$ rpki-client -vvf repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft File: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft (raw, json) Hash identifier: /mQ4A2FmPjC9xqCyg11jy5BdULp2axs4gyhcJWKtJdw= Subject key identifier: D1:94:D7:9C:4E:22:A3:66:C5:D4:17:75:7E:A0:CC:5B:D8:8F:BA:1E Authority key identifier: 0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E Certificate issuer: /CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Certificate serial: 16544456127208AA6358D021056790F2041EDED9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft Manifest number: 0179 Signing time: Mon 16 Jun 2025 21:40:59 +0000 Manifest this update: Mon 16 Jun 2025 21:35:59 +0000 Manifest next update: Fri 20 Jun 2025 05:04:59 +0000 Files and hashes: 1: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl (hash: wWumTvOnBQC4Us/3Ovqp6xLDpuUkWBHQ1FiadFHS8oQ=) 2: 3130332e342e38302e302f32342d3234203d3e20313530323034.roa (hash: uICRVqRri8R1EgyBPUsLQp4TscukJjiepoiJFR6/Ibc=) 3: 3130332e342e38302e302f32332d3233203d3e20313530323034.roa (hash: AgLvlSE1smWWR/jE1YysJDc3mDL4n9sETXp5KZ0HtjU=) 4: 3130332e342e38312e302f32342d3234203d3e20313530323034.roa (hash: IgBk8nUZZ29ZSChbWhRLqEMkR6u+A1fqdcf9ejFY80Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:54:44:56:12:72:08:aa:63:58:d0:21:05:67:90:f2:04:1e:de:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Validity Not Before: Jun 16 21:35:59 2025 GMT Not After : Jun 20 05:04:59 2025 GMT Subject: CN=D194D79C4E22A366C5D417757EA0CC5BD88FBA1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:87:75:ae:af:f6:b0:ef:26:20:14:f0:96:5b: 4e:d5:b2:dd:4d:b0:c4:eb:39:dc:77:26:4b:f5:9e: b9:fc:3a:83:95:f4:a4:e8:d0:29:54:77:20:05:4c: c6:a8:89:6a:35:37:7b:45:f7:d2:2d:d8:c6:1d:62: 3c:0e:5f:a3:0c:8e:bd:a6:1e:a2:c5:fa:f9:87:86: 58:1b:87:0c:43:46:e8:d8:b2:88:96:31:e5:4b:d1: c5:14:a3:cf:59:58:07:8d:f7:b7:e5:e4:11:23:53: 78:01:cd:93:f5:84:af:6a:c2:f5:26:5b:ca:91:01: 7a:9e:11:7c:c7:48:70:f9:09:57:52:c5:a3:ac:d6: e5:ec:9c:ee:1f:2b:16:fc:a6:7b:c1:4f:5c:07:47: 88:de:d3:7f:86:a6:0e:c3:16:00:40:e9:dc:75:fb: b9:0d:ef:63:77:04:5e:79:f7:06:15:1e:90:0e:b9: 23:7b:90:ee:0a:95:1c:28:66:53:a9:01:7a:c2:bf: 95:be:71:29:fa:15:f8:90:f3:ba:67:74:63:07:dd: ca:75:cd:52:cc:42:ac:ff:3f:65:71:92:fa:3e:08: a6:ad:a3:50:43:dd:80:be:74:82:44:06:02:74:dd: 31:1f:84:21:52:85:23:f1:c2:78:fc:33:61:76:97: 06:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:94:D7:9C:4E:22:A3:66:C5:D4:17:75:7E:A0:CC:5B:D8:8F:BA:1E X509v3 Authority Key Identifier: keyid:0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:dc:71:65:6f:58:8a:66:b5:fa:ac:e9:56:45:d7:39:12:2d: 50:32:09:99:fa:05:ed:07:7c:21:00:f8:6b:f8:dc:22:c3:07: fb:fe:fc:f7:66:de:4d:36:67:de:f1:44:01:36:b2:f8:f0:cf: 63:00:0e:d8:a9:c0:14:96:87:e9:64:ed:ce:7e:24:e6:fa:ff: af:e4:90:1e:7a:23:27:7f:06:7a:5d:ff:52:ec:73:61:df:ad: 7f:ad:51:23:1a:96:97:69:13:48:26:29:7d:7b:e1:e5:94:85: bb:8d:07:ba:fc:2f:5c:64:6b:20:40:da:89:fe:ba:10:32:cf: 02:00:72:7f:27:7b:bf:96:ee:c5:6d:b1:e8:e9:56:f3:8f:59: f6:4f:ee:b5:be:f9:dd:ef:91:92:df:b0:87:d9:e2:bf:28:9e: 42:99:d0:ae:f8:d4:03:65:25:47:99:c6:f6:ec:c9:1c:47:ce: 85:e1:11:b3:92:99:3e:21:5e:80:e0:fd:c5:dd:b9:6c:36:ad: b7:82:e1:d7:56:f0:40:e1:c9:2b:77:e5:f1:98:0e:25:71:f2: 10:40:84:36:d7:25:46:67:5d:7a:d1:6b:34:0a:fb:ce:7e:a0: 5b:fb:57:f7:bf:02:44:e5:0b:42:4c:b4:7b:dc:0d:76:69:e4: fd:57:51:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFlREVhJyCKpjWNAhBWeQ8gQe3tkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJG QTAwMUE0RTAeFw0yNTA2MTYyMTM1NTlaFw0yNTA2MjAwNTA0NTlaMDMxMTAvBgNV BAMTKEQxOTRENzlDNEUyMkEzNjZDNUQ0MTc3NTdFQTBDQzVCRDg4RkJBMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmh3Wur/aw7yYgFPCWW07Vst1N sMTrOdx3Jkv1nrn8OoOV9KTo0ClUdyAFTMaoiWo1N3tF99It2MYdYjwOX6MMjr2m HqLF+vmHhlgbhwxDRujYsoiWMeVL0cUUo89ZWAeN97fl5BEjU3gBzZP1hK9qwvUm W8qRAXqeEXzHSHD5CVdSxaOs1uXsnO4fKxb8pnvBT1wHR4je03+Gpg7DFgBA6dx1 +7kN72N3BF559wYVHpAOuSN7kO4KlRwoZlOpAXrCv5W+cSn6FfiQ87pndGMH3cp1 zVLMQqz/P2Vxkvo+CKato1BD3YC+dIJEBgJ03TEfhCFShSPxwnj8M2F2lwZ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ZTXnE4io2bF1Bd1fqDMW9iPuh4wHwYDVR0j BBgwFoAUDi56nPEcaS7I5W8DUnvfkvoAGk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDE5NTg5YS1kNTI1LTQwZmMtODk0YS0xMmU0NDAxMGUzZTQvMC8wRTJFN0E5Q0Yx MUM2OTJFQzhFNTZGMDM1MjdCREY5MkZBMDAxQTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJGQTAw MUE0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAxOTU4OWEtZDUyNS00MGZjLTg5 NGEtMTJlNDQwMTBlM2U0LzAvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRG OTJGQTAwMUE0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLccWVvWIpmtfqs6VZF1zkSLVAyCZn6Be0H fCEA+Gv43CLDB/v+/Pdm3k02Z97xRAE2svjwz2MADtipwBSWh+lk7c5+JOb6/6/k kB56Iyd/Bnpd/1Lsc2HfrX+tUSMalpdpE0gmKX174eWUhbuNB7r8L1xkayBA2on+ uhAyzwIAcn8ne7+W7sVtsejpVvOPWfZP7rW++d3vkZLfsIfZ4r8onkKZ0K741ANl JUeZxvbsyRxHzoXhEbOSmT4hXoDg/cXduWw2rbeC4ddW8EDhySt35fGYDiVx8hBA hDbXJUZnXXrRazQK+85+oFv7V/e/AkTlC0JMtHvcDXZp5P1XUWs= -----END CERTIFICATE-----Generated at Wed Jun 18 19:55:49 2025 by rpki-client