$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft File: 194F6EF659F1115C068AB59065D57F150E23F5B6.mft (raw, json) Hash identifier: wRmkIeuDGNX7Zc029O4qfXF/+IGoaZElFnsUaDgnNOc= Subject key identifier: 28:5F:3B:42:BC:B3:35:AD:2E:0F:2A:6A:94:49:80:79:77:E1:13:45 Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Certificate serial: 4BFC2A9BBC0A54EAF1DBBB1A771F71E92001A300 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft Manifest number: 01B9 Signing time: Mon 21 Jul 2025 12:42:16 +0000 Manifest this update: Mon 21 Jul 2025 12:37:16 +0000 Manifest next update: Thu 24 Jul 2025 14:27:16 +0000 Files and hashes: 1: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (hash: OiZZEQMDYAjWvUr2V8yTuhgbwOSZs8jYfIrtVvafVY0=) 2: 34332e3234302e3232362e302f32342d3234203d3e20313530323130.roa (hash: 1Tei5fGxwqBxz6xN5gHTRqivy8w2htgn+IA2ReOzZk8=) 3: 194F6EF659F1115C068AB59065D57F150E23F5B6.crl (hash: DwN2oEVAtD397ypNpfa5stNvxLEL3ld9/NEAPje7yus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 14:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:fc:2a:9b:bc:0a:54:ea:f1:db:bb:1a:77:1f:71:e9:20:01:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Validity Not Before: Jul 21 12:37:16 2025 GMT Not After : Jul 24 14:27:16 2025 GMT Subject: CN=285F3B42BCB335AD2E0F2A6A9449807977E11345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:45:18:6b:ef:75:05:dc:8d:39:23:97:af: bc:32:8b:ec:3d:6f:2f:3f:c9:6d:1a:2e:6e:12:7d: 17:5d:12:3e:73:f5:cf:d0:c1:ea:02:02:05:88:6d: 76:52:6e:a4:fa:8f:91:13:4a:a9:66:cc:f4:8d:7c: 8a:8b:2b:13:2e:47:b8:aa:1b:90:01:2d:12:a0:c1: 1d:85:1a:70:d1:f4:15:2c:45:30:8d:a2:4e:f4:cb: 71:b1:07:e5:1a:eb:b6:da:26:11:d3:c1:0c:b8:e0: a4:17:74:ba:e0:f4:99:6d:85:42:8d:90:d6:93:6c: 6f:66:81:dd:a4:bc:2d:55:f5:b6:da:eb:7e:b0:7c: 8b:98:a5:a6:88:59:28:bb:e4:26:69:bd:31:e0:ba: 71:d2:96:7b:d9:32:dc:33:ac:5e:d4:18:fa:72:5e: c4:1d:a8:3e:d9:ba:7d:75:39:88:9f:4c:09:31:6c: 0d:ed:0b:89:6c:9f:ba:6a:11:6a:8e:96:2f:44:2a: 5f:49:8c:35:e8:63:78:63:7a:8e:be:06:35:18:0c: c6:ce:b1:34:a2:1c:7c:18:1e:e5:15:24:d8:d6:ec: 64:63:da:7b:af:a4:0c:31:74:08:b6:99:99:c9:eb: 59:1e:c4:60:b6:41:8b:c5:5f:21:95:6d:38:19:a8: be:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5F:3B:42:BC:B3:35:AD:2E:0F:2A:6A:94:49:80:79:77:E1:13:45 X509v3 Authority Key Identifier: keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:dc:4f:78:fa:80:36:8e:30:97:68:cf:ac:5f:63:5b:70:ef: 9a:5d:21:9b:00:39:fc:4d:ba:5b:82:28:ed:51:40:28:ca:cd: b8:e5:e8:7a:84:fe:4e:a2:81:c4:13:41:45:ce:79:23:eb:f8: 28:3e:39:5c:18:38:5f:35:96:e2:6a:66:66:dd:91:76:08:66: 68:cb:6b:e8:61:d4:7a:d8:f3:df:f8:89:55:24:8e:d2:d0:6e: 69:eb:a2:ab:49:6e:38:f5:6f:31:90:d0:86:0c:15:96:e8:57: c8:d8:4b:2c:80:b7:a8:96:ea:7e:62:a6:a3:b9:07:e0:d4:f5: a4:80:90:3a:4f:61:9a:ab:f8:c5:25:d6:b3:4b:08:d8:6c:73: fa:21:b0:6a:38:40:d5:48:53:3c:b5:50:ff:7b:d1:dd:43:f7: 27:2c:d4:a0:31:2a:1f:a9:1a:2c:bc:d0:b3:07:10:e5:3e:c1: 42:27:af:9c:95:b7:87:81:56:ab:e1:24:b2:0a:7b:39:44:2c: 80:95:8c:4c:1b:61:4e:88:1f:a7:23:4e:f2:15:46:7a:60:44: 77:18:fd:fd:a9:87:ed:88:0d:0f:14:24:1e:44:0a:65:ba:2e: 99:e5:02:61:d5:cf:33:02:40:2e:c9:d1:39:ab:aa:88:79:4b: 7a:f3:e5:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS/wqm7wKVOrx27sadx9x6SABowAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUw RTIzRjVCNjAeFw0yNTA3MjExMjM3MTZaFw0yNTA3MjQxNDI3MTZaMDMxMTAvBgNV BAMTKDI4NUYzQjQyQkNCMzM1QUQyRTBGMkE2QTk0NDk4MDc5NzdFMTEzNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw0EUYa+91BdyNOSOXr7wyi+w9 by8/yW0aLm4SfRddEj5z9c/QweoCAgWIbXZSbqT6j5ETSqlmzPSNfIqLKxMuR7iq G5ABLRKgwR2FGnDR9BUsRTCNok70y3GxB+Ua67baJhHTwQy44KQXdLrg9JlthUKN kNaTbG9mgd2kvC1V9bba636wfIuYpaaIWSi75CZpvTHgunHSlnvZMtwzrF7UGPpy XsQdqD7Zun11OYifTAkxbA3tC4lsn7pqEWqOli9EKl9JjDXoY3hjeo6+BjUYDMbO sTSiHHwYHuUVJNjW7GRj2nuvpAwxdAi2mZnJ61kexGC2QYvFXyGVbTgZqL6rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKF87QryzNa0uDypqlEmAeXfhE0UwHwYDVR0j BBgwFoAUGU9u9lnxEVwGirWQZdV/FQ4j9bYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmFiZWM3MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMC8xOTRGNkVGNjU5 RjExMTVDMDY4QUI1OTA2NUQ1N0YxNTBFMjNGNUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUwRTIz RjVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZhYmVjNzEtN2VjYi00ZGJkLWE0 MjEtOTliOWNkMjA5MDNhLzAvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdG MTUwRTIzRjVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHcT3j6gDaOMJdoz6xfY1tw75pdIZsAOfxN uluCKO1RQCjKzbjl6HqE/k6igcQTQUXOeSPr+Cg+OVwYOF81luJqZmbdkXYIZmjL a+hh1HrY89/4iVUkjtLQbmnroqtJbjj1bzGQ0IYMFZboV8jYSyyAt6iW6n5ipqO5 B+DU9aSAkDpPYZqr+MUl1rNLCNhsc/ohsGo4QNVIUzy1UP970d1D9ycs1KAxKh+p Giy80LMHEOU+wUInr5yVt4eBVqvhJLIKezlELICVjEwbYU6IH6cjTvIVRnpgRHcY /f2ph+2IDQ8UJB5ECmW6LpnlAmHVzzMCQC7J0Tmrqoh5S3rz5d0= -----END CERTIFICATE-----Generated at Wed Jul 23 02:01:46 2025 by rpki-client