$ rpki-client -vvf repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft File: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft (raw, json) Hash identifier: fltrZR2vY7Gt1zQxfMDOjAn7MTWWSplcQToucwk2ZfY= Subject key identifier: 69:C6:23:70:A2:B0:67:EF:A2:2C:2A:F3:6B:CC:6F:6F:E7:46:55:1A Authority key identifier: 0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F Certificate issuer: /CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Certificate serial: 23D698876342B3FF00FCF2CF448F354BF4CD1670 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft Manifest number: 04E1 Signing time: Sun 15 Jun 2025 08:00:03 +0000 Manifest this update: Sun 15 Jun 2025 07:55:03 +0000 Manifest next update: Wed 18 Jun 2025 16:13:03 +0000 Files and hashes: 1: 3130332e3134302e3130392e302f32342d3234203d3e203538333639.roa (hash: BUjAtiDKImhm44uw2SFH6kSw2t9lwdf9XIcal9kQ1mg=) 2: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (hash: 3sAJshp+EPOwtrV5/4YJuemXpZyIihe64Jp+iK5G1jY=) 3: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl (hash: WWiLx+jcWeR8y9DCt6wTlAg+p2oDLLTQ76WQ3q6zG6c=) 4: 3130332e3134302e3130382e302f32342d3234203d3e203538333639.roa (hash: TU9zvXhzWTJdHe9aJGaZ4ESWd+R9UnSTLhOnKf2ldQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 16:13:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d6:98:87:63:42:b3:ff:00:fc:f2:cf:44:8f:35:4b:f4:cd:16:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Validity Not Before: Jun 15 07:55:03 2025 GMT Not After : Jun 18 16:13:03 2025 GMT Subject: CN=69C62370A2B067EFA22C2AF36BCC6F6FE746551A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3d:24:8d:e4:0b:ce:df:a5:74:3f:19:1a:27: 5e:4a:a8:4e:a8:ac:e8:ea:e9:ff:d1:1e:60:aa:dd: 71:e5:69:f7:40:37:dc:dd:b9:07:6d:33:8b:b2:f5: 49:52:8e:48:c9:ef:79:2c:a9:32:9b:3b:7b:bf:c7: c7:fa:45:da:e8:c0:92:99:3e:8f:58:97:ce:7f:1e: dc:92:52:62:55:0c:cc:68:66:01:de:61:0d:ff:f7: 5d:30:d6:39:a3:c3:fe:ba:d2:be:09:d8:26:34:89: 13:aa:78:42:14:0b:9c:d0:b1:d3:81:79:02:d6:27: d8:c8:cb:a2:30:2a:f2:f5:b7:49:c9:c8:0e:3d:10: 5f:87:e2:a5:3f:5f:18:b5:54:5f:95:0f:96:45:42: d5:f2:29:73:48:25:db:dc:6b:56:a3:4a:9a:ea:06: 44:a7:03:8e:0f:76:f2:e0:d8:7c:08:e5:b7:e7:c0: 63:8d:77:72:3d:0c:05:7d:55:01:e4:26:8e:c6:5f: ef:53:ee:26:d2:b2:42:6e:94:eb:0f:80:84:61:64: d1:cc:60:b3:3f:c5:35:b2:05:cc:fc:ea:82:85:68: c5:7b:70:a2:ae:06:e7:59:61:86:86:e4:a4:d6:20: fc:74:94:58:28:f4:9d:8b:18:c6:b3:74:bb:52:07: 95:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C6:23:70:A2:B0:67:EF:A2:2C:2A:F3:6B:CC:6F:6F:E7:46:55:1A X509v3 Authority Key Identifier: keyid:0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:3f:67:ca:cd:95:b5:29:6c:cd:93:14:a7:12:2c:20:ed:c1: 65:1a:9a:63:a4:fa:c6:49:66:32:c8:d0:db:f0:67:19:df:bd: 60:cf:d9:19:c7:fd:6e:2e:c4:c1:db:a6:cf:f6:c2:4d:8d:fa: c1:fd:fc:74:4f:bc:d5:03:22:2d:f8:7b:94:86:58:08:ba:8a: f6:d1:bc:78:a1:ab:2b:a4:5f:9a:c1:ba:dd:1e:e5:ae:75:59: 6e:8b:89:9e:01:ce:53:51:8e:e1:88:11:b6:62:3a:f6:9c:a3: 53:cb:f8:5d:b5:b4:14:29:ca:78:70:da:3d:11:fd:4d:84:f5: 58:9d:50:1f:ea:c2:70:da:ae:23:b1:73:39:bd:f5:a9:7a:03: 3c:c0:58:32:07:42:7e:58:07:54:d6:6a:17:ba:4c:9b:62:31: 22:15:c4:b7:22:b3:f6:22:f1:ab:c1:a8:3e:ab:ee:c0:67:67: 11:78:37:50:56:14:34:21:d9:a3:a1:b1:f2:9b:15:86:72:6d: 9e:9b:a8:ee:5f:65:8b:15:ff:3d:61:da:aa:50:dd:58:fe:f5: da:22:bb:db:40:e7:db:30:f8:21:da:b4:fd:c5:d5:8e:43:6f: 38:e0:dc:33:88:af:f9:07:1f:22:d2:10:3f:d5:49:00:67:64: 7a:72:d8:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI9aYh2NCs/8A/PLPRI81S/TNFnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3 NDVDRDk3RjAeFw0yNTA2MTUwNzU1MDNaFw0yNTA2MTgxNjEzMDNaMDMxMTAvBgNV BAMTKDY5QzYyMzcwQTJCMDY3RUZBMjJDMkFGMzZCQ0M2RjZGRTc0NjU1MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkPSSN5AvO36V0PxkaJ15KqE6o rOjq6f/RHmCq3XHlafdAN9zduQdtM4uy9UlSjkjJ73ksqTKbO3u/x8f6RdrowJKZ Po9Yl85/HtySUmJVDMxoZgHeYQ3/910w1jmjw/660r4J2CY0iROqeEIUC5zQsdOB eQLWJ9jIy6IwKvL1t0nJyA49EF+H4qU/Xxi1VF+VD5ZFQtXyKXNIJdvca1ajSprq BkSnA44PdvLg2HwI5bfnwGONd3I9DAV9VQHkJo7GX+9T7ibSskJulOsPgIRhZNHM YLM/xTWyBcz86oKFaMV7cKKuBudZYYaG5KTWIPx0lFgo9J2LGMazdLtSB5V9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUacYjcKKwZ++iLCrza8xvb+dGVRowHwYDVR0j BBgwFoAUDV3NVEaUu+jbmdLY2rmDFHRc2X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTRhMjFiOS1mOTEyLTQxZjMtYjYyYy0xMjE3NTgxYzk0OGEvMC8wRDVEQ0Q1NDQ2 OTRCQkU4REI5OUQyRDhEQUI5ODMxNDc0NUNEOTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3NDVD RDk3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0YTIxYjktZjkxMi00MWYzLWI2 MmMtMTIxNzU4MWM5NDhhLzAvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgz MTQ3NDVDRDk3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFA/Z8rNlbUpbM2TFKcSLCDtwWUammOk+sZJ ZjLI0NvwZxnfvWDP2RnH/W4uxMHbps/2wk2N+sH9/HRPvNUDIi34e5SGWAi6ivbR vHihqyukX5rBut0e5a51WW6LiZ4BzlNRjuGIEbZiOvaco1PL+F21tBQpynhw2j0R /U2E9VidUB/qwnDariOxczm99al6AzzAWDIHQn5YB1TWahe6TJtiMSIVxLcis/Yi 8avBqD6r7sBnZxF4N1BWFDQh2aOhsfKbFYZybZ6bqO5fZYsV/z1h2qpQ3Vj+9doi u9tA59sw+CHatP3F1Y5Dbzjg3DOIr/kHHyLSED/VSQBnZHpy2Io= -----END CERTIFICATE-----Generated at Tue Jun 17 03:27:33 2025 by rpki-client