$ rpki-client -vvf repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft File: 0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft (raw, json) Hash identifier: MshsX9ch/7BJ7vV1xB3SmQvKUGSMb31GfOBUGetW9i8= Subject key identifier: F6:13:EB:A2:59:EF:17:A1:E2:90:FF:A9:72:84:79:1C:D7:29:40:46 Authority key identifier: 0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8 Certificate issuer: /CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8 Certificate serial: 542E625C2159513F25F11E4B04A63CC27B413F9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft Manifest number: 0204 Signing time: Tue 17 Jun 2025 04:31:18 +0000 Manifest this update: Tue 17 Jun 2025 04:26:18 +0000 Manifest next update: Fri 20 Jun 2025 13:38:18 +0000 Files and hashes: 1: 3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa (hash: kHBDyPefqsguh5TCEwR1/CilgDV5vN4olgvGsk/91XM=) 2: 0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl (hash: D1apoc1UvryWodF88KTUSLKUsB0q3Td/92oXIGxzZSE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 13:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:2e:62:5c:21:59:51:3f:25:f1:1e:4b:04:a6:3c:c2:7b:41:3f:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8 Validity Not Before: Jun 17 04:26:18 2025 GMT Not After : Jun 20 13:38:18 2025 GMT Subject: CN=F613EBA259EF17A1E290FFA97284791CD7294046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c0:b3:6c:71:15:ce:76:80:ea:a1:48:89:6d: 00:d6:71:66:16:2f:2c:1a:2d:8c:6e:8c:10:c5:a0: 6a:03:56:73:00:e3:b5:f9:f0:78:02:ef:a3:56:f6: be:e1:67:ba:fa:50:49:77:91:85:42:60:0b:2c:79: 74:d9:6d:41:f0:d2:06:bd:2d:8b:a9:2e:99:70:16: fc:9d:96:35:89:be:a2:03:9c:e0:9e:68:a7:bf:d2: 38:08:55:e1:3b:7e:ef:a8:c3:86:07:df:1c:69:ea: c7:4f:ba:cf:bf:c9:d1:f9:43:1d:f3:2e:61:f1:af: e9:0e:85:f2:20:87:fa:7c:cc:54:91:fe:b7:60:d7: bd:c1:37:09:ce:6a:9c:19:61:9e:f1:51:d7:d1:28: 58:e9:d9:b5:82:0e:87:38:74:ba:6d:a9:fb:db:5a: 8f:71:b6:ef:f6:ff:17:3e:9f:a8:87:68:c5:38:67: 8d:1e:4e:2f:6d:2f:41:cb:47:63:f1:8e:da:74:b8: 32:f6:ea:1c:1d:b1:31:6a:36:28:b9:94:00:9a:1f: 93:e7:c7:e9:2d:34:6e:b6:10:f5:5d:d5:f5:a4:6a: 8a:d8:b5:6b:1b:c2:9e:b4:1a:52:30:82:6f:9d:18: cc:7c:cd:a8:87:41:c1:59:02:f0:f9:c2:f3:0e:40: bf:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:13:EB:A2:59:EF:17:A1:E2:90:FF:A9:72:84:79:1C:D7:29:40:46 X509v3 Authority Key Identifier: keyid:0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:de:1b:c1:42:bb:c0:0e:42:12:a1:95:df:d4:73:9c:c9:4f: e3:cd:f1:05:d8:8f:ac:de:34:cf:f2:18:27:96:b8:31:56:31: 01:e5:0d:89:cc:a0:a7:f4:52:e8:db:0b:19:06:fe:ac:ce:aa: 90:a1:42:5f:2a:c7:73:f4:26:22:d4:97:dc:22:b1:58:a6:60: 20:00:71:09:f4:e9:30:15:16:82:3d:c6:ec:75:ba:01:35:16: 14:0b:44:dd:28:7c:f1:52:6d:0b:e0:8e:97:3d:27:f2:7c:e0: dc:28:ce:1c:b5:ca:d8:c1:11:ae:be:62:73:bc:37:fd:88:67: 28:60:33:4d:9b:03:fd:85:a6:72:df:74:f0:04:6e:a0:2f:c8: 2e:81:30:5d:90:c6:8f:e4:56:f7:a1:1e:2b:24:eb:e1:c0:e3: 27:11:58:b5:c5:44:52:4d:04:5a:57:e2:e3:cc:9e:24:e8:34: 2a:8e:20:43:a8:3d:dc:f5:f4:a7:5c:39:c4:51:b9:15:de:a0: f5:bd:47:39:ee:2f:fd:c4:eb:b8:07:6a:f3:ed:48:3b:e3:a2: e9:37:1a:95:7b:9e:57:11:8f:c4:e9:5a:75:93:0e:65:52:d8: ed:bc:11:25:c3:46:5e:ef:05:a0:74:57:88:d4:21:31:78:15: 66:54:70:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVC5iXCFZUT8l8R5LBKY8wntBP5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjky N0U4MTVFODAeFw0yNTA2MTcwNDI2MThaFw0yNTA2MjAxMzM4MThaMDMxMTAvBgNV BAMTKEY2MTNFQkEyNTlFRjE3QTFFMjkwRkZBOTcyODQ3OTFDRDcyOTQwNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNwLNscRXOdoDqoUiJbQDWcWYW LywaLYxujBDFoGoDVnMA47X58HgC76NW9r7hZ7r6UEl3kYVCYAsseXTZbUHw0ga9 LYupLplwFvydljWJvqIDnOCeaKe/0jgIVeE7fu+ow4YH3xxp6sdPus+/ydH5Qx3z LmHxr+kOhfIgh/p8zFSR/rdg173BNwnOapwZYZ7xUdfRKFjp2bWCDoc4dLptqfvb Wo9xtu/2/xc+n6iHaMU4Z40eTi9tL0HLR2Pxjtp0uDL26hwdsTFqNii5lACaH5Pn x+ktNG62EPVd1fWkaorYtWsbwp60GlIwgm+dGMx8zaiHQcFZAvD5wvMOQL8JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9hProlnvF6HikP+pcoR5HNcpQEYwHwYDVR0j BBgwFoAUDCBg5B3GrP9UkoaNmxdqKSfoFegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGExNGUzYS01YmUwLTQ2ZDEtOTAzYy0wNTliMGI2ODg4MjEvMC8wQzIwNjBFNDFE QzZBQ0ZGNTQ5Mjg2OEQ5QjE3NkEyOTI3RTgxNUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjkyN0U4 MTVFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMTRlM2EtNWJlMC00NmQxLTkw M2MtMDU5YjBiNjg4ODIxLzAvMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZB MjkyN0U4MTVFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHneG8FCu8AOQhKhld/Uc5zJT+PN8QXYj6ze NM/yGCeWuDFWMQHlDYnMoKf0UujbCxkG/qzOqpChQl8qx3P0JiLUl9wisVimYCAA cQn06TAVFoI9xux1ugE1FhQLRN0ofPFSbQvgjpc9J/J84Nwozhy1ytjBEa6+YnO8 N/2IZyhgM02bA/2FpnLfdPAEbqAvyC6BMF2Qxo/kVvehHisk6+HA4ycRWLXFRFJN BFpX4uPMniToNCqOIEOoPdz19KdcOcRRuRXeoPW9RznuL/3E67gHavPtSDvjouk3 GpV7nlcRj8TpWnWTDmVS2O28ESXDRl7vBaB0V4jUITF4FWZUcBc= -----END CERTIFICATE-----Generated at Wed Jun 18 04:13:13 2025 by rpki-client