$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft File: 194F6EF659F1115C068AB59065D57F150E23F5B6.mft (raw, json) Hash identifier: SLOKdHXVRuaJ9N7QHqyhSia+Td+6W3X8O+9ywt4mIA4= Subject key identifier: F1:F2:AA:D8:0A:4D:DA:99:AD:F0:51:BF:80:FC:73:14:05:D4:62:EF Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Certificate serial: 5F4C1ED62E2B6EF294D596A145213E981EDC8EA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft Manifest number: 01A5 Signing time: Thu 05 Jun 2025 04:22:17 +0000 Manifest this update: Thu 05 Jun 2025 04:17:17 +0000 Manifest next update: Sun 08 Jun 2025 16:02:17 +0000 Files and hashes: 1: 34332e3234302e3232362e302f32342d3234203d3e20313530323130.roa (hash: 1Tei5fGxwqBxz6xN5gHTRqivy8w2htgn+IA2ReOzZk8=) 2: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (hash: OiZZEQMDYAjWvUr2V8yTuhgbwOSZs8jYfIrtVvafVY0=) 3: 194F6EF659F1115C068AB59065D57F150E23F5B6.crl (hash: yKk173dK78LOqrfPrqWJVof5Tf1dhLBcidiGe3YDhOM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 16:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:4c:1e:d6:2e:2b:6e:f2:94:d5:96:a1:45:21:3e:98:1e:dc:8e:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Validity Not Before: Jun 5 04:17:17 2025 GMT Not After : Jun 8 16:02:17 2025 GMT Subject: CN=F1F2AAD80A4DDA99ADF051BF80FC731405D462EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:a0:0e:37:0c:30:69:5e:42:ee:1a:7f:03: c5:09:99:5e:e9:12:44:fc:78:42:66:47:d1:b8:fe: db:67:58:c0:02:44:0b:70:2b:d0:c6:bb:04:22:18: 98:e1:b2:6b:a8:34:c5:41:c1:29:f1:45:56:5a:8b: 93:c5:91:98:ac:23:7e:a1:33:4f:40:7b:2e:50:79: de:2a:e4:e3:ff:9c:d5:dc:97:74:43:4e:d3:b9:50: d6:be:19:48:7d:3e:d8:f1:40:a8:e7:1f:be:4c:de: 81:11:e0:ea:dc:34:8e:9d:20:ed:5a:08:1d:c6:a1: 93:5f:d0:a1:8b:e3:d4:79:30:c8:e2:fa:b0:7e:0c: 00:fa:b6:cc:d9:ca:93:ec:51:66:07:58:3b:05:d8: ea:81:bb:d0:32:da:a5:d3:65:5a:f3:30:63:b7:b0: 0a:4a:1f:2e:79:3b:bd:7f:8c:1d:05:db:1e:e9:59: ba:5b:77:b2:b8:d0:86:b1:10:46:7c:8e:8f:c3:0a: 5b:23:75:83:bd:12:e3:5f:03:ed:93:1a:72:a7:d9: 6c:c6:2f:f7:3a:d0:14:bb:a5:d9:4c:84:fc:68:8c: a2:e9:d1:38:63:1e:70:52:46:93:00:fe:14:11:50: 1d:0e:c4:b1:f8:f2:b9:39:d1:b0:e1:87:a2:d4:5c: d1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F2:AA:D8:0A:4D:DA:99:AD:F0:51:BF:80:FC:73:14:05:D4:62:EF X509v3 Authority Key Identifier: keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:34:48:18:19:ae:16:89:20:fa:a2:0c:5f:1b:ad:9b:94:a7: 48:16:2e:cb:d2:90:80:c0:97:46:0a:b5:06:e1:6e:72:a7:65: 12:a5:9c:2d:d0:a4:b1:fd:72:13:11:82:44:4e:53:1f:0f:eb: a5:09:6f:48:ac:2a:07:2d:19:61:a2:99:91:43:c2:45:72:6c: 91:33:69:85:24:2d:19:d0:5c:6c:09:5f:2c:05:90:d0:cc:48: f1:24:c5:88:95:0b:60:ac:01:80:37:13:41:1f:e1:34:62:8a: bb:67:ba:2d:74:dd:f7:7a:2a:4a:05:1e:30:7a:83:67:a5:48: 06:4e:81:1a:7b:dd:7a:3d:27:32:ef:d8:35:d2:76:69:02:49: e7:27:79:37:f6:71:b4:46:86:b4:29:cf:ff:e9:66:08:81:d2: 73:40:99:8b:81:b8:72:26:09:aa:cf:33:65:b2:19:fe:b3:9d: 07:c9:c1:85:a3:ed:98:b2:6a:2b:d3:2a:4c:d7:94:18:34:1a: ac:ad:c5:54:bc:5a:94:7e:2c:b1:cd:2b:e5:cb:0e:0b:97:16: 46:78:ba:62:f1:c1:17:52:bd:0f:9e:2b:5a:ed:12:0b:13:7d: 8a:f3:1f:03:e7:64:fe:d1:4d:b5:a7:99:bf:f2:0e:53:2c:f4: 6b:fb:58:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX0we1i4rbvKU1ZahRSE+mB7cjqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUw RTIzRjVCNjAeFw0yNTA2MDUwNDE3MTdaFw0yNTA2MDgxNjAyMTdaMDMxMTAvBgNV BAMTKEYxRjJBQUQ4MEE0RERBOTlBREYwNTFCRjgwRkM3MzE0MDVENDYyRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4TaAONwwwaV5C7hp/A8UJmV7p EkT8eEJmR9G4/ttnWMACRAtwK9DGuwQiGJjhsmuoNMVBwSnxRVZai5PFkZisI36h M09Aey5Qed4q5OP/nNXcl3RDTtO5UNa+GUh9PtjxQKjnH75M3oER4OrcNI6dIO1a CB3GoZNf0KGL49R5MMji+rB+DAD6tszZypPsUWYHWDsF2OqBu9Ay2qXTZVrzMGO3 sApKHy55O71/jB0F2x7pWbpbd7K40IaxEEZ8jo/DClsjdYO9EuNfA+2TGnKn2WzG L/c60BS7pdlMhPxojKLp0ThjHnBSRpMA/hQRUB0OxLH48rk50bDhh6LUXNHjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8fKq2ApN2pmt8FG/gPxzFAXUYu8wHwYDVR0j BBgwFoAUGU9u9lnxEVwGirWQZdV/FQ4j9bYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmFiZWM3MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMC8xOTRGNkVGNjU5 RjExMTVDMDY4QUI1OTA2NUQ1N0YxNTBFMjNGNUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUwRTIz RjVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZhYmVjNzEtN2VjYi00ZGJkLWE0 MjEtOTliOWNkMjA5MDNhLzAvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdG MTUwRTIzRjVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQ0SBgZrhaJIPqiDF8brZuUp0gWLsvSkIDA l0YKtQbhbnKnZRKlnC3QpLH9chMRgkROUx8P66UJb0isKgctGWGimZFDwkVybJEz aYUkLRnQXGwJXywFkNDMSPEkxYiVC2CsAYA3E0Ef4TRiirtnui103fd6KkoFHjB6 g2elSAZOgRp73Xo9JzLv2DXSdmkCSecneTf2cbRGhrQpz//pZgiB0nNAmYuBuHIm CarPM2WyGf6znQfJwYWj7ZiyaivTKkzXlBg0GqytxVS8WpR+LLHNK+XLDguXFkZ4 umLxwRdSvQ+eK1rtEgsTfYrzHwPnZP7RTbWnmb/yDlMs9Gv7WJ0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:45:22 2025 by rpki-client