$ rpki-client -vvf repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft File: C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft (raw, json) Hash identifier: reP71h/xvK9WdDdTtiAnxz9BF+UVJq2ye5nIeAKfizI= Subject key identifier: 40:4B:B7:0D:79:9C:44:08:79:65:F4:F3:1C:0D:58:C4:1B:EB:B4:FC Authority key identifier: C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 Certificate issuer: /CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Certificate serial: 08E238559EBB9E2FE50A807F0841F182515B0E82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft Manifest number: 01F0 Signing time: Wed 03 Sep 2025 20:21:57 +0000 Manifest this update: Wed 03 Sep 2025 20:16:57 +0000 Manifest next update: Sat 06 Sep 2025 22:17:57 +0000 Files and hashes: 1: C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl (hash: fNovDmCEOeEDm3vrW58IacKAi11UQ1XimgNbb3iAG4Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 22:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e2:38:55:9e:bb:9e:2f:e5:0a:80:7f:08:41:f1:82:51:5b:0e:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Validity Not Before: Sep 3 20:16:57 2025 GMT Not After : Sep 6 22:17:57 2025 GMT Subject: CN=404BB70D799C44087965F4F31C0D58C41BEBB4FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:45:a7:83:cb:51:55:5d:09:63:cb:85:fe:01: ea:51:72:55:94:84:35:19:f8:4d:69:60:b4:81:5f: 50:d7:73:43:a6:24:84:e0:d7:46:0f:76:9e:7c:8a: 80:4d:44:1f:7e:c2:5a:1c:ec:2b:fc:fd:6c:a1:7a: b2:76:3b:8d:22:58:87:2d:49:12:81:46:7e:e0:04: 9d:46:e7:f4:6a:3e:41:e0:59:54:b2:b0:75:8d:7f: b9:91:26:76:03:75:be:8a:3f:e2:67:cc:60:0b:b9: ad:58:40:e8:06:82:ab:d2:23:7f:8c:ef:ae:49:f9: 72:60:eb:c6:71:41:b0:7f:05:1f:79:d4:6e:ab:98: 7e:c7:04:45:57:0b:c8:d9:ee:8e:96:43:96:94:dd: 60:db:f8:fd:67:29:a0:a1:ac:18:3a:38:f4:71:8c: de:7a:ee:03:8e:5e:8f:d0:20:68:f4:53:98:c9:9f: 8c:9a:6d:62:1a:4e:3f:9c:f1:05:1b:9f:af:5f:3c: 44:f0:81:3d:b7:20:be:d9:e7:46:ee:b3:05:d0:2c: 64:b7:18:19:23:08:bc:a1:1f:5e:a7:c1:53:62:43: 19:aa:c2:e1:f3:c9:9c:de:57:8a:40:56:06:1f:bb: 18:3d:f2:3e:f9:c0:7f:a7:24:1e:c0:6a:78:bd:5b: 9b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4B:B7:0D:79:9C:44:08:79:65:F4:F3:1C:0D:58:C4:1B:EB:B4:FC X509v3 Authority Key Identifier: keyid:C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:16:f5:da:0b:f7:26:3c:c7:9c:1b:d0:d3:c3:56:09:52:59: 54:69:b6:be:ac:29:98:73:1b:08:f6:22:12:13:f4:86:ea:50: ab:53:da:17:65:e1:40:27:cd:45:2d:91:bd:76:3b:02:c7:0e: 00:4e:75:05:c5:37:81:c8:1c:3c:16:d7:38:4b:e5:45:7f:c2: d8:6d:e7:28:73:ba:55:2e:1a:45:ac:be:e3:14:57:d4:5f:2f: cd:ce:61:2e:81:88:a1:fa:60:7b:3d:22:25:e3:96:70:ba:30: 32:af:a7:dc:82:14:cf:ea:1f:d8:7f:77:5a:ff:62:be:52:79: f2:25:86:6e:d9:04:93:74:1e:ca:2f:4a:64:c4:bc:a0:bf:f5: 6b:23:3d:83:a8:16:4f:13:b2:4c:eb:87:42:74:b0:d4:53:b5: fa:a1:df:0e:f2:32:57:f1:e0:51:7c:6f:42:9e:9a:32:eb:7a: 25:cd:c6:9f:bd:5f:62:92:ec:32:46:d1:56:c0:5e:1f:1d:7b: 3d:f0:37:47:1d:c0:55:b3:23:8f:b4:90:70:ef:90:ce:ea:22: 79:6e:8f:41:7c:42:89:d1:d4:d7:ef:42:e1:0f:3a:9c:39:bf: 32:7a:b1:2b:9d:30:43:a6:e9:c6:e2:0e:42:5f:2f:5d:09:e3: 29:3b:23:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCOI4VZ67ni/lCoB/CEHxglFbDoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUy QzYyMUQ2MjAeFw0yNTA5MDMyMDE2NTdaFw0yNTA5MDYyMjE3NTdaMDMxMTAvBgNV BAMTKDQwNEJCNzBENzk5QzQ0MDg3OTY1RjRGMzFDMEQ1OEM0MUJFQkI0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaRaeDy1FVXQljy4X+AepRclWU hDUZ+E1pYLSBX1DXc0OmJITg10YPdp58ioBNRB9+wloc7Cv8/WyherJ2O40iWIct SRKBRn7gBJ1G5/RqPkHgWVSysHWNf7mRJnYDdb6KP+JnzGALua1YQOgGgqvSI3+M 765J+XJg68ZxQbB/BR951G6rmH7HBEVXC8jZ7o6WQ5aU3WDb+P1nKaChrBg6OPRx jN567gOOXo/QIGj0U5jJn4yabWIaTj+c8QUbn69fPETwgT23IL7Z50buswXQLGS3 GBkjCLyhH16nwVNiQxmqwuHzyZzeV4pAVgYfuxg98j75wH+nJB7Aani9W5v9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQEu3DXmcRAh5ZfTzHA1YxBvrtPwwHwYDVR0j BBgwFoAUwZNE0PTvPK3ip3EUgePRRSxiHWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MWI2ZGQ5Yi1kMTUyLTRjOGYtODdiNy02MjllYjgwOGY5MTEvMC9DMTkzNDREMEY0 RUYzQ0FERTJBNzcxMTQ4MUUzRDE0NTJDNjIxRDYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUyQzYy MUQ2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDFiNmRkOWItZDE1Mi00YzhmLTg3 YjctNjI5ZWI4MDhmOTExLzAvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0Qx NDUyQzYyMUQ2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMW9doL9yY8x5wb0NPDVglSWVRptr6sKZhz Gwj2IhIT9IbqUKtT2hdl4UAnzUUtkb12OwLHDgBOdQXFN4HIHDwW1zhL5UV/wtht 5yhzulUuGkWsvuMUV9RfL83OYS6BiKH6YHs9IiXjlnC6MDKvp9yCFM/qH9h/d1r/ Yr5SefIlhm7ZBJN0HsovSmTEvKC/9WsjPYOoFk8Tskzrh0J0sNRTtfqh3w7yMlfx 4FF8b0KemjLreiXNxp+9X2KS7DJG0VbAXh8dez3wN0cdwFWzI4+0kHDvkM7qInlu j0F8QonR1NfvQuEPOpw5vzJ6sSudMEOm6cbiDkJfL10J4yk7I7M= -----END CERTIFICATE-----Generated at Fri Sep 5 12:41:11 2025 by rpki-client