$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft File: 19D983F92968E71520E086B32ACAFEFB5BF04943.mft (raw, json) Hash identifier: LqocEo6FWAOiIlo2CWdAu+P7YKpVDlrCQGkbsDavJBU= Subject key identifier: E6:B4:E4:01:E4:58:39:68:31:9B:F0:F0:0B:BF:78:64:58:42:5A:CE Authority key identifier: 19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43 Certificate issuer: /CN=19D983F92968E71520E086B32ACAFEFB5BF04943 Certificate serial: 1A5F28E70A38DB3E39B1D505FE2E6FE7AC8E8313 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft Manifest number: 0504 Signing time: Sat 06 Sep 2025 09:12:21 +0000 Manifest this update: Sat 06 Sep 2025 09:07:21 +0000 Manifest next update: Tue 09 Sep 2025 11:51:21 +0000 Files and hashes: 1: 3130332e31382e3134342e302f32322d3234203d3e203538383137.roa (hash: 5e8rSnnuFx8UzgnzTqPOgNkN7iU6KGmkspkL1P/ryrM=) 2: 19D983F92968E71520E086B32ACAFEFB5BF04943.crl (hash: Sb+jSLtDaxAFHYraC5Pm2ZKvqrm/k7va5CGizWzpGO4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.crl rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 11:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:5f:28:e7:0a:38:db:3e:39:b1:d5:05:fe:2e:6f:e7:ac:8e:83:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19D983F92968E71520E086B32ACAFEFB5BF04943 Validity Not Before: Sep 6 09:07:21 2025 GMT Not After : Sep 9 11:51:21 2025 GMT Subject: CN=E6B4E401E4583968319BF0F00BBF786458425ACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dd:6f:74:32:c7:7f:f2:c9:0a:9d:76:6e:ee: 2b:7c:92:99:60:ca:21:ca:1f:48:cb:c4:db:ec:04: ba:47:a0:0f:62:07:3f:ed:43:8a:20:a8:80:67:bd: d0:66:2d:86:2c:5a:9c:f4:4b:89:1d:9a:ba:51:44: 29:a3:9b:04:7e:8b:26:45:51:66:ad:eb:7c:ea:22: a2:29:8f:31:fb:05:4e:ae:8b:48:43:31:77:3a:bd: af:f3:ee:10:c2:92:fc:5f:c2:cb:c5:2e:03:01:75: be:97:31:1f:74:e3:4a:0e:88:38:14:64:c7:4a:b9: 43:cb:0f:61:62:3b:29:9f:6b:d3:68:23:e7:33:ff: 10:55:62:3d:d6:ae:1d:31:4a:42:fb:94:ad:20:49: 93:2f:37:9e:f8:6c:77:bf:ca:73:71:e9:5d:14:7a: 49:97:9d:e4:48:b5:96:58:f6:64:b7:6f:3d:a3:03: 9d:ac:96:63:c7:b9:a4:bc:52:6e:1f:d6:f6:bb:08: 70:2a:d1:d7:79:cf:ab:47:c8:a7:87:3f:06:18:f4: de:6f:ce:e4:03:27:4f:e4:d1:85:dd:38:01:8e:c7: 9b:f2:9f:91:29:a4:23:c6:b2:2e:dc:55:91:67:9e: 68:7a:be:bc:16:cb:2f:88:0b:38:33:63:81:ee:a3: 6d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B4:E4:01:E4:58:39:68:31:9B:F0:F0:0B:BF:78:64:58:42:5A:CE X509v3 Authority Key Identifier: keyid:19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:0a:27:ec:3a:25:5a:8e:ab:22:86:1a:22:98:76:05:82:66: bd:bd:5c:38:1f:0c:8c:36:8d:d5:a4:32:02:10:c1:f1:29:be: dd:92:e3:6b:6e:4d:6a:57:ab:cd:8e:42:fd:86:8a:28:3e:89: cb:07:12:44:e5:17:cf:db:48:50:1d:7a:6e:1b:ab:6e:41:e6: 5b:b4:31:77:26:ea:ec:e3:60:c2:5b:89:c2:19:a1:e3:3a:ac: e9:d1:ff:b1:77:8d:c4:16:e9:7f:13:56:cc:f5:a3:44:a5:d3: 6e:08:86:57:ab:05:45:87:dc:66:6c:3a:15:5f:d9:bd:cc:39: 7c:ae:22:ac:a6:45:b8:60:1a:3f:b7:fb:18:f5:31:d8:7f:0c: 75:f5:d9:06:4c:cb:64:0c:8c:9b:10:65:34:3d:62:38:32:f7: d0:17:45:66:58:9a:fa:d5:05:05:dc:4a:e6:9c:ca:b9:7f:54: f8:c0:2b:dc:22:c2:ef:f6:6c:79:ee:d8:39:44:da:b3:95:11: 32:67:3d:b4:f8:65:0d:65:c7:a0:50:e2:a3:e1:d6:f7:86:c0: 50:63:b4:e6:8e:04:9a:ca:76:22:8b:71:52:15:8c:58:25:9c: ee:fe:1b:c8:ea:34:3e:4b:0f:83:50:34:7e:14:af:91:ce:aa: 85:3b:5f:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGl8o5wo42z45sdUF/i5v56yOgxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZFRkI1 QkYwNDk0MzAeFw0yNTA5MDYwOTA3MjFaFw0yNTA5MDkxMTUxMjFaMDMxMTAvBgNV BAMTKEU2QjRFNDAxRTQ1ODM5NjgzMTlCRjBGMDBCQkY3ODY0NTg0MjVBQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz3W90Msd/8skKnXZu7it8kplg yiHKH0jLxNvsBLpHoA9iBz/tQ4ogqIBnvdBmLYYsWpz0S4kdmrpRRCmjmwR+iyZF UWat63zqIqIpjzH7BU6ui0hDMXc6va/z7hDCkvxfwsvFLgMBdb6XMR9040oOiDgU ZMdKuUPLD2FiOymfa9NoI+cz/xBVYj3Wrh0xSkL7lK0gSZMvN574bHe/ynNx6V0U ekmXneRItZZY9mS3bz2jA52slmPHuaS8Um4f1va7CHAq0dd5z6tHyKeHPwYY9N5v zuQDJ0/k0YXdOAGOx5vyn5EppCPGsi7cVZFnnmh6vrwWyy+ICzgzY4Huo21HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5rTkAeRYOWgxm/DwC794ZFhCWs4wHwYDVR0j BBgwFoAUGdmD+Slo5xUg4IazKsr++1vwSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2IxZjEwOS1iOWZlLTQzMjMtODRlMy1iNjBiYjRkYzFlY2MvMC8xOUQ5ODNGOTI5 NjhFNzE1MjBFMDg2QjMyQUNBRkVGQjVCRjA0OTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZFRkI1QkYw NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNiMWYxMDktYjlmZS00MzIzLTg0 ZTMtYjYwYmI0ZGMxZWNjLzAvMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZF RkI1QkYwNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcKJ+w6JVqOqyKGGiKYdgWCZr29XDgfDIw2 jdWkMgIQwfEpvt2S42tuTWpXq82OQv2Giig+icsHEkTlF8/bSFAdem4bq25B5lu0 MXcm6uzjYMJbicIZoeM6rOnR/7F3jcQW6X8TVsz1o0Sl024IhlerBUWH3GZsOhVf 2b3MOXyuIqymRbhgGj+3+xj1Mdh/DHX12QZMy2QMjJsQZTQ9Yjgy99AXRWZYmvrV BQXcSuacyrl/VPjAK9wiwu/2bHnu2DlE2rOVETJnPbT4ZQ1lx6BQ4qPh1veGwFBj tOaOBJrKdiKLcVIVjFglnO7+G8jqND5LD4NQNH4Ur5HOqoU7X6c= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:49 2025 by rpki-client