$ rpki-client -vvf repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft File: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft (raw, json) Hash identifier: 67TRYNXDokfXyY8ESGYiR8vDrSp7kF9VNNXl/yXMROI= Subject key identifier: 77:B8:4D:F9:42:30:E6:3E:3F:BA:3D:5F:62:3B:E2:36:4B:7E:F5:97 Authority key identifier: 0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C Certificate issuer: /CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Certificate serial: 1AAAAD7EDB2D5B24164DD32EE6766BD2FA57740F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft Manifest number: 0516 Signing time: Fri 17 Oct 2025 20:01:35 +0000 Manifest this update: Fri 17 Oct 2025 19:56:35 +0000 Manifest next update: Tue 21 Oct 2025 05:40:35 +0000 Files and hashes: 1: 3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa (hash: MtpuQgaD3AVd7DaurQu06bLnX7K9XIzGJP+djliDNAg=) 2: 323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa (hash: ZCfIqpH3uC9vaXsU0X4IOAqNNWCL/kt97zzI3ZypMPI=) 3: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl (hash: DFEs7/y3izWSK28UfqvZBfFp1i5OdnA84G1rJpf4b2c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 05:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:aa:ad:7e:db:2d:5b:24:16:4d:d3:2e:e6:76:6b:d2:fa:57:74:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Validity Not Before: Oct 17 19:56:35 2025 GMT Not After : Oct 21 05:40:35 2025 GMT Subject: CN=77B84DF94230E63E3FBA3D5F623BE2364B7EF597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:8c:de:64:62:4d:07:aa:ad:fd:28:b6:c3: 1b:69:75:01:47:0d:bf:bd:7c:b3:28:71:3e:c4:a1: 4d:4b:97:2c:ce:e3:cd:57:40:a0:ef:fd:4b:3e:fe: 2d:6c:cc:b7:ba:23:d6:fc:8a:ce:1a:82:a2:9e:53: c1:bd:9d:ad:75:8f:c1:19:f0:82:57:7b:70:7f:ca: 66:e9:a1:b2:0c:f3:b7:2d:21:1f:1f:38:4d:52:f0: 2e:4f:b8:60:02:7d:43:8f:87:6a:82:33:e4:d3:63: 67:de:f0:65:47:d9:96:36:0a:2b:14:2f:f0:bb:37: b8:9e:36:99:7a:96:1f:c6:52:41:30:64:31:4b:00: bc:c5:55:3b:4c:74:c8:4e:f3:22:3e:e2:92:a6:51: 7e:a4:80:f9:65:42:ca:6e:b1:8a:ce:1f:3f:d4:cd: 4c:ff:2c:35:59:95:ee:ae:38:62:e1:48:8d:ab:3e: 5d:3e:48:f3:33:b6:12:35:dc:1c:90:2c:3c:2c:28: f9:a6:5e:47:36:69:2c:22:35:b8:08:b5:ac:75:a9: fd:d1:a8:39:a4:ca:cc:f1:f4:19:71:60:3a:98:17: 66:2b:f7:5a:db:f6:12:1f:b2:d0:f5:88:ec:5b:63: 7d:47:fb:fa:0b:bd:7d:57:5d:66:06:32:88:44:7a: a2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B8:4D:F9:42:30:E6:3E:3F:BA:3D:5F:62:3B:E2:36:4B:7E:F5:97 X509v3 Authority Key Identifier: keyid:0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:df:02:d5:b8:dd:76:61:42:73:26:03:be:f5:34:fb:fa:67: 57:f5:e6:8c:f6:20:e6:44:23:63:55:98:fe:f4:54:61:11:44: f3:48:f8:0c:e6:cc:d6:17:f4:54:6d:4a:9b:43:5f:8b:f6:d7: 91:b5:d9:83:a0:2b:7a:64:67:45:4c:d8:4e:49:e2:c2:e1:ac: 35:e0:3b:f0:ee:22:0c:63:f6:13:25:a6:3f:d1:5c:0e:bb:24: a4:7f:50:66:01:27:16:6d:8c:25:e9:67:75:8b:2d:74:11:d5: 9f:d3:30:72:bc:4d:fa:90:58:94:22:90:62:a5:ad:d5:68:02: 77:06:51:03:8e:6c:3e:aa:73:be:3e:7f:52:42:f0:d0:5c:f9: df:a9:7f:60:44:81:ee:cc:d8:a7:0b:9d:4c:55:97:0e:c2:39: ac:df:61:a1:44:8e:70:a0:44:cf:92:da:6a:c0:a5:f0:15:c8: 77:12:80:0c:c6:7e:a7:71:68:1b:9b:1f:42:a5:e7:71:e9:81: 1e:ff:5f:7c:a0:e2:cc:c4:b2:fd:f3:64:7d:86:fc:61:15:9b: 63:08:8e:d6:56:97:43:14:53:ae:74:05:a5:f5:98:f7:da:69: 0b:a6:17:59:10:a2:e2:50:8d:78:ff:91:97:f9:55:98:f4:44: f2:35:71:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGqqtftstWyQWTdMu5nZr0vpXdA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENBOUE2 MUExNjE1QzAeFw0yNTEwMTcxOTU2MzVaFw0yNTEwMjEwNTQwMzVaMDMxMTAvBgNV BAMTKDc3Qjg0REY5NDIzMEU2M0UzRkJBM0Q1RjYyM0JFMjM2NEI3RUY1OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEAYzeZGJNB6qt/Si2wxtpdQFH Db+9fLMocT7EoU1LlyzO481XQKDv/Us+/i1szLe6I9b8is4agqKeU8G9na11j8EZ 8IJXe3B/ymbpobIM87ctIR8fOE1S8C5PuGACfUOPh2qCM+TTY2fe8GVH2ZY2CisU L/C7N7ieNpl6lh/GUkEwZDFLALzFVTtMdMhO8yI+4pKmUX6kgPllQspusYrOHz/U zUz/LDVZle6uOGLhSI2rPl0+SPMzthI13ByQLDwsKPmmXkc2aSwiNbgItax1qf3R qDmkyszx9BlxYDqYF2Yr91rb9hIfstD1iOxbY31H+/oLvX1XXWYGMohEeqJlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd7hN+UIw5j4/uj1fYjviNkt+9ZcwHwYDVR0j BBgwFoAUD+2iiPcnXepGmu9MI43KmmGhYVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzM3MGU2Zi1mMGM3LTRmNDAtOGJhNC1hMDFlNWQwYzc0ZTQvMC8wRkVEQTI4OEY3 Mjc1REVBNDY5QUVGNEMyMzhEQ0E5QTYxQTE2MTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENBOUE2MUEx NjE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMzNzBlNmYtZjBjNy00ZjQwLThi YTQtYTAxZTVkMGM3NGU0LzAvMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENB OUE2MUExNjE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXfAtW43XZhQnMmA771NPv6Z1f15oz2IOZE I2NVmP70VGERRPNI+AzmzNYX9FRtSptDX4v215G12YOgK3pkZ0VM2E5J4sLhrDXg O/DuIgxj9hMlpj/RXA67JKR/UGYBJxZtjCXpZ3WLLXQR1Z/TMHK8TfqQWJQikGKl rdVoAncGUQOObD6qc74+f1JC8NBc+d+pf2BEge7M2KcLnUxVlw7COazfYaFEjnCg RM+S2mrApfAVyHcSgAzGfqdxaBubH0Kl53HpgR7/X3yg4szEsv3zZH2G/GEVm2MI jtZWl0MUU650BaX1mPfaaQumF1kQouJQjXj/kZf5VZj0RPI1cTo= -----END CERTIFICATE-----Generated at Sun Oct 19 15:25:39 2025 by rpki-client