$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft File: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft (raw, json) Hash identifier: cOWnRBKUH8XANNOifkdTh05+UYJB0XDFJlk4W8F79f8= Subject key identifier: 5C:23:20:84:5C:6A:4D:DE:12:F0:26:56:56:7C:DA:EB:8C:BA:5D:AC Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 Certificate issuer: /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Certificate serial: 270D58451751552CBDF77402D60F3A98D6A259B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft Manifest number: 016F Signing time: Sun 10 Aug 2025 05:31:13 +0000 Manifest this update: Sun 10 Aug 2025 05:26:13 +0000 Manifest next update: Wed 13 Aug 2025 13:07:13 +0000 Files and hashes: 1: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl (hash: sep+J9usEyIqYETnHwcXWuvMetTmU+n+4J2ZEFigI/I=) 2: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (hash: yEcjBYMEhWAt95OnuEgZE8+ngUIiXOyjNrn3KEwiAMQ=) 3: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (hash: 5vckiyQJuSi5InScnRJB6lh0igVA9LU4uDMI9g1nnHk=) 4: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (hash: aKqDqYBnpCKhc8gJwr/XqiZQGx53wEdqRvJeZczMctg=) 5: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (hash: lN/0N+kBLkh9oCnDV7GHH4dEry+Eu95iWP1NL/JaKa0=) 6: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (hash: YVW6U8qaSLxFWjHeTdwpm9kiRp4vZO+dMYcJdXXF9qE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 13:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:0d:58:45:17:51:55:2c:bd:f7:74:02:d6:0f:3a:98:d6:a2:59:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Validity Not Before: Aug 10 05:26:13 2025 GMT Not After : Aug 13 13:07:13 2025 GMT Subject: CN=5C2320845C6A4DDE12F02656567CDAEB8CBA5DAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ae:a8:92:93:98:28:2a:c1:23:7a:a5:9c:dd: a2:8a:68:4a:02:33:97:60:c6:fb:89:ea:ee:ec:f6: b6:81:af:22:80:b4:3d:a9:0f:22:80:78:ee:92:7c: 18:6a:9a:db:52:96:99:7f:cd:be:19:c4:b4:88:88: 42:d8:03:7c:7b:69:b8:bf:4d:eb:2e:22:aa:4c:0f: 1b:7f:89:7f:40:b1:2c:f5:42:65:b9:9e:56:53:9f: ab:fc:d6:74:4d:57:54:7c:dd:1a:14:ad:96:0b:e1: b0:40:e4:96:fa:40:f8:3c:c8:f7:f5:67:cd:72:a1: 61:83:3d:af:80:ff:a9:cd:b8:5d:a1:71:c2:99:9b: 92:aa:20:7b:b1:51:5e:e6:d7:0b:66:b5:31:e2:a5: d5:1e:ce:57:28:b7:f5:ea:09:8b:c4:bc:88:0f:91: f3:6c:8f:0c:96:7b:8f:00:37:b3:66:b4:1e:d1:86: 1b:7f:e0:32:0e:49:75:a1:2a:66:80:03:cb:94:5e: 5c:14:d5:aa:13:be:96:c5:ab:12:47:93:52:fc:43: 87:0a:8e:f0:8f:e8:e9:37:e4:2f:ce:5b:27:1d:ac: 05:25:ac:72:dc:7f:d4:94:38:d3:86:a5:ec:7f:21: e2:f9:d0:47:34:8f:b9:85:fb:c3:d6:91:4c:7e:1a: 26:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:23:20:84:5C:6A:4D:DE:12:F0:26:56:56:7C:DA:EB:8C:BA:5D:AC X509v3 Authority Key Identifier: keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d9:33:8b:c9:cd:7d:ac:bc:90:b3:13:57:3f:89:b6:08:32: 85:23:eb:84:4e:57:17:36:6b:f0:43:ff:33:ad:09:46:cc:01: b3:dd:2d:00:60:7f:f2:ea:ca:ab:6d:43:33:81:52:d6:87:30: 7f:b8:60:f5:76:7b:4f:ce:0f:fa:c2:60:93:3d:fe:70:a9:3d: 17:c5:df:97:71:c3:73:ac:8e:95:ff:f3:c2:66:fc:89:78:9b: e2:24:8f:76:60:b0:99:2a:c2:df:a2:f5:25:4e:e2:84:a3:d5: 5c:6f:15:37:b0:ad:3d:66:3c:fc:92:07:18:67:b3:23:b2:59: 15:52:4e:46:fa:d2:c9:ff:b6:29:19:ec:7c:5b:4d:ba:d7:97: 3f:74:8b:3f:2e:9c:a0:cc:e3:88:9b:e3:48:67:bd:37:c1:76: 5e:9c:9e:cd:41:a8:92:24:b6:8a:c4:2b:b8:63:3c:d7:e1:74: a3:a1:31:81:ed:ff:e1:45:c3:cc:ba:c5:e4:cf:48:d3:cc:3e: 22:9a:13:83:a1:08:74:10:3f:81:b6:28:03:53:d4:ec:70:1d: 4b:e9:da:c6:02:c2:b0:32:20:5e:f1:da:c0:1b:39:76:11:67: ab:5e:ea:19:60:11:c3:80:13:9d:2a:67:82:9e:52:b0:78:6e: b0:1b:4d:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJw1YRRdRVSy993QC1g86mNaiWbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJD QUVBREM5NjAeFw0yNTA4MTAwNTI2MTNaFw0yNTA4MTMxMzA3MTNaMDMxMTAvBgNV BAMTKDVDMjMyMDg0NUM2QTREREUxMkYwMjY1NjU2N0NEQUVCOENCQTVEQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVrqiSk5goKsEjeqWc3aKKaEoC M5dgxvuJ6u7s9raBryKAtD2pDyKAeO6SfBhqmttSlpl/zb4ZxLSIiELYA3x7abi/ TesuIqpMDxt/iX9AsSz1QmW5nlZTn6v81nRNV1R83RoUrZYL4bBA5Jb6QPg8yPf1 Z81yoWGDPa+A/6nNuF2hccKZm5KqIHuxUV7m1wtmtTHipdUezlcot/XqCYvEvIgP kfNsjwyWe48AN7NmtB7Rhht/4DIOSXWhKmaAA8uUXlwU1aoTvpbFqxJHk1L8Q4cK jvCP6Ok35C/OWycdrAUlrHLcf9SUONOGpex/IeL50Ec0j7mF+8PWkUx+GiaLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXCMghFxqTd4S8CZWVnza64y6XawwHwYDVR0j BBgwFoAUDkImpfF2aurnaKKmdsPossrq3JYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTBlNWFjMi1iNmJiLTRiZWMtOWRjOS1lNDMwYTY3MzMyMTYvMC8wRTQyMjZBNUYx NzY2QUVBRTc2OEEyQTY3NkMzRThCMkNBRUFEQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJDQUVB REM5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUwZTVhYzItYjZiYi00YmVjLTlk YzktZTQzMGE2NzMzMjE2LzAvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4 QjJDQUVBREM5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/ZM4vJzX2svJCzE1c/ibYIMoUj64ROVxc2 a/BD/zOtCUbMAbPdLQBgf/LqyqttQzOBUtaHMH+4YPV2e0/OD/rCYJM9/nCpPRfF 35dxw3OsjpX/88Jm/Il4m+Ikj3ZgsJkqwt+i9SVO4oSj1VxvFTewrT1mPPySBxhn syOyWRVSTkb60sn/tikZ7HxbTbrXlz90iz8unKDM44ib40hnvTfBdl6cns1BqJIk torEK7hjPNfhdKOhMYHt/+FFw8y6xeTPSNPMPiKaE4OhCHQQP4G2KANT1OxwHUvp 2sYCwrAyIF7x2sAbOXYRZ6te6hlgEcOAE50qZ4KeUrB4brAbTdY= -----END CERTIFICATE-----Generated at Mon Aug 11 06:15:46 2025 by rpki-client