$ rpki-client -vvf repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft File: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft (raw, json) Hash identifier: e95FpeyYd7N8iSt0RVaQBUa/YBtXZBkSjo6cGV1vIJs= Subject key identifier: 6A:28:45:D0:F6:FF:27:9A:F5:8A:CD:EF:7A:3E:6B:42:17:78:E8:2D Authority key identifier: 0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C Certificate issuer: /CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C Certificate serial: 3F0150139CDC238E6FE2A8C091DF48374BB28B47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft Manifest number: 0111 Signing time: Sat 14 Jun 2025 11:21:46 +0000 Manifest this update: Sat 14 Jun 2025 11:16:46 +0000 Manifest next update: Tue 17 Jun 2025 17:54:46 +0000 Files and hashes: 1: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl (hash: +79RCAERh37GCsSpMIp+RqpR6ZRJ1+R9JWwgtMFGQ74=) 2: 3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa (hash: /ZMRp/k5nyna7+OV16C6wftA6bpNJZQ65/zvr/LPUR4=) 3: 323030313a6466303a663963303a3a2f34382d3438203d3e20313439393037.roa (hash: /A4c0t6Y98cg2lIq++5SQTiV0ECjCxcXz8yePuUy48U=) 4: 3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa (hash: zSZcK2ezC0OwcIoirCwbw8lg34i7IQmCM/PoAclIbTc=) 5: 3130332e3139302e3131332e302f32342d3234203d3e20313439393037.roa (hash: 6BP6Wg9K2CydFqVw55iYNyq05rAdRjLr1zk9t4b5GKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 17:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:01:50:13:9c:dc:23:8e:6f:e2:a8:c0:91:df:48:37:4b:b2:8b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C Validity Not Before: Jun 14 11:16:46 2025 GMT Not After : Jun 17 17:54:46 2025 GMT Subject: CN=6A2845D0F6FF279AF58ACDEF7A3E6B421778E82D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:70:43:e8:09:a3:a4:a3:ca:1f:6b:a2:dd:03: 0d:d4:64:ae:ad:38:af:86:94:74:c2:3e:f0:b9:c9: e0:38:d9:04:27:1e:66:31:b7:69:12:37:dc:a9:02: d5:76:ef:c5:3a:f5:73:21:61:37:f4:6a:50:2a:7c: 74:96:d7:b6:d8:5a:a7:3d:58:60:cd:94:6d:2e:90: 45:94:25:48:a1:d6:bc:1f:12:3d:80:0d:70:2b:2c: b8:46:f2:f1:60:a6:18:1c:26:48:45:d7:91:4d:e1: 66:8d:e3:ab:46:e4:31:3d:7f:09:84:6d:04:05:1d: 86:b4:f9:40:c1:fe:df:d6:cb:56:db:0c:56:f0:a0: d8:e1:34:84:b4:d8:22:23:da:c3:93:05:19:65:9c: 46:ef:71:a9:ef:90:0a:ae:e1:82:77:23:f0:0a:10: 01:87:30:b4:2e:b7:68:87:0c:b5:27:a9:a4:d0:82: c2:54:85:5d:5d:1c:71:9f:b1:af:66:4e:67:36:41: ed:b3:4c:9f:65:5a:85:32:e9:d4:0c:b8:97:cd:51: 7c:64:4a:e6:ca:5b:fc:05:a6:c8:64:32:7a:3f:a9: 59:89:3e:9a:29:79:3d:be:54:0b:8e:76:68:6d:9b: dc:f5:4d:10:39:f2:b5:53:6e:68:fc:2e:d2:78:af: de:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:28:45:D0:F6:FF:27:9A:F5:8A:CD:EF:7A:3E:6B:42:17:78:E8:2D X509v3 Authority Key Identifier: keyid:0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:1f:e5:7a:e1:48:31:ea:53:f5:55:8b:e7:48:e3:3b:8b:db: 8f:8c:65:79:c6:4f:45:de:72:79:36:9b:3c:70:8c:e2:c9:a6: b7:1a:c2:0c:b0:c3:0f:a1:c5:62:6e:f4:fd:bb:74:3b:22:0f: 24:eb:06:43:a6:47:d9:6a:ef:e5:94:4a:00:3c:70:ab:c8:c7: 8c:88:9b:5a:36:1e:02:79:0d:65:de:b0:b3:6b:c7:e2:31:40: c9:e5:94:fb:d4:73:52:e5:3d:86:83:84:64:bf:9e:2a:e9:9b: 27:93:27:d2:64:ac:38:76:38:6c:a4:f7:36:54:41:14:5e:7a: b0:1f:ad:96:e8:b6:5e:bc:55:f8:a0:21:78:a0:18:e3:9b:ea: 22:f4:cb:5f:bf:c9:7a:03:23:09:7c:c6:da:12:c7:fb:58:05: 08:91:3f:ed:18:f4:f2:39:97:14:7a:49:42:e6:62:36:b6:e1: bb:36:09:27:2e:54:fb:9e:ec:7b:e2:80:10:13:b1:e5:63:c8: 3e:31:13:fe:a3:ed:8d:0a:84:90:14:23:29:d9:30:d0:bf:85: 2e:ed:74:d1:32:c1:48:ea:16:c5:80:0c:28:01:96:b5:45:ae: 20:35:5d:96:66:87:61:48:b9:75:7d:16:42:48:ad:f5:20:2c: d5:65:13:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPwFQE5zcI45v4qjAkd9IN0uyi0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBBQ0RC N0UwQkEwQzAeFw0yNTA2MTQxMTE2NDZaFw0yNTA2MTcxNzU0NDZaMDMxMTAvBgNV BAMTKDZBMjg0NUQwRjZGRjI3OUFGNThBQ0RFRjdBM0U2QjQyMTc3OEU4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEcEPoCaOko8ofa6LdAw3UZK6t OK+GlHTCPvC5yeA42QQnHmYxt2kSN9ypAtV278U69XMhYTf0alAqfHSW17bYWqc9 WGDNlG0ukEWUJUih1rwfEj2ADXArLLhG8vFgphgcJkhF15FN4WaN46tG5DE9fwmE bQQFHYa0+UDB/t/Wy1bbDFbwoNjhNIS02CIj2sOTBRllnEbvcanvkAqu4YJ3I/AK EAGHMLQut2iHDLUnqaTQgsJUhV1dHHGfsa9mTmc2Qe2zTJ9lWoUy6dQMuJfNUXxk SubKW/wFpshkMno/qVmJPpopeT2+VAuOdmhtm9z1TRA58rVTbmj8LtJ4r94xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaihF0Pb/J5r1is3vej5rQhd46C0wHwYDVR0j BBgwFoAUDOHhEUbiUdDNUr2DehoKzbfgugwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDUxNmE3YS00MTk1LTQ0YjMtYTI0ZS1jZjhlZDU3OGQ3OTEvMC8wQ0UxRTExMTQ2 RTI1MUQwQ0Q1MkJEODM3QTFBMEFDREI3RTBCQTBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBBQ0RCN0Uw QkEwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjA1MTZhN2EtNDE5NS00NGIzLWEy NGUtY2Y4ZWQ1NzhkNzkxLzAvMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBB Q0RCN0UwQkEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMIf5XrhSDHqU/VVi+dI4zuL24+MZXnGT0Xe cnk2mzxwjOLJprcawgywww+hxWJu9P27dDsiDyTrBkOmR9lq7+WUSgA8cKvIx4yI m1o2HgJ5DWXesLNrx+IxQMnllPvUc1LlPYaDhGS/nirpmyeTJ9JkrDh2OGyk9zZU QRReerAfrZbotl68VfigIXigGOOb6iL0y1+/yXoDIwl8xtoSx/tYBQiRP+0Y9PI5 lxR6SULmYja24bs2CScuVPue7HvigBATseVjyD4xE/6j7Y0KhJAUIynZMNC/hS7t dNEywUjqFsWADCgBlrVFriA1XZZmh2FIuXV9FkJIrfUgLNVlE3g= -----END CERTIFICATE-----Generated at Mon Jun 16 12:13:13 2025 by rpki-client