$ rpki-client -vvf repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft File: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft (raw, json) Hash identifier: XOtpSGj2DICsKEjhJuzdlPlUppbE7+7Dji7zgJhhUVI= Subject key identifier: 8B:BC:65:5E:C2:62:C4:3A:C6:1F:E3:A2:D1:1A:CC:8A:07:7D:00:55 Authority key identifier: 0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB Certificate issuer: /CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Certificate serial: 7E6785D521A853D8A1A878BE4180203AE292C6EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft Manifest number: 6F Signing time: Sun 15 Jun 2025 17:01:05 +0000 Manifest this update: Sun 15 Jun 2025 16:56:05 +0000 Manifest next update: Wed 18 Jun 2025 23:51:05 +0000 Files and hashes: 1: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl (hash: 7YTeFnGl99HtaymZ1gHleatS2Y1VARNfEoh+g3/25Pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 23:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:67:85:d5:21:a8:53:d8:a1:a8:78:be:41:80:20:3a:e2:92:c6:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Validity Not Before: Jun 15 16:56:05 2025 GMT Not After : Jun 18 23:51:05 2025 GMT Subject: CN=8BBC655EC262C43AC61FE3A2D11ACC8A077D0055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c1:f2:6f:54:f3:06:94:e4:eb:d0:74:7a:09: d7:8b:28:cc:47:21:0c:c3:f0:93:79:73:94:c4:6d: b3:b2:cc:1b:b9:8f:d5:2b:62:b1:26:4c:bb:aa:b8: 4b:1f:1d:61:a1:17:a3:d9:35:c1:3d:c5:79:5a:71: 8a:3c:f7:46:ac:d8:31:8f:cf:5e:95:25:66:50:da: 61:58:d3:33:90:a9:5f:44:ec:dc:2c:48:34:0e:f4: 7e:0a:07:4f:65:59:0c:d2:ba:0d:ea:21:10:57:77: 3b:c4:9e:b8:06:a1:bb:3f:4c:54:c5:81:70:ef:2d: 31:c0:f6:ca:93:7a:c5:b3:34:35:5f:8a:df:b2:5b: 78:12:57:df:43:2b:57:50:04:12:54:5e:36:f3:c4: 37:94:ca:9b:c7:b5:ff:14:ca:4e:c6:b3:86:53:3c: 88:82:30:f4:b6:d8:d4:e0:67:20:5a:38:93:e0:10: 31:49:71:4f:84:52:1a:19:24:d0:b2:d8:0e:f9:61: 64:e9:60:04:0f:47:5f:7d:cb:40:8b:23:7d:e1:8d: 20:8c:ca:27:68:60:ce:23:66:09:7f:17:5c:a2:55: c3:1a:9c:e0:68:bc:fc:c5:b2:dd:ea:8b:0a:e9:62: d4:40:86:65:68:bb:92:a8:8f:63:18:7f:f3:75:95: 89:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:BC:65:5E:C2:62:C4:3A:C6:1F:E3:A2:D1:1A:CC:8A:07:7D:00:55 X509v3 Authority Key Identifier: keyid:0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:71:36:05:a3:fc:6b:c8:83:df:0f:ca:ac:4f:8a:e6:fb:66: b3:63:78:1e:57:14:80:95:14:7e:cf:02:ee:9c:52:38:2e:0f: 3a:aa:48:54:a7:46:2a:73:ef:fc:ab:e1:8d:2c:e6:79:42:b7: 88:01:6f:c7:eb:7d:e4:23:a1:7b:08:90:d6:10:bb:74:de:49: 23:d0:af:3b:3e:63:06:06:23:cb:fb:05:48:cf:4f:47:5d:c4: 3b:bc:21:8d:8b:15:93:c7:ff:1c:a4:bc:c6:53:4f:81:37:aa: f5:2a:05:75:07:c8:49:6f:af:2d:68:65:7f:09:56:cc:4c:c6: ed:d3:dd:59:fd:1c:ba:f1:c7:d0:bc:55:63:92:b1:c1:85:6c: 14:5e:e3:77:db:77:7d:7a:61:b8:38:6b:7d:3b:57:cc:0b:c4: bd:62:08:f8:9b:18:69:c4:9a:d8:c9:32:78:33:b1:9b:79:be: 02:09:60:7c:4c:b2:b4:4a:59:90:9f:24:72:b1:b1:fa:cf:36: 14:26:fc:11:eb:b7:37:56:a0:69:ca:0a:a2:5f:91:45:fc:b7: a9:cb:ee:36:f3:64:86:9b:fc:e7:c5:c5:20:b1:e9:f5:0b:20: 58:f6:b2:f3:10:b0:30:f2:ea:07:0f:fd:bc:76:8b:f7:d3:52: 98:75:21:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfmeF1SGoU9ihqHi+QYAgOuKSxu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdG RTkzQThFQjAeFw0yNTA2MTUxNjU2MDVaFw0yNTA2MTgyMzUxMDVaMDMxMTAvBgNV BAMTKDhCQkM2NTVFQzI2MkM0M0FDNjFGRTNBMkQxMUFDQzhBMDc3RDAwNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLwfJvVPMGlOTr0HR6CdeLKMxH IQzD8JN5c5TEbbOyzBu5j9UrYrEmTLuquEsfHWGhF6PZNcE9xXlacYo890as2DGP z16VJWZQ2mFY0zOQqV9E7NwsSDQO9H4KB09lWQzSug3qIRBXdzvEnrgGobs/TFTF gXDvLTHA9sqTesWzNDVfit+yW3gSV99DK1dQBBJUXjbzxDeUypvHtf8Uyk7Gs4ZT PIiCMPS22NTgZyBaOJPgEDFJcU+EUhoZJNCy2A75YWTpYAQPR199y0CLI33hjSCM yidoYM4jZgl/F1yiVcManOBovPzFst3qiwrpYtRAhmVou5Koj2MYf/N1lYlBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi7xlXsJixDrGH+Oi0RrMigd9AFUwHwYDVR0j BBgwFoAUD7rZL0jfFUd+Tdk83HpSd/6TqOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFhZjAyMS0xYzAxLTRhMmUtYjVkMy1jMWJiYjE2NTBjNDMvMC8wRkJBRDkyRjQ4 REYxNTQ3N0U0REQ5M0NEQzdBNTI3N0ZFOTNBOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdGRTkz QThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxYWYwMjEtMWMwMS00YTJlLWI1 ZDMtYzFiYmIxNjUwYzQzLzAvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUy NzdGRTkzQThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZxNgWj/GvIg98PyqxPiub7ZrNjeB5XFICV FH7PAu6cUjguDzqqSFSnRipz7/yr4Y0s5nlCt4gBb8frfeQjoXsIkNYQu3TeSSPQ rzs+YwYGI8v7BUjPT0ddxDu8IY2LFZPH/xykvMZTT4E3qvUqBXUHyElvry1oZX8J VsxMxu3T3Vn9HLrxx9C8VWOSscGFbBRe43fbd316Ybg4a307V8wLxL1iCPibGGnE mtjJMngzsZt5vgIJYHxMsrRKWZCfJHKxsfrPNhQm/BHrtzdWoGnKCqJfkUX8t6nL 7jbzZIab/OfFxSCx6fULIFj2svMQsDDy6gcP/bx2i/fTUph1IY8= -----END CERTIFICATE-----Generated at Mon Jun 16 10:42:09 2025 by rpki-client