$ rpki-client -vvf repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft File: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft (raw, json) Hash identifier: EaraxYwYp3/e0/UPtcP48h0uzqOLfwTFGPorLDGgPRM= Subject key identifier: D7:20:96:AB:05:CE:5D:AB:9A:B2:7B:C3:F6:0B:9E:E8:35:AB:97:DB Authority key identifier: 0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C Certificate issuer: /CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C Certificate serial: 73ACA9071E1D4A54903319CE97611893D14FCEA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft Manifest number: 0128 Signing time: Tue 05 Aug 2025 12:01:49 +0000 Manifest this update: Tue 05 Aug 2025 11:56:49 +0000 Manifest next update: Fri 08 Aug 2025 18:48:49 +0000 Files and hashes: 1: 3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa (hash: /ZMRp/k5nyna7+OV16C6wftA6bpNJZQ65/zvr/LPUR4=) 2: 323030313a6466303a663963303a3a2f34382d3438203d3e20313439393037.roa (hash: /A4c0t6Y98cg2lIq++5SQTiV0ECjCxcXz8yePuUy48U=) 3: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl (hash: 7GYbozQR9mQ+HXSgLlP+QVkOnCDDgcV5lLzqfmzKvvg=) 4: 3130332e3139302e3131332e302f32342d3234203d3e20313439393037.roa (hash: 6BP6Wg9K2CydFqVw55iYNyq05rAdRjLr1zk9t4b5GKw=) 5: 3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa (hash: zSZcK2ezC0OwcIoirCwbw8lg34i7IQmCM/PoAclIbTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 18:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ac:a9:07:1e:1d:4a:54:90:33:19:ce:97:61:18:93:d1:4f:ce:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C Validity Not Before: Aug 5 11:56:49 2025 GMT Not After : Aug 8 18:48:49 2025 GMT Subject: CN=D72096AB05CE5DAB9AB27BC3F60B9EE835AB97DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:9e:ad:27:b7:c8:e5:c8:f8:57:8a:b1:45: 08:28:8a:3f:84:fc:2d:0e:13:13:eb:e2:62:3c:ac: 7b:53:67:18:53:44:2d:be:be:81:ae:42:46:4c:ac: a2:2a:16:00:d7:41:4a:42:19:37:8b:1a:27:76:33: 3d:82:86:d1:72:5e:a9:74:62:64:e6:92:54:0a:57: 36:93:2f:d9:00:6d:7e:e2:ba:68:13:e0:18:c5:0c: a8:79:49:84:a2:38:8c:58:35:b0:5b:e6:8f:cd:c0: 2b:16:7e:7a:bc:39:6b:90:bf:14:ea:cd:1a:79:0c: 52:ba:c8:fe:c0:e9:fb:22:45:01:f2:ce:8c:7a:4b: a3:ce:51:15:35:d2:5a:61:dc:1c:a9:28:a8:cd:af: eb:c3:b8:cd:ab:1b:0e:94:16:f0:fe:1d:75:94:a1: 2a:1b:40:84:21:67:69:f4:ec:8a:88:40:a9:e1:98: df:e0:16:13:77:9c:c7:92:90:9b:9b:11:23:5c:1d: 0e:22:57:8e:22:b9:65:72:d2:24:55:61:24:90:e8: e0:9d:44:ff:12:60:f1:e8:76:67:dc:3d:56:ce:e7: 94:a1:4f:5f:54:d2:e9:18:00:17:96:ce:06:3b:9b: 83:a4:c6:b2:6a:57:ea:d8:26:ea:23:0a:ee:15:d5: c8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:20:96:AB:05:CE:5D:AB:9A:B2:7B:C3:F6:0B:9E:E8:35:AB:97:DB X509v3 Authority Key Identifier: keyid:0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:15:2a:4e:db:c7:1b:81:3a:af:f5:20:89:77:be:60:01:7b: d4:11:50:92:51:7f:d4:fb:c6:b8:56:b8:7e:47:fc:d9:99:c5: 90:f6:ba:5c:d5:c7:5f:61:ec:95:26:4c:23:ac:2b:ea:3b:f6: c4:74:74:76:0b:f4:a1:49:3b:a3:eb:4d:47:3a:21:8d:65:ef: 41:9d:ee:59:67:aa:e8:45:af:e5:c3:44:87:7c:82:2b:5f:41: 51:13:2a:6d:57:cb:70:13:42:9c:ed:de:aa:5b:ad:1a:81:d7: 63:fc:4d:49:1c:cf:22:18:f1:a5:76:51:cc:5c:23:4e:11:f4: f9:a0:68:e4:0a:a2:0b:29:31:ed:a7:13:68:bd:c7:0f:c5:f6: ea:71:4d:8b:44:4f:ab:ec:af:e9:92:95:a1:cb:ed:45:2f:50: 16:c1:38:05:c9:23:49:d3:bd:26:a0:cb:5e:cd:13:bf:02:9e: e7:03:e1:ac:ff:28:d4:1a:a2:35:2f:f9:7f:71:1b:ed:ae:a5: 1d:52:f3:4f:92:6c:9e:f6:b5:2d:ed:cc:b8:b9:bd:1d:1f:99: b9:be:bd:b4:d5:39:8e:be:a6:55:9a:30:eb:5e:20:97:f0:48: 28:6e:f9:4a:fe:0d:8c:84:df:89:38:4e:9f:e0:8a:ab:16:92: e1:32:6d:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc6ypBx4dSlSQMxnOl2EYk9FPzqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBBQ0RC N0UwQkEwQzAeFw0yNTA4MDUxMTU2NDlaFw0yNTA4MDgxODQ4NDlaMDMxMTAvBgNV BAMTKEQ3MjA5NkFCMDVDRTVEQUI5QUIyN0JDM0Y2MEI5RUU4MzVBQjk3REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8SZ6tJ7fI5cj4V4qxRQgoij+E /C0OExPr4mI8rHtTZxhTRC2+voGuQkZMrKIqFgDXQUpCGTeLGid2Mz2ChtFyXql0 YmTmklQKVzaTL9kAbX7iumgT4BjFDKh5SYSiOIxYNbBb5o/NwCsWfnq8OWuQvxTq zRp5DFK6yP7A6fsiRQHyzox6S6POURU10lph3BypKKjNr+vDuM2rGw6UFvD+HXWU oSobQIQhZ2n07IqIQKnhmN/gFhN3nMeSkJubESNcHQ4iV44iuWVy0iRVYSSQ6OCd RP8SYPHodmfcPVbO55ShT19U0ukYABeWzgY7m4OkxrJqV+rYJuojCu4V1cjdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1yCWqwXOXauasnvD9gue6DWrl9swHwYDVR0j BBgwFoAUDOHhEUbiUdDNUr2DehoKzbfgugwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDUxNmE3YS00MTk1LTQ0YjMtYTI0ZS1jZjhlZDU3OGQ3OTEvMC8wQ0UxRTExMTQ2 RTI1MUQwQ0Q1MkJEODM3QTFBMEFDREI3RTBCQTBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBBQ0RCN0Uw QkEwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjA1MTZhN2EtNDE5NS00NGIzLWEy NGUtY2Y4ZWQ1NzhkNzkxLzAvMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBB Q0RCN0UwQkEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYVKk7bxxuBOq/1IIl3vmABe9QRUJJRf9T7 xrhWuH5H/NmZxZD2ulzVx19h7JUmTCOsK+o79sR0dHYL9KFJO6PrTUc6IY1l70Gd 7llnquhFr+XDRId8gitfQVETKm1Xy3ATQpzt3qpbrRqB12P8TUkczyIY8aV2Ucxc I04R9PmgaOQKogspMe2nE2i9xw/F9upxTYtET6vsr+mSlaHL7UUvUBbBOAXJI0nT vSagy17NE78CnucD4az/KNQaojUv+X9xG+2upR1S80+SbJ72tS3tzLi5vR0fmbm+ vbTVOY6+plWaMOteIJfwSChu+Ur+DYyE34k4Tp/giqsWkuEybb8= -----END CERTIFICATE-----Generated at Thu Aug 7 03:16:32 2025 by rpki-client