$ rpki-client -vvf repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft File: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft (raw, json) Hash identifier: XyzCusaP5M9vCr09cB3NMIcxmf4210lerlYpFTZkVoA= Subject key identifier: 6D:29:BC:EF:52:4E:4A:C4:C0:65:11:1A:DD:00:8F:6A:A9:B5:AF:74 Authority key identifier: 0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E Certificate issuer: /CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Certificate serial: 756BD02F06440AD6C527791676900B1AE72775C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft Manifest number: 0274 Signing time: Sun 01 Jun 2025 14:30:44 +0000 Manifest this update: Sun 01 Jun 2025 14:25:44 +0000 Manifest next update: Wed 04 Jun 2025 23:09:44 +0000 Files and hashes: 1: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: v7MhMAJXwywfKNpvZVGmK8aNTXn4lXBf1MXFy8E2vnM=) 2: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: CqE5ZCzeVRm7AAgS0qiGljnG3wqud2DW58oPqVZ6WJg=) 3: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl (hash: NQKr86lRLiqNTqw3Dodofsb5r4U4RWj/LJ1qlHAeMEY=) 4: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: WfXT/rfuqOQCtkSuVOvx3HMgMVWsirCiP4VcVNJi+gw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 23:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:6b:d0:2f:06:44:0a:d6:c5:27:79:16:76:90:0b:1a:e7:27:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Validity Not Before: Jun 1 14:25:44 2025 GMT Not After : Jun 4 23:09:44 2025 GMT Subject: CN=6D29BCEF524E4AC4C065111ADD008F6AA9B5AF74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d0:f7:68:c6:5c:bb:6d:4f:fb:83:73:46:86: 47:d1:7f:94:ec:4d:e4:2e:97:bf:4d:69:e1:4a:ce: cb:83:94:93:6a:ec:47:7b:d5:8d:8b:b3:9e:5f:08: 41:22:bf:d9:97:30:7d:e5:89:f5:54:86:6c:6f:6a: 55:c1:48:1f:08:76:79:40:4d:f1:18:fc:5b:41:b2: 9f:f5:0b:da:a2:1d:21:b1:15:6a:87:b0:41:7f:fb: f7:cd:e7:1e:fe:f5:63:71:92:2c:1a:8c:ad:66:1a: be:56:5a:e5:e4:00:68:ec:62:e9:c0:dc:ed:f1:2e: f0:f7:4c:4e:40:da:3e:ab:93:05:e1:ea:dc:63:ef: 53:b7:d6:ed:59:63:0c:ca:2e:ab:ef:3e:63:6b:29: 77:08:69:90:46:c3:fb:07:0e:dc:c5:2e:2b:0a:65: ae:1f:5e:42:18:af:fe:f9:1c:82:ef:3f:8a:f5:c7: 5e:b9:1f:b4:16:ec:25:91:d8:a0:e9:1c:5a:57:0f: 0a:e6:d3:88:9e:08:15:92:63:cd:32:ab:2a:a7:05: 0c:7f:44:00:e1:8d:ab:c5:0e:c4:b3:d6:8d:a2:f0: f3:f1:c6:19:02:fd:34:63:ce:5b:2d:53:cd:60:07: 98:4d:82:ad:dc:59:60:fd:f4:59:b7:2b:a6:8e:8e: 4f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:29:BC:EF:52:4E:4A:C4:C0:65:11:1A:DD:00:8F:6A:A9:B5:AF:74 X509v3 Authority Key Identifier: keyid:0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:6a:ab:c1:86:c5:b7:5c:63:01:ab:c0:1f:be:f9:24:6e:d5: 87:29:06:a9:da:5c:53:b5:76:f9:8b:85:3c:cd:e7:02:4d:41: e8:94:42:6c:32:bd:e9:a5:6d:ed:00:44:aa:c1:e9:24:6e:1c: 73:a9:0f:d7:1f:e0:06:4f:e2:c4:b8:8b:1b:dc:ec:c5:ef:73: 88:91:48:2b:c9:1c:5b:9c:e2:f1:1e:8b:c7:ca:95:c7:79:1b: c8:13:22:36:d5:96:53:30:21:2b:7c:6c:4c:3d:4d:fc:24:b7: 63:30:94:5f:01:fe:1b:a8:a7:29:e6:64:56:bf:a7:31:bf:03: 5d:b0:a9:2d:f9:28:54:22:58:b8:17:55:2e:0e:ba:57:3c:2c: c9:e4:07:5f:37:b8:1a:20:67:23:8c:da:a0:51:03:97:76:d7: e4:90:f1:00:5d:6b:2a:9c:77:4b:a5:c7:38:f3:e8:44:be:30: 0e:a1:83:bd:3a:36:62:25:bd:41:27:5f:56:f0:88:de:e0:81: 0d:94:f1:11:c9:10:1f:7b:51:15:c4:48:a5:14:31:15:84:b3: de:ff:38:53:09:e6:b9:f7:21:d5:40:47:cb:ca:05:6d:5f:e4: 8f:b2:a8:0e:cf:f6:9f:35:a1:10:14:13:60:d5:5f:fe:02:96: ea:48:ad:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdWvQLwZECtbFJ3kWdpALGucndcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENE Mjg1MDI5RTAeFw0yNTA2MDExNDI1NDRaFw0yNTA2MDQyMzA5NDRaMDMxMTAvBgNV BAMTKDZEMjlCQ0VGNTI0RTRBQzRDMDY1MTExQUREMDA4RjZBQTlCNUFGNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR0Pdoxly7bU/7g3NGhkfRf5Ts TeQul79NaeFKzsuDlJNq7Ed71Y2Ls55fCEEiv9mXMH3lifVUhmxvalXBSB8IdnlA TfEY/FtBsp/1C9qiHSGxFWqHsEF/+/fN5x7+9WNxkiwajK1mGr5WWuXkAGjsYunA 3O3xLvD3TE5A2j6rkwXh6txj71O31u1ZYwzKLqvvPmNrKXcIaZBGw/sHDtzFLisK Za4fXkIYr/75HILvP4r1x165H7QW7CWR2KDpHFpXDwrm04ieCBWSY80yqyqnBQx/ RADhjavFDsSz1o2i8PPxxhkC/TRjzlstU81gB5hNgq3cWWD99Fm3K6aOjk9xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbSm871JOSsTAZREa3QCPaqm1r3QwHwYDVR0j BBgwFoAUDQXve6cdZAt4T3LH2PD03NKFAp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWI4NjA0Zi0zOTVhLTQyYmUtYjk5Ny1lODBmYzFkZjkwZjkvMC8wRDA1RUY3QkE3 MUQ2NDBCNzg0RjcyQzdEOEYwRjREQ0QyODUwMjlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENEMjg1 MDI5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODliODYwNGYtMzk1YS00MmJlLWI5 OTctZTgwZmMxZGY5MGY5LzAvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0 RENEMjg1MDI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFqq8GGxbdcYwGrwB+++SRu1YcpBqnaXFO1 dvmLhTzN5wJNQeiUQmwyvemlbe0ARKrB6SRuHHOpD9cf4AZP4sS4ixvc7MXvc4iR SCvJHFuc4vEei8fKlcd5G8gTIjbVllMwISt8bEw9Tfwkt2MwlF8B/huopynmZFa/ pzG/A12wqS35KFQiWLgXVS4Oulc8LMnkB183uBogZyOM2qBRA5d21+SQ8QBdayqc d0ulxzjz6ES+MA6hg706NmIlvUEnX1bwiN7ggQ2U8RHJEB97URXESKUUMRWEs97/ OFMJ5rn3IdVAR8vKBW1f5I+yqA7P9p81oRAUE2DVX/4ClupIrbE= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:06 2025 by rpki-client