$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft File: B197F427572524588487CFDB163A9E512FAE4DF2.mft (raw, json) Hash identifier: 2Hy+7upm4ngTMgOIdcuq2ULpL8ZH9QvIWw5fTcVBNNs= Subject key identifier: 8A:1A:CD:97:1F:58:1F:DF:F4:E4:D8:B7:42:B9:50:FB:35:0E:FD:E4 Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 Certificate issuer: /CN=B197F427572524588487CFDB163A9E512FAE4DF2 Certificate serial: 48FD98D29899B433B92C600286D15319FBBFEF5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft Manifest number: 0211 Signing time: Sun 20 Jul 2025 21:21:21 +0000 Manifest this update: Sun 20 Jul 2025 21:16:21 +0000 Manifest next update: Wed 23 Jul 2025 23:09:21 +0000 Files and hashes: 1: B197F427572524588487CFDB163A9E512FAE4DF2.crl (hash: iOM/P9XnFsN5OLWKib6P+NtJjkY7P0RQZqyrLfMNnG4=) 2: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: BU1Q0ryHM0MlXG1Q7vZvhi4oAbOwc3sWBEiOeckA5Ms=) 3: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: sqH8mgq0fr+XiznMLTzogmtodA1+q341U0FlkHOzY5k=) 4: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: IlIKis9hrjcqU4gajZ2m+r4qTrp6BInf4S11M61jB+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 23:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:fd:98:d2:98:99:b4:33:b9:2c:60:02:86:d1:53:19:fb:bf:ef:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2 Validity Not Before: Jul 20 21:16:21 2025 GMT Not After : Jul 23 23:09:21 2025 GMT Subject: CN=8A1ACD971F581FDFF4E4D8B742B950FB350EFDE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:59:5a:a2:0d:dd:1c:0c:00:bf:48:d8:87:95: c0:a7:5e:4d:05:85:a7:a7:dd:1e:9a:d0:0f:8a:df: 9c:ee:59:2e:70:2c:de:df:ea:b4:cb:bd:d9:e1:aa: 68:a8:2d:c9:24:86:d9:b5:4d:4c:f4:a9:fe:99:23: 64:dd:1b:3e:f2:5b:8a:b0:28:f7:16:45:51:1c:ac: 7b:77:3a:27:af:e0:f9:15:bf:e0:32:9b:5f:86:f7: b6:d2:f6:92:79:59:a8:db:59:fa:ef:ec:e4:18:48: 6e:c6:52:ff:fa:88:f7:cd:50:dc:bb:1a:11:fd:90: 29:6b:c2:d2:a2:c2:da:f2:ed:7a:7a:03:0e:ab:d2: 35:2f:d8:9c:cf:1b:21:c5:b6:aa:b6:15:dc:2d:d5: d6:8c:69:c6:be:fd:ce:10:a1:fb:19:6d:6e:46:d3: 82:63:05:a8:b6:ff:c9:ba:fa:66:d4:53:bb:d7:0a: ac:a9:12:5e:aa:79:04:b6:64:3c:a9:16:a8:c8:43: 4d:9b:ac:c3:9f:c3:af:d6:e5:6a:0d:ba:13:cc:2d: fd:41:f9:ac:4d:09:da:d3:62:04:4f:92:0a:c8:c1: 7b:dd:c7:e0:a0:4d:ea:2d:2e:24:fb:ee:01:1d:d5: c9:0a:ca:53:bf:da:2c:c5:47:54:df:53:f5:21:b0: d8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1A:CD:97:1F:58:1F:DF:F4:E4:D8:B7:42:B9:50:FB:35:0E:FD:E4 X509v3 Authority Key Identifier: keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:de:83:5b:66:00:da:37:52:bf:92:10:8c:d4:0a:3d:33:b6: 78:0c:dd:10:43:e5:d4:42:58:ea:61:17:ca:d4:4c:b6:bb:ef: 37:7f:85:8d:f3:e0:54:d8:87:12:cc:c3:c1:28:b9:ec:63:e5: 6c:22:af:eb:bd:9b:da:90:3e:15:40:51:5d:ee:15:ec:85:a0: 1e:5f:e0:97:94:d4:7d:f7:57:b9:fd:28:7b:e8:12:0f:e4:03: 0f:8c:aa:07:ea:b7:91:f8:38:45:87:66:f5:40:5a:d4:06:77: a5:a4:cb:5b:22:31:5f:5d:97:21:e9:12:88:1d:9d:73:47:45: df:c7:a0:82:e2:c0:78:ee:b7:4f:92:06:5f:d5:8a:b6:01:06: 1a:56:d1:36:b3:64:18:30:1a:5c:1b:b8:a5:63:85:c3:bd:7c: 64:51:49:d0:81:50:a7:44:cf:d6:3f:17:1f:a8:e3:a0:98:7d: 39:00:63:ea:6d:b9:2e:88:79:62:9a:19:aa:f4:d1:3e:35:ad: 39:9c:09:10:9f:a2:62:c0:39:7f:4c:c6:3c:b5:21:aa:90:49: b9:95:21:2f:e8:8a:c3:59:ba:7a:4f:a9:1a:4a:34:b2:92:57: eb:b4:1d:d6:a5:2f:55:f5:c4:96:28:31:ef:7f:57:c3:fe:3d: c7:9f:8b:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSP2Y0piZtDO5LGAChtFTGfu/718wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEy RkFFNERGMjAeFw0yNTA3MjAyMTE2MjFaFw0yNTA3MjMyMzA5MjFaMDMxMTAvBgNV BAMTKDhBMUFDRDk3MUY1ODFGREZGNEU0RDhCNzQyQjk1MEZCMzUwRUZERTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIWVqiDd0cDAC/SNiHlcCnXk0F haen3R6a0A+K35zuWS5wLN7f6rTLvdnhqmioLckkhtm1TUz0qf6ZI2TdGz7yW4qw KPcWRVEcrHt3Oiev4PkVv+Aym1+G97bS9pJ5WajbWfrv7OQYSG7GUv/6iPfNUNy7 GhH9kClrwtKiwtry7Xp6Aw6r0jUv2JzPGyHFtqq2Fdwt1daMaca+/c4QofsZbW5G 04JjBai2/8m6+mbUU7vXCqypEl6qeQS2ZDypFqjIQ02brMOfw6/W5WoNuhPMLf1B +axNCdrTYgRPkgrIwXvdx+CgTeotLiT77gEd1ckKylO/2izFR1TfU/UhsNifAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUihrNlx9YH9/05Ni3QrlQ+zUO/eQwHwYDVR0j BBgwFoAUsZf0J1clJFiEh8/bFjqeUS+uTfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGNmNDA2Ny1hNjlkLTQ5MDgtYmVlOC1iNDY1NWJkYzE1ZjgvMC9CMTk3RjQyNzU3 MjUyNDU4ODQ4N0NGREIxNjNBOUU1MTJGQUU0REYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEyRkFF NERGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlF NTEyRkFFNERGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXeg1tmANo3Ur+SEIzUCj0ztngM3RBD5dRC WOphF8rUTLa77zd/hY3z4FTYhxLMw8Eouexj5Wwir+u9m9qQPhVAUV3uFeyFoB5f 4JeU1H33V7n9KHvoEg/kAw+Mqgfqt5H4OEWHZvVAWtQGd6Wky1siMV9dlyHpEogd nXNHRd/HoILiwHjut0+SBl/VirYBBhpW0TazZBgwGlwbuKVjhcO9fGRRSdCBUKdE z9Y/Fx+o46CYfTkAY+ptuS6IeWKaGar00T41rTmcCRCfomLAOX9Mxjy1IaqQSbmV IS/oisNZunpPqRpKNLKSV+u0HdalL1X1xJYoMe9/V8P+PcefizY= -----END CERTIFICATE-----Generated at Mon Jul 21 08:55:12 2025 by rpki-client