$ rpki-client -vvf repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft File: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft (raw, json) Hash identifier: bFve+s7rrbTgg1zlgrrxS7vyxqYj0t8ZPWQqqnflc7c= Subject key identifier: 00:59:7B:89:59:CD:8A:16:B6:2F:49:43:C5:37:D7:F2:84:9A:8E:8D Authority key identifier: 0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C Certificate issuer: /CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C Certificate serial: 28C72B35520F29E79C947B97939C0AAC12B34C01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft Manifest number: 010C Signing time: Tue 03 Jun 2025 12:52:43 +0000 Manifest this update: Tue 03 Jun 2025 12:47:43 +0000 Manifest next update: Fri 06 Jun 2025 14:11:43 +0000 Files and hashes: 1: 3130332e3139302e3131332e302f32342d3234203d3e20313439393037.roa (hash: 6BP6Wg9K2CydFqVw55iYNyq05rAdRjLr1zk9t4b5GKw=) 2: 323030313a6466303a663963303a3a2f34382d3438203d3e20313439393037.roa (hash: /A4c0t6Y98cg2lIq++5SQTiV0ECjCxcXz8yePuUy48U=) 3: 3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa (hash: zSZcK2ezC0OwcIoirCwbw8lg34i7IQmCM/PoAclIbTc=) 4: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl (hash: isoPfMwMGUWkh/xnQJIQsxziKa8c0iwhG0Lyka6bKl4=) 5: 3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa (hash: /ZMRp/k5nyna7+OV16C6wftA6bpNJZQ65/zvr/LPUR4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 14:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c7:2b:35:52:0f:29:e7:9c:94:7b:97:93:9c:0a:ac:12:b3:4c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C Validity Not Before: Jun 3 12:47:43 2025 GMT Not After : Jun 6 14:11:43 2025 GMT Subject: CN=00597B8959CD8A16B62F4943C537D7F2849A8E8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:17:1f:76:78:90:da:a1:c6:d6:43:4b:51:a2: 15:fe:97:59:e8:8a:61:d0:62:e0:f3:36:eb:0e:b4: cd:b1:2c:58:a3:31:80:65:8b:50:a9:68:3f:d1:4d: d7:aa:51:5b:d5:7f:fb:19:a6:30:8c:fd:7e:9e:76: d5:8d:78:28:15:ba:10:bd:62:fa:98:7a:07:60:da: fb:aa:7c:d7:a0:60:be:b6:14:f6:9c:0c:a2:40:17: dd:eb:b2:33:e9:a6:2b:56:35:fb:0f:77:f2:32:a0: d5:b4:7d:18:39:5e:69:2b:69:0e:a8:65:94:dd:72: 42:86:cd:c9:0e:b1:80:04:82:f1:7b:58:78:5c:58: df:96:36:45:62:2b:b4:2e:7e:b2:d0:a1:87:9f:c4: ee:13:72:1b:8f:8e:66:8d:7d:a2:fd:42:a9:6e:02: b2:02:e2:3e:c3:1a:9e:21:6c:05:b9:fd:2d:d4:85: 6b:1c:60:fb:4f:89:15:c8:51:05:95:d9:5c:30:b3: dc:63:3f:9b:80:5c:36:63:27:5f:b5:40:fb:d3:e0: 71:3b:2f:a6:23:6e:11:e0:d7:dd:8c:6b:76:bf:4b: fd:5c:32:06:ad:19:c3:07:46:7d:e6:24:24:05:0d: b5:8c:e7:7f:40:69:43:d8:d2:c6:dd:96:47:27:9b: bf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:59:7B:89:59:CD:8A:16:B6:2F:49:43:C5:37:D7:F2:84:9A:8E:8D X509v3 Authority Key Identifier: keyid:0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:bf:5b:86:4b:03:f1:ab:e7:8f:cf:23:0a:b7:15:61:1d:ae: b3:fb:dd:0b:a8:c2:73:b3:3e:c9:6f:a8:78:d4:a5:da:35:75: 04:8b:4b:e6:c7:d2:d3:26:7b:6e:05:d7:6a:b7:fc:fd:e4:48: ba:1c:19:22:7f:bd:d9:13:a2:80:ba:78:b1:08:a3:a0:02:34: 5a:f5:f9:f8:cc:5b:71:fd:f7:e9:69:f8:5b:6d:df:38:93:59: c3:28:3f:43:12:6f:b0:2c:20:63:b4:5f:67:12:42:96:d0:cb: ef:46:00:cb:8b:d8:e9:01:fc:7b:00:f1:8c:e3:ec:e9:e8:4d: 72:8a:ae:ff:66:c4:40:dc:be:cc:f2:b3:52:7d:49:bc:52:db: 7d:a5:92:6b:7b:72:0e:e7:33:98:f2:11:32:67:f8:4a:5a:6a: aa:4f:ce:ff:61:5f:c2:64:a7:0e:42:35:d8:4c:39:ec:e6:ab: b7:0e:98:48:ef:87:72:b6:b9:71:9b:51:be:c7:9c:49:3d:f0: 85:f6:89:8f:6b:bf:66:99:d8:72:56:a4:5e:d5:78:22:2f:7b: fa:6b:f2:d1:7c:53:0b:64:33:56:32:0d:bd:43:fe:68:e2:16: d4:e7:36:fa:9b:2e:56:dc:48:b7:9e:97:b5:fa:cc:b0:57:2c: dc:59:54:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKMcrNVIPKeeclHuXk5wKrBKzTAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBBQ0RC N0UwQkEwQzAeFw0yNTA2MDMxMjQ3NDNaFw0yNTA2MDYxNDExNDNaMDMxMTAvBgNV BAMTKDAwNTk3Qjg5NTlDRDhBMTZCNjJGNDk0M0M1MzdEN0YyODQ5QThFOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLFx92eJDaocbWQ0tRohX+l1no imHQYuDzNusOtM2xLFijMYBli1CpaD/RTdeqUVvVf/sZpjCM/X6edtWNeCgVuhC9 YvqYegdg2vuqfNegYL62FPacDKJAF93rsjPppitWNfsPd/IyoNW0fRg5XmkraQ6o ZZTdckKGzckOsYAEgvF7WHhcWN+WNkViK7QufrLQoYefxO4TchuPjmaNfaL9Qqlu ArIC4j7DGp4hbAW5/S3UhWscYPtPiRXIUQWV2Vwws9xjP5uAXDZjJ1+1QPvT4HE7 L6YjbhHg192Ma3a/S/1cMgatGcMHRn3mJCQFDbWM539AaUPY0sbdlkcnm7+7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAFl7iVnNiha2L0lDxTfX8oSajo0wHwYDVR0j BBgwFoAUDOHhEUbiUdDNUr2DehoKzbfgugwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDUxNmE3YS00MTk1LTQ0YjMtYTI0ZS1jZjhlZDU3OGQ3OTEvMC8wQ0UxRTExMTQ2 RTI1MUQwQ0Q1MkJEODM3QTFBMEFDREI3RTBCQTBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBBQ0RCN0Uw QkEwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjA1MTZhN2EtNDE5NS00NGIzLWEy NGUtY2Y4ZWQ1NzhkNzkxLzAvMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBB Q0RCN0UwQkEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABy/W4ZLA/Gr54/PIwq3FWEdrrP73QuownOz PslvqHjUpdo1dQSLS+bH0tMme24F12q3/P3kSLocGSJ/vdkTooC6eLEIo6ACNFr1 +fjMW3H99+lp+Ftt3ziTWcMoP0MSb7AsIGO0X2cSQpbQy+9GAMuL2OkB/HsA8Yzj 7OnoTXKKrv9mxEDcvszys1J9SbxS232lkmt7cg7nM5jyETJn+EpaaqpPzv9hX8Jk pw5CNdhMOezmq7cOmEjvh3K2uXGbUb7HnEk98IX2iY9rv2aZ2HJWpF7VeCIve/pr 8tF8UwtkM1YyDb1D/mjiFtTnNvqbLlbcSLeel7X6zLBXLNxZVEM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:11:12 2025 by rpki-client