$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft File: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft (raw, json) Hash identifier: /ooansxNvTvQMIijX2RzzY9q4hOC3Ypw5nMtaYhGBzQ= Subject key identifier: 2F:79:DE:C9:42:7D:92:7E:E3:23:AA:51:20:63:72:0F:D0:49:2D:89 Authority key identifier: 0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F Certificate issuer: /CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Certificate serial: 1028E8EAF31976DD47E94562061457AA4A76CCF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft Manifest number: 7B Signing time: Sat 06 Sep 2025 08:11:13 +0000 Manifest this update: Sat 06 Sep 2025 08:06:13 +0000 Manifest next update: Tue 09 Sep 2025 18:19:13 +0000 Files and hashes: 1: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl (hash: 8DsS+o/8JaIIe7iPLtlf8vkzamhrkiP7QNK7Pfr3aJA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 18:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:28:e8:ea:f3:19:76:dd:47:e9:45:62:06:14:57:aa:4a:76:cc:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Validity Not Before: Sep 6 08:06:13 2025 GMT Not After : Sep 9 18:19:13 2025 GMT Subject: CN=2F79DEC9427D927EE323AA512063720FD0492D89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d5:d7:43:6d:e1:f0:a9:29:9d:2d:17:23:ed: 39:66:41:51:aa:d6:ce:ec:68:bb:d1:bf:ad:49:22: 8a:6d:d9:fa:c4:82:12:77:0f:74:50:e7:1b:3e:b8: ab:6f:e6:22:e3:8e:3f:0c:9a:d8:0a:6c:12:d7:a4: 07:8a:48:12:bc:e8:72:68:49:7a:fb:a3:f4:95:9b: 61:7e:5c:53:11:ab:1d:c1:e9:93:5c:9e:01:58:e7: 46:a9:e2:b2:c4:ff:c2:20:55:ad:b3:7a:7f:c3:3a: 8f:14:df:51:39:97:f1:e8:38:db:df:68:a0:40:2b: 40:4a:69:3f:81:3e:54:6b:a5:04:a1:ea:1f:06:b1: 7a:47:43:fc:88:98:22:41:81:7b:41:4d:dd:36:cf: e3:a2:39:53:d4:0a:87:24:07:01:74:58:e7:ed:eb: 42:27:f2:c0:76:60:16:6a:25:8a:2c:c0:1d:d5:dc: 4e:80:ee:a1:8d:63:ce:9c:c1:c0:24:50:74:a2:2f: 35:3e:76:2c:c9:fa:09:dc:0f:95:49:24:11:39:d4: 66:06:1c:6e:10:59:18:20:6b:09:d5:c7:63:fe:12: 28:12:f9:53:51:bb:81:83:ef:72:37:75:ce:63:dc: 6c:ec:81:ff:cf:6b:cc:35:d4:8b:ed:90:63:78:91: 29:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:79:DE:C9:42:7D:92:7E:E3:23:AA:51:20:63:72:0F:D0:49:2D:89 X509v3 Authority Key Identifier: keyid:0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:9b:1c:fa:13:58:d7:9c:1b:ae:95:2d:3d:47:81:7e:28:07: 9f:f6:00:1f:b4:c3:a6:f6:a3:4a:3f:91:99:09:39:f5:67:7e: 1b:68:d5:c9:4f:37:84:a8:6e:73:e9:75:e1:3e:4a:57:60:08: 63:68:6b:58:ed:f2:29:80:ee:ff:d9:74:3e:00:01:63:8a:1b: af:52:96:64:a4:22:87:a8:96:c6:e7:02:a9:f2:76:12:3b:ba: 54:2d:8d:d8:f0:a1:fb:cd:9c:b7:5a:11:37:de:49:76:1f:c9: ae:b2:77:28:24:2b:05:c9:52:c9:8e:29:08:b3:a5:fe:c5:b7: 90:7a:84:eb:fe:d2:e5:54:9b:20:ce:f8:8b:b3:9d:59:0c:4a: 1d:c5:ce:44:c0:36:dd:62:53:ae:32:02:b2:0d:d1:95:c0:b0: e4:7b:03:ef:96:22:77:62:15:3c:36:c2:18:14:43:49:f8:26: fb:45:46:29:01:3a:36:57:62:35:36:08:4f:32:df:ee:f1:bd: 41:d3:e2:4d:dc:39:ba:be:8c:99:33:a5:07:4e:40:a8:82:6e: 99:90:86:79:29:a9:18:e3:5e:b4:24:75:10:fa:fe:45:a0:4c: 94:06:83:f9:e5:b2:42:b4:cc:37:f0:d0:ec:69:9f:e8:b0:e9: 0e:5e:af:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUECjo6vMZdt1H6UViBhRXqkp2zPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZF NTFCMjgwRjAeFw0yNTA5MDYwODA2MTNaFw0yNTA5MDkxODE5MTNaMDMxMTAvBgNV BAMTKDJGNzlERUM5NDI3RDkyN0VFMzIzQUE1MTIwNjM3MjBGRDA0OTJEODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB1ddDbeHwqSmdLRcj7TlmQVGq 1s7saLvRv61JIopt2frEghJ3D3RQ5xs+uKtv5iLjjj8MmtgKbBLXpAeKSBK86HJo SXr7o/SVm2F+XFMRqx3B6ZNcngFY50ap4rLE/8IgVa2zen/DOo8U31E5l/HoONvf aKBAK0BKaT+BPlRrpQSh6h8GsXpHQ/yImCJBgXtBTd02z+OiOVPUCockBwF0WOft 60In8sB2YBZqJYoswB3V3E6A7qGNY86cwcAkUHSiLzU+dizJ+gncD5VJJBE51GYG HG4QWRggawnVx2P+EigS+VNRu4GD73I3dc5j3Gzsgf/Pa8w11IvtkGN4kSn/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL3neyUJ9kn7jI6pRIGNyD9BJLYkwHwYDVR0j BBgwFoAUD0S/JY118tHERdUpwwFfn+UbKA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMC8wRjQ0QkYyNThE NzVGMkQxQzQ0NUQ1MjlDMzAxNUY5RkU1MUIyODBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZFNTFC MjgwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzAvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVG OUZFNTFCMjgwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGbHPoTWNecG66VLT1HgX4oB5/2AB+0w6b2 o0o/kZkJOfVnfhto1clPN4SobnPpdeE+SldgCGNoa1jt8imA7v/ZdD4AAWOKG69S lmSkIoeolsbnAqnydhI7ulQtjdjwofvNnLdaETfeSXYfya6ydygkKwXJUsmOKQiz pf7Ft5B6hOv+0uVUmyDO+IuznVkMSh3FzkTANt1iU64yArIN0ZXAsOR7A++WIndi FTw2whgUQ0n4JvtFRikBOjZXYjU2CE8y3+7xvUHT4k3cObq+jJkzpQdOQKiCbpmQ hnkpqRjjXrQkdRD6/kWgTJQGg/nlskK0zDfw0Oxpn+iw6Q5erwA= -----END CERTIFICATE-----Generated at Mon Sep 8 05:35:24 2025 by rpki-client