$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft File: C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft (raw, json) Hash identifier: 9YGlP6/FLRfp0Z8eebU9Ah80rg/B58iJyBRMMJamzgQ= Subject key identifier: 72:F4:F7:87:64:3D:08:0E:EF:AE:3D:F6:BA:58:EB:7A:CC:06:91:7A Authority key identifier: C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 Certificate issuer: /CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Certificate serial: 048D859F6658C4D1DBC50341876D5680FB1F2210 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft Manifest number: 01A9 Signing time: Sat 06 Sep 2025 19:21:20 +0000 Manifest this update: Sat 06 Sep 2025 19:16:20 +0000 Manifest next update: Wed 10 Sep 2025 02:51:20 +0000 Files and hashes: 1: 3130332e3138362e322e302f32342d3234203d3e20313439383837.roa (hash: dald9idU/rHkiXT+Hb4ViPOAu0GAF+vadWJH9YDYXzE=) 2: C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl (hash: 5sZEVm0yvyx/Jz094kGw6q0VW0663+vS6iM4iKEAwN4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 02:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:8d:85:9f:66:58:c4:d1:db:c5:03:41:87:6d:56:80:fb:1f:22:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Validity Not Before: Sep 6 19:16:20 2025 GMT Not After : Sep 10 02:51:20 2025 GMT Subject: CN=72F4F787643D080EEFAE3DF6BA58EB7ACC06917A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:d4:54:74:1b:16:ba:fb:07:b2:d6:21:b8: cb:db:65:54:c6:72:62:1b:36:e0:4a:f3:ac:dd:e5: fb:59:24:98:7a:98:e7:2b:cf:da:d5:28:1c:26:91: 49:95:34:c4:fb:37:b2:9f:53:ec:8c:7f:d5:cd:78: f1:41:a9:7f:b3:5f:33:78:35:10:08:28:1a:61:29: 4d:b2:4d:7d:23:51:70:d9:8c:9e:ec:7d:79:30:c4: 08:d4:c1:fb:3e:59:56:3c:0e:5e:0c:7b:62:76:98: 0c:ec:e2:ed:73:2e:af:b0:5e:14:47:1d:5b:ea:7a: f0:b3:fb:6e:8f:ff:a8:73:a0:ff:53:4e:1f:ee:0a: 70:ce:75:28:43:ec:48:ae:44:2a:ff:16:d0:88:f0: b9:9b:a6:1b:49:2d:ed:ec:73:95:5e:47:00:fa:96: bd:7d:cb:ef:2e:37:0c:d3:a3:e0:de:9d:9e:88:18: 26:35:db:a3:ec:78:b0:5d:60:71:3a:13:27:61:b5: 2a:85:d2:28:9d:77:ed:6f:56:23:a3:ae:2a:5e:05: cf:0e:e3:17:60:fc:94:7d:f0:a9:9b:a0:4a:c6:c8: 56:e3:98:6c:3a:71:f6:ed:c8:42:2c:ed:ad:03:85: d8:05:f9:05:16:16:11:3a:71:fc:aa:aa:f2:b1:fb: f0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F4:F7:87:64:3D:08:0E:EF:AE:3D:F6:BA:58:EB:7A:CC:06:91:7A X509v3 Authority Key Identifier: keyid:C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:06:7b:8e:45:c3:37:b9:f7:eb:47:a8:54:d0:69:39:f3:e9: 48:da:52:c4:0b:5a:f5:5e:f6:d4:e0:84:b5:29:19:45:5d:83: 43:16:e4:ed:04:0b:a0:ef:06:c9:86:8a:f9:ae:73:d2:1d:1e: cd:f7:12:38:93:24:ef:8e:8f:19:62:24:a1:36:79:f6:8c:8b: a8:a8:f0:79:4f:82:ef:2a:04:43:c5:9f:62:0d:96:59:6a:15: 12:bb:bc:e7:93:7d:25:19:ef:e7:03:28:5d:8b:fe:31:b7:c0: cc:b5:80:73:3f:55:db:d9:15:d7:85:47:d7:f8:e6:03:f0:69: 58:fe:76:85:76:cc:ec:32:40:51:e0:ab:03:93:41:69:3d:5f: 60:0a:61:68:f6:a4:4a:23:a7:b9:0a:dd:a2:30:e3:c9:67:e2: 5a:d8:62:e8:5d:fc:9f:18:29:79:81:1f:90:dc:4a:95:39:c5: 60:e5:58:3c:5b:46:8e:d4:24:5a:01:0e:f9:88:04:0b:d1:cc: 51:fc:2f:22:9e:45:d8:82:86:e6:84:c9:75:47:9c:27:01:9a: 6a:28:08:64:8c:0c:ad:62:93:7f:30:b2:78:23:32:04:f8:35: 95:b1:af:f3:b6:07:46:b2:9c:46:ec:55:5e:a4:7d:2b:c0:f2: d8:dd:17:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBI2Fn2ZYxNHbxQNBh21WgPsfIhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJB QkM3QTZCMjAeFw0yNTA5MDYxOTE2MjBaFw0yNTA5MTAwMjUxMjBaMDMxMTAvBgNV BAMTKDcyRjRGNzg3NjQzRDA4MEVFRkFFM0RGNkJBNThFQjdBQ0MwNjkxN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1LdRUdBsWuvsHstYhuMvbZVTG cmIbNuBK86zd5ftZJJh6mOcrz9rVKBwmkUmVNMT7N7KfU+yMf9XNePFBqX+zXzN4 NRAIKBphKU2yTX0jUXDZjJ7sfXkwxAjUwfs+WVY8Dl4Me2J2mAzs4u1zLq+wXhRH HVvqevCz+26P/6hzoP9TTh/uCnDOdShD7EiuRCr/FtCI8LmbphtJLe3sc5VeRwD6 lr19y+8uNwzTo+DenZ6IGCY126PseLBdYHE6EydhtSqF0iidd+1vViOjripeBc8O 4xdg/JR98KmboErGyFbjmGw6cfbtyEIs7a0DhdgF+QUWFhE6cfyqqvKx+/DBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcvT3h2Q9CA7vrj32uljreswGkXowHwYDVR0j BBgwFoAUwZsTMCWy2UcDTysPxYK58qvHprIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGY2ZDg2Yi1lM2RmLTRlMmYtOTM2Zi1lZDliOTYzNTAzYTEvMC9DMTlCMTMzMDI1 QjJEOTQ3MDM0RjJCMEZDNTgyQjlGMkFCQzdBNkIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJBQkM3 QTZCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmNmQ4NmItZTNkZi00ZTJmLTkz NmYtZWQ5Yjk2MzUwM2ExLzAvQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5 RjJBQkM3QTZCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8Ge45Fwze59+tHqFTQaTnz6UjaUsQLWvVe 9tTghLUpGUVdg0MW5O0EC6DvBsmGivmuc9IdHs33EjiTJO+OjxliJKE2efaMi6io 8HlPgu8qBEPFn2INlllqFRK7vOeTfSUZ7+cDKF2L/jG3wMy1gHM/VdvZFdeFR9f4 5gPwaVj+doV2zOwyQFHgqwOTQWk9X2AKYWj2pEojp7kK3aIw48ln4lrYYuhd/J8Y KXmBH5DcSpU5xWDlWDxbRo7UJFoBDvmIBAvRzFH8LyKeRdiChuaEyXVHnCcBmmoo CGSMDK1ik38wsngjMgT4NZWxr/O2B0aynEbsVV6kfSvA8tjdF9U= -----END CERTIFICATE-----Generated at Sun Sep 7 13:55:59 2025 by rpki-client