$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft File: C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft (raw, json) Hash identifier: VEr2qczNIO2F/BQwaT0XcEVTbhQInpelrhNxeXMzsbc= Subject key identifier: 4B:FB:B3:B4:5E:BF:59:FE:DE:AE:C6:40:CE:13:AD:68:1C:6F:CF:CE Authority key identifier: C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 Certificate issuer: /CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Certificate serial: 2845D72E5253FA00561DEDEF566868862B98C274 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft Manifest number: 0193 Signing time: Sat 19 Jul 2025 10:01:15 +0000 Manifest this update: Sat 19 Jul 2025 09:56:15 +0000 Manifest next update: Tue 22 Jul 2025 12:43:15 +0000 Files and hashes: 1: 3130332e3138362e322e302f32342d3234203d3e20313439383837.roa (hash: dald9idU/rHkiXT+Hb4ViPOAu0GAF+vadWJH9YDYXzE=) 2: C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl (hash: A3d3R8JCxouatQZJQafPzv7L2M31z810mw/+vMZj64s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 12:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:45:d7:2e:52:53:fa:00:56:1d:ed:ef:56:68:68:86:2b:98:c2:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Validity Not Before: Jul 19 09:56:15 2025 GMT Not After : Jul 22 12:43:15 2025 GMT Subject: CN=4BFBB3B45EBF59FEDEAEC640CE13AD681C6FCFCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:71:13:30:af:eb:42:9e:e9:d9:cf:3e:7b:d1: 3a:48:c4:9a:3d:3f:99:2a:4a:ff:38:3d:53:2e:a5: 15:fe:f2:55:eb:58:59:a5:50:01:66:6d:20:89:6c: 86:22:b1:c1:ac:80:1c:c1:1e:26:1c:17:77:ab:b2: bc:6a:16:ae:3d:fe:e4:98:01:4d:73:41:88:8d:5c: f5:75:a8:5c:80:64:ca:8f:83:bd:0c:87:c6:b5:a5: 7a:29:45:d6:e2:9f:f7:d4:ab:dc:5b:99:0b:31:7e: 96:28:ae:ca:25:47:7a:c2:07:26:f5:bf:c1:d6:54: 8f:ff:f6:1d:da:a0:8b:16:c4:68:dd:ec:96:8b:0b: 57:b6:ad:52:ad:5e:1f:99:66:73:59:64:ea:89:d9: 1f:e9:ed:aa:87:b9:0a:b9:a9:df:8c:bf:d6:5d:7d: 09:63:29:67:da:91:53:bf:cf:77:e4:35:a3:10:1b: 16:b9:67:60:b2:35:a9:43:fa:13:29:49:be:4c:a3: 9a:7f:d7:f1:2d:a4:9e:55:45:a6:bf:9c:ab:d3:99: 6d:45:9c:cb:ab:0b:98:3c:bb:f7:b9:e1:c2:41:62: c8:09:f3:f2:dd:ae:cd:4c:09:04:ce:3e:26:3a:99: e4:f5:b4:f7:7c:ac:7d:a6:e5:09:df:3c:17:73:c4: 9d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FB:B3:B4:5E:BF:59:FE:DE:AE:C6:40:CE:13:AD:68:1C:6F:CF:CE X509v3 Authority Key Identifier: keyid:C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:0a:ff:b8:74:16:58:d4:04:1c:d8:1f:37:9d:6f:4f:79:81: 80:29:b0:5f:56:e5:a0:6f:8f:14:26:32:9f:6b:b6:6b:58:16: 26:21:eb:9f:5e:1b:e7:f4:f9:78:a0:35:a4:65:dd:32:36:90: 37:54:04:3d:01:20:3b:4c:35:c6:a8:c1:a9:45:fc:09:6c:ac: f2:fc:26:3f:97:06:dd:a5:68:92:db:4a:de:84:1a:7b:32:29: 1c:0b:88:a9:8c:51:71:de:96:22:8b:b1:9d:c6:7b:a8:9b:e7: c0:2f:3d:91:66:27:f1:d1:0a:6c:94:75:cc:1a:d5:44:80:71: 59:00:9c:1f:b2:cb:78:4f:da:2e:b9:47:a6:cc:40:04:41:a6: cf:11:00:68:64:b5:aa:84:7f:b4:49:24:6e:07:82:98:95:84: ac:b2:9c:cf:99:7d:1c:3f:1d:01:f5:26:5e:b0:9e:e5:da:b6: 33:fa:82:7f:73:0d:a9:82:b1:39:9c:13:6f:b4:ad:07:9e:9d: 9d:ff:0c:37:3b:32:b4:fc:b7:50:16:e0:88:47:39:3d:52:50: f2:47:4a:e5:2c:2b:98:07:8a:91:fd:e7:3a:dd:4d:aa:83:b3: 16:ee:45:ba:bd:99:d9:55:89:fa:12:55:68:4d:61:e8:b4:68: 63:69:00:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKEXXLlJT+gBWHe3vVmhohiuYwnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJB QkM3QTZCMjAeFw0yNTA3MTkwOTU2MTVaFw0yNTA3MjIxMjQzMTVaMDMxMTAvBgNV BAMTKDRCRkJCM0I0NUVCRjU5RkVERUFFQzY0MENFMTNBRDY4MUM2RkNGQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGcRMwr+tCnunZzz570TpIxJo9 P5kqSv84PVMupRX+8lXrWFmlUAFmbSCJbIYiscGsgBzBHiYcF3ersrxqFq49/uSY AU1zQYiNXPV1qFyAZMqPg70Mh8a1pXopRdbin/fUq9xbmQsxfpYorsolR3rCByb1 v8HWVI//9h3aoIsWxGjd7JaLC1e2rVKtXh+ZZnNZZOqJ2R/p7aqHuQq5qd+Mv9Zd fQljKWfakVO/z3fkNaMQGxa5Z2CyNalD+hMpSb5Mo5p/1/EtpJ5VRaa/nKvTmW1F nMurC5g8u/e54cJBYsgJ8/Ldrs1MCQTOPiY6meT1tPd8rH2m5QnfPBdzxJ1NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS/uztF6/Wf7ersZAzhOtaBxvz84wHwYDVR0j BBgwFoAUwZsTMCWy2UcDTysPxYK58qvHprIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGY2ZDg2Yi1lM2RmLTRlMmYtOTM2Zi1lZDliOTYzNTAzYTEvMC9DMTlCMTMzMDI1 QjJEOTQ3MDM0RjJCMEZDNTgyQjlGMkFCQzdBNkIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJBQkM3 QTZCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmNmQ4NmItZTNkZi00ZTJmLTkz NmYtZWQ5Yjk2MzUwM2ExLzAvQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5 RjJBQkM3QTZCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4K/7h0FljUBBzYHzedb095gYApsF9W5aBv jxQmMp9rtmtYFiYh659eG+f0+XigNaRl3TI2kDdUBD0BIDtMNcaowalF/AlsrPL8 Jj+XBt2laJLbSt6EGnsyKRwLiKmMUXHeliKLsZ3Ge6ib58AvPZFmJ/HRCmyUdcwa 1USAcVkAnB+yy3hP2i65R6bMQARBps8RAGhktaqEf7RJJG4HgpiVhKyynM+ZfRw/ HQH1Jl6wnuXatjP6gn9zDamCsTmcE2+0rQeenZ3/DDc7MrT8t1AW4IhHOT1SUPJH SuUsK5gHipH95zrdTaqDsxbuRbq9mdlVifoSVWhNYei0aGNpAH0= -----END CERTIFICATE-----Generated at Mon Jul 21 08:59:36 2025 by rpki-client