$ rpki-client -vvf repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft File: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft (raw, json) Hash identifier: UjGE2N8UkV1XsXgCBRuioLHRWfDEJWNVAbLdPw1qmxY= Subject key identifier: A6:EB:59:23:A2:77:E4:E2:CE:D2:ED:39:75:D9:C6:55:3E:72:47:C9 Authority key identifier: 0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C Certificate issuer: /CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C Certificate serial: 06843C8A23EB315ECD58706B7F76B00F1AB98999 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft Manifest number: 0136 Signing time: Wed 03 Sep 2025 18:01:46 +0000 Manifest this update: Wed 03 Sep 2025 17:56:46 +0000 Manifest next update: Sun 07 Sep 2025 03:48:46 +0000 Files and hashes: 1: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl (hash: RpnRMt0s/hrc8wfHR+tkTG6q8ow+ZwFSL4ZSF8ccdKg=) 2: 3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa (hash: ki0hIXEeGo8cU77Xr7lKfx7zoFMhB4mSH2tdcqcaUcQ=) 3: 323030313a6466303a663963303a3a2f34382d3438203d3e20313439393037.roa (hash: dQqh/UiHoQw/70mJd+ZId7SvE382IQVHD0RnWmbxwtI=) 4: 3130332e3139302e3131332e302f32342d3234203d3e20313439393037.roa (hash: 3qwvc0M9032XGDH7vraV4T7cy4QhAdHQHEpVds7HICk=) 5: 3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa (hash: RiJQOn+iteWsGaHDQ7CJgxTOw5x3cmMgsW4Cbj99H/E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 03:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:84:3c:8a:23:eb:31:5e:cd:58:70:6b:7f:76:b0:0f:1a:b9:89:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C Validity Not Before: Sep 3 17:56:46 2025 GMT Not After : Sep 7 03:48:46 2025 GMT Subject: CN=A6EB5923A277E4E2CED2ED3975D9C6553E7247C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a0:4c:fa:07:4a:23:e8:20:e7:e9:0b:cd:b3: 1b:10:48:ae:ee:39:88:6c:a8:27:19:28:82:35:cb: 06:c4:bc:eb:a6:d5:8e:c1:68:84:f5:28:1b:c7:e6: dd:8b:d5:b5:17:5e:5d:75:5f:c1:e9:0b:be:41:bf: b6:22:c8:36:f9:b0:99:e6:bb:69:87:94:2c:83:33: 1d:77:09:7f:bc:d1:c7:1a:ed:2e:68:c5:98:ea:8c: 37:be:53:05:14:c1:a2:2b:a4:1d:47:bd:8f:de:46: 61:66:2b:b1:ab:70:ba:be:df:14:82:ae:f5:79:92: 4a:3d:90:40:c2:14:fb:f7:52:f6:2f:ab:09:c1:08: 49:55:cc:ce:82:99:a4:0d:ff:3b:4f:fd:51:79:70: 80:da:49:62:0f:d6:81:7f:8a:fc:5a:ea:60:a2:1a: 38:6a:2f:7c:6b:d5:b6:af:59:3b:5e:56:f7:86:af: 49:97:98:bb:6e:35:53:69:21:19:52:dc:66:07:c2: d8:6f:b0:3f:ef:a9:0b:f5:52:e7:c5:7d:05:2a:cd: 54:f4:1c:dd:1f:ae:03:28:52:05:68:46:1e:a2:f0: 1e:2d:a4:8b:33:f0:45:f9:8b:08:70:83:46:01:b2: 18:2b:f5:88:b5:8b:59:5a:1f:11:4c:97:5c:db:75: 97:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EB:59:23:A2:77:E4:E2:CE:D2:ED:39:75:D9:C6:55:3E:72:47:C9 X509v3 Authority Key Identifier: keyid:0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:70:f3:3b:31:d4:19:bd:1d:a6:93:de:29:ee:ac:75:ad:56: aa:46:2e:49:a9:b5:41:56:6b:d0:07:f4:30:06:00:3a:2b:c3: a7:ea:e4:d4:7a:45:61:ba:ac:87:ce:0e:af:90:10:be:92:d2: 24:dc:88:51:85:5e:3a:db:bb:80:2c:49:1a:74:23:67:ea:56: 90:68:ea:ca:0f:5b:f9:70:67:a7:9c:0b:87:f8:f2:81:5f:0f: 7a:5b:d6:4f:35:0a:6c:b7:63:6c:5b:7f:30:63:ec:63:16:a6: 73:2e:9b:c5:20:29:af:7f:57:27:fb:9b:28:f6:38:80:28:e3: 54:01:8d:50:5b:08:1e:41:93:47:35:43:b2:cd:a8:20:f2:9f: ba:ab:94:94:8f:05:93:7e:85:6f:83:64:84:07:bb:56:12:69: 95:a2:6f:bf:c8:ae:8a:f4:49:37:f1:bb:43:60:41:4e:37:2b: 2f:e3:df:3c:d4:2c:f2:88:2a:cb:5d:ef:e4:fe:21:38:35:fc: 08:19:b6:d6:ee:ce:9c:d4:af:67:7d:01:88:85:0a:dc:d4:5f: 7f:08:e8:65:ef:0e:ff:e5:ee:e1:cb:a2:78:e5:24:03:dd:66: bb:0a:36:71:ab:28:df:b8:21:af:17:9a:3e:a3:c2:f5:5e:82: 34:14:5b:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBoQ8iiPrMV7NWHBrf3awDxq5iZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBBQ0RC N0UwQkEwQzAeFw0yNTA5MDMxNzU2NDZaFw0yNTA5MDcwMzQ4NDZaMDMxMTAvBgNV BAMTKEE2RUI1OTIzQTI3N0U0RTJDRUQyRUQzOTc1RDlDNjU1M0U3MjQ3QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQoEz6B0oj6CDn6QvNsxsQSK7u OYhsqCcZKII1ywbEvOum1Y7BaIT1KBvH5t2L1bUXXl11X8HpC75Bv7YiyDb5sJnm u2mHlCyDMx13CX+80cca7S5oxZjqjDe+UwUUwaIrpB1HvY/eRmFmK7GrcLq+3xSC rvV5kko9kEDCFPv3UvYvqwnBCElVzM6CmaQN/ztP/VF5cIDaSWIP1oF/ivxa6mCi GjhqL3xr1bavWTteVveGr0mXmLtuNVNpIRlS3GYHwthvsD/vqQv1UufFfQUqzVT0 HN0frgMoUgVoRh6i8B4tpIsz8EX5iwhwg0YBshgr9Yi1i1laHxFMl1zbdZf5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUputZI6J35OLO0u05ddnGVT5yR8kwHwYDVR0j BBgwFoAUDOHhEUbiUdDNUr2DehoKzbfgugwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDUxNmE3YS00MTk1LTQ0YjMtYTI0ZS1jZjhlZDU3OGQ3OTEvMC8wQ0UxRTExMTQ2 RTI1MUQwQ0Q1MkJEODM3QTFBMEFDREI3RTBCQTBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBBQ0RCN0Uw QkEwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjA1MTZhN2EtNDE5NS00NGIzLWEy NGUtY2Y4ZWQ1NzhkNzkxLzAvMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBB Q0RCN0UwQkEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVw8zsx1Bm9HaaT3inurHWtVqpGLkmptUFW a9AH9DAGADorw6fq5NR6RWG6rIfODq+QEL6S0iTciFGFXjrbu4AsSRp0I2fqVpBo 6soPW/lwZ6ecC4f48oFfD3pb1k81Cmy3Y2xbfzBj7GMWpnMum8UgKa9/Vyf7myj2 OIAo41QBjVBbCB5Bk0c1Q7LNqCDyn7qrlJSPBZN+hW+DZIQHu1YSaZWib7/Iror0 STfxu0NgQU43Ky/j3zzULPKIKstd7+T+ITg1/AgZttbuzpzUr2d9AYiFCtzUX38I 6GXvDv/l7uHLonjlJAPdZrsKNnGrKN+4Ia8Xmj6jwvVegjQUW1s= -----END CERTIFICATE-----Generated at Fri Sep 5 12:38:45 2025 by rpki-client