$ rpki-client -vvf repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft File: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft (raw, json) Hash identifier: M1djQ1x8xUGZyvfHTz1amk+AWap6HWeLhPSdHk5cIgE= Subject key identifier: 0D:CC:AD:B0:7C:BF:0A:02:E1:42:7E:0B:74:3D:ED:D2:BE:96:E4:10 Authority key identifier: 0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD Certificate issuer: /CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Certificate serial: 2FBC509F08522F34D2A40A4334047A0CF237EE4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft Manifest number: 01A0 Signing time: Sat 14 Jun 2025 00:51:29 +0000 Manifest this update: Sat 14 Jun 2025 00:46:29 +0000 Manifest next update: Tue 17 Jun 2025 06:12:29 +0000 Files and hashes: 1: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl (hash: iR8GNdpQl0gCJoitJzufiNBgZgy0jPoG4yXwe+Km0UE=) 2: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: k4bVgZQwwhwXyEq21/fgsjgZLJvFrNFPkmTEg/UKHTM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 06:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:bc:50:9f:08:52:2f:34:d2:a4:0a:43:34:04:7a:0c:f2:37:ee:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Validity Not Before: Jun 14 00:46:29 2025 GMT Not After : Jun 17 06:12:29 2025 GMT Subject: CN=0DCCADB07CBF0A02E1427E0B743DEDD2BE96E410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:15:8f:26:b4:f1:69:f0:90:ee:17:ca:98:27: da:38:33:ca:85:cc:5f:4e:e6:76:3c:6c:f1:23:b3: 45:04:3d:44:37:c8:d0:ea:8f:60:80:eb:d4:a4:29: 64:a0:e1:7f:0a:36:b0:1e:97:1d:21:14:a6:af:2e: 18:92:1a:0a:6c:bf:79:d8:ab:4f:63:c9:c5:1b:09: 22:2d:c7:43:0f:ce:1b:bc:c9:cd:fe:f6:50:43:1f: 6c:98:9c:1e:96:d6:d7:44:6d:2b:06:43:7b:02:2f: 40:a8:fb:74:ca:0d:31:3f:d3:22:a0:c1:2f:81:6d: 4f:1b:b5:1a:a2:ea:c7:23:3a:48:0c:2a:16:ab:da: 70:28:43:0e:7f:17:fb:60:eb:6b:1b:26:0b:af:de: d8:95:28:26:2f:b8:6e:21:c8:d5:74:0a:7a:6a:e2: e0:e2:5f:01:d7:7d:84:ca:e0:b4:60:cc:ff:8d:4c: 2a:e5:86:83:1a:12:92:11:15:4e:45:7e:38:9a:33: 84:1e:02:58:e5:57:91:65:55:09:cf:81:e8:dd:4b: 56:71:ed:ce:15:aa:3d:9e:2b:fe:ac:bd:92:80:22: 30:b8:af:dd:b8:48:d8:8c:6d:25:37:b0:fa:e6:e3: ce:e1:27:f3:8e:2b:c5:17:ee:d1:70:6b:49:81:d8: 9b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CC:AD:B0:7C:BF:0A:02:E1:42:7E:0B:74:3D:ED:D2:BE:96:E4:10 X509v3 Authority Key Identifier: keyid:0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:ac:83:fa:a1:f5:46:2c:04:de:04:2b:d7:d9:76:8d:23:7e: 09:c7:31:fd:13:3e:ea:6d:e0:cc:d9:ba:65:b6:1c:8e:57:5f: fd:82:97:d9:3d:c4:98:3c:b8:14:f9:03:64:ab:c2:62:88:c3: 22:f1:d0:3a:84:6c:9f:8d:a6:01:85:a3:12:ff:9e:88:23:f5: e3:ee:9f:2c:25:60:37:de:cf:14:aa:08:54:4a:0a:0d:68:23: 7a:5d:16:52:f9:ee:78:6f:c5:46:da:79:dd:46:be:05:da:b1: e6:e3:40:a3:44:ff:e5:e6:7b:df:14:88:c0:f0:30:cf:24:45: 5c:03:ea:ff:fe:73:cb:c1:e4:5e:58:04:1e:a2:7a:8c:19:28: c9:3f:bd:21:cf:d5:2c:87:85:3a:dd:c6:eb:d3:6e:54:a2:fc: 50:47:77:19:75:8b:19:b0:ae:06:42:e2:d4:df:32:0b:87:e2: 54:ee:5e:da:4f:38:e0:92:2b:fd:ec:ee:be:07:e5:64:f0:ae: 79:ce:be:c4:04:53:85:46:a4:4c:37:06:70:2e:39:a3:0c:fd: 06:39:80:d6:2c:5c:51:db:b2:74:67:ed:d7:22:69:1b:46:0a: 12:8a:39:a9:4b:0c:eb:4a:d0:9a:8d:13:bc:42:81:76:8e:92: dd:6d:e3:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL7xQnwhSLzTSpApDNAR6DPI37k0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4 NUJGQURGRDAeFw0yNTA2MTQwMDQ2MjlaFw0yNTA2MTcwNjEyMjlaMDMxMTAvBgNV BAMTKDBEQ0NBREIwN0NCRjBBMDJFMTQyN0UwQjc0M0RFREQyQkU5NkU0MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQFY8mtPFp8JDuF8qYJ9o4M8qF zF9O5nY8bPEjs0UEPUQ3yNDqj2CA69SkKWSg4X8KNrAelx0hFKavLhiSGgpsv3nY q09jycUbCSItx0MPzhu8yc3+9lBDH2yYnB6W1tdEbSsGQ3sCL0Co+3TKDTE/0yKg wS+BbU8btRqi6scjOkgMKhar2nAoQw5/F/tg62sbJguv3tiVKCYvuG4hyNV0Cnpq 4uDiXwHXfYTK4LRgzP+NTCrlhoMaEpIRFU5FfjiaM4QeAljlV5FlVQnPgejdS1Zx 7c4Vqj2eK/6svZKAIjC4r924SNiMbSU3sPrm487hJ/OOK8UX7tFwa0mB2JuxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDcytsHy/CgLhQn4LdD3t0r6W5BAwHwYDVR0j BBgwFoAUCh38tKQ4YeSnG81kV5IAVIW/rf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODVjYmQ5NS01NzRmLTQwNWItOGJkZS0wZGRiOWM5YmRkYmEvMC8wQTFERkNCNEE0 Mzg2MUU0QTcxQkNENjQ1NzkyMDA1NDg1QkZBREZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4NUJG QURGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAw NTQ4NUJGQURGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALisg/qh9UYsBN4EK9fZdo0jfgnHMf0TPupt 4MzZumW2HI5XX/2Cl9k9xJg8uBT5A2SrwmKIwyLx0DqEbJ+NpgGFoxL/nogj9ePu nywlYDfezxSqCFRKCg1oI3pdFlL57nhvxUbaed1GvgXasebjQKNE/+Xme98UiMDw MM8kRVwD6v/+c8vB5F5YBB6ieowZKMk/vSHP1SyHhTrdxuvTblSi/FBHdxl1ixmw rgZC4tTfMguH4lTuXtpPOOCSK/3s7r4H5WTwrnnOvsQEU4VGpEw3BnAuOaMM/QY5 gNYsXFHbsnRn7dciaRtGChKKOalLDOtK0JqNE7xCgXaOkt1t4x8= -----END CERTIFICATE-----Generated at Sun Jun 15 22:29:42 2025 by rpki-client