$ rpki-client -vvf repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft File: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft (raw, json) Hash identifier: +zYIfREZRUCQgLeev33WuSOzTLn0EC/jINpbXk+o7QY= Subject key identifier: DC:77:C8:9E:09:64:D4:FD:A8:10:F9:F3:1D:09:6E:B9:55:6F:70:AE Authority key identifier: 0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF Certificate issuer: /CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Certificate serial: 6F508A85DDB1DD5F0FF350672266AB7B5CD01F1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft Manifest number: 027F Signing time: Mon 03 Nov 2025 10:02:24 +0000 Manifest this update: Mon 03 Nov 2025 09:57:24 +0000 Manifest next update: Thu 06 Nov 2025 17:08:24 +0000 Files and hashes: 1: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl (hash: KtjswXS1bxDT0TYd/z2scPif9qAf12liO/5ttzgShiI=) 2: 3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa (hash: MvgqBGXrnOkC/bSNmq53L/wKuHtt5QyNVXA0tvnGZYU=) 3: 323030313a6466333a373030303a3a2f34382d3438203d3e20313332363738.roa (hash: xx/q8Pg4Xq4PjVzlGqUqXNKdPIEC0luemVSHSnJC5jE=) 4: 3130332e3234312e3230362e302f32342d3234203d3e20313332363738.roa (hash: 3FCB7wGcxY5o7OIM5kLAifNt8CAQvL8N3I6rZCJvBcw=) 5: 3130332e3234312e3230372e302f32342d3234203d3e20313332363738.roa (hash: knuIklDPIimRkON042cExQYjdXGcfiWbqkGFha8mOGA=) 6: 3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa (hash: zrbBCkWXbp/QRaVHtWjjAzEvRytZESlXfX/5sg0H0sQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:50:8a:85:dd:b1:dd:5f:0f:f3:50:67:22:66:ab:7b:5c:d0:1f:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Validity Not Before: Nov 3 09:57:24 2025 GMT Not After : Nov 6 17:08:24 2025 GMT Subject: CN=DC77C89E0964D4FDA810F9F31D096EB9556F70AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ea:69:e0:60:d2:aa:14:32:92:e2:ce:b7:82: 78:22:9c:78:44:ec:34:fe:41:91:4e:a3:e6:c5:6c: 65:44:a6:14:0a:28:4f:74:fd:35:71:59:07:a7:e5: a5:a6:5f:94:75:fb:09:8a:1b:3c:6a:f9:84:7f:e4: fd:b0:a0:7c:fd:bd:e5:5e:3d:c0:9d:82:05:cb:6f: dc:2a:9b:7f:ea:93:cf:aa:ce:75:79:72:9c:b3:9e: 6c:44:42:53:94:4c:81:36:b7:40:47:69:27:74:e6: 88:8e:6d:2a:f8:f4:90:3e:ec:7b:96:54:d3:56:4b: 66:86:6a:15:f3:38:7a:c3:10:69:78:3f:c8:a1:ae: d3:77:ed:b1:8f:2d:61:b7:e5:4a:e3:fd:e3:18:2e: 05:81:fd:34:b5:3a:1d:1e:1c:0c:97:57:cc:21:ac: 68:b4:77:86:78:f6:69:01:4a:cb:91:27:87:cd:e9: 77:34:4a:35:55:8c:0b:b8:f6:d1:b3:70:2b:39:a3: 37:b9:9a:fb:90:1d:eb:34:40:39:8e:f7:b3:c4:65: f3:1d:15:e7:42:58:3e:1d:4b:2c:0b:8f:3b:9e:81: 3e:dc:3f:cb:d2:31:6d:c2:55:e6:58:4c:4a:64:2e: ef:07:3a:87:56:03:d4:15:2e:43:b5:44:2a:14:87: e5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:77:C8:9E:09:64:D4:FD:A8:10:F9:F3:1D:09:6E:B9:55:6F:70:AE X509v3 Authority Key Identifier: keyid:0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:f8:64:9c:a0:3f:11:a2:da:67:3e:79:0f:02:7a:06:98:72: 9a:f4:be:8e:5c:f2:7d:92:6f:e7:45:1c:28:58:d2:76:1f:c8: ed:7d:ee:e2:ef:2c:de:c9:0e:7d:56:9d:e5:58:29:94:14:5e: 97:a0:e6:7c:fd:7c:96:76:ac:00:6e:1c:8a:c0:bb:6c:24:96: b2:9c:3b:e9:4e:97:14:f6:67:9c:6e:26:7e:24:f9:e2:29:98: 6a:1c:98:e9:7b:07:e7:a2:aa:9d:1a:31:4d:c9:0b:bc:a4:ce: 4a:65:30:3d:42:c3:5d:18:44:02:2d:e3:e6:cd:4a:2d:ad:75: 40:88:80:4e:96:08:60:83:bd:67:98:eb:4e:f3:b4:78:7b:9b: 18:82:2d:22:b6:65:1c:27:b5:65:75:52:58:37:0d:8b:15:f8: 4a:fe:29:a3:01:da:68:01:20:3c:61:bf:9f:48:d9:6b:87:86: 9b:9a:03:39:4e:7c:e4:80:ae:55:fb:65:cf:40:a2:f9:2b:e9: 74:06:af:4f:07:f0:ca:26:db:16:7f:7b:de:ed:42:b3:ae:45: 75:af:61:e7:da:83:ef:cc:6b:f1:c7:7b:2c:f4:6f:6a:91:59: cc:fc:6c:fc:57:dd:df:42:7c:92:43:c1:40:7e:4b:df:1b:bf: ed:85:71:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb1CKhd2x3V8P81BnImare1zQHx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZB NDAxRUNDRjAeFw0yNTExMDMwOTU3MjRaFw0yNTExMDYxNzA4MjRaMDMxMTAvBgNV BAMTKERDNzdDODlFMDk2NEQ0RkRBODEwRjlGMzFEMDk2RUI5NTU2RjcwQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf6mngYNKqFDKS4s63gnginHhE 7DT+QZFOo+bFbGVEphQKKE90/TVxWQen5aWmX5R1+wmKGzxq+YR/5P2woHz9veVe PcCdggXLb9wqm3/qk8+qznV5cpyznmxEQlOUTIE2t0BHaSd05oiObSr49JA+7HuW VNNWS2aGahXzOHrDEGl4P8ihrtN37bGPLWG35Urj/eMYLgWB/TS1Oh0eHAyXV8wh rGi0d4Z49mkBSsuRJ4fN6Xc0SjVVjAu49tGzcCs5oze5mvuQHes0QDmO97PEZfMd FedCWD4dSywLjzuegT7cP8vSMW3CVeZYTEpkLu8HOodWA9QVLkO1RCoUh+XxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3HfInglk1P2oEPnzHQluuVVvcK4wHwYDVR0j BBgwFoAUC6+WZwZgyU+7Pjh+8VBeb6QB7M8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWEwY2Y5YS1jNTdkLTQzOTUtOTI0OS1iZmNmNDY3MjQyODIvMC8wQkFGOTY2NzA2 NjBDOTRGQkIzRTM4N0VGMTUwNUU2RkE0MDFFQ0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZBNDAx RUNDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVhMGNmOWEtYzU3ZC00Mzk1LTky NDktYmZjZjQ2NzI0MjgyLzAvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVF NkZBNDAxRUNDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHP4ZJygPxGi2mc+eQ8CegaYcpr0vo5c8n2S b+dFHChY0nYfyO197uLvLN7JDn1WneVYKZQUXpeg5nz9fJZ2rABuHIrAu2wklrKc O+lOlxT2Z5xuJn4k+eIpmGocmOl7B+eiqp0aMU3JC7ykzkplMD1Cw10YRAIt4+bN Si2tdUCIgE6WCGCDvWeY607ztHh7mxiCLSK2ZRwntWV1Ulg3DYsV+Er+KaMB2mgB IDxhv59I2WuHhpuaAzlOfOSArlX7Zc9Aovkr6XQGr08H8Mom2xZ/e97tQrOuRXWv Yefag+/Ma/HHeyz0b2qRWcz8bPxX3d9CfJJDwUB+S98bv+2FcZc= -----END CERTIFICATE-----Generated at Tue Nov 4 02:08:18 2025 by rpki-client