$ rpki-client -vvf repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft File: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft (raw, json) Hash identifier: J4qy1Z1jikHHf3WwfauMkKb0Cz8hW0OIj1TlrJJ5aoQ= Subject key identifier: 1F:DC:6F:1E:7C:0D:71:C3:83:6E:65:E7:80:C8:ED:52:24:B1:B6:41 Authority key identifier: 0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E Certificate issuer: /CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E Certificate serial: 0450FA3F8F48FD7E2136CE43C3ECB9857616E2FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft Manifest number: 04F7 Signing time: Wed 06 Aug 2025 14:40:46 +0000 Manifest this update: Wed 06 Aug 2025 14:35:46 +0000 Manifest next update: Sat 09 Aug 2025 22:03:46 +0000 Files and hashes: 1: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (hash: /0ivdWgJqnJaSVnUB+9OuvpQlcxcSIK1E90K9ZECaAA=) 2: 323030313a6466303a3232393a3a2f34382d3438203d3e20313331373738.roa (hash: Kw/2sJDovbqcLamhNn36qpz8RozjhJRdtUEEKJ4rTNg=) 3: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl (hash: mXxMdXpU8y6bv8R+jyJOZ5cxuk2cqxpAWwFEJ5PQsmU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 22:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:50:fa:3f:8f:48:fd:7e:21:36:ce:43:c3:ec:b9:85:76:16:e2:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E Validity Not Before: Aug 6 14:35:46 2025 GMT Not After : Aug 9 22:03:46 2025 GMT Subject: CN=1FDC6F1E7C0D71C3836E65E780C8ED5224B1B641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:00:c9:81:80:77:c9:11:ec:30:b8:43:e6:21: be:5b:cd:80:67:32:a7:c0:ea:d3:1b:d0:0f:8c:7a: f5:92:e1:76:f4:e0:58:df:e1:7d:e6:62:24:3c:cb: 16:f9:05:2e:c2:a5:b0:68:bd:90:2e:5b:5f:92:0f: 98:ad:c2:d2:6e:c5:11:a2:a4:48:95:aa:09:3c:bc: 71:34:e5:90:89:f7:04:93:65:9c:32:a6:c4:05:40: 95:19:f3:16:2d:f2:85:74:15:18:83:08:fa:5d:e8: 96:22:30:2d:68:b2:6e:97:fc:08:89:76:04:fc:77: 90:06:7d:7c:03:4c:8b:ff:83:c0:cc:73:67:01:cc: d9:7d:66:e4:2e:2e:1d:a1:4c:2b:e0:c3:71:a5:f6: a8:81:e4:d8:f5:fd:72:34:9e:ca:e7:0f:fd:e2:42: 12:bd:cc:f1:22:a2:76:16:54:f4:bb:6c:b8:04:21: de:1c:66:c9:94:57:2e:69:08:0f:8d:64:07:fb:7e: 1f:d7:28:6f:7b:bc:70:1c:3a:27:c4:4a:04:8e:4c: c5:69:f8:dd:5e:f5:d4:94:89:71:a0:1f:f3:55:68: 58:46:65:62:cf:ce:a0:a8:66:11:7a:75:1d:8f:e1: 08:3a:25:2c:42:2b:16:3e:34:df:03:f4:17:63:d8: d2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DC:6F:1E:7C:0D:71:C3:83:6E:65:E7:80:C8:ED:52:24:B1:B6:41 X509v3 Authority Key Identifier: keyid:0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:12:e3:b0:74:56:c5:a9:65:9d:3b:ba:18:57:96:74:14:9b: bc:ea:b2:cd:97:3c:f6:cc:65:38:24:b4:75:7f:ee:f6:fe:4f: 66:d3:2e:a0:d4:40:83:84:38:2c:b4:e2:26:0a:d6:9c:21:d2: b9:3e:dd:33:b4:48:9d:1e:78:1e:5c:a9:97:16:9c:2a:f8:51: bd:9c:fc:69:4b:1f:a6:e5:8c:17:77:bb:6e:f4:12:0b:02:e1: f2:c2:cb:34:47:c1:9a:54:4b:13:b9:98:21:ed:61:26:72:5a: 1e:13:b4:a2:c5:d6:90:a5:90:f7:f9:45:63:ae:32:04:1b:5b: 49:76:1e:d7:23:1c:06:c1:81:0f:99:54:6c:6b:c9:42:ef:9d: 6e:a4:a3:97:03:1b:bc:57:c7:22:82:22:70:6d:47:ea:00:9a: 29:bd:7d:7b:d6:df:56:8b:d3:cb:9f:dc:79:b7:c8:52:a6:aa: 73:a2:16:34:e1:ab:58:a1:c2:49:41:d4:4f:ad:ab:da:ae:ad: 87:c2:32:f5:eb:7a:cf:7e:3a:48:fb:7a:3f:0f:ff:f3:86:fe: c9:a9:1c:72:b0:7d:d7:d5:cc:16:16:37:1d:08:0d:e9:09:eb: 55:23:d0:1f:e8:fc:20:90:21:77:cc:5b:4c:13:04:c0:9e:25: 75:f7:9c:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBFD6P49I/X4hNs5Dw+y5hXYW4vswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2 QUI1Njk1RTAeFw0yNTA4MDYxNDM1NDZaFw0yNTA4MDkyMjAzNDZaMDMxMTAvBgNV BAMTKDFGREM2RjFFN0MwRDcxQzM4MzZFNjVFNzgwQzhFRDUyMjRCMUI2NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvAMmBgHfJEewwuEPmIb5bzYBn MqfA6tMb0A+MevWS4Xb04Fjf4X3mYiQ8yxb5BS7CpbBovZAuW1+SD5itwtJuxRGi pEiVqgk8vHE05ZCJ9wSTZZwypsQFQJUZ8xYt8oV0FRiDCPpd6JYiMC1osm6X/AiJ dgT8d5AGfXwDTIv/g8DMc2cBzNl9ZuQuLh2hTCvgw3Gl9qiB5Nj1/XI0nsrnD/3i QhK9zPEionYWVPS7bLgEId4cZsmUVy5pCA+NZAf7fh/XKG97vHAcOifESgSOTMVp +N1e9dSUiXGgH/NVaFhGZWLPzqCoZhF6dR2P4Qg6JSxCKxY+NN8D9Bdj2NLfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH9xvHnwNccODbmXngMjtUiSxtkEwHwYDVR0j BBgwFoAUD/5fGfvrVIn/zN83/v4KDGq1aV4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmFlNThhYy01OTE3LTQwNjktOWE2Yy04M2RjMWJhMzIxMjYvMC8wRkZFNUYxOUZC RUI1NDg5RkZDQ0RGMzdGRUZFMEEwQzZBQjU2OTVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2QUI1 Njk1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJhZTU4YWMtNTkxNy00MDY5LTlh NmMtODNkYzFiYTMyMTI2LzAvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBB MEM2QUI1Njk1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIS47B0VsWpZZ07uhhXlnQUm7zqss2XPPbM ZTgktHV/7vb+T2bTLqDUQIOEOCy04iYK1pwh0rk+3TO0SJ0eeB5cqZcWnCr4Ub2c /GlLH6bljBd3u270EgsC4fLCyzRHwZpUSxO5mCHtYSZyWh4TtKLF1pClkPf5RWOu MgQbW0l2HtcjHAbBgQ+ZVGxryULvnW6ko5cDG7xXxyKCInBtR+oAmim9fXvW31aL 08uf3Hm3yFKmqnOiFjThq1ihwklB1E+tq9qurYfCMvXres9+Okj7ej8P//OG/smp HHKwfdfVzBYWNx0IDekJ61Uj0B/o/CCQIXfMW0wTBMCeJXX3nIM= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:51 2025 by rpki-client