$ rpki-client -vvf repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft File: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft (raw, json) Hash identifier: 7Gcll3/jqByOPs8asWCZ1qwufQhfj8yzuD1nu9dHNLA= Subject key identifier: 66:2C:A0:A8:75:6B:93:E7:17:E8:AF:12:8C:7C:F2:6F:3D:1E:3D:16 Authority key identifier: 0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C Certificate issuer: /CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Certificate serial: 38FB5B29BF17C937F620677AECBCC15A08412384 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft Manifest number: 04E5 Signing time: Sun 15 Jun 2025 20:31:23 +0000 Manifest this update: Sun 15 Jun 2025 20:26:23 +0000 Manifest next update: Thu 19 Jun 2025 03:00:23 +0000 Files and hashes: 1: 3130332e37372e3135372e302f32342d3234203d3e20313530393432.roa (hash: 3IbW6k7SAGrr4pbFBGvz2rrnQK3BJBcsh2+owUjptuk=) 2: 3130332e37372e3135392e302f32342d3234203d3e20313530393432.roa (hash: loCe/wiZD3uLK0lxj/ON/hC7aF16TlJ0k6a7aHCbdJk=) 3: 3130332e37372e3135362e302f32342d3234203d3e20313530393432.roa (hash: mutFIy9cyMdV34tHn/8oq/u/DLJVfOqwJjG4+C2iVbI=) 4: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl (hash: ZfsJkGMwyI/1p9vmAhgbfOjx5DbENaS05PjIwBk5N78=) 5: 323430373a396338303a3a2f33322d3438203d3e20313335343834.roa (hash: PjdoU1IlaOBuAqcQYAfTUBsBWxQvsuLv55cXKjpLDcw=) 6: 3130332e37372e3135382e302f32342d3234203d3e20313530393432.roa (hash: t8s5ystlDMfZCpSFPrSjj+O0ZGC5ZqPSgcrBHxoO7nw=) 7: 3130332e37372e3135362e302f32322d3234203d3e20313530393432.roa (hash: xsKvhGKuMBIEnxPyQJ6c1MbwsbCuaDw/dOSB6iinnF8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 03:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:fb:5b:29:bf:17:c9:37:f6:20:67:7a:ec:bc:c1:5a:08:41:23:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Validity Not Before: Jun 15 20:26:23 2025 GMT Not After : Jun 19 03:00:23 2025 GMT Subject: CN=662CA0A8756B93E717E8AF128C7CF26F3D1E3D16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1b:60:1b:7c:ab:8a:5c:f6:28:93:92:7c:6b: 49:b4:21:b1:07:d6:74:5b:1a:f3:74:a3:30:f4:be: 19:4a:0d:a3:ed:58:f6:be:06:77:86:e1:e2:9b:d1: 69:c2:6b:bf:46:e2:2c:83:a0:83:6a:79:08:74:58: 42:f4:e2:67:3a:d7:04:aa:81:ad:f9:d8:7b:12:6b: 45:ba:0e:b6:1c:af:7d:cf:a9:ec:66:46:99:ad:01: 8f:9c:ce:1f:09:cc:53:08:9b:37:de:80:12:34:a5: 80:b3:f9:8c:ec:75:31:ab:c4:bf:92:e0:10:02:c2: 1c:03:eb:15:20:48:01:7a:b4:c4:6f:26:83:79:b2: e3:f3:3c:a1:a9:a6:f5:14:6d:46:da:cf:1d:ad:91: 2b:78:10:c3:94:bf:ed:f5:24:8b:a3:0c:11:fc:8c: 96:05:bf:31:7f:fb:14:71:2c:bb:e0:b6:0e:fd:f9: a3:88:89:95:4b:9b:18:73:3a:01:16:49:1b:ca:0b: 98:fa:66:d1:8d:f4:e6:f7:5e:fa:7b:29:b8:b3:72: 32:aa:d3:06:43:06:04:2f:8c:5c:db:d5:4f:3d:0a: 36:2d:cf:bf:d9:bc:c7:43:a1:f7:d1:61:cd:c9:56: a1:a6:25:18:3a:2c:c5:8b:0d:74:58:99:d8:78:da: 14:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2C:A0:A8:75:6B:93:E7:17:E8:AF:12:8C:7C:F2:6F:3D:1E:3D:16 X509v3 Authority Key Identifier: keyid:0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:1a:00:22:65:af:f5:9c:54:42:00:00:96:48:62:43:ff:ce: e8:aa:1b:a6:d0:c5:00:32:f2:a6:c1:fc:3a:c7:9e:55:37:2d: 28:59:50:a2:8d:da:5a:20:e4:da:47:c9:d4:a8:e7:11:8e:ea: 90:3b:60:f4:64:13:02:a0:a1:37:e0:79:46:9c:6a:e0:55:5d: b4:e6:86:4b:c7:4e:48:43:b2:1f:ea:68:e4:e4:4b:f0:47:a3: 44:4f:ea:01:9b:a2:e2:8d:e4:88:35:83:9f:81:05:23:aa:10: 3c:fb:31:67:ab:dc:f6:21:cb:d7:4b:2e:7d:10:bc:8c:e7:c8: 88:a8:c5:21:a6:8a:a6:38:3d:af:df:93:35:d7:a6:c7:dc:24: bb:7e:e2:c3:31:91:12:5b:4c:20:09:f7:63:14:a4:5e:10:36: 87:8e:29:21:ef:61:ad:51:c9:45:2b:98:7c:46:2e:d2:66:21: 5e:38:f1:b4:94:ca:1c:20:18:47:f5:1d:e9:d7:c4:04:9a:16: 1e:43:47:3c:b6:a7:ce:a0:c6:e8:54:d0:c1:64:57:eb:18:78: a6:84:18:50:86:7c:f2:f8:48:4d:ee:e4:7d:34:49:6f:08:4c: aa:40:a0:4d:12:c0:48:9e:05:48:07:c8:d5:e2:9b:b1:18:f2: 43:22:cd:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOPtbKb8XyTf2IGd67LzBWghBI4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5 Nzk3RUE2QzAeFw0yNTA2MTUyMDI2MjNaFw0yNTA2MTkwMzAwMjNaMDMxMTAvBgNV BAMTKDY2MkNBMEE4NzU2QjkzRTcxN0U4QUYxMjhDN0NGMjZGM0QxRTNEMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmG2AbfKuKXPYok5J8a0m0IbEH 1nRbGvN0ozD0vhlKDaPtWPa+BneG4eKb0WnCa79G4iyDoINqeQh0WEL04mc61wSq ga352HsSa0W6DrYcr33PqexmRpmtAY+czh8JzFMImzfegBI0pYCz+YzsdTGrxL+S 4BACwhwD6xUgSAF6tMRvJoN5suPzPKGppvUUbUbazx2tkSt4EMOUv+31JIujDBH8 jJYFvzF/+xRxLLvgtg79+aOIiZVLmxhzOgEWSRvKC5j6ZtGN9Ob3Xvp7KbizcjKq 0wZDBgQvjFzb1U89CjYtz7/ZvMdDoffRYc3JVqGmJRg6LMWLDXRYmdh42hSRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZiygqHVrk+cX6K8SjHzybz0ePRYwHwYDVR0j BBgwFoAUDoY3wj/X/Rq/kbAl5IBAkJeX6mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzNmMjI4OC04OGNmLTRkMmItYmJhNi1hMDNkZDVmODM3NjEvMC8wRTg2MzdDMjNG RDdGRDFBQkY5MUIwMjVFNDgwNDA5MDk3OTdFQTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5Nzk3 RUE2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWMzZjIyODgtODhjZi00ZDJiLWJi YTYtYTAzZGQ1ZjgzNzYxLzAvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQw OTA5Nzk3RUE2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAaACJlr/WcVEIAAJZIYkP/zuiqG6bQxQAy 8qbB/DrHnlU3LShZUKKN2log5NpHydSo5xGO6pA7YPRkEwKgoTfgeUacauBVXbTm hkvHTkhDsh/qaOTkS/BHo0RP6gGbouKN5Ig1g5+BBSOqEDz7MWer3PYhy9dLLn0Q vIznyIioxSGmiqY4Pa/fkzXXpsfcJLt+4sMxkRJbTCAJ92MUpF4QNoeOKSHvYa1R yUUrmHxGLtJmIV448bSUyhwgGEf1HenXxASaFh5DRzy2p86gxuhU0MFkV+sYeKaE GFCGfPL4SE3u5H00SW8ITKpAoE0SwEieBUgHyNXim7EY8kMizWU= -----END CERTIFICATE-----Generated at Mon Jun 16 02:09:59 2025 by rpki-client