$ rpki-client -vvf repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft File: 1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft (raw, json) Hash identifier: 2KIiMDay/rSPgKpZSWiGSKMG4tLQe8enL/kHjocMjiM= Subject key identifier: A9:72:2E:3F:F0:45:6B:DC:EC:D5:AA:A7:CA:84:9F:0B:F7:B5:6B:4C Authority key identifier: 18:87:AE:A5:A2:D9:DB:47:9E:61:81:67:B2:FE:47:25:0A:CF:E7:9B Certificate issuer: /CN=1887AEA5A2D9DB479E618167B2FE47250ACFE79B Certificate serial: 61A3F991ED42526D1ACB2D16725EFAEB1F14FE0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft Manifest number: 0371 Signing time: Sat 06 Sep 2025 02:40:50 +0000 Manifest this update: Sat 06 Sep 2025 02:35:50 +0000 Manifest next update: Tue 09 Sep 2025 08:54:50 +0000 Files and hashes: 1: 1887AEA5A2D9DB479E618167B2FE47250ACFE79B.crl (hash: 4P1fovGbkJSAgJvnkHO7U3NpHXwaTY2ZqSFk8w2hbk8=) 2: 3130332e3137312e32322e302f32332d3234203d3e20313338383535.roa (hash: P8qheu64b1l5b4rB30UV/NbiZ7Eie1YYkFGoi6rHg2Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.crl rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 08:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a3:f9:91:ed:42:52:6d:1a:cb:2d:16:72:5e:fa:eb:1f:14:fe:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1887AEA5A2D9DB479E618167B2FE47250ACFE79B Validity Not Before: Sep 6 02:35:50 2025 GMT Not After : Sep 9 08:54:50 2025 GMT Subject: CN=A9722E3FF0456BDCECD5AAA7CA849F0BF7B56B4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:70:20:69:d7:43:c9:64:d3:59:e2:4e:c1:1e: 0d:52:0c:0f:e2:fe:0e:2d:ac:da:0d:9c:2b:32:66: dc:60:8c:b2:01:7e:10:59:06:c3:b9:14:7f:bf:62: 14:b6:aa:b1:e8:d4:61:fb:34:54:29:e0:29:0a:d3: 39:dc:6e:f6:3c:d7:41:51:0b:65:7a:e3:c0:5d:90: 35:0d:03:a8:e6:a1:04:50:bb:c5:21:4d:9c:fe:f8: 5f:d7:cd:60:b0:88:e6:af:f1:c6:4c:af:6a:53:87: a7:10:d3:f7:f2:27:80:f0:d6:fa:c4:2b:b4:a4:10: f0:d6:70:a8:0d:f7:42:c4:c5:31:54:c2:e8:3e:e2: f3:13:c3:99:26:e0:98:09:dd:dc:c6:73:43:b4:1c: 8b:b5:07:53:f0:33:26:72:75:2d:0a:9d:3d:91:c8: 71:d7:83:c6:4a:8b:33:08:de:09:f9:d6:8d:75:69: 8a:39:11:41:3c:36:a1:df:d8:74:18:66:a2:ae:c3: 61:b5:6a:a1:b7:8a:4a:47:c8:67:25:ec:22:81:12: 52:61:2f:0d:1e:e6:84:b4:a1:3b:78:8e:3c:10:4c: 0b:1f:b3:9b:50:98:42:a6:89:78:38:03:36:be:5d: fa:5b:c4:39:23:99:0d:e9:53:af:78:a2:a0:02:aa: c7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:72:2E:3F:F0:45:6B:DC:EC:D5:AA:A7:CA:84:9F:0B:F7:B5:6B:4C X509v3 Authority Key Identifier: keyid:18:87:AE:A5:A2:D9:DB:47:9E:61:81:67:B2:FE:47:25:0A:CF:E7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c8:f6:1d:ce:45:01:0a:43:44:d2:65:ae:18:de:a1:e0:70: a4:9a:b0:9e:0a:47:e0:b4:89:05:f7:43:ff:29:fc:bb:a4:de: f3:ae:6b:2f:3a:60:c1:95:3f:89:4f:8d:30:e2:7a:7b:6f:d3: 6e:dd:b0:42:9a:07:46:12:d3:f0:3c:22:09:fc:b0:18:61:a5: 1f:a1:a1:e9:35:d0:99:bc:e5:5e:ff:4e:6c:b8:fc:e2:d2:03: 4e:35:d0:b9:2d:d1:92:42:79:72:71:d9:fa:79:20:5e:19:88: 16:c9:98:72:b7:f6:34:68:31:e9:5b:65:9e:4a:6e:0e:e3:da: 5d:8e:33:62:a0:fc:df:4b:31:39:c2:d4:3f:f0:2b:9d:8f:89: e3:23:37:7e:db:af:53:65:d9:aa:cb:4e:99:34:51:f3:6d:f9: ea:a6:32:02:03:f8:c6:97:68:4b:89:d1:fd:72:ac:1a:a5:79: fb:ac:94:7d:5d:26:c2:d3:36:9f:06:e0:a6:50:6f:41:99:17: 6c:68:f3:c7:66:3a:3e:2e:c0:fb:17:7b:48:c0:09:70:e9:6c: 73:f2:4c:7f:c0:ab:c7:37:ed:8d:4a:2e:5c:48:ee:6e:b1:6c: a3:f2:75:de:df:6f:f5:49:18:ba:c4:43:b6:f8:00:66:73:24: eb:47:fe:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYaP5ke1CUm0ayy0Wcl766x8U/g8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg4N0FFQTVBMkQ5REI0NzlFNjE4MTY3QjJGRTQ3MjUw QUNGRTc5QjAeFw0yNTA5MDYwMjM1NTBaFw0yNTA5MDkwODU0NTBaMDMxMTAvBgNV BAMTKEE5NzIyRTNGRjA0NTZCRENFQ0Q1QUFBN0NBODQ5RjBCRjdCNTZCNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9cCBp10PJZNNZ4k7BHg1SDA/i /g4trNoNnCsyZtxgjLIBfhBZBsO5FH+/YhS2qrHo1GH7NFQp4CkK0zncbvY810FR C2V648BdkDUNA6jmoQRQu8UhTZz++F/XzWCwiOav8cZMr2pTh6cQ0/fyJ4Dw1vrE K7SkEPDWcKgN90LExTFUwug+4vMTw5km4JgJ3dzGc0O0HIu1B1PwMyZydS0KnT2R yHHXg8ZKizMI3gn51o11aYo5EUE8NqHf2HQYZqKuw2G1aqG3ikpHyGcl7CKBElJh Lw0e5oS0oTt4jjwQTAsfs5tQmEKmiXg4Aza+XfpbxDkjmQ3pU694oqACqsfVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqXIuP/BFa9zs1aqnyoSfC/e1a0wwHwYDVR0j BBgwFoAUGIeupaLZ20eeYYFnsv5HJQrP55swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWI5M2UxYy01ZjJhLTQzYTktOTlmMS1mZGQwNDAyZjk0NmUvMC8xODg3QUVBNUEy RDlEQjQ3OUU2MTgxNjdCMkZFNDcyNTBBQ0ZFNzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTg4N0FFQTVBMkQ5REI0NzlFNjE4MTY3QjJGRTQ3MjUwQUNG RTc5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTliOTNlMWMtNWYyYS00M2E5LTk5 ZjEtZmRkMDQwMmY5NDZlLzAvMTg4N0FFQTVBMkQ5REI0NzlFNjE4MTY3QjJGRTQ3 MjUwQUNGRTc5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbI9h3ORQEKQ0TSZa4Y3qHgcKSasJ4KR+C0 iQX3Q/8p/Luk3vOuay86YMGVP4lPjTDientv027dsEKaB0YS0/A8Ign8sBhhpR+h oek10Jm85V7/Tmy4/OLSA0410Lkt0ZJCeXJx2fp5IF4ZiBbJmHK39jRoMelbZZ5K bg7j2l2OM2Kg/N9LMTnC1D/wK52PieMjN37br1Nl2arLTpk0UfNt+eqmMgID+MaX aEuJ0f1yrBqlefuslH1dJsLTNp8G4KZQb0GZF2xo88dmOj4uwPsXe0jACXDpbHPy TH/Aq8c37Y1KLlxI7m6xbKPydd7fb/VJGLrEQ7b4AGZzJOtH/rk= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:46 2025 by rpki-client