$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft File: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft (raw, json) Hash identifier: MCfRMjdPbhylyWnHkPx54CFhnjBm4J4m/241oGYwxng= Subject key identifier: 16:90:08:11:0C:0D:74:80:44:86:A0:1E:15:15:6A:51:71:4A:B3:40 Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 Certificate issuer: /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Certificate serial: 0CA22A6A6B07A92272FFB7D422620FE9F2E19FD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft Manifest number: 01F4 Signing time: Mon 21 Jul 2025 00:20:38 +0000 Manifest this update: Mon 21 Jul 2025 00:15:38 +0000 Manifest next update: Thu 24 Jul 2025 07:27:38 +0000 Files and hashes: 1: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: Alr3MmF3FComiYShgHs/7REcddrGc/AGrj1Fejo7KUI=) 2: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: b9POD8lIGTkSBPPG5UCEDWwytPa4KOI/X1gSRB0o140=) 3: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl (hash: qtYFsG+yBB0P8J5XczWgVkRpml7IMwkE+wkofWRo1i4=) 4: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: pIxViXZoycBV8A7CIi1fmiiQDu+3Ugcswhk6WPEdvN8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 07:27:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a2:2a:6a:6b:07:a9:22:72:ff:b7:d4:22:62:0f:e9:f2:e1:9f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Validity Not Before: Jul 21 00:15:38 2025 GMT Not After : Jul 24 07:27:38 2025 GMT Subject: CN=169008110C0D74804486A01E15156A51714AB340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:da:1e:aa:df:ab:d0:0d:d7:9b:c7:53:bc:61: 0f:6a:2a:71:6c:d6:5d:ed:8f:72:c1:66:a4:23:8b: 83:5b:0e:37:ce:14:15:47:4b:94:db:4d:61:48:ea: 68:8a:8d:e0:79:a7:65:c3:eb:6a:e7:56:48:a1:3b: 57:bf:f7:f1:ca:f4:7a:8d:dd:3f:a7:d4:ad:c3:08: 36:8f:48:5e:a1:f7:cc:3c:19:88:f5:60:4d:79:ce: a0:bf:49:fb:46:2d:bd:91:c2:ac:48:fe:7f:b1:18: 74:18:06:9a:0d:f6:82:ca:6e:e5:c2:8a:53:1d:47: 1a:28:9e:fc:a5:da:64:8f:3a:0f:51:25:5b:fa:6b: bc:c6:47:be:07:17:9b:33:e6:7a:dd:08:25:7b:33: 53:e7:d8:29:9d:62:9c:df:e1:f7:ad:cf:58:45:ba: 0a:3f:7d:80:b9:30:ac:78:8b:be:dc:d5:75:c7:14: 32:28:80:66:c3:48:f8:83:cb:24:03:84:a2:34:70: f4:5e:7a:ad:96:57:98:d3:16:b9:d7:b5:21:71:2f: 91:3e:a6:78:bd:bb:78:c1:a0:5f:05:0e:5f:af:54: db:eb:eb:bd:2d:a8:ea:74:e4:33:8e:d3:ca:91:de: 48:14:71:2e:b6:dd:46:5b:57:d3:8d:e1:7c:f4:3d: 5d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:90:08:11:0C:0D:74:80:44:86:A0:1E:15:15:6A:51:71:4A:B3:40 X509v3 Authority Key Identifier: keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a6:2b:3e:e6:49:c8:61:11:b4:10:14:f2:76:ad:95:85:94: 40:da:57:0c:4d:c8:d6:10:b0:7a:03:7d:23:fd:a3:99:f5:51: b5:e7:83:ba:f1:0d:1a:38:17:af:5e:64:38:f1:c9:98:66:ce: 63:1e:e6:a4:e9:f2:c8:c3:32:fc:e1:2b:eb:55:f1:ed:8c:9e: cf:2e:d6:e4:0b:e5:56:7c:95:18:59:18:69:68:ba:1c:ff:02: 98:88:c6:81:b3:4d:cb:26:9a:f4:e4:4f:3a:00:dd:1b:19:b0: 79:ac:c0:77:eb:f9:4b:de:be:6c:a6:b5:11:79:e6:44:88:4e: ca:a2:42:82:67:d6:d2:26:69:1f:77:61:7c:64:9a:d4:a2:7e: 15:08:32:df:46:e3:28:79:a5:aa:9b:c8:c8:f7:f9:a0:b8:57: fb:0e:35:eb:a2:f4:33:c7:8a:b4:3c:b1:99:5d:4a:25:30:e0: af:9c:ad:45:f9:24:d1:2c:fb:16:de:ef:4a:95:2a:09:d4:2c: a6:fa:cb:c9:5c:26:95:de:ac:dd:93:87:ae:9e:3f:71:14:2e: e6:72:5e:be:ed:8a:ad:eb:3d:eb:b3:db:bf:a3:5d:18:e7:7a: cc:2d:f2:15:1b:7e:e1:c9:ba:68:f9:ed:53:f5:dc:6f:3a:16: e0:25:01:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDKIqamsHqSJy/7fUImIP6fLhn9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVB NkY0OENFNzAeFw0yNTA3MjEwMDE1MzhaFw0yNTA3MjQwNzI3MzhaMDMxMTAvBgNV BAMTKDE2OTAwODExMEMwRDc0ODA0NDg2QTAxRTE1MTU2QTUxNzE0QUIzNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL2h6q36vQDdebx1O8YQ9qKnFs 1l3tj3LBZqQji4NbDjfOFBVHS5TbTWFI6miKjeB5p2XD62rnVkihO1e/9/HK9HqN 3T+n1K3DCDaPSF6h98w8GYj1YE15zqC/SftGLb2RwqxI/n+xGHQYBpoN9oLKbuXC ilMdRxoonvyl2mSPOg9RJVv6a7zGR74HF5sz5nrdCCV7M1Pn2CmdYpzf4fetz1hF ugo/fYC5MKx4i77c1XXHFDIogGbDSPiDyyQDhKI0cPReeq2WV5jTFrnXtSFxL5E+ pni9u3jBoF8FDl+vVNvr670tqOp05DOO08qR3kgUcS623UZbV9ON4Xz0PV0vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFpAIEQwNdIBEhqAeFRVqUXFKs0AwHwYDVR0j BBgwFoAUGZ09aE7O7/uxfdWYomiINab0jOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTgzODNlMi0yMDZjLTRiNzQtYmE0YS1jZDhhNGQ3Y2Q4NjEvMC8xOTlEM0Q2ODRF Q0VFRkZCQjE3REQ1OThBMjY4ODgzNUE2RjQ4Q0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVBNkY0 OENFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4 MzVBNkY0OENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2mKz7mSchhEbQQFPJ2rZWFlEDaVwxNyNYQ sHoDfSP9o5n1UbXng7rxDRo4F69eZDjxyZhmzmMe5qTp8sjDMvzhK+tV8e2Mns8u 1uQL5VZ8lRhZGGlouhz/ApiIxoGzTcsmmvTkTzoA3RsZsHmswHfr+UvevmymtRF5 5kSITsqiQoJn1tImaR93YXxkmtSifhUIMt9G4yh5paqbyMj3+aC4V/sONeui9DPH irQ8sZldSiUw4K+crUX5JNEs+xbe70qVKgnULKb6y8lcJpXerN2Th66eP3EULuZy Xr7tiq3rPeuz27+jXRjneswt8hUbfuHJumj57VP13G86FuAlAVA= -----END CERTIFICATE-----Generated at Mon Jul 21 23:24:47 2025 by rpki-client