$ rpki-client -vvf repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft File: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft (raw, json) Hash identifier: b8rKi55cQgkL3lI+WNpMyF3a7KUE3BqFNmSOFmxoGn8= Subject key identifier: 03:0B:69:17:8E:BC:E0:80:02:FA:E0:FC:AE:FC:3A:F8:5F:9A:3D:80 Authority key identifier: 0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C Certificate issuer: /CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Certificate serial: 3D57717DC2E06F08A252AA9857FA60CC703112E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft Manifest number: 04DE Signing time: Sun 15 Jun 2025 21:31:29 +0000 Manifest this update: Sun 15 Jun 2025 21:26:29 +0000 Manifest next update: Thu 19 Jun 2025 06:40:29 +0000 Files and hashes: 1: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl (hash: guFJzlIpPUrz0r0pDjd1jr+1m99ZMKOuJVbFXWU6bfk=) 2: 323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa (hash: ZCfIqpH3uC9vaXsU0X4IOAqNNWCL/kt97zzI3ZypMPI=) 3: 3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa (hash: MtpuQgaD3AVd7DaurQu06bLnX7K9XIzGJP+djliDNAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 06:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:57:71:7d:c2:e0:6f:08:a2:52:aa:98:57:fa:60:cc:70:31:12:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Validity Not Before: Jun 15 21:26:29 2025 GMT Not After : Jun 19 06:40:29 2025 GMT Subject: CN=030B69178EBCE08002FAE0FCAEFC3AF85F9A3D80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cc:d6:ba:6a:0b:0d:b5:e5:97:d9:9b:be:60: ce:26:12:d0:b6:41:4d:0f:6a:26:c5:13:2d:1b:82: e1:32:f9:df:28:ce:c3:be:82:63:31:0a:a8:ce:4e: 63:56:76:a3:89:b4:ee:81:41:58:c4:71:e2:30:33: c1:59:cd:52:54:ed:32:1b:24:30:02:a0:42:37:38: ed:1f:91:08:cf:f1:e0:96:2b:42:23:81:fa:3a:e8: e1:80:b3:86:e9:b3:50:47:dc:3b:6e:a7:d1:81:78: fa:23:66:21:86:0d:f9:f9:55:33:34:6e:f2:28:e5: 02:6f:2f:5d:59:6e:87:c1:43:49:4f:cd:d7:7b:56: bc:05:3c:2f:62:de:d4:3a:82:44:a3:d6:a9:41:39: f8:ca:c9:6e:1f:29:4e:95:a9:5d:b8:5a:91:5a:9c: f2:ab:2c:7b:73:3c:27:d2:10:e6:57:54:7b:26:47: 00:b4:1c:f4:0c:33:14:40:e4:1a:c9:ec:4b:1d:26: f8:50:88:ca:d0:a8:92:b7:5f:18:50:20:8a:be:9d: fd:74:c4:d3:8b:6e:e4:69:d1:9c:1e:d6:cb:63:50: 19:67:6b:b0:d7:b7:76:1c:aa:e0:c9:f1:95:f6:c8: cd:8f:61:5f:f4:29:63:8b:14:52:14:8a:21:71:00: 0a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0B:69:17:8E:BC:E0:80:02:FA:E0:FC:AE:FC:3A:F8:5F:9A:3D:80 X509v3 Authority Key Identifier: keyid:0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:98:1c:1a:ca:e9:64:6f:e6:05:d0:2a:ac:85:ac:85:72:41: 4e:d2:2c:25:80:ba:d5:6b:1a:26:76:7f:b5:98:e2:58:ae:3d: 77:ae:f0:54:ea:bd:4d:74:f3:8e:f8:e3:75:1e:25:77:be:67: 73:2b:d2:01:27:2e:ad:53:c2:37:61:b9:a2:a5:74:47:cf:6c: d8:33:d8:3c:a0:6c:ae:5d:1a:1c:30:b6:05:87:48:df:3e:f8: 93:ce:b5:b0:82:ed:5a:eb:8c:30:2b:6d:40:4a:4d:af:aa:98: 4d:5f:0b:50:e5:36:43:8f:bb:1c:7a:f5:e0:0e:82:45:69:eb: 20:85:7b:b1:98:7d:a2:c5:c8:63:81:94:31:33:2a:cc:b1:90: de:b1:68:20:17:5c:d7:cb:fe:4f:bb:55:7f:07:9c:8d:82:51: f4:c2:bd:ee:74:3e:c3:43:78:e1:6b:52:60:dc:cf:6a:0a:d2: 8c:b1:02:62:ca:28:ed:9c:16:e3:2e:c7:4a:33:a8:1f:8f:19: cd:54:e5:11:35:59:ff:a3:48:bb:3f:07:f8:99:98:3b:1d:e0: 57:f6:71:5d:5c:be:4f:28:6e:11:bf:c0:1a:cd:b6:6f:de:d4: cb:b4:51:2b:bc:53:e3:ec:2f:18:c6:03:15:c6:2f:5f:2a:4f: da:4f:4a:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPVdxfcLgbwiiUqqYV/pgzHAxEuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENBOUE2 MUExNjE1QzAeFw0yNTA2MTUyMTI2MjlaFw0yNTA2MTkwNjQwMjlaMDMxMTAvBgNV BAMTKDAzMEI2OTE3OEVCQ0UwODAwMkZBRTBGQ0FFRkMzQUY4NUY5QTNEODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzNa6agsNteWX2Zu+YM4mEtC2 QU0PaibFEy0bguEy+d8ozsO+gmMxCqjOTmNWdqOJtO6BQVjEceIwM8FZzVJU7TIb JDACoEI3OO0fkQjP8eCWK0Ijgfo66OGAs4bps1BH3Dtup9GBePojZiGGDfn5VTM0 bvIo5QJvL11ZbofBQ0lPzdd7VrwFPC9i3tQ6gkSj1qlBOfjKyW4fKU6VqV24WpFa nPKrLHtzPCfSEOZXVHsmRwC0HPQMMxRA5BrJ7EsdJvhQiMrQqJK3XxhQIIq+nf10 xNOLbuRp0Zwe1stjUBlna7DXt3YcquDJ8ZX2yM2PYV/0KWOLFFIUiiFxAApNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAwtpF4684IAC+uD8rvw6+F+aPYAwHwYDVR0j BBgwFoAUD+2iiPcnXepGmu9MI43KmmGhYVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzM3MGU2Zi1mMGM3LTRmNDAtOGJhNC1hMDFlNWQwYzc0ZTQvMC8wRkVEQTI4OEY3 Mjc1REVBNDY5QUVGNEMyMzhEQ0E5QTYxQTE2MTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENBOUE2MUEx NjE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMzNzBlNmYtZjBjNy00ZjQwLThi YTQtYTAxZTVkMGM3NGU0LzAvMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENB OUE2MUExNjE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCYHBrK6WRv5gXQKqyFrIVyQU7SLCWAutVr GiZ2f7WY4liuPXeu8FTqvU10847443UeJXe+Z3Mr0gEnLq1TwjdhuaKldEfPbNgz 2DygbK5dGhwwtgWHSN8++JPOtbCC7VrrjDArbUBKTa+qmE1fC1DlNkOPuxx69eAO gkVp6yCFe7GYfaLFyGOBlDEzKsyxkN6xaCAXXNfL/k+7VX8HnI2CUfTCve50PsND eOFrUmDcz2oK0oyxAmLKKO2cFuMux0ozqB+PGc1U5RE1Wf+jSLs/B/iZmDsd4Ff2 cV1cvk8obhG/wBrNtm/e1Mu0USu8U+PsLxjGAxXGL18qT9pPSg4= -----END CERTIFICATE-----Generated at Tue Jun 17 05:05:42 2025 by rpki-client