$ rpki-client -vvf repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft File: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft (raw, json) Hash identifier: h1jNK81EKD5gij1hDtY7S6Wokfen+6lytbe83meWWrY= Subject key identifier: 37:6B:EE:65:A1:F2:74:1E:1E:F9:79:FB:4C:81:57:47:EC:82:90:B8 Authority key identifier: 0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E Certificate issuer: /CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Certificate serial: 20C7CD5E050F3A78446FC1412AC9186A15CCC6B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft Manifest number: 0291 Signing time: Wed 06 Aug 2025 04:30:45 +0000 Manifest this update: Wed 06 Aug 2025 04:25:45 +0000 Manifest next update: Sat 09 Aug 2025 09:17:45 +0000 Files and hashes: 1: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: CqE5ZCzeVRm7AAgS0qiGljnG3wqud2DW58oPqVZ6WJg=) 2: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: v7MhMAJXwywfKNpvZVGmK8aNTXn4lXBf1MXFy8E2vnM=) 3: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl (hash: i70QeTGhs+e3Zr7jHycSyt6aiN+nj+fCXIxP/aK4ckM=) 4: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: WfXT/rfuqOQCtkSuVOvx3HMgMVWsirCiP4VcVNJi+gw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 09:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c7:cd:5e:05:0f:3a:78:44:6f:c1:41:2a:c9:18:6a:15:cc:c6:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Validity Not Before: Aug 6 04:25:45 2025 GMT Not After : Aug 9 09:17:45 2025 GMT Subject: CN=376BEE65A1F2741E1EF979FB4C815747EC8290B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8c:b9:36:7c:64:46:19:b9:48:fd:b6:51:58: d4:9b:9e:38:f0:46:f7:b8:c9:fd:c1:98:7d:1e:ed: 05:f4:f8:95:c8:14:08:b5:cb:26:ec:66:3b:d8:e2: 82:5d:cd:6a:84:db:9d:e6:06:40:f3:6c:89:21:4b: 26:d2:b7:f2:3d:91:0f:a4:ff:b1:6e:c2:db:f8:ac: 48:f6:41:0d:a5:a9:38:1e:55:e2:a8:c6:bf:f9:e4: ab:35:ba:c6:7b:a2:64:0b:68:a4:a8:15:12:6c:60: c2:e9:06:d8:ac:aa:a1:53:b1:e8:d1:1a:87:19:0e: f6:23:9d:cb:07:63:18:ba:2a:f9:6a:f7:28:ce:17: 45:21:2c:35:79:cb:5d:2b:3f:84:86:29:64:09:de: dc:ec:73:d9:c1:bb:ba:04:e2:14:8a:44:cb:5e:3b: 6e:60:23:4d:9d:ca:7c:4e:80:a5:1c:fc:37:12:53: d6:24:65:7c:40:b8:18:69:28:ae:d2:ef:f7:4d:40: 47:ec:90:d0:d9:34:f9:fd:06:4a:49:51:29:68:ff: 73:69:bf:e6:21:1e:5f:f4:77:3b:90:6f:df:b7:19: 65:ab:9b:8a:7e:b2:6a:1f:b6:11:19:f1:75:0a:d8: 4d:11:d3:af:95:73:98:03:e3:73:6d:48:2b:99:02: 77:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6B:EE:65:A1:F2:74:1E:1E:F9:79:FB:4C:81:57:47:EC:82:90:B8 X509v3 Authority Key Identifier: keyid:0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:fb:58:5d:eb:e2:23:39:be:71:31:07:d2:7c:34:d6:16:19: 32:4e:3d:55:4e:6d:36:fd:1a:39:16:36:5b:dd:17:05:2c:6a: 65:1c:2f:e7:dc:86:fb:3e:bd:50:f5:1b:c0:9a:03:87:46:14: 48:f2:f6:50:af:ad:fc:be:ce:89:73:59:53:10:eb:dd:17:79: 31:84:ae:8b:9c:17:c3:8a:9e:07:1e:e7:97:c1:9e:bd:9d:b8: bf:ad:58:58:e1:aa:0b:3e:6a:f7:9d:bd:78:f8:7d:13:fe:10: 90:2f:c5:60:89:1d:57:16:b3:bf:88:61:89:14:d1:dd:56:f2: f7:4c:77:17:48:a1:3f:ca:c7:7c:41:49:fc:b4:4e:af:72:61: ff:dc:b1:31:18:d2:79:fe:b7:f2:54:29:60:2b:7b:90:7b:ad: 99:03:f5:20:66:37:72:ed:15:cd:c7:6f:d4:36:f9:ee:d6:0c: 51:0f:6e:e9:34:4d:45:53:f2:2d:77:fd:f3:88:fa:59:2c:a4: 43:13:7b:c1:c1:91:17:ef:51:ef:a5:55:a2:37:a2:dd:d9:4c: bc:30:4f:04:d5:58:e0:c9:68:1f:05:df:be:bc:27:3b:13:59: ee:d7:b0:25:e1:0e:c8:1d:11:52:07:72:f4:2a:b4:83:61:33: 65:65:31:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMfNXgUPOnhEb8FBKskYahXMxrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENE Mjg1MDI5RTAeFw0yNTA4MDYwNDI1NDVaFw0yNTA4MDkwOTE3NDVaMDMxMTAvBgNV BAMTKDM3NkJFRTY1QTFGMjc0MUUxRUY5NzlGQjRDODE1NzQ3RUM4MjkwQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMjLk2fGRGGblI/bZRWNSbnjjw Rve4yf3BmH0e7QX0+JXIFAi1yybsZjvY4oJdzWqE253mBkDzbIkhSybSt/I9kQ+k /7Fuwtv4rEj2QQ2lqTgeVeKoxr/55Ks1usZ7omQLaKSoFRJsYMLpBtisqqFTsejR GocZDvYjncsHYxi6Kvlq9yjOF0UhLDV5y10rP4SGKWQJ3tzsc9nBu7oE4hSKRMte O25gI02dynxOgKUc/DcSU9YkZXxAuBhpKK7S7/dNQEfskNDZNPn9BkpJUSlo/3Np v+YhHl/0dzuQb9+3GWWrm4p+smofthEZ8XUK2E0R06+Vc5gD43NtSCuZAnenAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN2vuZaHydB4e+Xn7TIFXR+yCkLgwHwYDVR0j BBgwFoAUDQXve6cdZAt4T3LH2PD03NKFAp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWI4NjA0Zi0zOTVhLTQyYmUtYjk5Ny1lODBmYzFkZjkwZjkvMC8wRDA1RUY3QkE3 MUQ2NDBCNzg0RjcyQzdEOEYwRjREQ0QyODUwMjlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENEMjg1 MDI5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODliODYwNGYtMzk1YS00MmJlLWI5 OTctZTgwZmMxZGY5MGY5LzAvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0 RENEMjg1MDI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAX7WF3r4iM5vnExB9J8NNYWGTJOPVVObTb9 GjkWNlvdFwUsamUcL+fchvs+vVD1G8CaA4dGFEjy9lCvrfy+zolzWVMQ690XeTGE roucF8OKngce55fBnr2duL+tWFjhqgs+avedvXj4fRP+EJAvxWCJHVcWs7+IYYkU 0d1W8vdMdxdIoT/Kx3xBSfy0Tq9yYf/csTEY0nn+t/JUKWAre5B7rZkD9SBmN3Lt Fc3Hb9Q2+e7WDFEPbuk0TUVT8i13/fOI+lkspEMTe8HBkRfvUe+lVaI3ot3ZTLww TwTVWODJaB8F3768JzsTWe7XsCXhDsgdEVIHcvQqtINhM2VlMY4= -----END CERTIFICATE-----Generated at Thu Aug 7 01:12:00 2025 by rpki-client