$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft File: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft (raw, json) Hash identifier: uTqm8PMigwkLZ4kfz1Q7+qYUsyIxUqWOb/UMuBUv7dM= Subject key identifier: 36:11:81:19:AA:4B:D2:C9:45:6A:F6:26:93:42:1A:43:72:6C:E1:25 Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 Certificate issuer: /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Certificate serial: 6BE13B686A650D8DC99D831DD2DBA2D410A017BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft Manifest number: 0166 Signing time: Mon 21 Jul 2025 03:11:11 +0000 Manifest this update: Mon 21 Jul 2025 03:06:11 +0000 Manifest next update: Thu 24 Jul 2025 07:06:11 +0000 Files and hashes: 1: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl (hash: 1fNEZ0tPHzgmWLkIuznefuPSe79XgvN4gh0+xipQeJs=) 2: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (hash: 5vckiyQJuSi5InScnRJB6lh0igVA9LU4uDMI9g1nnHk=) 3: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (hash: YVW6U8qaSLxFWjHeTdwpm9kiRp4vZO+dMYcJdXXF9qE=) 4: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (hash: lN/0N+kBLkh9oCnDV7GHH4dEry+Eu95iWP1NL/JaKa0=) 5: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (hash: yEcjBYMEhWAt95OnuEgZE8+ngUIiXOyjNrn3KEwiAMQ=) 6: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (hash: aKqDqYBnpCKhc8gJwr/XqiZQGx53wEdqRvJeZczMctg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 07:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e1:3b:68:6a:65:0d:8d:c9:9d:83:1d:d2:db:a2:d4:10:a0:17:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Validity Not Before: Jul 21 03:06:11 2025 GMT Not After : Jul 24 07:06:11 2025 GMT Subject: CN=36118119AA4BD2C9456AF62693421A43726CE125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:62:d4:de:3e:9b:14:dc:01:70:91:0a:e0:ab: 32:03:a1:5e:42:02:b8:77:1f:e3:0d:6b:ae:14:81: fa:47:ac:9a:bd:b7:30:98:31:75:94:c9:03:9d:df: af:ce:4c:4c:e1:5a:18:45:17:c7:b8:c7:e2:41:32: 21:a2:9f:8b:75:c4:6b:b5:ea:1f:75:b1:b2:7b:93: 07:1f:a8:15:a3:15:23:d2:ad:7e:b2:92:29:c1:3f: d7:26:53:78:af:ee:80:51:ba:65:03:1c:28:33:21: f2:b3:b3:a0:d3:5d:32:93:71:88:db:cb:34:9f:3c: 58:15:40:df:46:06:1f:5e:99:51:cd:27:1c:93:70: 13:0c:37:b3:60:9c:d8:89:6a:0b:37:71:34:f3:27: c9:68:9b:c5:b2:72:b5:8c:81:d4:06:6b:e7:ee:71: a6:b8:00:f1:54:e2:04:90:91:65:11:7f:77:36:8e: 9b:f2:9d:04:ff:8e:27:c2:b8:6c:fa:51:4a:ba:07: d0:41:37:8b:7a:54:17:a4:46:ea:6d:9c:59:4a:9f: 23:6d:ba:8c:98:70:5e:8b:23:09:eb:73:64:9c:e8: 07:5b:f5:4f:16:a2:52:a9:e4:e8:4a:cc:55:55:d4: 6d:17:06:0f:70:fe:4b:4e:38:ee:7a:81:b4:49:3e: 7e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:11:81:19:AA:4B:D2:C9:45:6A:F6:26:93:42:1A:43:72:6C:E1:25 X509v3 Authority Key Identifier: keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ce:37:2e:d0:0b:06:17:b8:63:07:95:87:ab:45:86:18:24: bb:a0:16:7e:d7:dc:67:e3:59:d1:24:fd:2e:e8:53:00:e5:66: 12:f3:15:50:96:14:d1:0e:65:71:9d:f0:9c:a8:8b:53:97:5e: 04:6e:5d:fd:e7:bb:00:d9:c8:c8:ac:4e:44:51:c8:87:79:f9: 9c:fa:5a:f6:58:53:09:04:cf:03:f5:74:cf:6e:b3:77:d0:54: 51:a7:52:e3:4e:0e:2d:ab:56:e7:f1:ba:ba:c7:79:e9:8f:d5: 2f:82:3d:66:ae:54:ac:c5:3d:25:f3:83:b6:8e:23:00:a5:22: fc:e8:02:7a:8a:9e:80:9b:44:fc:7e:b5:e1:a3:2f:16:bf:31: 5e:fd:dd:9f:4a:ec:a8:b8:ab:56:44:fd:0a:f8:62:47:2c:5c: 12:32:6f:f6:d0:87:40:49:ab:e7:b2:15:18:fe:56:c7:03:93: 32:c7:81:f5:9d:e8:0f:c1:f8:84:bc:24:cd:ca:e8:f2:b9:f6: f2:d7:9d:56:f2:c8:fb:82:2c:b6:a7:2a:71:c9:68:be:05:34: fa:7b:a5:12:32:40:b1:2e:cf:21:e3:20:09:85:34:06:07:a9: e7:51:b8:79:3c:b3:d6:b7:8f:fe:4c:24:e0:ab:8a:43:86:16: eb:f6:c1:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa+E7aGplDY3JnYMd0tui1BCgF70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJD QUVBREM5NjAeFw0yNTA3MjEwMzA2MTFaFw0yNTA3MjQwNzA2MTFaMDMxMTAvBgNV BAMTKDM2MTE4MTE5QUE0QkQyQzk0NTZBRjYyNjkzNDIxQTQzNzI2Q0UxMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfYtTePpsU3AFwkQrgqzIDoV5C Arh3H+MNa64UgfpHrJq9tzCYMXWUyQOd36/OTEzhWhhFF8e4x+JBMiGin4t1xGu1 6h91sbJ7kwcfqBWjFSPSrX6ykinBP9cmU3iv7oBRumUDHCgzIfKzs6DTXTKTcYjb yzSfPFgVQN9GBh9emVHNJxyTcBMMN7NgnNiJags3cTTzJ8lom8WycrWMgdQGa+fu caa4APFU4gSQkWURf3c2jpvynQT/jifCuGz6UUq6B9BBN4t6VBekRuptnFlKnyNt uoyYcF6LIwnrc2Sc6Adb9U8WolKp5OhKzFVV1G0XBg9w/ktOOO56gbRJPn5zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNhGBGapL0slFavYmk0IaQ3Js4SUwHwYDVR0j BBgwFoAUDkImpfF2aurnaKKmdsPossrq3JYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTBlNWFjMi1iNmJiLTRiZWMtOWRjOS1lNDMwYTY3MzMyMTYvMC8wRTQyMjZBNUYx NzY2QUVBRTc2OEEyQTY3NkMzRThCMkNBRUFEQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJDQUVB REM5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUwZTVhYzItYjZiYi00YmVjLTlk YzktZTQzMGE2NzMzMjE2LzAvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4 QjJDQUVBREM5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrONy7QCwYXuGMHlYerRYYYJLugFn7X3Gfj WdEk/S7oUwDlZhLzFVCWFNEOZXGd8Jyoi1OXXgRuXf3nuwDZyMisTkRRyId5+Zz6 WvZYUwkEzwP1dM9us3fQVFGnUuNODi2rVufxurrHeemP1S+CPWauVKzFPSXzg7aO IwClIvzoAnqKnoCbRPx+teGjLxa/MV793Z9K7Ki4q1ZE/Qr4YkcsXBIyb/bQh0BJ q+eyFRj+VscDkzLHgfWd6A/B+IS8JM3K6PK59vLXnVbyyPuCLLanKnHJaL4FNPp7 pRIyQLEuzyHjIAmFNAYHqedRuHk8s9a3j/5MJOCrikOGFuv2wdM= -----END CERTIFICATE-----Generated at Wed Jul 23 02:14:19 2025 by rpki-client