$ rpki-client -vvf repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft File: 19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft (raw, json) Hash identifier: OXdHWlBBJFBpHWG0gza938uwU288wmi9Sz7AwnTNYV8= Subject key identifier: DA:CF:50:4C:27:9D:69:14:EA:05:EA:A8:27:EA:28:8E:5A:45:0C:F7 Authority key identifier: 19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C Certificate issuer: /CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C Certificate serial: 08A867746E8E86BED8E11DC1AE535433995E6186 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft Manifest number: 04F0 Signing time: Sat 19 Jul 2025 15:11:32 +0000 Manifest this update: Sat 19 Jul 2025 15:06:32 +0000 Manifest next update: Tue 22 Jul 2025 22:42:32 +0000 Files and hashes: 1: 19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl (hash: ELBHuFH3sCoh1uoaG3LMHmMd/R5ttemdF/ZQhk8IKQ4=) 2: 3135372e3131392e3232302e302f32322d3234203d3e203435333032.roa (hash: HO0xgGTKI8hDqeJBD1vkonWKYqVkEjngRgMiBcK+FFk=) 3: 323430333a393130303a3a2f33322d3438203d3e203435333032.roa (hash: 4brGPOCgGPQmWwoETwSHHbE2lw9R22KEcXYm0M7Fp90=) 4: 323430333a393130303a3a2f33322d3332203d3e203435333032.roa (hash: yCfGLKGWTw0wAfTHt+3rKRfpUiZgwzZqi9YE0DFo8qw=) 5: 3130332e33302e3138302e302f32322d3234203d3e203435333032.roa (hash: U5fnoyr/5IIStrT2HEQ+BlCOUuRxzROoZ8IEFi9/L1Q=) 6: 3131322e37382e34302e302f32312d3234203d3e203435333032.roa (hash: Be1o2enB5OVbfeTb11FQx0y/6KQQnTeDSPNmLL8NRc4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 22:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a8:67:74:6e:8e:86:be:d8:e1:1d:c1:ae:53:54:33:99:5e:61:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C Validity Not Before: Jul 19 15:06:32 2025 GMT Not After : Jul 22 22:42:32 2025 GMT Subject: CN=DACF504C279D6914EA05EAA827EA288E5A450CF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0b:11:b8:f3:da:c4:1c:a3:55:14:09:9b:e2: 6f:6c:dd:ad:00:bb:fc:d5:d6:ba:cd:dd:ca:0a:db: 0e:f1:1a:b4:6e:02:0c:24:f3:83:d9:52:a6:fb:16: 91:70:60:bd:fa:d6:7d:e3:bf:0c:52:d0:30:88:c1: 5c:c7:19:61:98:c5:27:10:c6:61:fd:9c:5d:1b:77: 04:46:e4:79:f2:74:01:c9:6b:80:60:67:58:90:a2: 7d:72:c7:ce:22:61:f9:f4:12:73:8e:71:35:07:4f: 26:12:70:cf:76:04:7f:35:c1:2f:0a:46:31:52:bd: c0:9b:21:29:77:c8:b8:9b:f2:31:d0:62:a6:ee:94: 9f:96:6d:2b:71:ed:70:e8:51:4f:be:eb:d4:e2:d8: f4:8d:7a:94:8e:c8:50:78:21:ec:66:14:6c:7d:f4: d2:59:8e:fe:7d:44:3e:c9:b9:d5:e5:0a:ab:83:82: 4d:04:c9:2e:3f:bf:2b:df:fb:25:42:47:0e:cd:e7: 3e:fe:0c:6f:64:6b:e7:42:c0:17:ab:f9:c5:3e:bf: d4:d3:57:bf:14:1b:96:35:20:34:50:39:44:70:fb: 71:2b:a7:ba:59:17:61:50:e9:e3:42:a7:0c:d6:5e: 0c:60:03:13:40:d8:67:82:55:44:7c:7f:95:f9:aa: 05:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CF:50:4C:27:9D:69:14:EA:05:EA:A8:27:EA:28:8E:5A:45:0C:F7 X509v3 Authority Key Identifier: keyid:19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:04:32:d1:43:0f:27:9f:b9:9e:00:6b:40:06:54:a1:77:9e: ee:30:a8:96:27:00:6b:11:ca:76:f6:4f:39:1a:43:8a:f3:85: 89:1b:e4:2b:11:5e:fc:8b:cf:68:67:f4:c5:9c:ff:24:66:86: ce:2f:d5:ef:44:10:2b:c4:c5:2e:d4:71:f9:de:05:d0:fc:3b: 32:bd:f3:d2:32:7a:e6:31:00:23:e1:a1:8f:37:3f:52:f5:a3: 55:b4:99:66:6a:89:57:dc:26:34:4a:2f:fd:dd:b7:4f:1b:a8: 3b:06:75:23:3f:40:11:3f:b4:e8:52:95:3f:4f:91:4c:e5:88: 78:32:2f:79:1e:31:04:03:b0:a5:94:9e:3b:62:7a:8a:c7:aa: b0:8c:74:35:1e:63:54:f0:ba:e7:bd:30:87:25:d0:eb:7f:e1: 39:af:0d:c8:c8:21:28:e0:3b:6f:4a:e8:e2:69:cd:81:a7:d9: 75:f5:3b:79:2a:22:4f:0b:85:cf:cd:b4:c4:16:08:05:fa:c6: 95:dd:7c:94:51:8a:34:d9:98:3f:b6:a5:7d:ae:8b:48:9a:4b: a2:07:3d:eb:f4:13:67:33:7f:fa:10:4b:30:37:2a:83:aa:52: 39:7c:e0:95:4f:a2:5a:0c:75:3b:d0:0e:7f:27:4a:2c:f8:25: bb:b0:5e:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCKhndG6Ohr7Y4R3BrlNUM5leYYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMxNjM4 N0U2NUMzQzAeFw0yNTA3MTkxNTA2MzJaFw0yNTA3MjIyMjQyMzJaMDMxMTAvBgNV BAMTKERBQ0Y1MDRDMjc5RDY5MTRFQTA1RUFBODI3RUEyODhFNUE0NTBDRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDICxG489rEHKNVFAmb4m9s3a0A u/zV1rrN3coK2w7xGrRuAgwk84PZUqb7FpFwYL361n3jvwxS0DCIwVzHGWGYxScQ xmH9nF0bdwRG5HnydAHJa4BgZ1iQon1yx84iYfn0EnOOcTUHTyYScM92BH81wS8K RjFSvcCbISl3yLib8jHQYqbulJ+WbStx7XDoUU++69Ti2PSNepSOyFB4IexmFGx9 9NJZjv59RD7JudXlCquDgk0EyS4/vyvf+yVCRw7N5z7+DG9ka+dCwBer+cU+v9TT V78UG5Y1IDRQOURw+3Erp7pZF2FQ6eNCpwzWXgxgAxNA2GeCVUR8f5X5qgVPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2s9QTCedaRTqBeqoJ+oojlpFDPcwHwYDVR0j BBgwFoAUGaGW9eW6ujGSbFru9E/BY4fmXDwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yjg4NThlMC1lY2YwLTRlNTMtYTQ5MC0zYjdjMmRlMTY5M2MvMC8xOUExOTZGNUU1 QkFCQTMxOTI2QzVBRUVGNDRGQzE2Mzg3RTY1QzNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMxNjM4N0U2 NUMzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmI4ODU4ZTAtZWNmMC00ZTUzLWE0 OTAtM2I3YzJkZTE2OTNjLzAvMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMx NjM4N0U2NUMzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcEMtFDDyefuZ4Aa0AGVKF3nu4wqJYnAGsR ynb2TzkaQ4rzhYkb5CsRXvyLz2hn9MWc/yRmhs4v1e9EECvExS7UcfneBdD8OzK9 89IyeuYxACPhoY83P1L1o1W0mWZqiVfcJjRKL/3dt08bqDsGdSM/QBE/tOhSlT9P kUzliHgyL3keMQQDsKWUnjtieorHqrCMdDUeY1Twuue9MIcl0Ot/4TmvDcjIISjg O29K6OJpzYGn2XX1O3kqIk8Lhc/NtMQWCAX6xpXdfJRRijTZmD+2pX2ui0iaS6IH Pev0E2czf/oQSzA3KoOqUjl84JVPoloMdTvQDn8nSiz4JbuwXvY= -----END CERTIFICATE-----Generated at Mon Jul 21 09:00:45 2025 by rpki-client