$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft File: 0EAF2A0CD22523DB087375417038E4165075CA3E.mft (raw, json) Hash identifier: FtzS6z7Hkq/R50vkZx5cySEGbmphuZka/Y4MlEr6AHc= Subject key identifier: 27:70:EA:83:69:A7:09:46:38:96:83:04:B5:A7:7C:84:F6:AB:61:95 Authority key identifier: 0E:AF:2A:0C:D2:25:23:DB:08:73:75:41:70:38:E4:16:50:75:CA:3E Certificate issuer: /CN=0EAF2A0CD22523DB087375417038E4165075CA3E Certificate serial: 73792FC5E0CC1C64B216DF08CD26EA600FAC2E3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft Manifest number: B7 Signing time: Mon 16 Jun 2025 04:01:11 +0000 Manifest this update: Mon 16 Jun 2025 03:56:11 +0000 Manifest next update: Thu 19 Jun 2025 12:49:11 +0000 Files and hashes: 1: 3135372e32302e34342e302f32342d3234203d3e20313532333932.roa (hash: LQj0jMPge82CwHOWS5fHIk0tBtvaFA1Hv5mniV+5odo=) 2: 0EAF2A0CD22523DB087375417038E4165075CA3E.crl (hash: DQab9pKrhqFJs+7Qo3glkFgxk9XdQaF+RJh2co3i0FU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.crl rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 12:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:79:2f:c5:e0:cc:1c:64:b2:16:df:08:cd:26:ea:60:0f:ac:2e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAF2A0CD22523DB087375417038E4165075CA3E Validity Not Before: Jun 16 03:56:11 2025 GMT Not After : Jun 19 12:49:11 2025 GMT Subject: CN=2770EA8369A7094638968304B5A77C84F6AB6195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:7b:b5:49:66:1a:91:32:ce:84:e5:77:08: 83:d5:9d:32:10:50:85:9a:c0:d4:8a:6f:e7:7b:01: 8e:99:08:1c:ec:57:d0:5c:d6:46:a2:09:a7:01:bb: 2f:47:99:00:d4:0d:d0:70:e5:c6:38:ff:8d:8a:cc: 64:77:c2:f8:5b:da:10:b4:eb:fe:53:10:56:73:e5: 77:a3:88:3c:7a:f4:10:1b:da:cc:1d:c8:d2:02:86: d6:72:1a:d3:1f:e0:8d:e3:1d:5f:d6:8a:55:24:dc: 26:54:7c:8c:58:ad:6b:23:19:eb:3c:59:8f:a9:6c: 43:9f:d3:7c:d0:22:e6:6f:56:99:7a:0d:b6:19:d9: 25:61:e3:0c:9e:a0:40:e2:9b:66:bb:88:20:a0:d6: 7a:b6:c3:61:6c:24:0c:1c:36:6a:b3:6a:ae:52:0a: fd:98:26:4b:b2:26:e5:fd:12:4e:55:2a:6e:a1:c6: e7:a6:fc:7b:b6:6c:14:21:6a:9a:34:e2:83:d5:26: 18:69:43:95:5a:a5:d3:41:d9:98:91:9f:45:17:e2: 54:2e:a6:4c:08:f6:93:8f:eb:7b:09:e4:fd:b6:73: 76:65:b6:77:dc:30:8f:1f:ff:ad:d3:ec:37:33:af: ca:59:74:1c:82:e8:df:3d:2a:3a:22:1d:0f:bb:70: 02:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:70:EA:83:69:A7:09:46:38:96:83:04:B5:A7:7C:84:F6:AB:61:95 X509v3 Authority Key Identifier: keyid:0E:AF:2A:0C:D2:25:23:DB:08:73:75:41:70:38:E4:16:50:75:CA:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:44:bc:e6:a2:6c:32:b0:b5:12:e8:a2:3e:41:4c:97:da:52: 3e:db:3f:ff:ab:2b:b8:d0:00:97:c5:80:02:53:b5:85:75:24: 38:b2:53:b1:13:6a:b2:10:93:98:34:13:03:6f:03:bf:13:68: e8:30:14:c6:c2:6d:2e:63:2d:27:c9:24:3a:a1:5a:57:46:5a: ba:ef:a4:13:cb:55:17:a4:de:3e:30:cd:7f:87:a2:bd:ab:a3: 1f:2f:0e:5a:17:8e:84:4c:69:20:ef:2f:82:f6:46:e9:b1:d9: 4d:3b:94:a6:b9:6b:be:9f:ac:35:3a:58:e1:e1:e2:49:fe:82: b8:fe:1a:64:8a:69:ca:d0:a6:81:21:5c:81:a7:1e:65:ba:2f: 31:ad:87:9c:08:56:11:57:37:d1:2e:5b:9d:c4:87:83:75:d1: 71:8b:36:c5:2d:72:a9:3d:28:5f:b4:cd:5e:e4:44:e6:88:5d: a9:c2:22:06:a4:c1:c6:c4:26:6a:1e:1c:90:86:99:f6:5e:bd: e6:b5:29:b6:6a:31:97:5b:2f:42:61:25:2c:1f:d8:53:23:f4: 24:47:8e:9c:00:86:25:48:f6:f2:2f:f2:d8:19:d9:79:dd:49: 70:ee:a8:9e:ca:69:ac:ac:1b:0d:d6:f3:4f:59:db:04:b8:e4: 29:ef:d9:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc3kvxeDMHGSyFt8IzSbqYA+sLj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBRjJBMENEMjI1MjNEQjA4NzM3NTQxNzAzOEU0MTY1 MDc1Q0EzRTAeFw0yNTA2MTYwMzU2MTFaFw0yNTA2MTkxMjQ5MTFaMDMxMTAvBgNV BAMTKDI3NzBFQTgzNjlBNzA5NDYzODk2ODMwNEI1QTc3Qzg0RjZBQjYxOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5tHu1SWYakTLOhOV3CIPVnTIQ UIWawNSKb+d7AY6ZCBzsV9Bc1kaiCacBuy9HmQDUDdBw5cY4/42KzGR3wvhb2hC0 6/5TEFZz5XejiDx69BAb2swdyNIChtZyGtMf4I3jHV/WilUk3CZUfIxYrWsjGes8 WY+pbEOf03zQIuZvVpl6DbYZ2SVh4wyeoEDim2a7iCCg1nq2w2FsJAwcNmqzaq5S Cv2YJkuyJuX9Ek5VKm6hxuem/Hu2bBQhapo04oPVJhhpQ5VapdNB2ZiRn0UX4lQu pkwI9pOP63sJ5P22c3ZltnfcMI8f/63T7Dczr8pZdByC6N89KjoiHQ+7cAKLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ3Dqg2mnCUY4loMEtad8hParYZUwHwYDVR0j BBgwFoAUDq8qDNIlI9sIc3VBcDjkFlB1yj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTg4ZGZmNy02YTkyLTQyOTMtODgwMC1iNTNlMmE5MThhY2EvMC8wRUFGMkEwQ0Qy MjUyM0RCMDg3Mzc1NDE3MDM4RTQxNjUwNzVDQTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEVBRjJBMENEMjI1MjNEQjA4NzM3NTQxNzAzOEU0MTY1MDc1 Q0EzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzAvMEVBRjJBMENEMjI1MjNEQjA4NzM3NTQxNzAzOEU0 MTY1MDc1Q0EzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJEvOaibDKwtRLooj5BTJfaUj7bP/+rK7jQ AJfFgAJTtYV1JDiyU7ETarIQk5g0EwNvA78TaOgwFMbCbS5jLSfJJDqhWldGWrrv pBPLVRek3j4wzX+Hor2rox8vDloXjoRMaSDvL4L2Rumx2U07lKa5a76frDU6WOHh 4kn+grj+GmSKacrQpoEhXIGnHmW6LzGth5wIVhFXN9EuW53Eh4N10XGLNsUtcqk9 KF+0zV7kROaIXanCIgakwcbEJmoeHJCGmfZevea1KbZqMZdbL0JhJSwf2FMj9CRH jpwAhiVI9vIv8tgZ2XndSXDuqJ7KaaysGw3W809Z2wS45Cnv2V0= -----END CERTIFICATE-----Generated at Mon Jun 16 13:21:29 2025 by rpki-client