$ rpki-client -vvf repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft File: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft (raw, json) Hash identifier: hf4BnnFYf3+CuvrRjAXAp/7g/1sjskTglGI0QHwXapQ= Subject key identifier: 11:1A:25:02:64:70:96:72:BC:0C:D5:55:B3:5D:A1:DD:DF:A6:C5:A9 Authority key identifier: 0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D Certificate issuer: /CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Certificate serial: 6F75D7BA6039D7CF2B5911BB108590C5C5A7E08A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft Manifest number: 0196 Signing time: Thu 04 Sep 2025 13:11:45 +0000 Manifest this update: Thu 04 Sep 2025 13:06:45 +0000 Manifest next update: Sun 07 Sep 2025 21:36:45 +0000 Files and hashes: 1: 3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa (hash: 2Aghezf2z7P1qZlnkDBkv3wvvtG5c1l4SMgNAsKv8N0=) 2: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl (hash: +4A/AXBBDNoQ8fug5scABduoPBAZ7kfWS0ju8X2o2Jk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 21:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:75:d7:ba:60:39:d7:cf:2b:59:11:bb:10:85:90:c5:c5:a7:e0:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Validity Not Before: Sep 4 13:06:45 2025 GMT Not After : Sep 7 21:36:45 2025 GMT Subject: CN=111A250264709672BC0CD555B35DA1DDDFA6C5A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4b:90:8c:17:fb:66:5b:df:2c:99:94:ef:01: 63:8e:5a:2c:22:a5:99:9d:1d:61:53:34:dc:5c:b4: 92:2b:29:dc:d8:75:11:a1:75:f5:33:ee:d6:f6:b4: bc:84:6c:92:9c:55:30:4a:27:99:f4:c4:0e:6a:90: b3:6c:a0:fb:e9:87:2f:7d:ad:96:10:13:a1:fe:29: b4:a6:20:4e:ba:c6:2c:da:58:23:89:13:1a:ce:5b: a2:bd:f2:ac:02:23:16:f0:d8:e3:88:7c:d3:73:be: 79:e3:b7:8e:7f:f9:93:20:5e:56:08:94:d4:a1:12: 34:0b:13:04:fc:69:4f:5e:30:d6:75:be:ac:d5:ec: 30:43:3c:30:06:48:5e:3a:2a:12:24:85:96:4e:7d: a9:41:72:bc:ee:b3:cc:1e:e6:47:cd:14:86:0c:ad: af:3b:4f:db:d3:bc:08:1e:cf:c4:90:1f:24:50:20: 96:b3:2d:35:9b:09:0a:50:a8:fa:62:42:c4:14:d8: d8:c8:37:d5:a8:8d:10:08:5f:78:b8:61:3d:fe:ff: f7:88:7d:71:59:34:c1:ea:26:b0:70:b1:88:7a:72: b9:c7:37:22:51:f0:58:3e:5b:7f:c0:fe:91:91:e4: 85:7b:e4:b2:9d:67:e9:bf:16:f9:7b:fa:68:1b:61: c7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1A:25:02:64:70:96:72:BC:0C:D5:55:B3:5D:A1:DD:DF:A6:C5:A9 X509v3 Authority Key Identifier: keyid:0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:c0:ea:68:52:eb:bd:4a:63:dc:d8:76:7a:6b:7d:9e:68:45: 47:e3:7e:ee:90:90:bf:78:c2:5a:27:b7:17:e2:38:5a:c6:32: 5c:df:0f:f5:d9:24:78:85:5a:6f:52:65:d7:ea:9f:f0:8e:e7: 20:f3:d0:87:ac:68:ca:29:f4:73:42:e8:b2:d7:19:97:6c:9d: fb:3e:0f:f8:15:cc:30:6d:b6:e2:2b:33:81:3b:8b:dc:4f:c7: 4c:cb:fb:44:f8:10:0d:fb:f8:e4:17:fc:a6:93:3c:3f:89:3c: a4:4b:e7:ec:f6:36:57:4d:06:5f:99:45:bf:02:3c:3b:70:ad: 18:73:d1:e6:c5:4b:14:fb:34:5f:e1:24:d5:19:bc:6b:f6:84: fb:e1:0b:a5:50:ee:9f:54:c8:23:54:00:20:d9:df:7a:44:8e: 26:25:86:8e:97:9c:2c:ff:dd:cd:08:1b:6e:65:0f:62:af:37: c5:42:3c:c8:cb:45:cd:c4:cb:c5:e6:b5:7c:33:78:46:c1:20: 00:0a:6d:55:19:78:5d:cb:b1:96:09:00:41:0b:f7:d7:96:00: 74:b2:d5:ac:c3:55:b7:48:af:26:82:3a:e0:c3:c9:5d:13:56: d0:4e:f4:c9:78:2a:41:ac:f9:19:64:59:8a:53:e5:5b:7f:84: 7e:a0:01:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb3XXumA5188rWRG7EIWQxcWn4IowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3 NDI1REM5RDAeFw0yNTA5MDQxMzA2NDVaFw0yNTA5MDcyMTM2NDVaMDMxMTAvBgNV BAMTKDExMUEyNTAyNjQ3MDk2NzJCQzBDRDU1NUIzNURBMUREREZBNkM1QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXS5CMF/tmW98smZTvAWOOWiwi pZmdHWFTNNxctJIrKdzYdRGhdfUz7tb2tLyEbJKcVTBKJ5n0xA5qkLNsoPvphy99 rZYQE6H+KbSmIE66xizaWCOJExrOW6K98qwCIxbw2OOIfNNzvnnjt45/+ZMgXlYI lNShEjQLEwT8aU9eMNZ1vqzV7DBDPDAGSF46KhIkhZZOfalBcrzus8we5kfNFIYM ra87T9vTvAgez8SQHyRQIJazLTWbCQpQqPpiQsQU2NjIN9WojRAIX3i4YT3+//eI fXFZNMHqJrBwsYh6crnHNyJR8Fg+W3/A/pGR5IV75LKdZ+m/Fvl7+mgbYcczAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUERolAmRwlnK8DNVVs12h3d+mxakwHwYDVR0j BBgwFoAUDyHD69UPyPQ/jKeocRQVb3Ql3J0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTkzMDE4ZS03MThmLTQ3NTctYTA4Ny05M2FkNzdiODE4MjEvMC8wRjIxQzNFQkQ1 MEZDOEY0M0Y4Q0E3QTg3MTE0MTU2Rjc0MjVEQzlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3NDI1 REM5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5MzAxOGUtNzE4Zi00NzU3LWEw ODctOTNhZDc3YjgxODIxLzAvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1 NkY3NDI1REM5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL7A6mhS671KY9zYdnprfZ5oRUfjfu6QkL94 wlontxfiOFrGMlzfD/XZJHiFWm9SZdfqn/CO5yDz0IesaMop9HNC6LLXGZdsnfs+ D/gVzDBttuIrM4E7i9xPx0zL+0T4EA37+OQX/KaTPD+JPKRL5+z2NldNBl+ZRb8C PDtwrRhz0ebFSxT7NF/hJNUZvGv2hPvhC6VQ7p9UyCNUACDZ33pEjiYlho6XnCz/ 3c0IG25lD2KvN8VCPMjLRc3Ey8XmtXwzeEbBIAAKbVUZeF3LsZYJAEEL99eWAHSy 1azDVbdIryaCOuDDyV0TVtBO9Ml4KkGs+RlkWYpT5Vt/hH6gAaA= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:30 2025 by rpki-client