$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft File: 0A8E8E063785238467D4AD1F507CC97B30DBB959.mft (raw, json) Hash identifier: ewR1TlQXl6L3N0tKQhQVLv2qMPEicbgcJ4XFM7ENZ0Y= Subject key identifier: 72:AF:28:65:12:6F:0B:F9:E8:E4:DA:A1:31:1C:B8:05:F9:FE:C1:A7 Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Certificate serial: 3EE0F71972E51A93CDBFC25ADBB2AB949172E97F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft Manifest number: 0143 Signing time: Mon 02 Jun 2025 23:41:46 +0000 Manifest this update: Mon 02 Jun 2025 23:36:46 +0000 Manifest next update: Fri 06 Jun 2025 01:22:46 +0000 Files and hashes: 1: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: fuYAXhPxVSs3uQDGyVoloAUdGAB1vPzhCZLoObuSwWo=) 2: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: Mk93/Py1aNdqibCxnW5rDhu68jIUBJ5f2wQcM99902Q=) 3: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: vVX9J+iIt5S0zLOqjzNP9A3DgvrDc3RqZLM36XJo31Q=) 4: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: cSd8oWkoy/PciTBhaM2sT+kEpSFLFHXqmquC1grDeYk=) 5: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: ZrrNvfIdpKFxME3MijZJjel9mkVCFWr1LKlyTLKuOmk=) 6: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: z6Vlo67b6HowiJ4eNQMIImpcN0YW2LjWV36x2SeZA5M=) 7: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: uxf3gr1qNXj16NXsE/3S99HOdYs6kHV+q6L/TWnS+ag=) 8: 0A8E8E063785238467D4AD1F507CC97B30DBB959.crl (hash: ZNrxzKoLlM9SXZFqak+QYxfFRg/dHZTzG7ulxoe9DuA=) 9: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: dY5S+6E2tTu7kTt3kud9rHyNZ8ICT/4MYY6A5gKdkm0=) 10: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: xhrHJkeZ6ORZKPQ3ePW270bQNoXqgZH/hWdzMzXe/Ng=) 11: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: 34w8SIWSSd8kqURH0Jn+B/R9XKBmDHxtyVWAlqGJxJo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 01:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e0:f7:19:72:e5:1a:93:cd:bf:c2:5a:db:b2:ab:94:91:72:e9:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Validity Not Before: Jun 2 23:36:46 2025 GMT Not After : Jun 6 01:22:46 2025 GMT Subject: CN=72AF2865126F0BF9E8E4DAA1311CB805F9FEC1A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5c:d9:b4:3a:3b:3f:bc:7e:23:3c:9a:7f:10: ce:a2:5b:34:47:87:0a:95:90:cf:ec:b9:d9:71:21: ea:65:6c:c5:42:df:6b:51:cf:72:60:38:bd:0f:26: 96:38:bb:81:18:00:16:b2:19:32:53:75:3c:b4:53: 46:39:be:51:73:40:01:3d:6c:c4:e3:b9:b2:c9:f0: 8b:8f:45:d7:2f:b8:20:03:17:b2:9d:89:b2:58:35: aa:01:2a:41:df:f4:6c:1b:62:28:40:e0:51:8b:04: 30:52:b5:4a:43:5c:f7:8c:c5:fc:2c:bf:3e:79:7e: 00:0b:55:13:de:d7:a0:cc:fe:b9:54:43:1a:97:87: b5:df:49:82:54:b4:ce:4f:45:aa:f0:66:f9:94:ea: 7b:b7:60:b2:69:6c:d2:5e:64:d3:2e:12:ce:8b:5a: bb:28:6e:b1:60:26:c0:9f:39:e4:fe:dc:2e:81:d1: 7d:07:86:c8:5a:5b:a4:c9:46:31:11:34:a2:9e:ba: ae:ff:90:fe:9b:37:3d:26:bc:16:d5:7f:eb:a1:7a: 70:d4:1c:62:3d:9b:26:ff:85:73:ef:02:c1:2d:0a: 36:ba:08:a7:02:df:ba:4c:7f:94:e8:29:ae:ae:19: f2:11:2f:e2:6d:99:87:e4:f5:b4:54:34:39:23:6f: f3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AF:28:65:12:6F:0B:F9:E8:E4:DA:A1:31:1C:B8:05:F9:FE:C1:A7 X509v3 Authority Key Identifier: keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:50:ed:ec:11:24:0c:ed:de:6a:e1:8d:4c:9c:95:8b:e7:af: 00:f9:4a:dd:9c:f7:cc:27:1e:fa:9a:fe:cf:8a:bf:a4:87:2a: 0a:d1:bb:cd:2b:13:1f:9e:83:05:b9:8b:e3:04:bc:eb:e0:c1: 92:6a:03:66:23:a6:c7:ca:93:c2:a3:b4:95:3b:78:d4:4c:65: 3e:1f:c5:8e:a0:5e:ab:ca:4e:6a:75:a9:b3:e5:af:03:7b:81: c4:bd:19:72:e8:34:67:30:97:85:c6:43:f5:35:c4:01:91:ce: 47:28:ee:18:69:16:12:4f:f5:0b:4b:b3:ed:1f:ad:43:78:e7: e4:37:53:f5:fd:fd:89:7e:20:c8:f0:73:9a:55:b8:d3:17:6d: 07:9c:02:78:3e:cc:ee:c1:2f:9d:15:6d:c0:f2:5c:48:f8:66: f6:ee:9a:2c:57:78:b3:de:d3:2a:ae:46:b2:9a:85:46:f2:dc: 6a:08:9b:a5:61:f4:c2:eb:57:50:78:83:0c:6c:fd:ee:de:0a: d6:28:55:c8:73:37:53:df:87:5c:7a:f1:af:6a:93:23:2e:f8: e1:8a:b8:1d:10:f9:c6:39:4f:7a:d2:6c:21:bf:f2:d7:4a:5e: e4:ac:07:c3:ac:fa:4e:67:04:e7:50:38:49:3b:33:e5:41:50: 1a:1e:e5:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPuD3GXLlGpPNv8Ja27KrlJFy6X8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz MERCQjk1OTAeFw0yNTA2MDIyMzM2NDZaFw0yNTA2MDYwMTIyNDZaMDMxMTAvBgNV BAMTKDcyQUYyODY1MTI2RjBCRjlFOEU0REFBMTMxMUNCODA1RjlGRUMxQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKXNm0Ojs/vH4jPJp/EM6iWzRH hwqVkM/sudlxIeplbMVC32tRz3JgOL0PJpY4u4EYABayGTJTdTy0U0Y5vlFzQAE9 bMTjubLJ8IuPRdcvuCADF7KdibJYNaoBKkHf9GwbYihA4FGLBDBStUpDXPeMxfws vz55fgALVRPe16DM/rlUQxqXh7XfSYJUtM5PRarwZvmU6nu3YLJpbNJeZNMuEs6L WrsobrFgJsCfOeT+3C6B0X0HhshaW6TJRjERNKKeuq7/kP6bNz0mvBbVf+uhenDU HGI9myb/hXPvAsEtCja6CKcC37pMf5ToKa6uGfIRL+JtmYfk9bRUNDkjb/PVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcq8oZRJvC/no5NqhMRy4Bfn+wacwHwYDVR0j BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3 ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC Qjk1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjlkNmFjYzYtMGFmMy00Yjk3LTk5 YTQtMGY0NWU4ZWNmNTc2LzAvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5 N0IzMERCQjk1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItQ7ewRJAzt3mrhjUyclYvnrwD5St2c98wn Hvqa/s+Kv6SHKgrRu80rEx+egwW5i+MEvOvgwZJqA2YjpsfKk8KjtJU7eNRMZT4f xY6gXqvKTmp1qbPlrwN7gcS9GXLoNGcwl4XGQ/U1xAGRzkco7hhpFhJP9QtLs+0f rUN45+Q3U/X9/Yl+IMjwc5pVuNMXbQecAng+zO7BL50VbcDyXEj4ZvbumixXeLPe 0yquRrKahUby3GoIm6Vh9MLrV1B4gwxs/e7eCtYoVchzN1Pfh1x68a9qkyMu+OGK uB0Q+cY5T3rSbCG/8tdKXuSsB8Os+k5nBOdQOEk7M+VBUBoe5VE= -----END CERTIFICATE-----Generated at Tue Jun 3 23:28:38 2025 by rpki-client