$ rpki-client -vvf repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft File: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft (raw, json) Hash identifier: I2uCNrDWCtDeuECwda8gOVXN/n+mhM4SKPTDrVG+Wmk= Subject key identifier: 6E:80:43:B0:39:7D:AC:12:E2:E5:78:FD:D3:F4:91:F4:FA:50:D9:66 Authority key identifier: 0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD Certificate issuer: /CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD Certificate serial: 1526A135413C46C5F580FB66FEBE84860B3D19A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft Manifest number: 7D Signing time: Sat 14 Jun 2025 10:31:04 +0000 Manifest this update: Sat 14 Jun 2025 10:26:04 +0000 Manifest next update: Tue 17 Jun 2025 10:56:04 +0000 Files and hashes: 1: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (hash: ITWrfeJDp0fwFBA4IaXmJBukJZtkza2QyRgZRaZccug=) 2: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl (hash: k1u2blk+gLS9ILuGv+d1GloImBNMOCWsKmfaN8qX8iw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 10:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:26:a1:35:41:3c:46:c5:f5:80:fb:66:fe:be:84:86:0b:3d:19:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD Validity Not Before: Jun 14 10:26:04 2025 GMT Not After : Jun 17 10:56:04 2025 GMT Subject: CN=6E8043B0397DAC12E2E578FDD3F491F4FA50D966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d7:66:b8:51:07:87:4d:e8:55:ca:77:9a:f4: f9:7c:6e:e7:67:17:11:2d:4a:40:c9:62:11:04:6a: 3c:99:da:4c:8c:93:1f:04:ba:c2:8f:46:b8:5e:9d: f0:24:58:9b:60:b3:6e:ba:c7:d2:34:87:47:23:ff: 77:99:34:5e:64:f0:fc:86:59:fb:42:a5:53:1d:68: 45:1f:09:b6:68:d9:4b:41:a0:36:67:10:12:ae:a7: 15:84:8d:96:2d:ea:a5:14:13:42:dc:c9:c4:92:71: 09:c9:a3:5a:37:ac:bf:d8:2b:b5:70:62:65:ac:38: 7c:33:c0:39:43:05:d5:b1:3e:fe:ae:8d:14:96:ab: 6c:e8:4e:82:9e:bb:41:e6:5c:bd:aa:41:d4:c5:58: 80:01:f4:73:d3:3f:24:91:8a:5c:ef:1b:59:53:2b: 11:c6:33:db:3f:f3:88:bb:ef:ea:3d:20:d6:2d:f2: 5b:ff:af:e7:81:f5:1a:89:e9:55:21:d9:27:2b:58: 09:87:0a:7d:bd:e4:66:6a:54:1f:81:f1:5c:d2:da: dd:b4:f0:aa:34:2a:f2:78:92:d0:56:ea:5c:09:cf: b4:1e:d2:b8:6d:e6:51:89:75:a0:29:fb:25:50:1b: 9d:6e:56:37:26:50:78:22:7e:8f:5e:94:1e:17:6e: 31:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:80:43:B0:39:7D:AC:12:E2:E5:78:FD:D3:F4:91:F4:FA:50:D9:66 X509v3 Authority Key Identifier: keyid:0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:22:01:b8:52:b4:0b:32:76:8b:12:6a:07:61:3e:23:62:53: 26:6c:82:63:ef:8e:15:43:cc:64:17:9d:6f:c6:2f:2b:c2:dd: ba:f1:71:22:91:ba:5d:50:b6:a6:f0:d8:ac:44:bf:d2:c9:35: 4d:93:6b:d3:2a:38:39:9d:b5:bb:87:82:e4:8f:c2:5b:08:06: c4:02:76:a4:e1:5b:5c:61:56:d7:7f:1b:75:e8:76:85:6f:70: 09:84:c5:78:2b:bc:62:37:de:04:c8:63:72:ab:d5:0f:fc:18: f8:c3:59:44:c3:6c:e0:94:11:3a:8a:33:a7:d6:59:a7:1d:fb: e8:51:fb:3e:87:6a:dd:dc:ea:7f:5f:15:f6:8d:77:bd:95:5f: 6c:41:e9:9e:98:f7:3d:98:36:1e:0c:d2:2e:7d:79:6d:96:96: 13:3f:85:f0:04:2a:0a:18:e3:c8:d1:2c:76:1f:9f:0c:a0:70: eb:48:78:15:30:12:7d:be:e5:22:9b:72:e0:58:63:e3:93:0e: 35:68:5b:48:74:e5:42:ce:15:e0:6d:e3:10:ba:3a:80:20:44: 9b:10:59:fb:11:18:0a:47:d8:a2:44:aa:a2:de:5d:cc:da:31: 03:dd:68:68:c3:4f:86:e5:9a:b9:2c:ac:d9:33:4f:d9:14:69: 7a:03:1a:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFSahNUE8RsX1gPtm/r6Ehgs9GaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4 M0ZCN0RDRDAeFw0yNTA2MTQxMDI2MDRaFw0yNTA2MTcxMDU2MDRaMDMxMTAvBgNV BAMTKDZFODA0M0IwMzk3REFDMTJFMkU1NzhGREQzRjQ5MUY0RkE1MEQ5NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa12a4UQeHTehVynea9Pl8budn FxEtSkDJYhEEajyZ2kyMkx8EusKPRrhenfAkWJtgs266x9I0h0cj/3eZNF5k8PyG WftCpVMdaEUfCbZo2UtBoDZnEBKupxWEjZYt6qUUE0LcycSScQnJo1o3rL/YK7Vw YmWsOHwzwDlDBdWxPv6ujRSWq2zoToKeu0HmXL2qQdTFWIAB9HPTPySRilzvG1lT KxHGM9s/84i77+o9INYt8lv/r+eB9RqJ6VUh2ScrWAmHCn295GZqVB+B8VzS2t20 8Ko0KvJ4ktBW6lwJz7Qe0rht5lGJdaAp+yVQG51uVjcmUHgifo9elB4XbjEJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUboBDsDl9rBLi5Xj90/SR9PpQ2WYwHwYDVR0j BBgwFoAUDB++gPIesmaGl4s+dpSFwIP7fc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzQ2YzBlMi04MTk0LTQwMjQtYmNiMy1kMDI5NTZjZTNhOTkvMC8wQzFGQkU4MEYy MUVCMjY2ODY5NzhCM0U3Njk0ODVDMDgzRkI3RENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4M0ZC N0RDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM0NmMwZTItODE5NC00MDI0LWJj YjMtZDAyOTU2Y2UzYTk5LzAvMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1 QzA4M0ZCN0RDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALwiAbhStAsydosSagdhPiNiUyZsgmPvjhVD zGQXnW/GLyvC3brxcSKRul1Qtqbw2KxEv9LJNU2Ta9MqODmdtbuHguSPwlsIBsQC dqThW1xhVtd/G3XodoVvcAmExXgrvGI33gTIY3Kr1Q/8GPjDWUTDbOCUETqKM6fW Wacd++hR+z6Hat3c6n9fFfaNd72VX2xB6Z6Y9z2YNh4M0i59eW2WlhM/hfAEKgoY 48jRLHYfnwygcOtIeBUwEn2+5SKbcuBYY+OTDjVoW0h05ULOFeBt4xC6OoAgRJsQ WfsRGApH2KJEqqLeXczaMQPdaGjDT4blmrksrNkzT9kUaXoDGvY= -----END CERTIFICATE-----Generated at Mon Jun 16 12:06:00 2025 by rpki-client