$ rpki-client -vvf repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft File: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft (raw, json) Hash identifier: 0VIk5eynz5ZWmMABI88g2KavKEV4lQLE7BJpRh7jOBk= Subject key identifier: 88:F8:4C:7A:79:57:33:7E:E2:33:6E:0F:91:D1:C2:86:78:D8:22:13 Authority key identifier: 0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E Certificate issuer: /CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Certificate serial: 11E29AE9F090721D1273F52D3E6AC1C4675ECC3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft Manifest number: 027B Signing time: Tue 17 Jun 2025 20:20:48 +0000 Manifest this update: Tue 17 Jun 2025 20:15:48 +0000 Manifest next update: Sat 21 Jun 2025 06:54:48 +0000 Files and hashes: 1: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: CqE5ZCzeVRm7AAgS0qiGljnG3wqud2DW58oPqVZ6WJg=) 2: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: v7MhMAJXwywfKNpvZVGmK8aNTXn4lXBf1MXFy8E2vnM=) 3: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl (hash: b2OCHm3FO7uJPcdDl95sLTEnT2wCLMr2eaNGC0fj2do=) 4: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: WfXT/rfuqOQCtkSuVOvx3HMgMVWsirCiP4VcVNJi+gw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 06:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:e2:9a:e9:f0:90:72:1d:12:73:f5:2d:3e:6a:c1:c4:67:5e:cc:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Validity Not Before: Jun 17 20:15:48 2025 GMT Not After : Jun 21 06:54:48 2025 GMT Subject: CN=88F84C7A7957337EE2336E0F91D1C28678D82213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d8:50:11:ed:b5:e9:a9:25:c3:58:d1:bb:de: 27:6a:ab:95:2b:b6:81:9e:1b:e7:1d:0d:63:0b:84: af:40:42:1c:9a:c4:b5:9a:79:83:95:68:74:7f:39: 1c:36:77:50:b4:26:c4:70:d5:91:1e:1d:a1:dc:84: e6:d5:89:9b:af:2c:d0:6d:42:d3:63:4d:22:73:48: 48:28:34:be:81:62:9a:bc:4a:fc:b1:7e:af:48:b4: 0a:77:67:00:28:c7:a2:71:bd:55:88:5d:fb:0a:ab: 3c:a4:5f:a3:76:dc:ad:11:41:ec:73:f5:6a:4b:f6: 18:57:3b:12:04:bc:26:64:5c:50:71:83:45:70:a7: a4:c9:b2:36:87:d4:e5:aa:96:c5:6d:c8:28:28:85: a7:b4:30:2a:79:d5:44:44:f3:0e:d9:97:f3:79:40: 75:00:90:ec:da:e2:c9:61:b9:d8:d1:09:81:7d:2e: a8:c1:c0:94:74:d3:58:fc:7b:f8:fa:4c:9b:9f:08: 47:b0:6a:8b:60:91:a0:a1:d4:52:50:1e:78:72:12: 65:1f:c8:a5:69:2c:95:2e:40:10:19:fc:57:05:80: 37:d4:03:04:51:fa:ed:e7:ea:54:18:07:af:9c:a2: 26:21:dd:f8:ba:51:52:76:03:4e:e2:27:36:6f:d4: 31:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F8:4C:7A:79:57:33:7E:E2:33:6E:0F:91:D1:C2:86:78:D8:22:13 X509v3 Authority Key Identifier: keyid:0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:8c:09:a8:23:da:4c:b9:22:28:1d:ba:f7:52:d8:75:3a:3e: d8:12:17:89:1d:9a:f3:bb:c7:1f:54:d5:d3:9f:d2:14:5c:69: d5:8f:d7:42:e3:91:7e:f3:36:d7:13:c1:db:46:d9:97:b5:d5: e7:47:32:e8:cf:5c:26:40:44:51:0f:d5:12:8d:2f:60:27:fc: 71:4b:8a:12:98:6a:cb:9b:53:ba:d8:1d:af:87:13:0e:fa:95: 1c:11:5b:9f:4d:73:42:70:1a:46:3d:a2:8d:62:d8:31:fd:87: 4f:06:e5:a5:bf:41:6b:1d:b4:63:2f:50:99:ed:d1:52:2e:ab: 83:4d:b8:1f:48:7e:f7:3e:6b:d9:6e:10:ae:79:90:f0:cc:3e: d1:96:73:9c:a1:4e:5f:12:6f:ca:99:30:6b:f0:f7:07:96:f9: 0e:e7:00:c9:82:e9:bf:e9:ad:1c:24:23:8f:1e:25:3f:64:a6: 69:45:09:00:10:fb:d5:c5:84:27:63:ec:68:34:3b:3e:61:1c: c4:4a:5b:74:87:23:de:06:04:45:15:b6:eb:3f:79:d7:a5:41: ed:18:bf:6e:8d:0c:75:56:4a:0f:5a:5e:e2:f7:4b:7e:c4:66: 9f:57:e1:4e:3a:8e:44:4c:4b:92:bd:36:bd:a6:0f:81:ba:6c: dc:87:ee:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEeKa6fCQch0Sc/UtPmrBxGdezD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENE Mjg1MDI5RTAeFw0yNTA2MTcyMDE1NDhaFw0yNTA2MjEwNjU0NDhaMDMxMTAvBgNV BAMTKDg4Rjg0QzdBNzk1NzMzN0VFMjMzNkUwRjkxRDFDMjg2NzhEODIyMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF2FAR7bXpqSXDWNG73idqq5Ur toGeG+cdDWMLhK9AQhyaxLWaeYOVaHR/ORw2d1C0JsRw1ZEeHaHchObViZuvLNBt QtNjTSJzSEgoNL6BYpq8Svyxfq9ItAp3ZwAox6JxvVWIXfsKqzykX6N23K0RQexz 9WpL9hhXOxIEvCZkXFBxg0Vwp6TJsjaH1OWqlsVtyCgohae0MCp51URE8w7Zl/N5 QHUAkOza4slhudjRCYF9LqjBwJR001j8e/j6TJufCEewaotgkaCh1FJQHnhyEmUf yKVpLJUuQBAZ/FcFgDfUAwRR+u3n6lQYB6+coiYh3fi6UVJ2A07iJzZv1DF9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiPhMenlXM37iM24PkdHChnjYIhMwHwYDVR0j BBgwFoAUDQXve6cdZAt4T3LH2PD03NKFAp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWI4NjA0Zi0zOTVhLTQyYmUtYjk5Ny1lODBmYzFkZjkwZjkvMC8wRDA1RUY3QkE3 MUQ2NDBCNzg0RjcyQzdEOEYwRjREQ0QyODUwMjlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENEMjg1 MDI5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODliODYwNGYtMzk1YS00MmJlLWI5 OTctZTgwZmMxZGY5MGY5LzAvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0 RENEMjg1MDI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGMCagj2ky5IigduvdS2HU6PtgSF4kdmvO7 xx9U1dOf0hRcadWP10LjkX7zNtcTwdtG2Ze11edHMujPXCZARFEP1RKNL2An/HFL ihKYasubU7rYHa+HEw76lRwRW59Nc0JwGkY9oo1i2DH9h08G5aW/QWsdtGMvUJnt 0VIuq4NNuB9Ifvc+a9luEK55kPDMPtGWc5yhTl8Sb8qZMGvw9weW+Q7nAMmC6b/p rRwkI48eJT9kpmlFCQAQ+9XFhCdj7Gg0Oz5hHMRKW3SHI94GBEUVtus/edelQe0Y v26NDHVWSg9aXuL3S37EZp9X4U46jkRMS5K9Nr2mD4G6bNyH7gU= -----END CERTIFICATE-----Generated at Wed Jun 18 12:32:42 2025 by rpki-client