:cb:82:11:3d:8c:86:a9:9d: 19:50:68:70:07:24:5a:bd:a8:e4:80:74:c1:2e:ad: c9:38:9e:d5:5c:9e:b9:b3:61:b3:39:b8:02:e1:cd: 8f:5d:5f:16:49:b5:86:33:69:4c:09:fb:1b:82:4a: 89:e2:cc:8e:39:08:55:37:6d:26:61:7b:15:38:9e: 62:8c:1b:a8:cb:7f:55:02:f1:46:04:86:3e:29:3c: bc:b1:b1:bb:4a:0c:44:35:cd:f1:4d:c8:51:55:90: ad:bc:e2:32:27:02:3a:bb:02:d2:b1:b8:33:87:00: d6:43:bd:63:09:0a:d9:69:fc:38:4a:7d:38:29:88: cb:82:24:81:7c:36:10:93:19:7f:f2:b6:4e:ae:83: a8:6d:c2:c1:4e:8d:44:fa:f9:e1:2a:2b:37:e2:52: 96:63:eb:59:c0:69:34:d0:54:2d:06:e5:e4:a7:64: 05:41:cd:2a:c9:d8:0f:0a:98:c6:d7:f5:a5:7f:bd: 04:36:e4:a3:38:78:de:2e:8e:ff:02:97:28:92:62: 9f:63:b0:d2:f6:8a:86:16:64:95:c4:1d:5d:5d:c6: 1d:46:a7:f7:88:79:96:49:2e:79:2d:5f:89:1f:3c: 3f:b7:27:c0:cf:2d:6a:ec:cc:33:4a:42:f0:b4:e0: 8b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:79:86:31:77:CF:AC:AB:80:37:0A:56:2C:ED:09:D3:4B:B5:A0:CC X509v3 Authority Key Identifier: keyid:0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:fb:53:d4:b9:d9:5e:06:57:ca:62:0c:5c:12:9a:90:07:10: 8d:ba:5a:64:f2:b3:ff:f9:b3:a0:46:84:50:6d:7d:ec:b4:c8: 29:b0:da:a3:80:72:21:da:4c:6b:87:16:a5:a7:06:9a:23:83: 62:f0:85:51:e5:2a:ce:43:e6:1c:db:be:28:90:33:82:8e:b1: 90:cc:ce:58:7e:8c:a7:e5:f4:bf:0e:ef:93:73:b7:89:16:35: 77:6f:34:e0:e3:85:7f:89:5c:ba:86:06:84:3a:61:32:5d:da: 2b:4c:b9:ce:22:61:a1:67:f4:52:8f:54:d3:7d:1e:16:1a:ee: 50:69:18:86:72:88:88:5c:1d:c1:c0:5c:e1:a0:36:1e:62:d1: 6b:80:cb:62:7c:3c:85:0f:68:b9:65:0c:f1:96:13:9f:bf:f5: a1:0b:e1:18:79:d0:c2:ed:7b:ae:49:71:c0:1f:2b:e3:5e:66: 41:92:5a:9f:3d:63:60:f5:5f:7d:e4:08:fd:85:ce:01:0c:cc: ba:a7:75:db:78:34:cd:59:0d:8c:bd:b9:9e:84:d6:fd:a6:51: 06:40:d7:b6:c3:0f:0b:ed:41:49:65:8c:0f:e8:ce:f1:a2:02: 41:07:22:eb:68:45:27:ab:f0:15:ef:6b:dd:08:45:65:54:96: e7:73:b2:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ0hul85ZsMCTt74MDrfYhkDFvEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENE Mjg1MDI5RTAeFw0yNTA5MDcwMTM1NDRaFw0yNTA5MTAwNTI2NDRaMDMxMTAvBgNV BAMTKDhDNzk4NjMxNzdDRkFDQUI4MDM3MEE1NjJDRUQwOUQzNEJCNUEwQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtWe0zPDrLghE9jIapnRlQaHAH JFq9qOSAdMEurck4ntVcnrmzYbM5uALhzY9dXxZJtYYzaUwJ+xuCSonizI45CFU3 bSZhexU4nmKMG6jLf1UC8UYEhj4pPLyxsbtKDEQ1zfFNyFFVkK284jInAjq7AtKx uDOHANZDvWMJCtlp/DhKfTgpiMuCJIF8NhCTGX/ytk6ug6htwsFOjUT6+eEqKzfi UpZj61nAaTTQVC0G5eSnZAVBzSrJ2A8KmMbX9aV/vQQ25KM4eN4ujv8ClyiSYp9j sNL2ioYWZJXEHV1dxh1Gp/eIeZZJLnktX4kfPD+3J8DPLWrszDNKQvC04IsXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjHmGMXfPrKuANwpWLO0J00u1oMwwHwYDVR0j BBgwFoAUDQXve6cdZAt4T3LH2PD03NKFAp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWI4NjA0Zi0zOTVhLTQyYmUtYjk5Ny1lODBmYzFkZjkwZjkvMC8wRDA1RUY3QkE3 MUQ2NDBCNzg0RjcyQzdEOEYwRjREQ0QyODUwMjlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENEMjg1 MDI5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODliODYwNGYtMzk1YS00MmJlLWI5 OTctZTgwZmMxZGY5MGY5LzAvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0 RENEMjg1MDI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGr7U9S52V4GV8piDFwSmpAHEI26WmTys//5 s6BGhFBtfey0yCmw2qOAciHaTGuHFqWnBpojg2LwhVHlKs5D5hzbviiQM4KOsZDM zlh+jKfl9L8O75Nzt4kWNXdvNODjhX+JXLqGBoQ6YTJd2itMuc4iYaFn9FKPVNN9 HhYa7lBpGIZyiIhcHcHAXOGgNh5i0WuAy2J8PIUPaLllDPGWE5+/9aEL4Rh50MLt e65JccAfK+NeZkGSWp89Y2D1X33kCP2FzgEMzLqnddt4NM1ZDYy9uZ6E1v2mUQZA 17bDDwvtQUlljA/ozvGiAkEHIutoRSer8BXva90IRWVUludzsmY= -----END CERTIFICATE-----Generated at Sun Sep 7 15:31:10 2025 by rpki-client