$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft File: B197F427572524588487CFDB163A9E512FAE4DF2.mft (raw, json) Hash identifier: +1dzJGiMz1hYjJWDZKX9nwZC8HuQQlCAJHXl7+UFAXg= Subject key identifier: 70:0F:CD:65:FE:A4:2C:80:F6:12:41:20:C0:48:FA:B4:4D:CB:80:6B Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 Certificate issuer: /CN=B197F427572524588487CFDB163A9E512FAE4DF2 Certificate serial: 1409F919C025C8D81F01189733E0109EE891E273 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft Manifest number: 0225 Signing time: Wed 03 Sep 2025 04:51:21 +0000 Manifest this update: Wed 03 Sep 2025 04:46:21 +0000 Manifest next update: Sat 06 Sep 2025 16:17:21 +0000 Files and hashes: 1: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: BU1Q0ryHM0MlXG1Q7vZvhi4oAbOwc3sWBEiOeckA5Ms=) 2: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: sqH8mgq0fr+XiznMLTzogmtodA1+q341U0FlkHOzY5k=) 3: B197F427572524588487CFDB163A9E512FAE4DF2.crl (hash: RENb8ykAUYe0jFNvg8gmyxxbQKfvplb3ViEoLIrBIFE=) 4: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: IlIKis9hrjcqU4gajZ2m+r4qTrp6BInf4S11M61jB+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 16:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:09:f9:19:c0:25:c8:d8:1f:01:18:97:33:e0:10:9e:e8:91:e2:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2 Validity Not Before: Sep 3 04:46:21 2025 GMT Not After : Sep 6 16:17:21 2025 GMT Subject: CN=700FCD65FEA42C80F6124120C048FAB44DCB806B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:28:88:52:ca:4b:a1:b7:42:15:0a:66:8a:e8: 08:83:51:dc:c4:a9:39:8e:c2:59:28:9c:6a:00:4a: 12:53:5c:7b:89:e4:5b:61:55:34:0c:83:e4:a0:16: c0:a9:d8:59:1f:49:f5:58:5d:39:05:cc:47:97:2f: 79:9c:c8:5a:61:53:a1:fa:d8:9e:33:8f:dc:cd:e2: b6:57:44:85:7e:d9:5d:54:9c:c2:0b:38:e7:5a:7b: e8:03:c8:1c:08:bf:ed:40:4c:c3:9d:96:3d:8e:a4: 18:2d:04:de:64:f9:f5:14:56:5f:41:c4:d7:37:34: 82:b5:19:b7:5f:44:59:a1:d4:d2:10:c1:64:86:6a: ff:45:97:9f:04:4e:b9:3d:fc:d1:7c:5b:f9:ba:c9: 4c:31:79:84:dd:38:c3:0e:ee:ba:6c:c6:cb:d1:83: ab:49:21:a7:cf:ae:fa:4c:9d:71:29:b7:32:ce:ae: 8b:37:b7:bc:dc:54:5d:39:6c:86:0c:33:f0:b9:0c: d8:a9:3e:02:83:9e:23:22:a9:66:18:84:ec:19:57: 0b:01:2a:c7:63:4d:4d:2c:c5:54:cf:0a:2f:81:33: 75:b3:5b:94:6e:f7:20:05:48:a6:40:e2:db:bc:c3: 8f:7f:38:90:df:02:5b:63:23:f6:a3:b1:10:d4:a4: e7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0F:CD:65:FE:A4:2C:80:F6:12:41:20:C0:48:FA:B4:4D:CB:80:6B X509v3 Authority Key Identifier: keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:8a:92:67:63:c9:64:22:b6:c9:df:b4:42:b4:83:08:f1:13: 21:75:75:6a:16:3e:64:1b:fe:19:eb:92:3a:ee:02:6a:05:c3: 6e:8b:8b:7b:8f:f2:60:3a:19:92:b3:56:6b:15:57:ce:20:5c: b6:25:df:c7:f1:a0:b2:ce:2e:71:68:f5:3e:49:84:49:f1:96: c4:77:1e:6f:cc:aa:fc:bb:4d:4c:db:61:72:d2:62:c0:91:a7: 8b:8c:1d:23:b7:5b:af:01:91:4c:24:34:61:59:3c:75:dc:e4: a6:e4:88:f9:e3:b5:1e:dd:71:17:a7:e5:07:9d:d1:e2:7f:ea: ce:69:95:21:35:3c:95:eb:5b:1e:73:68:ad:53:1b:d6:b3:f1: b7:bd:4a:c1:7e:81:60:0c:06:71:aa:85:5b:b3:79:b0:2b:fc: 80:53:e1:86:d6:85:44:e5:d5:0e:9c:d4:c7:68:03:12:95:29: 96:9f:22:50:cd:e7:3b:d4:2d:e1:d0:3f:9a:d4:a1:86:e1:b4: 29:d1:18:63:73:f5:03:2b:97:f2:6d:c9:77:87:4a:60:3f:32: 99:b0:17:42:9b:4f:15:cb:39:f7:d7:92:b9:99:a2:f6:50:b9: 8f:54:f4:b8:ba:17:ea:34:d6:59:af:c0:06:5c:71:d8:a0:0e: ac:25:ea:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFAn5GcAlyNgfARiXM+AQnuiR4nMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEy RkFFNERGMjAeFw0yNTA5MDMwNDQ2MjFaFw0yNTA5MDYxNjE3MjFaMDMxMTAvBgNV BAMTKDcwMEZDRDY1RkVBNDJDODBGNjEyNDEyMEMwNDhGQUI0NERDQjgwNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCKIhSykuht0IVCmaK6AiDUdzE qTmOwlkonGoAShJTXHuJ5FthVTQMg+SgFsCp2FkfSfVYXTkFzEeXL3mcyFphU6H6 2J4zj9zN4rZXRIV+2V1UnMILOOdae+gDyBwIv+1ATMOdlj2OpBgtBN5k+fUUVl9B xNc3NIK1GbdfRFmh1NIQwWSGav9Fl58ETrk9/NF8W/m6yUwxeYTdOMMO7rpsxsvR g6tJIafPrvpMnXEptzLOros3t7zcVF05bIYMM/C5DNipPgKDniMiqWYYhOwZVwsB KsdjTU0sxVTPCi+BM3WzW5Ru9yAFSKZA4tu8w49/OJDfAltjI/ajsRDUpOcTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcA/NZf6kLID2EkEgwEj6tE3LgGswHwYDVR0j BBgwFoAUsZf0J1clJFiEh8/bFjqeUS+uTfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGNmNDA2Ny1hNjlkLTQ5MDgtYmVlOC1iNDY1NWJkYzE1ZjgvMC9CMTk3RjQyNzU3 MjUyNDU4ODQ4N0NGREIxNjNBOUU1MTJGQUU0REYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEyRkFF NERGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlF NTEyRkFFNERGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6KkmdjyWQitsnftEK0gwjxEyF1dWoWPmQb /hnrkjruAmoFw26Li3uP8mA6GZKzVmsVV84gXLYl38fxoLLOLnFo9T5JhEnxlsR3 Hm/Mqvy7TUzbYXLSYsCRp4uMHSO3W68BkUwkNGFZPHXc5KbkiPnjtR7dcRen5Qed 0eJ/6s5plSE1PJXrWx5zaK1TG9az8be9SsF+gWAMBnGqhVuzebAr/IBT4YbWhUTl 1Q6c1MdoAxKVKZafIlDN5zvULeHQP5rUoYbhtCnRGGNz9QMrl/JtyXeHSmA/Mpmw F0KbTxXLOffXkrmZovZQuY9U9Li6F+o01lmvwAZccdigDqwl6hU= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:44 2025 by rpki-client