$ rpki-client -vvf repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft File: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft (raw, json) Hash identifier: r5pMGwnt4GOUOFs6p2mlKOsY8RBTND+vaPSMcHOZDJs= Subject key identifier: F0:B8:24:53:DD:A8:32:C2:07:2C:5D:99:09:71:6F:A1:2B:60:75:3F Authority key identifier: 0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 Certificate issuer: /CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Certificate serial: 58A4D1BF5AF0E260B4687D7ED507AABD1EAFE0C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft Manifest number: 04E2 Signing time: Sun 15 Jun 2025 21:01:50 +0000 Manifest this update: Sun 15 Jun 2025 20:56:50 +0000 Manifest next update: Wed 18 Jun 2025 21:08:50 +0000 Files and hashes: 1: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: hqaKmxf71nI6HTBMvNY3G6OZQcwY11nDuhu6Wp5x5hA=) 2: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl (hash: lsKdQ/zNIb444juRsNtj1Ca4GJyxAeA6148o7Sr9Kqg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 21:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a4:d1:bf:5a:f0:e2:60:b4:68:7d:7e:d5:07:aa:bd:1e:af:e0:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Validity Not Before: Jun 15 20:56:50 2025 GMT Not After : Jun 18 21:08:50 2025 GMT Subject: CN=F0B82453DDA832C2072C5D9909716FA12B60753F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8d:a8:aa:b4:b2:c8:b3:65:5a:e0:5f:2d:97: 4a:b4:56:79:aa:78:b4:bb:73:6d:a1:56:0b:62:aa: b1:16:ac:22:3d:93:23:91:54:b9:48:d1:32:0b:b1: 40:bd:dd:73:18:81:f3:d8:45:1a:08:d5:0e:37:f4: 0d:39:67:b0:2c:a1:ec:90:c4:76:69:99:02:a3:68: 60:5a:a4:28:e6:ab:a8:72:e8:f5:e2:a0:5b:85:51: b0:e6:76:d8:c2:13:b4:b6:32:1b:8c:31:49:34:5f: 9c:5b:52:97:e3:5b:53:5a:f2:81:32:05:bc:31:3d: fd:7e:79:f7:84:d2:5c:c1:24:aa:72:02:a1:2e:d2: 7f:f3:80:6f:bf:af:95:ee:05:1b:d9:2f:70:fb:54: 88:d5:05:df:57:52:58:2f:0c:1e:64:d5:35:6b:91: b3:66:ab:e8:1f:be:83:c3:5e:63:37:b1:73:f2:ac: 3f:ef:01:85:db:25:46:46:d7:66:7d:de:52:ec:54: 72:bf:69:7b:f1:1b:75:50:d7:91:01:14:a5:a9:ab: 91:dc:3c:ed:d0:db:b7:54:c2:2c:ac:d6:b6:e7:d6: 2d:fe:95:b8:d0:12:19:9c:5b:88:6b:24:d6:f7:9b: 40:24:56:f6:26:f6:0b:f9:fc:5c:a3:b1:01:e8:44: 33:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B8:24:53:DD:A8:32:C2:07:2C:5D:99:09:71:6F:A1:2B:60:75:3F X509v3 Authority Key Identifier: keyid:0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:b5:26:2d:18:26:09:18:0e:bf:58:7c:62:5a:42:8a:d2:d0: a6:fa:91:6f:3a:ad:fa:55:24:a8:95:dc:df:ea:c1:f9:9c:11: 89:fa:b7:39:60:3a:60:ca:ad:7d:29:46:42:4c:63:2d:1f:8e: 78:0a:7b:34:71:ed:49:53:5d:7b:49:04:ba:8d:a4:24:22:3a: d1:86:27:d4:d4:03:6e:78:14:eb:90:94:64:b0:07:c6:1d:de: 44:74:ab:e5:e0:fc:a4:75:92:ea:71:dc:62:ef:1b:42:0e:cb: ce:20:36:07:ec:f2:35:0f:80:a3:52:4a:d7:8d:ea:15:d5:d0: 37:59:2c:b5:a7:ef:f6:7b:f3:c3:53:58:1b:e0:d3:80:8b:56: 21:c9:02:ad:1a:f8:8c:d1:90:f1:69:97:cc:89:69:b0:c2:26: c7:d2:18:3c:e8:a2:11:dd:c1:19:41:b2:ea:64:e2:22:6a:57: e3:8e:1d:52:38:5e:5a:5f:3a:ba:47:85:77:f1:e7:e1:5f:3c: 4d:41:35:e4:40:fe:7c:8a:fe:f5:7e:9f:bd:be:7d:13:30:c7: 96:4a:7b:b1:dd:03:0b:4d:f7:ad:bd:91:f0:fd:a7:70:d9:4c: f4:fd:49:90:33:dc:1b:ed:68:a8:81:04:9f:2e:d5:9d:3b:e1: 6c:0c:aa:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWKTRv1rw4mC0aH1+1QeqvR6v4MkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUz QTIzRDEzNzAeFw0yNTA2MTUyMDU2NTBaFw0yNTA2MTgyMTA4NTBaMDMxMTAvBgNV BAMTKEYwQjgyNDUzRERBODMyQzIwNzJDNUQ5OTA5NzE2RkExMkI2MDc1M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdjaiqtLLIs2Va4F8tl0q0Vnmq eLS7c22hVgtiqrEWrCI9kyORVLlI0TILsUC93XMYgfPYRRoI1Q439A05Z7AsoeyQ xHZpmQKjaGBapCjmq6hy6PXioFuFUbDmdtjCE7S2MhuMMUk0X5xbUpfjW1Na8oEy BbwxPf1+efeE0lzBJKpyAqEu0n/zgG+/r5XuBRvZL3D7VIjVBd9XUlgvDB5k1TVr kbNmq+gfvoPDXmM3sXPyrD/vAYXbJUZG12Z93lLsVHK/aXvxG3VQ15EBFKWpq5Hc PO3Q27dUwiys1rbn1i3+lbjQEhmcW4hrJNb3m0AkVvYm9gv5/FyjsQHoRDMnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8LgkU92oMsIHLF2ZCXFvoStgdT8wHwYDVR0j BBgwFoAUDfgfDumbLgbbbK7gXMMBvjoj0TcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjZlYTIyMS03N2I3LTQ3OTEtYThhOC1iNTE2NGIwMGYxYzUvMC8wREY4MUYwRUU5 OUIyRTA2REI2Q0FFRTA1Q0MzMDFCRTNBMjNEMTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUzQTIz RDEzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y2ZWEyMjEtNzdiNy00NzkxLWE4 YTgtYjUxNjRiMDBmMWM1LzAvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAx QkUzQTIzRDEzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHe1Ji0YJgkYDr9YfGJaQorS0Kb6kW86rfpV JKiV3N/qwfmcEYn6tzlgOmDKrX0pRkJMYy0fjngKezRx7UlTXXtJBLqNpCQiOtGG J9TUA254FOuQlGSwB8Yd3kR0q+Xg/KR1kupx3GLvG0IOy84gNgfs8jUPgKNSSteN 6hXV0DdZLLWn7/Z788NTWBvg04CLViHJAq0a+IzRkPFpl8yJabDCJsfSGDzoohHd wRlBsupk4iJqV+OOHVI4XlpfOrpHhXfx5+FfPE1BNeRA/nyK/vV+n72+fRMwx5ZK e7HdAwtN9629kfD9p3DZTPT9SZAz3BvtaKiBBJ8u1Z074WwMql4= -----END CERTIFICATE-----Generated at Tue Jun 17 15:38:44 2025 by rpki-client