$ rpki-client -vvf repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft File: 19B904DED71657E1E79F9B50507DCCCB817E9635.mft (raw, json) Hash identifier: ANpN0Al6Jgk5e7QBnJlFVPRdpu38LcCmTgXYukt3qxY= Subject key identifier: 86:33:C4:BC:A0:2E:25:12:D2:A5:7F:2C:2A:6D:4F:E8:7F:A1:B0:5D Authority key identifier: 19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35 Certificate issuer: /CN=19B904DED71657E1E79F9B50507DCCCB817E9635 Certificate serial: 6991B5CE2F423E82E506D551C10B8BE53AF8F389 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft Manifest number: 01C1 Signing time: Thu 04 Sep 2025 16:11:18 +0000 Manifest this update: Thu 04 Sep 2025 16:06:18 +0000 Manifest next update: Mon 08 Sep 2025 00:51:18 +0000 Files and hashes: 1: 3130332e38332e38342e302f32342d3234203d3e20313530323533.roa (hash: rxQ2JaYw7ULxDCv5OE6MiX+tQg4bCcbyeQJKcyeV4Tw=) 2: 19B904DED71657E1E79F9B50507DCCCB817E9635.crl (hash: KpY5c1QRGJArlmAekgbFId265o+FLjWK9SVyQSuC3UY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.crl rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 00:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:91:b5:ce:2f:42:3e:82:e5:06:d5:51:c1:0b:8b:e5:3a:f8:f3:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19B904DED71657E1E79F9B50507DCCCB817E9635 Validity Not Before: Sep 4 16:06:18 2025 GMT Not After : Sep 8 00:51:18 2025 GMT Subject: CN=8633C4BCA02E2512D2A57F2C2A6D4FE87FA1B05D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:70:fe:f5:46:1f:3e:b2:56:4f:ea:08:8c:43: 86:ba:f1:9a:c3:d2:f8:98:5b:3f:5f:03:a4:82:ca: 5a:84:7e:8e:8e:fb:c2:6e:1b:34:e0:2f:76:fb:1d: 52:97:d3:f7:11:23:d6:d2:5b:5f:c8:4f:a4:c2:4f: 0b:96:9e:8a:81:ec:8f:04:9e:82:ac:49:74:4d:2c: 07:61:13:53:fc:87:65:f7:ca:5c:84:ca:98:67:2f: fb:4a:2f:e6:c6:31:7d:e2:2a:06:f1:cd:db:60:70: 89:f5:e9:d4:9c:a4:37:c6:27:e4:cf:70:0a:42:bd: e0:9a:04:ee:f6:c2:c2:55:13:1d:2e:6a:e2:8f:00: f5:19:90:45:b6:69:4f:ad:fa:d7:67:49:79:eb:c3: f8:1b:c3:65:f8:de:e8:46:64:cb:a6:3f:e3:2c:72: fe:75:74:1b:c6:53:3e:a3:66:62:de:e5:a5:1c:2a: d8:a6:1d:a9:4b:3c:11:52:b6:29:61:cd:3a:0f:e3: 66:2f:f2:16:33:9c:01:08:1f:c9:a3:f7:c6:fa:db: ed:ed:96:c7:ba:02:75:cd:5d:6d:54:e7:a5:38:28: 70:71:e1:18:8d:9c:1e:e5:fb:80:32:a3:5a:ad:ec: da:ac:34:61:4a:94:8d:88:15:f9:7f:a4:4a:bf:5f: a8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:33:C4:BC:A0:2E:25:12:D2:A5:7F:2C:2A:6D:4F:E8:7F:A1:B0:5D X509v3 Authority Key Identifier: keyid:19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:db:48:a9:96:55:22:58:77:46:14:d6:43:58:cc:fa:b6:a1: 8e:00:c1:c0:e6:ec:21:5c:4d:0f:4a:9d:ca:7f:9f:fe:a0:d1: 4d:66:6e:e0:d4:da:e0:45:a4:0a:4b:99:19:aa:89:9a:8b:67: 4b:0f:2e:db:29:8a:c9:00:6c:c4:9f:14:4d:4f:62:f4:04:c0: 68:c2:ae:1b:87:56:7d:80:21:2a:06:1b:f8:10:f3:b6:f5:7e: 41:31:89:40:8c:52:e7:62:a2:a5:a6:1d:70:0c:76:9b:4a:b3: 73:a2:13:58:b0:b1:45:46:5a:98:59:4b:61:5e:79:6b:a7:58: 05:21:61:e6:d8:43:f0:92:eb:c9:4f:20:c5:67:16:d0:8b:85: 74:49:37:4c:20:22:17:23:5e:d2:2c:ba:55:a1:f1:9a:b3:5c: 75:f8:26:50:49:20:18:d3:ca:13:aa:d4:1e:cd:c2:60:c6:51: f9:94:a1:3d:a5:9e:70:20:31:c5:e1:19:0f:36:34:8d:d4:3e: d6:d5:10:ec:e8:2b:dd:77:fe:aa:21:31:3c:da:14:7a:2d:80: 69:5d:8c:fd:1f:aa:e9:df:32:b1:31:9a:f9:89:24:ce:8a:b1: 77:76:39:bc:fe:be:3c:d9:85:c7:d7:78:48:7e:c3:66:22:bc: cd:b0:78:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaZG1zi9CPoLlBtVRwQuL5Tr484kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3RENDQ0I4 MTdFOTYzNTAeFw0yNTA5MDQxNjA2MThaFw0yNTA5MDgwMDUxMThaMDMxMTAvBgNV BAMTKDg2MzNDNEJDQTAyRTI1MTJEMkE1N0YyQzJBNkQ0RkU4N0ZBMUIwNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6cP71Rh8+slZP6giMQ4a68ZrD 0viYWz9fA6SCylqEfo6O+8JuGzTgL3b7HVKX0/cRI9bSW1/IT6TCTwuWnoqB7I8E noKsSXRNLAdhE1P8h2X3ylyEyphnL/tKL+bGMX3iKgbxzdtgcIn16dScpDfGJ+TP cApCveCaBO72wsJVEx0uauKPAPUZkEW2aU+t+tdnSXnrw/gbw2X43uhGZMumP+Ms cv51dBvGUz6jZmLe5aUcKtimHalLPBFStilhzToP42Yv8hYznAEIH8mj98b62+3t lse6AnXNXW1U56U4KHBx4RiNnB7l+4Ayo1qt7NqsNGFKlI2IFfl/pEq/X6iXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhjPEvKAuJRLSpX8sKm1P6H+hsF0wHwYDVR0j BBgwFoAUGbkE3tcWV+Hnn5tQUH3My4F+ljUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmU0MGE5OC05M2VmLTRhZjgtYTQzNi00Njk3NDAxNTQ3ODIvMC8xOUI5MDRERUQ3 MTY1N0UxRTc5RjlCNTA1MDdEQ0NDQjgxN0U5NjM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3RENDQ0I4MTdF OTYzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZlNDBhOTgtOTNlZi00YWY4LWE0 MzYtNDY5NzQwMTU0NzgyLzAvMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3REND Q0I4MTdFOTYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7bSKmWVSJYd0YU1kNYzPq2oY4AwcDm7CFc TQ9Kncp/n/6g0U1mbuDU2uBFpApLmRmqiZqLZ0sPLtspiskAbMSfFE1PYvQEwGjC rhuHVn2AISoGG/gQ87b1fkExiUCMUudioqWmHXAMdptKs3OiE1iwsUVGWphZS2Fe eWunWAUhYebYQ/CS68lPIMVnFtCLhXRJN0wgIhcjXtIsulWh8ZqzXHX4JlBJIBjT yhOq1B7NwmDGUfmUoT2lnnAgMcXhGQ82NI3UPtbVEOzoK913/qohMTzaFHotgGld jP0fqunfMrExmvmJJM6KsXd2Obz+vjzZhcfXeEh+w2YivM2weJE= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:18 2025 by rpki-client