$ rpki-client -vvf repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft File: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft (raw, json) Hash identifier: eRkHQzoaSIGFsSFIPtOM7jfAQ0aP2P0Tkac/VQiVCJk= Subject key identifier: 01:7E:6E:AF:20:D0:62:FF:B6:E6:B5:86:25:B9:F3:DD:DF:A5:95:F7 Authority key identifier: 0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB Certificate issuer: /CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Certificate serial: 35614D698A9B01B92775184768305329872C48F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft Manifest number: 86 Signing time: Wed 06 Aug 2025 15:01:06 +0000 Manifest this update: Wed 06 Aug 2025 14:56:06 +0000 Manifest next update: Sat 09 Aug 2025 19:08:06 +0000 Files and hashes: 1: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl (hash: /oEv56eRaQ36oQsloJXqK+Uoajxo/CzPmrTjwCbDPwE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 19:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:61:4d:69:8a:9b:01:b9:27:75:18:47:68:30:53:29:87:2c:48:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Validity Not Before: Aug 6 14:56:06 2025 GMT Not After : Aug 9 19:08:06 2025 GMT Subject: CN=017E6EAF20D062FFB6E6B58625B9F3DDDFA595F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f9:82:78:df:d9:47:56:ca:b8:1a:8d:0a:52: ea:c4:15:f4:6a:1b:69:88:e3:38:31:ec:2c:e1:80: 2d:29:94:95:23:03:0d:73:27:0c:d8:89:9b:f2:5e: 58:6c:85:c1:a5:67:da:18:94:39:09:5b:0a:ae:da: 0a:d0:57:a6:42:26:3e:92:48:90:5c:5a:a6:82:ea: c8:66:94:3e:44:88:44:46:15:1c:cb:7d:1c:94:16: e3:32:fa:1a:9d:e4:60:e9:3a:98:6c:2e:77:a4:a4: 62:8c:ba:a3:4e:9a:0a:59:7b:c6:c8:56:bc:c8:a6: a8:a6:8d:18:86:de:1f:d1:72:f1:ee:40:35:7d:e9: d8:23:c0:94:8e:28:42:a5:a0:32:a5:08:cc:22:b7: 09:fe:c5:24:ff:99:be:98:05:e7:f3:5a:ab:d6:f9: 86:70:0e:36:3e:cc:90:55:15:3a:8f:d7:ce:d9:35: 74:53:21:e4:a3:97:6e:57:0b:dc:92:8f:21:fb:93: 10:e4:2a:d5:81:fe:a1:e4:d2:d0:e4:55:9c:97:06: 32:e7:18:33:27:fe:b6:5c:2f:d7:7c:d2:1b:4e:41: 3a:34:ea:a4:b5:02:bc:d3:9f:96:70:64:a9:b9:04: 69:09:c5:83:7c:b0:e6:a6:05:9d:75:c1:b9:e3:d8: 92:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7E:6E:AF:20:D0:62:FF:B6:E6:B5:86:25:B9:F3:DD:DF:A5:95:F7 X509v3 Authority Key Identifier: keyid:0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:a7:01:48:53:bc:e1:66:30:1c:5a:91:e8:73:65:6c:e6:fe: 6a:49:6d:d0:7f:d8:9a:1a:b7:4b:0b:91:5b:6b:7a:19:78:75: df:45:7e:1d:37:a7:4a:95:07:7d:1e:a8:14:60:93:f3:89:49: 89:c1:29:f5:9e:02:f3:a7:f6:63:05:17:38:38:7e:6a:5d:5f: b4:63:7e:c2:42:bf:85:d9:5c:de:75:a6:d7:44:09:64:66:4c: 7d:c8:a1:6b:a0:52:88:bf:cd:7b:34:4d:88:4c:c5:35:47:43: f9:3d:67:60:73:41:3f:ff:b9:5a:13:16:be:62:34:a0:40:f6: c3:59:3a:f4:9a:cb:b1:c7:7e:b7:d2:1a:a0:a8:e4:e9:73:c9: ac:d9:2e:60:71:6b:3b:b2:b5:51:d2:e9:ae:80:4e:ed:9d:99: ba:e5:ce:14:94:42:0a:bd:c9:6c:76:e2:95:c6:ab:64:04:46: 5b:b0:06:ae:c4:49:a5:9f:a0:d5:30:ff:cf:0a:47:f9:73:7f: 86:9e:75:0c:69:27:05:d6:10:ec:23:24:17:95:a0:c6:d4:61: 55:b1:28:f8:13:be:4e:2c:6e:3c:42:31:81:f8:cd:4f:00:cb: 99:10:8f:f3:0d:1a:45:e2:82:51:48:02:73:63:89:6f:49:af: ba:23:fb:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNWFNaYqbAbkndRhHaDBTKYcsSPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdG RTkzQThFQjAeFw0yNTA4MDYxNDU2MDZaFw0yNTA4MDkxOTA4MDZaMDMxMTAvBgNV BAMTKDAxN0U2RUFGMjBEMDYyRkZCNkU2QjU4NjI1QjlGM0REREZBNTk1RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt+YJ439lHVsq4Go0KUurEFfRq G2mI4zgx7CzhgC0plJUjAw1zJwzYiZvyXlhshcGlZ9oYlDkJWwqu2grQV6ZCJj6S SJBcWqaC6shmlD5EiERGFRzLfRyUFuMy+hqd5GDpOphsLnekpGKMuqNOmgpZe8bI VrzIpqimjRiG3h/RcvHuQDV96dgjwJSOKEKloDKlCMwitwn+xST/mb6YBefzWqvW +YZwDjY+zJBVFTqP187ZNXRTIeSjl25XC9ySjyH7kxDkKtWB/qHk0tDkVZyXBjLn GDMn/rZcL9d80htOQTo06qS1ArzTn5ZwZKm5BGkJxYN8sOamBZ11wbnj2JLTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAX5uryDQYv+25rWGJbnz3d+llfcwHwYDVR0j BBgwFoAUD7rZL0jfFUd+Tdk83HpSd/6TqOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFhZjAyMS0xYzAxLTRhMmUtYjVkMy1jMWJiYjE2NTBjNDMvMC8wRkJBRDkyRjQ4 REYxNTQ3N0U0REQ5M0NEQzdBNTI3N0ZFOTNBOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdGRTkz QThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxYWYwMjEtMWMwMS00YTJlLWI1 ZDMtYzFiYmIxNjUwYzQzLzAvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUy NzdGRTkzQThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmnAUhTvOFmMBxakehzZWzm/mpJbdB/2Joa t0sLkVtrehl4dd9Ffh03p0qVB30eqBRgk/OJSYnBKfWeAvOn9mMFFzg4fmpdX7Rj fsJCv4XZXN51ptdECWRmTH3IoWugUoi/zXs0TYhMxTVHQ/k9Z2BzQT//uVoTFr5i NKBA9sNZOvSay7HHfrfSGqCo5OlzyazZLmBxazuytVHS6a6ATu2dmbrlzhSUQgq9 yWx24pXGq2QERluwBq7ESaWfoNUw/88KR/lzf4aedQxpJwXWEOwjJBeVoMbUYVWx KPgTvk4sbjxCMYH4zU8Ay5kQj/MNGkXiglFIAnNjiW9Jr7oj+0E= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:03 2025 by rpki-client