$ rpki-client -vvf repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft File: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft (raw, json) Hash identifier: LB4RaPzcfNEIjVbWbtmlkH3Lz5U3GqYnhFoMm9NceSM= Subject key identifier: BF:F1:28:04:7F:A6:AB:8D:4C:CD:6D:0E:28:3A:B8:97:FB:E4:21:F5 Authority key identifier: 0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 Certificate issuer: /CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Certificate serial: 6E24E92AD128DC5D4A4D4EC7BFF263C0E271F771 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft Manifest number: 0383 Signing time: Fri 05 Sep 2025 00:22:10 +0000 Manifest this update: Fri 05 Sep 2025 00:17:10 +0000 Manifest next update: Mon 08 Sep 2025 03:27:10 +0000 Files and hashes: 1: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: 5kmhgTgeSHUwhas6AKT+9HvbtryMe4lzQT0rPZxLy0k=) 2: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl (hash: 3ztGhTB7g+jrgOXPj+DgWUTQeH6ofU/yYQtNc5bbnDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 03:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:24:e9:2a:d1:28:dc:5d:4a:4d:4e:c7:bf:f2:63:c0:e2:71:f7:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Validity Not Before: Sep 5 00:17:10 2025 GMT Not After : Sep 8 03:27:10 2025 GMT Subject: CN=BFF128047FA6AB8D4CCD6D0E283AB897FBE421F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:77:91:72:64:6a:6a:82:29:b4:9d:82:6c: ce:a9:b3:58:d6:0c:4e:02:8f:3e:5e:39:12:60:1a: bd:ed:2d:ae:f7:11:65:29:88:fc:ad:80:a0:07:cf: 7c:d9:d3:d5:6b:61:00:5e:11:9b:da:52:77:3d:07: eb:59:a8:2c:ad:2c:61:fd:d9:de:ea:32:65:09:f1: 40:94:2c:7e:a7:5b:40:89:63:2c:cc:3c:b2:1a:45: 2f:c9:cf:f7:78:ef:0e:57:c3:6e:cd:ec:90:a5:bd: 69:df:28:68:4b:b0:c1:e2:10:bc:bd:c1:98:d3:33: 70:7b:4b:eb:ed:57:c3:e5:72:de:a6:46:cd:85:cd: 2f:c0:9d:f9:fc:80:3d:92:5c:e8:07:12:d1:21:aa: bd:6a:2e:63:0e:14:fa:23:9c:11:5b:95:39:b4:fb: bd:d1:84:1c:a4:a1:d8:93:ab:5c:01:4a:06:a4:01: 7f:7a:e3:57:16:e7:4f:a0:79:de:ee:1b:fe:29:ff: 5b:7b:9a:f9:45:b9:a7:9b:fd:9c:71:0d:81:4a:86: 69:09:70:9e:0c:17:d1:f7:6f:d5:0c:fc:7f:90:37: 9e:59:72:c0:34:84:bb:4d:c6:1f:2c:fc:ef:84:62: 2a:8c:8d:1f:8e:04:d3:ef:69:bc:fc:97:eb:8a:91: 43:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F1:28:04:7F:A6:AB:8D:4C:CD:6D:0E:28:3A:B8:97:FB:E4:21:F5 X509v3 Authority Key Identifier: keyid:0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ee:d3:6e:fd:dc:09:7c:d1:00:4e:ca:2c:02:c0:8b:18:c0: d6:69:ee:0a:3a:99:80:06:77:d7:92:20:17:c0:6d:f6:74:74: a2:b9:5f:74:98:cd:f6:ff:ba:81:f8:fc:ca:5c:e2:57:4d:fb: ec:f1:80:88:98:4e:09:8f:75:5e:87:7a:6d:0f:65:bb:51:9f: 4f:b6:1c:1f:6a:83:3b:b4:6d:ea:ee:24:ba:c1:26:60:26:39: 4d:1a:0a:90:e8:89:9d:b1:d2:47:72:dc:dc:c7:ae:e5:2b:a4: fd:20:f1:2e:63:86:a4:ab:d1:0e:5c:f1:c3:35:f1:2d:ae:37: 67:25:4e:68:98:95:d3:8f:10:a6:35:0d:a2:6a:ad:41:66:6c: f6:da:4a:4a:55:26:96:c2:cc:48:0c:75:df:c4:e0:b3:0a:c6: 2a:20:0b:ea:95:44:16:47:5a:97:05:42:b6:28:db:37:e5:b1: 19:98:90:0d:d1:4c:44:18:98:2d:6c:f4:57:17:03:08:7c:74: d3:ed:9e:8e:19:fe:ed:73:93:f0:45:f8:14:c3:de:04:c8:fb: 54:c7:a6:8a:a2:5d:62:17:29:09:33:0d:6b:57:e0:e5:d4:14: 46:15:4a:b1:54:2a:87:7f:ad:28:ef:c5:c2:48:fe:5e:27:74: 62:3b:ae:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbiTpKtEo3F1KTU7Hv/JjwOJx93EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVE Mzc3RkNDMjAeFw0yNTA5MDUwMDE3MTBaFw0yNTA5MDgwMzI3MTBaMDMxMTAvBgNV BAMTKEJGRjEyODA0N0ZBNkFCOEQ0Q0NENkQwRTI4M0FCODk3RkJFNDIxRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwcneRcmRqaoIptJ2CbM6ps1jW DE4Cjz5eORJgGr3tLa73EWUpiPytgKAHz3zZ09VrYQBeEZvaUnc9B+tZqCytLGH9 2d7qMmUJ8UCULH6nW0CJYyzMPLIaRS/Jz/d47w5Xw27N7JClvWnfKGhLsMHiELy9 wZjTM3B7S+vtV8Plct6mRs2FzS/Anfn8gD2SXOgHEtEhqr1qLmMOFPojnBFblTm0 +73RhBykodiTq1wBSgakAX9641cW50+ged7uG/4p/1t7mvlFuaeb/ZxxDYFKhmkJ cJ4MF9H3b9UM/H+QN55ZcsA0hLtNxh8s/O+EYiqMjR+OBNPvabz8l+uKkUP/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv/EoBH+mq41MzW0OKDq4l/vkIfUwHwYDVR0j BBgwFoAUDxZZvcMRdYRjrTzqI6frXtN3/MIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWIzZmU0NS1iNTg4LTRiYjctYWU5MC05MWY1N2Y1OTNjYjUvMC8wRjE2NTlCREMz MTE3NTg0NjNBRDNDRUEyM0E3RUI1RUQzNzdGQ0MyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVEMzc3 RkNDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDFiM2ZlNDUtYjU4OC00YmI3LWFl OTAtOTFmNTdmNTkzY2I1LzAvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VC NUVEMzc3RkNDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbu02793Al80QBOyiwCwIsYwNZp7go6mYAG d9eSIBfAbfZ0dKK5X3SYzfb/uoH4/Mpc4ldN++zxgIiYTgmPdV6Hem0PZbtRn0+2 HB9qgzu0beruJLrBJmAmOU0aCpDoiZ2x0kdy3NzHruUrpP0g8S5jhqSr0Q5c8cM1 8S2uN2clTmiYldOPEKY1DaJqrUFmbPbaSkpVJpbCzEgMdd/E4LMKxiogC+qVRBZH WpcFQrYo2zflsRmYkA3RTEQYmC1s9FcXAwh8dNPtno4Z/u1zk/BF+BTD3gTI+1TH poqiXWIXKQkzDWtX4OXUFEYVSrFUKod/rSjvxcJI/l4ndGI7rpE= -----END CERTIFICATE-----Generated at Fri Sep 5 12:39:22 2025 by rpki-client