$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft File: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft (raw, json) Hash identifier: UvAtNKY2q+RWviBFM6e2RyOgHxfJbXDHAYQWYBOx8oc= Subject key identifier: 20:30:7D:F8:56:9C:D8:2A:67:64:21:1E:1F:84:CB:ED:21:94:04:31 Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 Certificate issuer: /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Certificate serial: 27BCD73FD3A85BD8E6706478AAB276089D9FEE21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft Manifest number: 0151 Signing time: Tue 03 Jun 2025 16:33:05 +0000 Manifest this update: Tue 03 Jun 2025 16:28:05 +0000 Manifest next update: Sat 07 Jun 2025 02:32:05 +0000 Files and hashes: 1: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (hash: 5vckiyQJuSi5InScnRJB6lh0igVA9LU4uDMI9g1nnHk=) 2: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl (hash: ZYj9MNFz35r5rzbSF5LQQiXzu2ulCdaRa5F9/uZmBfw=) 3: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (hash: aKqDqYBnpCKhc8gJwr/XqiZQGx53wEdqRvJeZczMctg=) 4: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (hash: lN/0N+kBLkh9oCnDV7GHH4dEry+Eu95iWP1NL/JaKa0=) 5: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (hash: YVW6U8qaSLxFWjHeTdwpm9kiRp4vZO+dMYcJdXXF9qE=) 6: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (hash: yEcjBYMEhWAt95OnuEgZE8+ngUIiXOyjNrn3KEwiAMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:bc:d7:3f:d3:a8:5b:d8:e6:70:64:78:aa:b2:76:08:9d:9f:ee:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Validity Not Before: Jun 3 16:28:05 2025 GMT Not After : Jun 7 02:32:05 2025 GMT Subject: CN=20307DF8569CD82A6764211E1F84CBED21940431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9f:b6:f8:3e:06:d0:28:2b:32:44:b7:bb:19: c5:6d:b5:98:d5:ee:cf:81:d6:99:f6:41:d5:09:67: e7:4b:47:58:7b:b4:6d:aa:65:2c:b6:4c:d4:d7:d7: 37:61:3e:3d:34:69:f1:90:ae:19:f6:65:8f:b5:81: e2:04:dc:21:de:29:25:00:d8:5d:89:0b:6c:b4:f5: 12:23:69:21:c2:5f:c7:ad:8c:6b:1f:05:ee:84:ea: c5:20:bd:e7:fe:b4:13:4a:09:92:8e:b0:ef:6b:73: 7e:01:a4:50:0d:bc:c2:c2:e2:09:3e:a8:60:9f:2c: a2:90:ad:45:1d:cb:58:27:a6:2f:eb:f0:b1:39:7f: aa:b5:c5:7c:5d:5c:01:be:c9:32:ac:86:c2:e0:2a: 44:0d:bc:1c:8b:10:f2:77:1c:d5:92:8f:fc:92:1a: 16:8c:6c:15:62:2e:4e:7f:8f:20:8b:5a:a8:18:56: 0c:7c:f4:5e:ab:4a:15:8e:7a:ed:e4:2c:d3:24:f6: 72:78:6b:39:73:c1:04:02:d0:0a:95:b5:df:cc:1f: 52:09:ef:f7:75:cd:ed:bf:3e:85:f7:72:f8:48:0e: 9a:10:71:50:90:9c:c3:4d:e9:75:98:4d:fb:cd:cd: 7b:f0:72:91:4f:dc:af:27:e9:6c:ef:76:49:96:30: 54:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:30:7D:F8:56:9C:D8:2A:67:64:21:1E:1F:84:CB:ED:21:94:04:31 X509v3 Authority Key Identifier: keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:7b:52:69:91:f7:92:60:03:4a:23:ac:64:cd:09:1f:ee:c4: 9c:13:84:69:55:dc:f6:cc:8b:06:c1:64:f4:87:d7:48:e5:cb: 17:ec:21:33:91:c8:43:73:6b:1a:2c:db:7f:7c:dc:3e:fb:22: 18:06:ae:8c:0a:e3:2a:b4:bc:cd:2b:43:9d:cb:d2:55:b1:c9: 78:51:7b:d5:9e:64:d1:3c:b5:3e:f2:01:ea:6b:5e:2c:07:88: 4d:ef:3a:8c:58:4d:fd:76:e6:5e:a1:d7:cb:92:70:f6:54:65: 5e:a3:54:44:e5:a0:39:21:cf:a8:a7:e4:89:24:3c:f3:fb:23: c6:0c:33:ba:4c:49:60:35:52:20:a5:e0:2c:cf:f5:90:df:2f: fd:b5:44:b0:fc:d9:cd:80:1c:43:18:94:4b:e0:54:f9:82:40: c4:cb:90:80:a3:ea:12:0d:83:bc:9b:fe:ef:ed:32:32:93:fb: 6d:ab:2f:0e:41:a7:34:f3:9d:c0:16:28:e3:cb:bb:2a:fd:87: 5c:0b:5e:96:a4:95:b6:1c:ba:9a:74:ab:67:a3:b1:2c:ec:3f: d3:7c:fe:b4:4e:85:2c:ac:b8:f0:e3:26:be:5d:86:ff:13:54: d1:98:79:65:6d:51:5d:4c:66:b5:e2:fc:46:f5:5d:47:6a:5e: b4:91:00:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ7zXP9OoW9jmcGR4qrJ2CJ2f7iEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJD QUVBREM5NjAeFw0yNTA2MDMxNjI4MDVaFw0yNTA2MDcwMjMyMDVaMDMxMTAvBgNV BAMTKDIwMzA3REY4NTY5Q0Q4MkE2NzY0MjExRTFGODRDQkVEMjE5NDA0MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmn7b4PgbQKCsyRLe7GcVttZjV 7s+B1pn2QdUJZ+dLR1h7tG2qZSy2TNTX1zdhPj00afGQrhn2ZY+1geIE3CHeKSUA 2F2JC2y09RIjaSHCX8etjGsfBe6E6sUgvef+tBNKCZKOsO9rc34BpFANvMLC4gk+ qGCfLKKQrUUdy1gnpi/r8LE5f6q1xXxdXAG+yTKshsLgKkQNvByLEPJ3HNWSj/yS GhaMbBViLk5/jyCLWqgYVgx89F6rShWOeu3kLNMk9nJ4azlzwQQC0AqVtd/MH1IJ 7/d1ze2/PoX3cvhIDpoQcVCQnMNN6XWYTfvNzXvwcpFP3K8n6WzvdkmWMFT/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIDB9+Fac2CpnZCEeH4TL7SGUBDEwHwYDVR0j BBgwFoAUDkImpfF2aurnaKKmdsPossrq3JYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTBlNWFjMi1iNmJiLTRiZWMtOWRjOS1lNDMwYTY3MzMyMTYvMC8wRTQyMjZBNUYx NzY2QUVBRTc2OEEyQTY3NkMzRThCMkNBRUFEQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJDQUVB REM5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUwZTVhYzItYjZiYi00YmVjLTlk YzktZTQzMGE2NzMzMjE2LzAvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4 QjJDQUVBREM5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJ7UmmR95JgA0ojrGTNCR/uxJwThGlV3PbM iwbBZPSH10jlyxfsITORyENzaxos23983D77IhgGrowK4yq0vM0rQ53L0lWxyXhR e9WeZNE8tT7yAeprXiwHiE3vOoxYTf125l6h18uScPZUZV6jVETloDkhz6in5Ikk PPP7I8YMM7pMSWA1UiCl4CzP9ZDfL/21RLD82c2AHEMYlEvgVPmCQMTLkICj6hIN g7yb/u/tMjKT+22rLw5BpzTzncAWKOPLuyr9h1wLXpaklbYcupp0q2ejsSzsP9N8 /rROhSysuPDjJr5dhv8TVNGYeWVtUV1MZrXi/Eb1XUdqXrSRAIY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:59:45 2025 by rpki-client