$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft File: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft (raw, json) Hash identifier: /CGVbNnwH/DD9pM5Y/wbUx7GpVWMoF2/pJu3xrq9CD8= Subject key identifier: 4A:60:56:D4:F2:B5:87:2C:C1:B5:37:DB:24:93:A3:BF:73:9D:A6:42 Authority key identifier: 8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0 Certificate issuer: /CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0 Certificate serial: 67DEEB147CB87C5416C2F6C5318294E15E8166CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft Manifest number: 0188 Signing time: Thu 04 Sep 2025 03:10:04 +0000 Manifest this update: Thu 04 Sep 2025 03:05:04 +0000 Manifest next update: Sun 07 Sep 2025 08:54:04 +0000 Files and hashes: 1: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl (hash: LJWhhf8Su8L38zwpAVSM0PPYgfwGXvVjR7Xo6nFs83c=) 2: 3130332e3132322e392e302f32342d3234203d3e20313530393635.roa (hash: QeU0/vEBTo6jIDTAqgbH9ossdE4o8/cj7giBqcJ2VYs=) 3: 3130332e3132322e382e302f32342d3234203d3e20313530393635.roa (hash: OBSu5NWIqhavEgs//Z/O6dTCa3LFoSwUa21LGk85Vss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 08:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:de:eb:14:7c:b8:7c:54:16:c2:f6:c5:31:82:94:e1:5e:81:66:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0 Validity Not Before: Sep 4 03:05:04 2025 GMT Not After : Sep 7 08:54:04 2025 GMT Subject: CN=4A6056D4F2B5872CC1B537DB2493A3BF739DA642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:88:e0:ea:78:39:79:09:6f:5a:1f:1a:0e:17: 56:bc:58:4a:ec:6f:07:6a:91:f7:79:3f:58:a3:8e: 26:bc:69:37:1c:94:c1:24:67:2b:ee:7b:01:3b:a5: 2a:ef:e2:43:9d:c9:d6:ee:54:0a:83:95:f9:46:1c: 9c:ab:2e:2d:6e:db:8b:3b:dc:fb:cf:b8:37:29:92: 27:17:a5:06:35:5b:05:df:41:eb:58:16:dc:9c:ec: 5a:8f:45:e6:e7:d8:fe:94:c6:51:96:3f:82:b2:dd: 58:d6:9b:12:cd:a5:68:d2:a1:bf:de:d8:e8:43:2b: 85:38:9e:8c:15:b1:0d:30:e0:94:bd:67:6c:39:3c: e2:aa:c1:19:2f:98:5b:bc:6f:a8:26:91:bd:6d:f5: bd:07:f7:86:f6:80:0b:19:2a:c3:a6:e3:af:01:11: d4:cc:d7:d3:d8:57:e1:b7:bf:fb:25:4a:75:31:b7: 9e:54:8d:95:73:b1:b6:1f:3c:36:2f:ad:4a:90:9c: e6:b2:08:82:ba:2d:7d:4c:3a:fd:0d:6a:0a:e6:c9: 32:49:d4:f2:02:42:a4:b9:5b:eb:af:9f:ea:d4:ba: 1e:01:80:15:92:4d:c1:11:2c:5c:3b:3d:5b:61:54: a5:38:1a:ef:98:47:c1:77:88:3b:40:ef:01:79:8b: cd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:60:56:D4:F2:B5:87:2C:C1:B5:37:DB:24:93:A3:BF:73:9D:A6:42 X509v3 Authority Key Identifier: keyid:8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:b2:72:7d:eb:b0:c2:ef:90:0d:a8:d5:27:52:d1:c2:12:f4: f0:7f:61:56:4c:be:d2:55:1a:72:f4:13:d4:98:17:cd:4c:04: 5a:b2:c2:f3:c5:28:8e:ca:3d:12:0b:f8:d5:eb:4d:f0:c2:cd: e7:41:ac:af:76:ed:35:81:8d:79:0c:3d:52:3e:23:3a:9b:3a: 26:44:3e:79:71:ea:e3:c7:fb:ae:b0:9e:2c:4a:cf:13:2e:e1: d6:28:47:93:25:57:1d:a6:88:51:1b:74:66:9d:89:bc:63:49: 35:32:4e:7a:d3:fe:f5:44:1e:3b:ee:5d:c3:54:89:4e:a3:7f: e0:b1:6f:ce:e1:ac:f0:4e:9a:2d:fd:c3:fb:22:19:32:d0:af: b6:0c:73:0d:d1:fd:6d:69:8f:dc:e7:dd:a7:80:00:a9:c0:54: ba:7b:86:bc:f5:3f:34:72:3c:37:40:a8:4c:61:ca:72:cf:e2: 05:35:15:53:45:e3:1d:68:d5:d4:28:c6:01:81:6d:79:c1:26: 08:57:e0:99:14:ad:ad:0a:f0:07:53:d4:d8:c6:cc:9e:20:59: 8d:f2:cd:3a:c0:32:63:dd:a0:2f:6c:03:10:fa:c1:8b:3f:53: 74:59:b9:9d:6f:60:9a:1e:cf:4d:e8:80:5f:0f:48:54:df:df: 73:eb:d2:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ97rFHy4fFQWwvbFMYKU4V6BZs0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJBNjAy ODcyQkZDMDAeFw0yNTA5MDQwMzA1MDRaFw0yNTA5MDcwODU0MDRaMDMxMTAvBgNV BAMTKDRBNjA1NkQ0RjJCNTg3MkNDMUI1MzdEQjI0OTNBM0JGNzM5REE2NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCiODqeDl5CW9aHxoOF1a8WErs bwdqkfd5P1ijjia8aTcclMEkZyvuewE7pSrv4kOdydbuVAqDlflGHJyrLi1u24s7 3PvPuDcpkicXpQY1WwXfQetYFtyc7FqPRebn2P6UxlGWP4Ky3VjWmxLNpWjSob/e 2OhDK4U4nowVsQ0w4JS9Z2w5POKqwRkvmFu8b6gmkb1t9b0H94b2gAsZKsOm468B EdTM19PYV+G3v/slSnUxt55UjZVzsbYfPDYvrUqQnOayCIK6LX1MOv0NagrmyTJJ 1PICQqS5W+uvn+rUuh4BgBWSTcERLFw7PVthVKU4Gu+YR8F3iDtA7wF5i82VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSmBW1PK1hyzBtTfbJJOjv3OdpkIwHwYDVR0j BBgwFoAUixms4Kc5FJKxi+J6wB0qYChyv8AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDY1MjlkYi05MzMwLTRlOTctYWRmMS1iMGRkZjFhNmU1OTkvMC84QjE5QUNFMEE3 MzkxNDkyQjE4QkUyN0FDMDFEMkE2MDI4NzJCRkMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJBNjAyODcy QkZDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2NTI5ZGItOTMzMC00ZTk3LWFk ZjEtYjBkZGYxYTZlNTk5LzAvOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJB NjAyODcyQkZDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImycn3rsMLvkA2o1SdS0cIS9PB/YVZMvtJV GnL0E9SYF81MBFqywvPFKI7KPRIL+NXrTfDCzedBrK927TWBjXkMPVI+IzqbOiZE Pnlx6uPH+66wnixKzxMu4dYoR5MlVx2miFEbdGadibxjSTUyTnrT/vVEHjvuXcNU iU6jf+Cxb87hrPBOmi39w/siGTLQr7YMcw3R/W1pj9zn3aeAAKnAVLp7hrz1PzRy PDdAqExhynLP4gU1FVNF4x1o1dQoxgGBbXnBJghX4JkUra0K8AdT1NjGzJ4gWY3y zTrAMmPdoC9sAxD6wYs/U3RZuZ1vYJoez03ogF8PSFTf33Pr0hg= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:54 2025 by rpki-client