$ rpki-client -vvf repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft File: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft (raw, json) Hash identifier: utTnTjyhlqf/N4uT8dWYvUuu97eAPt46luOHiLfCpJw= Subject key identifier: F7:F3:88:F7:46:27:CE:03:14:B9:57:82:E5:16:3E:31:9B:22:46:6F Authority key identifier: 0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E Certificate issuer: /CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Certificate serial: 5FC7C23AC21DBF445DC30F2A6AA0BC54DE3F096D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft Manifest number: 0175 Signing time: Sun 08 Jun 2025 03:11:00 +0000 Manifest this update: Sun 08 Jun 2025 03:06:00 +0000 Manifest next update: Wed 11 Jun 2025 10:27:00 +0000 Files and hashes: 1: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl (hash: 1ygPBdyTozN7rMw+YX+ypcpYNYxrjrXjI18FrR/ZV6k=) 2: 3130332e342e38302e302f32342d3234203d3e20313530323034.roa (hash: uICRVqRri8R1EgyBPUsLQp4TscukJjiepoiJFR6/Ibc=) 3: 3130332e342e38302e302f32332d3233203d3e20313530323034.roa (hash: AgLvlSE1smWWR/jE1YysJDc3mDL4n9sETXp5KZ0HtjU=) 4: 3130332e342e38312e302f32342d3234203d3e20313530323034.roa (hash: IgBk8nUZZ29ZSChbWhRLqEMkR6u+A1fqdcf9ejFY80Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c7:c2:3a:c2:1d:bf:44:5d:c3:0f:2a:6a:a0:bc:54:de:3f:09:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Validity Not Before: Jun 8 03:06:00 2025 GMT Not After : Jun 11 10:27:00 2025 GMT Subject: CN=F7F388F74627CE0314B95782E5163E319B22466F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8a:6a:0a:ab:c7:d0:e9:c9:b7:76:31:72:d8: d9:a0:71:6e:c1:b9:fe:5b:47:94:42:12:08:e1:ba: b9:eb:c0:c7:2a:87:42:99:10:e4:af:8e:a2:3b:2f: f0:a9:44:23:51:de:16:3d:e5:2c:ab:23:8c:d8:c9: 98:29:2e:f8:f1:e9:9e:0a:12:9d:1c:6b:0d:75:25: f0:04:af:d3:2e:59:ab:bd:22:cf:a7:67:5b:73:b1: 66:1e:04:14:58:54:60:a1:e2:1e:d4:a8:0a:60:04: e2:73:36:b0:f8:c5:35:2a:1c:52:e2:67:a9:0c:dd: 2a:e5:2a:ac:2e:3e:95:0d:d0:15:e0:71:69:6f:f3: 3b:64:1b:f8:88:89:87:0f:3a:23:5f:12:f9:56:ac: 03:c0:15:d6:b2:8f:fd:c0:96:68:28:9f:1a:bd:7a: 0b:44:85:f6:e2:af:aa:c4:a5:8b:92:85:8e:72:98: 16:6e:63:f3:d5:35:86:11:7c:d7:a0:9d:27:78:f4: fe:56:53:3e:ca:bb:bb:2f:08:06:46:34:5f:e9:57: 6f:66:9f:7a:55:e5:d2:14:6c:69:f0:bb:5d:38:42: 4c:e8:66:4f:24:56:37:36:af:2a:0b:f6:1f:24:80: cc:21:eb:e2:eb:63:25:48:25:92:6c:47:e3:1a:3d: 80:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F3:88:F7:46:27:CE:03:14:B9:57:82:E5:16:3E:31:9B:22:46:6F X509v3 Authority Key Identifier: keyid:0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d6:5a:46:97:0e:7c:78:13:71:21:e9:85:0c:ed:fd:64:76: 67:e6:ab:a9:f4:09:82:d0:b2:d0:63:94:59:34:f3:e1:a2:49: c9:0c:b6:e6:3a:f9:c4:70:e9:56:a1:26:63:cf:66:e4:29:f0: 7e:d3:e1:3d:4d:2f:27:67:72:d7:e4:9c:90:5a:7d:e8:7f:98: 61:38:37:13:c0:e1:29:19:87:dd:0c:20:6d:9f:c5:3d:e3:ce: 92:be:97:a0:7a:ef:7e:42:48:58:17:d3:fc:72:53:b8:65:8d: 13:40:df:4d:fe:0a:4b:ea:49:cb:ca:cb:5f:54:8f:c5:c4:45: b3:b6:07:5a:f0:86:76:80:62:2e:86:92:d8:20:88:32:6f:05: 05:e5:9b:ac:a9:0d:1e:ee:16:65:2e:a0:b4:47:ad:08:3f:4a: 42:86:a3:a5:bc:ce:78:68:7f:2b:70:21:ec:53:e1:d2:cb:85: a7:92:c8:57:de:4c:02:10:f4:79:f3:1d:76:14:ba:66:ff:34: 8b:38:43:f5:e3:84:c0:13:05:e7:d0:d5:8c:eb:7e:46:66:b9: 5e:4f:b2:db:32:c9:2a:9f:ce:78:9b:24:17:a9:67:e7:c9:d6: f5:f1:6f:d0:4d:d7:13:d1:cb:54:60:52:6c:3e:20:09:a0:06: a2:0a:43:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX8fCOsIdv0Rdww8qaqC8VN4/CW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJG QTAwMUE0RTAeFw0yNTA2MDgwMzA2MDBaFw0yNTA2MTExMDI3MDBaMDMxMTAvBgNV BAMTKEY3RjM4OEY3NDYyN0NFMDMxNEI5NTc4MkU1MTYzRTMxOUIyMjQ2NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFimoKq8fQ6cm3djFy2NmgcW7B uf5bR5RCEgjhurnrwMcqh0KZEOSvjqI7L/CpRCNR3hY95SyrI4zYyZgpLvjx6Z4K Ep0caw11JfAEr9MuWau9Is+nZ1tzsWYeBBRYVGCh4h7UqApgBOJzNrD4xTUqHFLi Z6kM3SrlKqwuPpUN0BXgcWlv8ztkG/iIiYcPOiNfEvlWrAPAFdayj/3Almgonxq9 egtEhfbir6rEpYuShY5ymBZuY/PVNYYRfNegnSd49P5WUz7Ku7svCAZGNF/pV29m n3pV5dIUbGnwu104QkzoZk8kVjc2ryoL9h8kgMwh6+LrYyVIJZJsR+MaPYAFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9/OI90YnzgMUuVeC5RY+MZsiRm8wHwYDVR0j BBgwFoAUDi56nPEcaS7I5W8DUnvfkvoAGk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDE5NTg5YS1kNTI1LTQwZmMtODk0YS0xMmU0NDAxMGUzZTQvMC8wRTJFN0E5Q0Yx MUM2OTJFQzhFNTZGMDM1MjdCREY5MkZBMDAxQTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJGQTAw MUE0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAxOTU4OWEtZDUyNS00MGZjLTg5 NGEtMTJlNDQwMTBlM2U0LzAvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRG OTJGQTAwMUE0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvWWkaXDnx4E3Eh6YUM7f1kdmfmq6n0CYLQ stBjlFk08+GiSckMtuY6+cRw6VahJmPPZuQp8H7T4T1NLydnctfknJBafeh/mGE4 NxPA4SkZh90MIG2fxT3jzpK+l6B6735CSFgX0/xyU7hljRNA303+CkvqScvKy19U j8XERbO2B1rwhnaAYi6GktggiDJvBQXlm6ypDR7uFmUuoLRHrQg/SkKGo6W8znho fytwIexT4dLLhaeSyFfeTAIQ9HnzHXYUumb/NIs4Q/XjhMATBefQ1YzrfkZmuV5P stsyySqfznibJBepZ+fJ1vXxb9BN1xPRy1RgUmw+IAmgBqIKQ/w= -----END CERTIFICATE-----Generated at Sun Jun 8 21:51:46 2025 by rpki-client