$ rpki-client -vvf repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft File: 0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft (raw, json) Hash identifier: iNwS6lD+B4Dr78uz8tLl4ayAmVj2uZHMP1AbVUHZcKo= Subject key identifier: 7B:99:D5:A2:72:BF:56:7F:21:F2:DC:2D:BA:10:6A:71:A6:C5:20:38 Authority key identifier: 0E:1F:EF:A1:7B:36:15:40:F7:3B:24:95:37:DF:0B:5C:4F:93:B4:B9 Certificate issuer: /CN=0E1FEFA17B361540F73B249537DF0B5C4F93B4B9 Certificate serial: C2F7F838A4C09ADC34D2104E6DDE11EA7F5C9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft Manifest number: A4 Signing time: Fri 08 Aug 2025 07:00:59 +0000 Manifest this update: Fri 08 Aug 2025 06:55:59 +0000 Manifest next update: Mon 11 Aug 2025 18:49:59 +0000 Files and hashes: 1: 0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.crl (hash: 9EXEFsCRcsgwlpewh8DezN4p8p2ck1FBt5O+DPEw6kg=) 2: 33362e35302e39362e302f32342d3234203d3e20313532333536.roa (hash: 0YTgb847tvQJ6aYcLp7rUu/koq2efZafX5EfBrU5MeY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.crl rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 08:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c2:f7:f8:38:a4:c0:9a:dc:34:d2:10:4e:6d:de:11:ea:7f:5c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E1FEFA17B361540F73B249537DF0B5C4F93B4B9 Validity Not Before: Aug 8 06:55:59 2025 GMT Not After : Aug 11 18:49:59 2025 GMT Subject: CN=7B99D5A272BF567F21F2DC2DBA106A71A6C52038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:89:cd:8f:16:50:36:1c:46:a4:18:d4:39:20: 50:9d:55:70:06:58:f6:d7:89:d7:f1:c1:29:59:38: 80:92:a9:18:90:df:ef:f7:af:a2:d7:22:ec:33:e0: 5f:8d:39:3d:ab:f0:60:e8:45:00:e7:37:46:ad:38: 4d:54:fd:d3:8b:92:47:2f:76:5e:3d:2c:fb:76:c3: 45:82:8f:19:2e:fc:c3:54:b7:c6:a7:1f:2b:07:47: 86:07:53:46:9a:ba:5c:8f:7e:a3:a5:7a:b9:9a:76: 3c:15:d1:31:d5:46:2e:2e:72:51:f0:fe:e5:40:12: a9:34:8d:d7:1d:70:f4:53:07:25:fa:71:34:d3:d5: 05:6d:b4:84:d5:48:59:90:e8:d7:77:5e:e6:49:bb: c9:01:ed:90:42:22:b7:40:aa:57:a5:14:9c:b0:55: a0:85:cb:90:3f:af:f3:04:7f:57:fe:c8:f6:aa:ed: b5:ce:79:9c:5a:fc:f9:36:60:0c:44:cf:7f:39:37: 47:1c:b8:1a:63:70:bc:39:3b:59:57:4e:19:7c:28: 68:07:2b:85:14:7d:25:33:da:46:20:c3:2e:31:8e: 92:15:f7:44:e7:91:2a:6e:6b:59:2a:8a:16:1e:27: d2:b3:51:83:42:e9:c5:f8:c4:ff:7f:e3:11:ae:a0: c4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:99:D5:A2:72:BF:56:7F:21:F2:DC:2D:BA:10:6A:71:A6:C5:20:38 X509v3 Authority Key Identifier: keyid:0E:1F:EF:A1:7B:36:15:40:F7:3B:24:95:37:DF:0B:5C:4F:93:B4:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e2:ee:17:b5:57:eb:78:94:2a:ca:2a:3d:cb:12:5b:f1:f7: 05:7c:38:77:3a:67:44:e6:d7:01:8a:c4:46:f6:01:95:fd:9e: 69:d0:d6:e2:92:c7:22:0a:f6:7d:b7:86:0d:f7:d6:22:c4:b6: d4:45:c1:b4:58:88:6e:ba:56:83:7e:b5:8f:eb:24:48:32:85: f0:ab:70:da:1e:21:66:7e:6f:b0:64:52:d3:5a:63:27:ec:30: f2:ce:76:97:b8:af:30:2b:6b:34:50:b1:ac:82:31:ab:fc:01: 25:a2:bc:7e:11:44:a5:bc:f6:d3:23:a8:d9:a6:e3:41:5e:cc: 2d:36:b7:99:bd:30:bf:e3:82:a2:f2:1f:26:00:a1:09:f6:a0: 57:67:34:80:11:2e:32:fb:83:5e:0b:96:19:21:a9:c7:2b:77: 30:c6:3a:82:5e:f7:e0:f2:82:6b:4a:9e:2e:1b:20:6c:72:5a: e5:6a:3a:e4:1c:e3:f4:d0:e7:36:a2:77:69:74:0f:ac:4f:f4: 75:82:95:75:84:6f:fd:d5:93:f4:cc:d2:c6:2b:93:f1:e5:c4: d4:e2:43:6d:ae:a8:29:53:a4:c8:7d:c6:e3:5a:e6:93:ce:56: 4c:e6:86:57:64:64:ec:63:5a:62:84:8e:07:32:23:39:d4:68: 3c:fb:bf:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAML3+DikwJrcNNIQTm3eEep/XJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUxRkVGQTE3QjM2MTU0MEY3M0IyNDk1MzdERjBCNUM0 RjkzQjRCOTAeFw0yNTA4MDgwNjU1NTlaFw0yNTA4MTExODQ5NTlaMDMxMTAvBgNV BAMTKDdCOTlENUEyNzJCRjU2N0YyMUYyREMyREJBMTA2QTcxQTZDNTIwMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPic2PFlA2HEakGNQ5IFCdVXAG WPbXidfxwSlZOICSqRiQ3+/3r6LXIuwz4F+NOT2r8GDoRQDnN0atOE1U/dOLkkcv dl49LPt2w0WCjxku/MNUt8anHysHR4YHU0aaulyPfqOlermadjwV0THVRi4uclHw /uVAEqk0jdcdcPRTByX6cTTT1QVttITVSFmQ6Nd3XuZJu8kB7ZBCIrdAqlelFJyw VaCFy5A/r/MEf1f+yPaq7bXOeZxa/Pk2YAxEz385N0ccuBpjcLw5O1lXThl8KGgH K4UUfSUz2kYgwy4xjpIV90TnkSpua1kqihYeJ9KzUYNC6cX4xP9/4xGuoMRjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe5nVonK/Vn8h8twtuhBqcabFIDgwHwYDVR0j BBgwFoAUDh/voXs2FUD3OySVN98LXE+TtLkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDkwZDg2Yi0wYjBkLTQ1NmYtODQxYS1iZmRiOWQ4MDdmYjcvMC8wRTFGRUZBMTdC MzYxNTQwRjczQjI0OTUzN0RGMEI1QzRGOTNCNEI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEUxRkVGQTE3QjM2MTU0MEY3M0IyNDk1MzdERjBCNUM0Rjkz QjRCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ5MGQ4NmItMGIwZC00NTZmLTg0 MWEtYmZkYjlkODA3ZmI3LzAvMEUxRkVGQTE3QjM2MTU0MEY3M0IyNDk1MzdERjBC NUM0RjkzQjRCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/i7he1V+t4lCrKKj3LElvx9wV8OHc6Z0Tm 1wGKxEb2AZX9nmnQ1uKSxyIK9n23hg331iLEttRFwbRYiG66VoN+tY/rJEgyhfCr cNoeIWZ+b7BkUtNaYyfsMPLOdpe4rzArazRQsayCMav8ASWivH4RRKW89tMjqNmm 40FezC02t5m9ML/jgqLyHyYAoQn2oFdnNIARLjL7g14LlhkhqccrdzDGOoJe9+Dy gmtKni4bIGxyWuVqOuQc4/TQ5zaid2l0D6xP9HWClXWEb/3Vk/TM0sYrk/HlxNTi Q22uqClTpMh9xuNa5pPOVkzmhldkZOxjWmKEjgcyIznUaDz7v/4= -----END CERTIFICATE-----Generated at Fri Aug 8 10:10:26 2025 by rpki-client