$ rpki-client -vvf repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft File: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft (raw, json) Hash identifier: TP66DGPaHKmS7Jg9aK9nIj51C9iYRc1QsDIfJrjAnfM= Subject key identifier: E6:2D:80:FB:2A:CB:92:4C:4B:F7:A0:FF:4E:5D:D0:28:BF:67:23:45 Authority key identifier: 0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 Certificate issuer: /CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Certificate serial: 7F017E85DDB01DD633C2CB00F6D95A100BBA409E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft Manifest number: 0359 Signing time: Tue 03 Jun 2025 11:25:51 +0000 Manifest this update: Tue 03 Jun 2025 11:20:51 +0000 Manifest next update: Fri 06 Jun 2025 15:30:51 +0000 Files and hashes: 1: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl (hash: FUbUsMtnAh3NBW6+Y7RPGCr8UurBuX0YGcjMgEsouyM=) 2: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: 0C8pRCsymjTTrJFNZEJzyFd4IOGqdzBKqs9DQmpJI/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:01:7e:85:dd:b0:1d:d6:33:c2:cb:00:f6:d9:5a:10:0b:ba:40:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Validity Not Before: Jun 3 11:20:51 2025 GMT Not After : Jun 6 15:30:51 2025 GMT Subject: CN=E62D80FB2ACB924C4BF7A0FF4E5DD028BF672345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:99:dc:a5:21:f8:de:9b:97:f2:73:d8:98:56: 4d:5a:b0:a2:3f:90:d4:39:10:b5:8f:b3:86:04:6c: 5a:d3:c2:81:bc:aa:2a:c5:51:b1:09:93:a2:52:74: cf:41:1f:d3:d5:ec:74:8c:94:a1:c3:17:e9:d6:9e: 46:10:71:04:8f:bd:97:fa:0d:fc:4e:fb:f0:ef:f0: 39:b5:59:88:35:3f:f2:ea:cf:50:08:c4:cd:1f:aa: dc:dc:57:bb:9c:29:11:3f:56:76:5e:8e:89:64:9d: ed:22:19:b6:16:7c:5a:48:95:28:7d:60:66:e4:48: e9:23:27:3a:4e:55:b7:95:27:c1:7f:1f:c2:ca:8b: 93:e1:26:2a:90:d2:f1:4e:7f:28:5c:1b:e2:26:ec: 3b:2d:28:f0:5e:49:d6:7d:ad:e6:51:43:84:ed:00: 30:85:26:3e:17:db:e8:8b:cc:86:99:87:3f:e9:3c: ca:87:5c:76:5b:4d:ca:c4:5d:9e:29:0a:8b:b2:99: 80:05:ff:16:30:26:42:a5:36:11:87:10:21:a4:b2: e0:49:dc:f5:2f:84:38:01:e5:6f:4d:52:22:4d:26: 40:4f:a8:40:b2:b1:d0:17:8d:6a:55:41:2c:50:70: 6d:73:d5:aa:b5:db:e4:fe:73:74:eb:13:9c:7c:f4: 53:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2D:80:FB:2A:CB:92:4C:4B:F7:A0:FF:4E:5D:D0:28:BF:67:23:45 X509v3 Authority Key Identifier: keyid:0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:fa:02:c5:f2:83:b8:29:9b:28:f7:cc:33:4c:ef:82:4f:fc: 8b:f7:b3:ba:90:2f:e9:31:f6:bb:dd:76:eb:79:51:c1:33:e9: 35:9c:d0:15:1f:d1:00:60:65:21:54:89:88:e7:01:56:58:72: cf:2e:16:73:fc:7e:a2:9a:93:3f:b6:d6:6f:d0:bf:1d:83:c6: fa:a7:7e:18:a6:a3:c1:ce:2b:3c:c9:67:91:d9:2f:d6:59:2c: a9:34:42:5c:a8:30:ae:5e:3d:af:81:fe:bb:16:a0:84:66:44: e6:63:f7:ea:6c:93:68:da:00:0e:e7:3d:65:1a:7b:44:9b:17: b9:34:c8:0a:1e:a0:7f:36:3f:19:93:cb:02:d2:f6:68:00:4f: 31:f2:44:fe:1b:3b:a7:75:7f:e2:48:e3:fe:13:fc:2e:c9:f7: 9f:ef:78:9a:f7:31:86:b3:1b:7c:68:ec:5c:ed:34:fb:8c:ce: a2:c7:c6:44:ed:ac:1e:c1:48:55:38:d0:eb:56:97:8a:1f:ad: 0b:64:95:a1:e2:08:65:fe:1c:ca:9e:a6:ef:83:2b:cd:01:64: a6:a9:b2:68:f1:af:73:0b:75:37:3f:29:0e:a0:c5:10:61:5c: 01:55:13:e0:e7:04:a7:65:49:79:b6:9b:87:af:21:7d:54:a7: c3:3a:e4:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfwF+hd2wHdYzwssA9tlaEAu6QJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVE Mzc3RkNDMjAeFw0yNTA2MDMxMTIwNTFaFw0yNTA2MDYxNTMwNTFaMDMxMTAvBgNV BAMTKEU2MkQ4MEZCMkFDQjkyNEM0QkY3QTBGRjRFNUREMDI4QkY2NzIzNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsmdylIfjem5fyc9iYVk1asKI/ kNQ5ELWPs4YEbFrTwoG8qirFUbEJk6JSdM9BH9PV7HSMlKHDF+nWnkYQcQSPvZf6 DfxO+/Dv8Dm1WYg1P/Lqz1AIxM0fqtzcV7ucKRE/VnZejolkne0iGbYWfFpIlSh9 YGbkSOkjJzpOVbeVJ8F/H8LKi5PhJiqQ0vFOfyhcG+Im7DstKPBeSdZ9reZRQ4Tt ADCFJj4X2+iLzIaZhz/pPMqHXHZbTcrEXZ4pCouymYAF/xYwJkKlNhGHECGksuBJ 3PUvhDgB5W9NUiJNJkBPqECysdAXjWpVQSxQcG1z1aq12+T+c3TrE5x89FN7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5i2A+yrLkkxL96D/Tl3QKL9nI0UwHwYDVR0j BBgwFoAUDxZZvcMRdYRjrTzqI6frXtN3/MIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWIzZmU0NS1iNTg4LTRiYjctYWU5MC05MWY1N2Y1OTNjYjUvMC8wRjE2NTlCREMz MTE3NTg0NjNBRDNDRUEyM0E3RUI1RUQzNzdGQ0MyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVEMzc3 RkNDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDFiM2ZlNDUtYjU4OC00YmI3LWFl OTAtOTFmNTdmNTkzY2I1LzAvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VC NUVEMzc3RkNDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALD6AsXyg7gpmyj3zDNM74JP/Iv3s7qQL+kx 9rvddut5UcEz6TWc0BUf0QBgZSFUiYjnAVZYcs8uFnP8fqKakz+21m/Qvx2Dxvqn fhimo8HOKzzJZ5HZL9ZZLKk0QlyoMK5ePa+B/rsWoIRmROZj9+psk2jaAA7nPWUa e0SbF7k0yAoeoH82PxmTywLS9mgATzHyRP4bO6d1f+JI4/4T/C7J95/veJr3MYaz G3xo7FztNPuMzqLHxkTtrB7BSFU40OtWl4ofrQtklaHiCGX+HMqepu+DK80BZKap smjxr3MLdTc/KQ6gxRBhXAFVE+DnBKdlSXm2m4evIX1Up8M65DY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:14:03 2025 by rpki-client