$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft File: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft (raw, json) Hash identifier: EYbT2tuG32+T6bOD0gKkSLFdMrCdgzWjmlSGALGrDYM= Subject key identifier: D6:E6:9C:BB:80:5A:91:8F:59:34:4B:B3:6B:C2:85:FE:35:1D:8F:4A Authority key identifier: 0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F Certificate issuer: /CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Certificate serial: 5F010EBC40CE8CEEEE5833FC33BB65800FA90915 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft Manifest number: 01EA Signing time: Mon 16 Jun 2025 06:11:12 +0000 Manifest this update: Mon 16 Jun 2025 06:06:12 +0000 Manifest next update: Thu 19 Jun 2025 10:00:12 +0000 Files and hashes: 1: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: uiZFjhvQ9ciRjJRK7vZMZHXsl+bdrRUmgcpl6MwjW4M=) 2: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl (hash: 9GqKP30Ns9nvXwPTTYcZtSg1MDgAIn6ECFHD1efEiVA=) 3: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: 5yT7jld1qwMjQ1Wxg8xXgEk9H98NQ/9bvOuTLpVK3wE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 10:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:01:0e:bc:40:ce:8c:ee:ee:58:33:fc:33:bb:65:80:0f:a9:09:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Validity Not Before: Jun 16 06:06:12 2025 GMT Not After : Jun 19 10:00:12 2025 GMT Subject: CN=D6E69CBB805A918F59344BB36BC285FE351D8F4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:59:16:9a:7f:e1:1d:54:6b:56:08:da:5b:56: 04:a1:b3:60:3c:89:cc:7a:5b:87:a4:46:9a:7a:e5: 01:9f:b9:b4:a1:10:83:53:e0:6f:20:1a:4d:45:53: 96:27:94:f2:ef:02:78:c2:0e:d6:a0:18:dd:02:aa: 65:af:52:de:2f:6a:27:49:ae:b6:56:a8:ea:8d:ea: 42:9a:63:3e:11:0c:3e:5a:73:43:15:43:ee:92:49: 91:34:54:3a:6f:c9:16:86:ca:74:a3:40:a8:83:82: 73:7b:46:a8:8a:f8:43:b7:a6:a7:28:ed:5a:7a:09: 04:a5:8c:e6:1c:74:8b:0f:3e:d5:6e:49:18:34:dc: f6:9c:33:26:19:ec:72:7e:d4:c3:ac:c2:34:61:8c: ba:95:8c:7e:84:00:00:ce:69:05:bb:32:da:0b:22: 93:84:3d:70:77:5c:f4:a4:54:cf:1b:a5:aa:38:8c: 67:0c:bf:ba:92:7d:ee:9c:1c:a2:e6:48:e0:7d:8e: 67:18:6c:a5:08:88:a0:21:16:d5:5f:95:fb:31:4a: a0:80:f3:f5:f2:a9:6a:d1:cd:12:3e:53:15:01:19: 4d:1f:c5:b4:db:95:3f:80:cc:e2:72:96:7f:e9:79: c9:0d:35:a6:6d:04:5c:79:93:e5:4c:dc:3b:78:99: fe:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E6:9C:BB:80:5A:91:8F:59:34:4B:B3:6B:C2:85:FE:35:1D:8F:4A X509v3 Authority Key Identifier: keyid:0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:0a:e1:f4:31:05:81:91:20:1e:17:c3:1c:b4:91:ba:fe:34: 7b:ab:ac:05:c7:e5:b2:57:0c:53:f5:da:0d:e9:e9:ae:04:47: 20:7d:8b:44:d2:23:75:fe:88:12:68:ff:18:53:4b:6b:58:20: 84:11:b9:b0:0c:6a:8f:00:2d:1d:3b:2d:5f:cc:26:1d:33:c9: 1d:51:cd:95:fa:76:8b:14:3a:cf:51:9a:b1:17:58:13:c8:82: ce:e1:a9:7f:bc:60:54:29:02:a2:8c:7f:45:d4:18:5b:74:b6: 12:8f:2a:ef:0d:bc:72:a1:15:9e:cc:0d:b0:21:37:d7:87:72: 2d:7e:b9:5f:19:d5:30:3d:ab:db:b9:47:97:2e:50:c2:2c:4e: 9d:5d:b6:b7:d3:8b:65:a5:1c:1b:f7:34:87:87:ef:d2:27:26: 85:51:59:fa:0f:e2:e1:17:28:4a:32:8b:e8:98:c4:35:7d:82: 16:01:bb:f0:68:f0:4d:23:97:0b:c4:68:1a:77:c1:17:e0:22: d4:ea:a6:4a:76:3a:f7:d2:25:c8:2a:1d:e5:d0:2c:b9:28:06: 9b:61:12:be:ef:13:10:33:7b:07:90:03:f8:f3:40:f1:0d:9d: e9:0d:cb:60:5e:eb:4f:06:fb:b0:eb:6d:73:e2:f8:c1:94:49: a3:f0:86:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXwEOvEDOjO7uWDP8M7tlgA+pCRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3 QjQ5OUQyRjAeFw0yNTA2MTYwNjA2MTJaFw0yNTA2MTkxMDAwMTJaMDMxMTAvBgNV BAMTKEQ2RTY5Q0JCODA1QTkxOEY1OTM0NEJCMzZCQzI4NUZFMzUxRDhGNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyWRaaf+EdVGtWCNpbVgShs2A8 icx6W4ekRpp65QGfubShEINT4G8gGk1FU5YnlPLvAnjCDtagGN0CqmWvUt4vaidJ rrZWqOqN6kKaYz4RDD5ac0MVQ+6SSZE0VDpvyRaGynSjQKiDgnN7RqiK+EO3pqco 7Vp6CQSljOYcdIsPPtVuSRg03PacMyYZ7HJ+1MOswjRhjLqVjH6EAADOaQW7MtoL IpOEPXB3XPSkVM8bpao4jGcMv7qSfe6cHKLmSOB9jmcYbKUIiKAhFtVflfsxSqCA 8/XyqWrRzRI+UxUBGU0fxbTblT+AzOJyln/peckNNaZtBFx5k+VM3Dt4mf7RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1uacu4BakY9ZNEuza8KF/jUdj0owHwYDVR0j BBgwFoAUD6+jmqOHWkz2O89+hzCHkntJnS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGUxMWZmYy1lNzVhLTRiZjQtODQ0OC1jNjhlMjAzMzVlZTgvMC8wRkFGQTM5QUEz ODc1QTRDRjYzQkNGN0U4NzMwODc5MjdCNDk5RDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3QjQ5 OUQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBlMTFmZmMtZTc1YS00YmY0LTg0 NDgtYzY4ZTIwMzM1ZWU4LzAvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3 OTI3QjQ5OUQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYK4fQxBYGRIB4Xwxy0kbr+NHurrAXH5bJX DFP12g3p6a4ERyB9i0TSI3X+iBJo/xhTS2tYIIQRubAMao8ALR07LV/MJh0zyR1R zZX6dosUOs9RmrEXWBPIgs7hqX+8YFQpAqKMf0XUGFt0thKPKu8NvHKhFZ7MDbAh N9eHci1+uV8Z1TA9q9u5R5cuUMIsTp1dtrfTi2WlHBv3NIeH79InJoVRWfoP4uEX KEoyi+iYxDV9ghYBu/Bo8E0jlwvEaBp3wRfgItTqpkp2OvfSJcgqHeXQLLkoBpth Er7vExAzeweQA/jzQPENnekNy2Be608G+7DrbXPi+MGUSaPwhp8= -----END CERTIFICATE-----Generated at Wed Jun 18 01:52:06 2025 by rpki-client