$ rpki-client -vvf repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft File: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft (raw, json) Hash identifier: sRrIqPKrj84mQN6DJZQkMHRq4vnUdSTEgIB+JImr0pk= Subject key identifier: 66:9C:89:07:5C:92:D3:1D:8D:2D:E6:36:DB:9E:73:FB:6A:17:8B:A0 Authority key identifier: 0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C Certificate issuer: /CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Certificate serial: 0B5369DC9E2F21BF6165012351AB593AAD79146B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft Manifest number: 050A Signing time: Sun 07 Sep 2025 10:11:15 +0000 Manifest this update: Sun 07 Sep 2025 10:06:15 +0000 Manifest next update: Wed 10 Sep 2025 17:11:15 +0000 Files and hashes: 1: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl (hash: /Px5W3WHBsIWYdzmGi4ClaFIveObI9MAJBZakf8IuSE=) 2: 3130332e37372e3135362e302f32322d3234203d3e20313530393432.roa (hash: xsKvhGKuMBIEnxPyQJ6c1MbwsbCuaDw/dOSB6iinnF8=) 3: 3130332e37372e3135372e302f32342d3234203d3e20313530393432.roa (hash: 3IbW6k7SAGrr4pbFBGvz2rrnQK3BJBcsh2+owUjptuk=) 4: 323430373a396338303a3a2f33322d3438203d3e20313335343834.roa (hash: PjdoU1IlaOBuAqcQYAfTUBsBWxQvsuLv55cXKjpLDcw=) 5: 3130332e37372e3135382e302f32342d3234203d3e20313530393432.roa (hash: t8s5ystlDMfZCpSFPrSjj+O0ZGC5ZqPSgcrBHxoO7nw=) 6: 3130332e37372e3135362e302f32342d3234203d3e20313530393432.roa (hash: mutFIy9cyMdV34tHn/8oq/u/DLJVfOqwJjG4+C2iVbI=) 7: 3130332e37372e3135392e302f32342d3234203d3e20313530393432.roa (hash: loCe/wiZD3uLK0lxj/ON/hC7aF16TlJ0k6a7aHCbdJk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 17:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:53:69:dc:9e:2f:21:bf:61:65:01:23:51:ab:59:3a:ad:79:14:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Validity Not Before: Sep 7 10:06:15 2025 GMT Not After : Sep 10 17:11:15 2025 GMT Subject: CN=669C89075C92D31D8D2DE636DB9E73FB6A178BA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e5:62:77:02:b7:7a:d9:29:1a:10:67:87:88: c9:14:36:e3:9f:56:04:42:10:74:29:43:0a:f1:95: cd:4a:a8:ea:73:ad:92:a6:96:19:ad:5a:8e:bc:a1: a2:8e:06:2c:f2:b5:9f:42:10:aa:15:26:d7:9b:30: f7:85:38:7a:92:ca:0c:00:dd:dd:0a:54:51:04:58: c5:e2:60:83:ea:74:26:d8:c4:3a:14:5a:53:95:fa: cd:cb:dd:d7:ff:ae:65:01:5b:51:ad:21:cf:26:1a: 81:8c:78:7a:b9:a8:40:a1:4f:f5:e9:94:f9:d0:b6: df:fd:3e:5b:0c:ac:18:c1:a2:b3:0a:99:24:47:0c: 99:f5:bd:90:71:2d:18:8c:6b:14:62:09:d1:16:93: 3b:09:ca:71:59:4d:2e:d3:44:5d:ba:23:60:23:9f: c6:ef:b6:dc:4b:05:7d:95:1a:24:01:60:54:f2:21: 77:fb:11:05:32:c3:c2:e8:be:48:b5:fc:c5:90:8f: dd:e9:03:d6:f5:6d:9e:23:57:70:26:20:c2:04:cb: 78:2e:7c:bc:4a:90:da:ef:3e:ea:49:ea:65:b4:7a: 6f:b8:cc:a0:cf:b0:68:1c:e6:9c:e3:e0:a0:61:2d: bc:7f:01:0b:16:21:6e:3d:6b:5c:40:f8:08:80:0a: a4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9C:89:07:5C:92:D3:1D:8D:2D:E6:36:DB:9E:73:FB:6A:17:8B:A0 X509v3 Authority Key Identifier: keyid:0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:82:06:68:10:de:48:f2:55:18:06:71:bf:f4:c0:5b:89:10: a9:9a:61:15:45:a7:5b:a7:9f:6e:7c:cd:cf:f2:01:b8:7a:dd: 22:8b:0c:2c:c2:54:af:d8:e8:95:c6:1e:3b:b9:2b:aa:ef:c4: 0f:3f:94:be:8b:c1:a8:48:18:97:40:69:55:fa:28:f0:d7:62: b7:6b:ae:f5:f6:c7:5c:3e:ff:57:b6:91:c4:99:93:e0:b1:68: 81:94:84:e9:0e:b8:8c:25:dc:8f:7d:4c:5d:34:94:56:40:cb: d3:3a:e1:aa:93:67:bb:a8:b7:1b:73:1a:8c:27:9d:1b:4c:25: fe:37:ca:23:a3:65:ff:9a:7f:15:db:d8:67:1d:ba:be:3b:d4: 24:7e:44:44:54:79:28:e7:5c:01:6a:c5:4b:df:d3:96:3a:24: 37:49:4a:81:48:cd:9a:cc:3d:49:b2:01:45:03:97:42:af:91: 24:29:e5:44:2f:d7:f2:37:f2:76:17:b0:a6:3b:7c:d8:85:b4: 21:81:6b:32:46:d4:70:ea:70:44:4f:d8:a3:41:e6:ad:c3:10: 3b:96:2b:af:c7:cf:7d:2d:d5:35:37:ac:78:0f:28:1f:e0:94: 1d:85:1a:94:10:a9:a6:fa:6e:90:58:ae:80:1e:b8:a8:7c:9d: 3b:48:06:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC1Np3J4vIb9hZQEjUatZOq15FGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5 Nzk3RUE2QzAeFw0yNTA5MDcxMDA2MTVaFw0yNTA5MTAxNzExMTVaMDMxMTAvBgNV BAMTKDY2OUM4OTA3NUM5MkQzMUQ4RDJERTYzNkRCOUU3M0ZCNkExNzhCQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC85WJ3Ard62SkaEGeHiMkUNuOf VgRCEHQpQwrxlc1KqOpzrZKmlhmtWo68oaKOBizytZ9CEKoVJtebMPeFOHqSygwA 3d0KVFEEWMXiYIPqdCbYxDoUWlOV+s3L3df/rmUBW1GtIc8mGoGMeHq5qEChT/Xp lPnQtt/9PlsMrBjBorMKmSRHDJn1vZBxLRiMaxRiCdEWkzsJynFZTS7TRF26I2Aj n8bvttxLBX2VGiQBYFTyIXf7EQUyw8Lovki1/MWQj93pA9b1bZ4jV3AmIMIEy3gu fLxKkNrvPupJ6mW0em+4zKDPsGgc5pzj4KBhLbx/AQsWIW49a1xA+AiACqSLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZpyJB1yS0x2NLeY2255z+2oXi6AwHwYDVR0j BBgwFoAUDoY3wj/X/Rq/kbAl5IBAkJeX6mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzNmMjI4OC04OGNmLTRkMmItYmJhNi1hMDNkZDVmODM3NjEvMC8wRTg2MzdDMjNG RDdGRDFBQkY5MUIwMjVFNDgwNDA5MDk3OTdFQTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5Nzk3 RUE2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWMzZjIyODgtODhjZi00ZDJiLWJi YTYtYTAzZGQ1ZjgzNzYxLzAvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQw OTA5Nzk3RUE2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeCBmgQ3kjyVRgGcb/0wFuJEKmaYRVFp1un n258zc/yAbh63SKLDCzCVK/Y6JXGHju5K6rvxA8/lL6LwahIGJdAaVX6KPDXYrdr rvX2x1w+/1e2kcSZk+CxaIGUhOkOuIwl3I99TF00lFZAy9M64aqTZ7uotxtzGown nRtMJf43yiOjZf+afxXb2Gcdur471CR+RERUeSjnXAFqxUvf05Y6JDdJSoFIzZrM PUmyAUUDl0KvkSQp5UQv1/I38nYXsKY7fNiFtCGBazJG1HDqcERP2KNB5q3DEDuW K6/Hz30t1TU3rHgPKB/glB2FGpQQqab6bpBYroAeuKh8nTtIBhQ= -----END CERTIFICATE-----Generated at Tue Sep 9 14:15:21 2025 by rpki-client