$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft File: 19D983F92968E71520E086B32ACAFEFB5BF04943.mft (raw, json) Hash identifier: D97l3mjuqMJfc7DRZCqBFcJkt3n50XfMYmy+l3c1LYk= Subject key identifier: AA:CA:0E:BF:E6:C7:12:4F:99:A4:1A:F9:8A:00:33:21:43:6A:FE:1F Authority key identifier: 19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43 Certificate issuer: /CN=19D983F92968E71520E086B32ACAFEFB5BF04943 Certificate serial: 73D4B134B1089EB0DD34EA1640B1226D1A63DAD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft Manifest number: 04DB Signing time: Wed 04 Jun 2025 03:42:21 +0000 Manifest this update: Wed 04 Jun 2025 03:37:21 +0000 Manifest next update: Sat 07 Jun 2025 10:20:21 +0000 Files and hashes: 1: 3130332e31382e3134342e302f32322d3234203d3e203538383137.roa (hash: 5e8rSnnuFx8UzgnzTqPOgNkN7iU6KGmkspkL1P/ryrM=) 2: 19D983F92968E71520E086B32ACAFEFB5BF04943.crl (hash: ST1bYhIqQ7bqzELcUJZo6h28j3S2/o4twQDbt7JxT4s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.crl rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 10:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:d4:b1:34:b1:08:9e:b0:dd:34:ea:16:40:b1:22:6d:1a:63:da:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19D983F92968E71520E086B32ACAFEFB5BF04943 Validity Not Before: Jun 4 03:37:21 2025 GMT Not After : Jun 7 10:20:21 2025 GMT Subject: CN=AACA0EBFE6C7124F99A41AF98A003321436AFE1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c7:96:43:eb:64:6a:46:eb:ed:c6:af:40:ec: 5f:4c:1f:ff:4c:0c:f2:f3:a3:e0:ea:7b:50:b3:20: 31:aa:a3:d0:f7:38:28:6d:11:58:3e:78:3c:59:1f: 4e:66:9c:ac:49:b7:e2:7d:16:be:e7:c1:95:77:c1: c0:d4:e4:0f:b6:07:9c:09:30:05:3f:6a:43:a3:fa: 74:bf:63:0a:8b:8f:cb:0d:63:b9:49:b6:40:8d:de: ec:cf:81:1a:6d:54:55:93:8a:ff:fc:6a:bc:b0:f5: b0:eb:48:48:b5:90:72:42:1f:07:42:0a:5a:cf:ca: 34:5a:40:47:9e:14:71:4f:c8:5e:c0:6b:91:d1:be: f0:ec:b8:13:ff:56:8d:fb:7b:12:0a:77:d6:17:e6: 9b:d2:3a:2d:9c:c6:f2:ba:4b:e8:42:dd:e2:6b:8d: 62:f8:6d:f8:2d:ad:f1:af:41:3a:c7:60:1b:1c:9b: e0:d8:b5:b8:51:01:9a:ce:40:ec:3f:f2:8c:c1:09: 67:95:ca:19:24:65:1b:ca:bd:2a:28:de:e3:74:1c: 2e:54:02:26:85:9f:ae:8e:94:36:26:34:87:66:57: 83:aa:c1:4d:7e:04:f3:18:f5:81:8f:64:a3:18:3f: f1:5b:a6:38:36:4b:42:4e:43:09:c3:9a:8d:f2:ed: 94:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CA:0E:BF:E6:C7:12:4F:99:A4:1A:F9:8A:00:33:21:43:6A:FE:1F X509v3 Authority Key Identifier: keyid:19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ea:2e:f1:6f:7f:0c:29:31:cd:c9:d2:8d:f2:59:88:f4:a4:83: 9c:15:d1:1b:a4:f9:fe:c3:bc:1f:34:39:9e:2a:d8:60:85:97: 22:91:11:58:bf:7b:5e:27:87:d5:8b:2a:db:c2:fd:b7:71:de: 5a:f8:80:cc:1a:47:0f:af:88:fe:0c:14:03:33:61:63:60:f1: 17:40:8a:04:77:3b:76:1b:5a:0e:5a:d6:1d:5f:c0:28:bf:78: 03:aa:05:d8:73:96:4a:40:85:97:76:ae:f1:ec:5f:34:23:ac: 49:84:0d:f9:b7:10:13:d0:28:c0:30:90:cf:cd:95:6c:15:55: 48:b3:9d:82:a2:c8:6c:22:59:fd:f7:bf:08:6a:40:ba:68:00: fe:74:35:31:15:48:b0:24:bc:ba:06:ee:01:0f:f2:28:7b:e0: 01:ab:5a:77:b2:42:23:3a:03:70:a6:db:75:78:8e:d6:0f:bf: 80:26:47:8c:fc:83:f9:f4:78:b0:e9:7b:3d:e0:25:b2:c5:95: f0:f7:6d:c8:06:70:25:fe:31:ef:61:4b:7f:ba:c2:b7:ef:ed: b4:4f:66:82:a9:07:65:bb:af:39:13:92:24:53:4b:2b:91:ba: d0:b3:bb:b1:78:dd:22:e0:39:c7:da:b8:1a:80:3a:15:34:81: d5:09:27:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc9SxNLEInrDdNOoWQLEibRpj2tYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZFRkI1 QkYwNDk0MzAeFw0yNTA2MDQwMzM3MjFaFw0yNTA2MDcxMDIwMjFaMDMxMTAvBgNV BAMTKEFBQ0EwRUJGRTZDNzEyNEY5OUE0MUFGOThBMDAzMzIxNDM2QUZFMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQx5ZD62RqRuvtxq9A7F9MH/9M DPLzo+Dqe1CzIDGqo9D3OChtEVg+eDxZH05mnKxJt+J9Fr7nwZV3wcDU5A+2B5wJ MAU/akOj+nS/YwqLj8sNY7lJtkCN3uzPgRptVFWTiv/8aryw9bDrSEi1kHJCHwdC ClrPyjRaQEeeFHFPyF7Aa5HRvvDsuBP/Vo37exIKd9YX5pvSOi2cxvK6S+hC3eJr jWL4bfgtrfGvQTrHYBscm+DYtbhRAZrOQOw/8ozBCWeVyhkkZRvKvSoo3uN0HC5U AiaFn66OlDYmNIdmV4OqwU1+BPMY9YGPZKMYP/Fbpjg2S0JOQwnDmo3y7ZS3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqsoOv+bHEk+ZpBr5igAzIUNq/h8wHwYDVR0j BBgwFoAUGdmD+Slo5xUg4IazKsr++1vwSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2IxZjEwOS1iOWZlLTQzMjMtODRlMy1iNjBiYjRkYzFlY2MvMC8xOUQ5ODNGOTI5 NjhFNzE1MjBFMDg2QjMyQUNBRkVGQjVCRjA0OTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZFRkI1QkYw NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNiMWYxMDktYjlmZS00MzIzLTg0 ZTMtYjYwYmI0ZGMxZWNjLzAvMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZF RkI1QkYwNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOou8W9/DCkxzcnSjfJZiPSkg5wV0Ruk+f7D vB80OZ4q2GCFlyKREVi/e14nh9WLKtvC/bdx3lr4gMwaRw+viP4MFAMzYWNg8RdA igR3O3YbWg5a1h1fwCi/eAOqBdhzlkpAhZd2rvHsXzQjrEmEDfm3EBPQKMAwkM/N lWwVVUiznYKiyGwiWf33vwhqQLpoAP50NTEVSLAkvLoG7gEP8ih74AGrWneyQiM6 A3Cm23V4jtYPv4AmR4z8g/n0eLDpez3gJbLFlfD3bcgGcCX+Me9hS3+6wrfv7bRP ZoKpB2W7rzkTkiRTSyuRutCzu7F43SLgOcfauBqAOhU0gdUJJ28= -----END CERTIFICATE-----Generated at Thu Jun 5 18:18:43 2025 by rpki-client