$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft File: 194F6EF659F1115C068AB59065D57F150E23F5B6.mft (raw, json) Hash identifier: B4GQrFSywh7fNlWCjnbhBb6zdCbbmfAGqGhtlce9laM= Subject key identifier: A9:3B:97:B4:6C:CF:5C:B0:19:97:89:5B:D3:16:6B:EA:F3:0A:5D:C9 Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Certificate serial: 1304374E9434898BD1ED8B6D395A786C2305569F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft Manifest number: 01CE Signing time: Sun 07 Sep 2025 08:02:18 +0000 Manifest this update: Sun 07 Sep 2025 07:57:18 +0000 Manifest next update: Wed 10 Sep 2025 14:02:18 +0000 Files and hashes: 1: 194F6EF659F1115C068AB59065D57F150E23F5B6.crl (hash: falAC9EFw37QI/B0S+H8+0jzu6NKXpfElqJX/P1RD5I=) 2: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (hash: OiZZEQMDYAjWvUr2V8yTuhgbwOSZs8jYfIrtVvafVY0=) 3: 34332e3234302e3232362e302f32342d3234203d3e20313530323130.roa (hash: 1Tei5fGxwqBxz6xN5gHTRqivy8w2htgn+IA2ReOzZk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 14:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:04:37:4e:94:34:89:8b:d1:ed:8b:6d:39:5a:78:6c:23:05:56:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Validity Not Before: Sep 7 07:57:18 2025 GMT Not After : Sep 10 14:02:18 2025 GMT Subject: CN=A93B97B46CCF5CB01997895BD3166BEAF30A5DC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f8:ec:7a:6d:7d:33:aa:27:0f:40:92:32:67: dd:67:c3:12:4b:6a:51:d7:b5:15:41:b1:ce:2e:4c: 81:cd:af:23:aa:8d:c3:d8:4f:92:86:d2:44:fa:a2: 0f:bd:6a:3e:12:81:13:54:e5:21:49:9d:1f:66:ac: 31:d3:7e:c4:be:a6:6b:14:99:e3:9b:19:10:07:b5: a8:c2:fe:9b:1d:5d:13:08:b4:af:86:28:57:17:cf: 78:ba:68:c3:40:41:1e:d3:3b:49:0b:23:3c:2d:fe: e6:52:73:ac:ea:85:64:c8:73:0b:32:bd:e6:b3:7c: 86:4c:10:b1:ee:8c:12:8b:fe:da:be:90:3e:af:6c: c9:51:bd:92:cd:00:52:ca:1e:00:74:a6:b2:75:e6: 6a:3f:c6:f7:f9:0b:7f:0c:c3:52:1d:cc:15:72:0c: a0:87:d4:07:72:0a:57:ca:53:c2:3b:27:2e:fc:a9: 82:0d:38:31:6b:82:de:4b:46:d8:fd:bc:d2:02:35: cf:f5:64:18:c6:04:6a:6d:2c:9b:ae:68:ce:9f:79: f3:6c:0c:5b:03:35:ca:63:3b:30:83:0b:cb:ba:ef: cd:c7:a0:47:57:86:e1:72:d2:1d:d1:67:1f:88:9b: 22:05:74:1b:78:3a:9e:61:66:d9:50:07:0e:36:87: 19:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3B:97:B4:6C:CF:5C:B0:19:97:89:5B:D3:16:6B:EA:F3:0A:5D:C9 X509v3 Authority Key Identifier: keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:53:b7:9e:4b:bd:9c:32:d2:9a:2b:cd:18:ea:61:db:f5:74: bd:45:f1:73:31:6b:f9:75:78:b9:be:81:db:2b:a3:8b:88:6f: b6:55:bf:ad:bd:81:1f:71:b0:c2:46:1f:20:02:91:d6:98:77: e4:0b:92:7f:f0:b5:2a:38:7f:39:31:07:3f:37:df:5d:2b:b0: 2c:87:73:5d:ac:54:36:30:6a:fd:cd:de:83:55:fb:e0:ec:58: 7a:05:03:5c:4c:56:54:5b:86:c5:2d:e7:c4:84:ac:0e:19:f5: d0:7d:ed:d6:d6:2c:90:2d:4f:78:3a:f5:29:15:0d:c7:4f:a9: 17:4e:01:04:b8:a9:53:ef:48:cb:dd:18:e4:1f:87:a7:e7:9b: dc:9e:df:ed:8c:33:e6:6b:ff:5d:21:88:d8:cb:1d:a7:7e:dd: 86:69:36:5d:95:43:1e:e6:d2:77:a8:ea:bf:21:f9:33:9a:50: 91:10:fe:cb:16:ad:ba:c5:fc:e0:0c:87:d8:63:e2:53:4c:f6: f3:ca:5f:0c:7a:0e:cc:4f:da:e8:a0:88:5e:d7:cf:96:ff:31: 05:2a:97:cf:93:a0:46:41:93:6e:f8:27:c9:29:1e:90:77:0a: ac:01:b4:10:0e:af:01:59:5c:2b:94:a9:bf:80:6a:dd:0c:95: dc:3f:e5:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEwQ3TpQ0iYvR7YttOVp4bCMFVp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUw RTIzRjVCNjAeFw0yNTA5MDcwNzU3MThaFw0yNTA5MTAxNDAyMThaMDMxMTAvBgNV BAMTKEE5M0I5N0I0NkNDRjVDQjAxOTk3ODk1QkQzMTY2QkVBRjMwQTVEQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb+Ox6bX0zqicPQJIyZ91nwxJL alHXtRVBsc4uTIHNryOqjcPYT5KG0kT6og+9aj4SgRNU5SFJnR9mrDHTfsS+pmsU meObGRAHtajC/psdXRMItK+GKFcXz3i6aMNAQR7TO0kLIzwt/uZSc6zqhWTIcwsy veazfIZMELHujBKL/tq+kD6vbMlRvZLNAFLKHgB0prJ15mo/xvf5C38Mw1IdzBVy DKCH1AdyClfKU8I7Jy78qYINODFrgt5LRtj9vNICNc/1ZBjGBGptLJuuaM6fefNs DFsDNcpjOzCDC8u6783HoEdXhuFy0h3RZx+ImyIFdBt4Op5hZtlQBw42hxn/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqTuXtGzPXLAZl4lb0xZr6vMKXckwHwYDVR0j BBgwFoAUGU9u9lnxEVwGirWQZdV/FQ4j9bYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmFiZWM3MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMC8xOTRGNkVGNjU5 RjExMTVDMDY4QUI1OTA2NUQ1N0YxNTBFMjNGNUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUwRTIz RjVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZhYmVjNzEtN2VjYi00ZGJkLWE0 MjEtOTliOWNkMjA5MDNhLzAvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdG MTUwRTIzRjVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBTt55LvZwy0porzRjqYdv1dL1F8XMxa/l1 eLm+gdsro4uIb7ZVv629gR9xsMJGHyACkdaYd+QLkn/wtSo4fzkxBz83310rsCyH c12sVDYwav3N3oNV++DsWHoFA1xMVlRbhsUt58SErA4Z9dB97dbWLJAtT3g69SkV DcdPqRdOAQS4qVPvSMvdGOQfh6fnm9ye3+2MM+Zr/10hiNjLHad+3YZpNl2VQx7m 0neo6r8h+TOaUJEQ/ssWrbrF/OAMh9hj4lNM9vPKXwx6DsxP2uigiF7Xz5b/MQUq l8+ToEZBk274J8kpHpB3CqwBtBAOrwFZXCuUqb+Aat0Mldw/5Qg= -----END CERTIFICATE-----Generated at Tue Sep 9 14:32:57 2025 by rpki-client