$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft File: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft (raw, json) Hash identifier: 4Q/UKCw9Xp96e0J1jmd3ufs7TP9bLOoX5FmXtZE8SSM= Subject key identifier: A4:11:F2:3F:C5:96:94:A4:87:67:75:A1:0A:29:F0:46:B2:B7:6F:50 Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 Certificate issuer: /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Certificate serial: 5247C100D7F85652388C10531CE114F33433B3A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft Manifest number: 0167 Signing time: Wed 23 Jul 2025 07:11:11 +0000 Manifest this update: Wed 23 Jul 2025 07:06:11 +0000 Manifest next update: Sat 26 Jul 2025 13:53:11 +0000 Files and hashes: 1: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl (hash: TIJVY2BkoEKSe/vhwHhpwvU1DVsIpVn/w9xtQCOUikI=) 2: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (hash: aKqDqYBnpCKhc8gJwr/XqiZQGx53wEdqRvJeZczMctg=) 3: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (hash: lN/0N+kBLkh9oCnDV7GHH4dEry+Eu95iWP1NL/JaKa0=) 4: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (hash: 5vckiyQJuSi5InScnRJB6lh0igVA9LU4uDMI9g1nnHk=) 5: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (hash: yEcjBYMEhWAt95OnuEgZE8+ngUIiXOyjNrn3KEwiAMQ=) 6: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (hash: YVW6U8qaSLxFWjHeTdwpm9kiRp4vZO+dMYcJdXXF9qE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 13:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:47:c1:00:d7:f8:56:52:38:8c:10:53:1c:e1:14:f3:34:33:b3:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Validity Not Before: Jul 23 07:06:11 2025 GMT Not After : Jul 26 13:53:11 2025 GMT Subject: CN=A411F23FC59694A4876775A10A29F046B2B76F50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fe:38:5c:98:99:5e:a6:e3:f1:1c:73:75:31: 57:90:17:c8:84:34:e0:98:30:93:a6:c4:81:9b:d4: e2:65:96:0a:ff:c3:ab:36:62:c3:07:9a:42:ba:03: f9:51:61:d3:bd:a9:b6:28:8e:2a:8f:51:2d:f0:87: 2a:d0:66:b5:f2:66:6a:de:4a:2f:f2:4a:92:07:44: be:da:8d:e4:6a:b2:47:3a:dd:ba:4b:ec:8a:16:4c: c8:26:17:a6:1c:e6:0e:35:78:f5:4a:24:1b:dc:f3: 9c:c0:54:dd:e4:08:c0:07:41:9a:99:15:8b:19:81: 61:c4:e2:b3:06:b8:fd:6b:bb:6b:c5:10:b5:15:9f: 65:b2:d8:ca:65:e5:0f:ad:4a:76:3b:a6:31:96:7f: 5a:ff:29:1b:1f:df:22:ee:2e:5f:79:ba:12:29:02: bc:b2:19:88:f3:78:1a:11:0a:cc:50:05:d0:d5:45: 44:7d:86:fa:02:17:f3:ee:e8:22:26:45:ee:8e:c8: 9b:d8:05:48:84:59:db:49:fe:aa:07:fc:5c:4c:e7: cf:bf:33:ef:96:3c:4e:d5:83:a5:e2:8f:bc:3a:90: 9d:6a:de:24:c0:1d:fa:11:b2:e4:63:35:ee:b8:c2: f9:52:c1:9b:55:62:77:3f:82:2c:24:9f:45:b0:8d: 0c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:11:F2:3F:C5:96:94:A4:87:67:75:A1:0A:29:F0:46:B2:B7:6F:50 X509v3 Authority Key Identifier: keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d5:6a:39:da:86:31:0b:7d:c4:b3:dc:b6:42:da:db:56:6b: e8:56:1c:05:93:6d:a7:b7:f4:c6:8f:6a:1a:a4:16:b6:16:b7: 99:f9:38:f8:db:6f:1f:c7:5f:72:5d:e7:12:37:13:a7:69:05: 7f:de:10:ee:56:bb:6b:88:20:81:5c:1b:1a:ae:73:1d:7f:8c: 53:cd:ef:1d:aa:1f:89:8d:65:31:fa:ec:5c:81:2f:20:7a:7d: e2:b7:f3:bf:b5:7e:0b:ca:3f:1d:80:ea:a0:66:28:40:9a:95: 85:e8:e4:9d:b0:e0:53:3e:83:18:dc:08:bc:f0:9b:d8:fb:7b: 5c:cc:89:31:dc:61:39:3f:ea:ef:a8:9b:c2:a5:c4:0a:57:75: 72:1e:75:a1:13:df:80:59:3b:0d:6b:6c:ac:87:be:96:6d:97: a9:2f:16:21:80:38:78:6c:83:22:23:02:d4:b6:e3:a8:00:c8: 8d:ab:74:65:f7:a6:70:d4:71:67:b9:df:08:96:0d:dd:a4:4f: 0c:c2:e2:f7:4e:43:a9:f9:9a:a8:cd:53:9b:c6:a3:33:48:90: f6:60:bd:d5:ad:9e:47:8b:de:c7:c0:16:f8:a6:d7:78:69:7d: 9b:b6:30:10:7d:79:7a:3c:f8:47:dc:e0:e6:19:1f:83:1c:f8: 06:b7:58:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUkfBANf4VlI4jBBTHOEU8zQzs6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJD QUVBREM5NjAeFw0yNTA3MjMwNzA2MTFaFw0yNTA3MjYxMzUzMTFaMDMxMTAvBgNV BAMTKEE0MTFGMjNGQzU5Njk0QTQ4NzY3NzVBMTBBMjlGMDQ2QjJCNzZGNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+/jhcmJlepuPxHHN1MVeQF8iE NOCYMJOmxIGb1OJllgr/w6s2YsMHmkK6A/lRYdO9qbYojiqPUS3whyrQZrXyZmre Si/ySpIHRL7ajeRqskc63bpL7IoWTMgmF6Yc5g41ePVKJBvc85zAVN3kCMAHQZqZ FYsZgWHE4rMGuP1ru2vFELUVn2Wy2Mpl5Q+tSnY7pjGWf1r/KRsf3yLuLl95uhIp AryyGYjzeBoRCsxQBdDVRUR9hvoCF/Pu6CImRe6OyJvYBUiEWdtJ/qoH/FxM58+/ M++WPE7Vg6Xij7w6kJ1q3iTAHfoRsuRjNe64wvlSwZtVYnc/giwkn0WwjQx1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpBHyP8WWlKSHZ3WhCinwRrK3b1AwHwYDVR0j BBgwFoAUDkImpfF2aurnaKKmdsPossrq3JYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTBlNWFjMi1iNmJiLTRiZWMtOWRjOS1lNDMwYTY3MzMyMTYvMC8wRTQyMjZBNUYx NzY2QUVBRTc2OEEyQTY3NkMzRThCMkNBRUFEQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJDQUVB REM5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUwZTVhYzItYjZiYi00YmVjLTlk YzktZTQzMGE2NzMzMjE2LzAvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4 QjJDQUVBREM5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7VajnahjELfcSz3LZC2ttWa+hWHAWTbae3 9MaPahqkFrYWt5n5OPjbbx/HX3Jd5xI3E6dpBX/eEO5Wu2uIIIFcGxqucx1/jFPN 7x2qH4mNZTH67FyBLyB6feK387+1fgvKPx2A6qBmKECalYXo5J2w4FM+gxjcCLzw m9j7e1zMiTHcYTk/6u+om8KlxApXdXIedaET34BZOw1rbKyHvpZtl6kvFiGAOHhs gyIjAtS246gAyI2rdGX3pnDUcWe53wiWDd2kTwzC4vdOQ6n5mqjNU5vGozNIkPZg vdWtnkeL3sfAFvim13hpfZu2MBB9eXo8+Efc4OYZH4Mc+Aa3WNU= -----END CERTIFICATE-----Generated at Fri Jul 25 06:49:52 2025 by rpki-client