$ rpki-client -vvf repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft File: 196DBD061B4577EF848600B17A266D689F5A70B5.mft (raw, json) Hash identifier: 1uUed+Aekp4lonMfNURpQI2Odkq5xvAqjM6xIgdpgU0= Subject key identifier: 38:8F:A4:B6:69:20:8A:D7:C5:37:A8:AD:BB:70:1A:4C:83:C8:5A:B9 Authority key identifier: 19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 Certificate issuer: /CN=196DBD061B4577EF848600B17A266D689F5A70B5 Certificate serial: 68FB33C9CF80C80F8FB25C5EC3D48AF9ABA944D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft Manifest number: 01F4 Signing time: Sun 07 Sep 2025 09:01:32 +0000 Manifest this update: Sun 07 Sep 2025 08:56:32 +0000 Manifest next update: Wed 10 Sep 2025 19:57:32 +0000 Files and hashes: 1: 3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (hash: 5lY4f9V94dB+03La5b3P91qI5RBjwa5CSpgEJJRGvxc=) 2: 196DBD061B4577EF848600B17A266D689F5A70B5.crl (hash: paWVmAZunP99XXw1cP2t62B8zSmUxhckehmS2AaPL5A=) 3: 3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa (hash: 34/R8QTjCFJsUx7prL6eX2eJ9Y/fnEucfem7nusLMB8=) 4: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (hash: EDPK0eOxqBPQlG42EiZMre0RjhVvjul6NQmz0+X17bE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:fb:33:c9:cf:80:c8:0f:8f:b2:5c:5e:c3:d4:8a:f9:ab:a9:44:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=196DBD061B4577EF848600B17A266D689F5A70B5 Validity Not Before: Sep 7 08:56:32 2025 GMT Not After : Sep 10 19:57:32 2025 GMT Subject: CN=388FA4B669208AD7C537A8ADBB701A4C83C85AB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:53:25:f2:07:4e:5c:4b:f7:4f:d7:8f:6d:07: cf:64:16:8f:6b:79:0b:f5:9f:bb:be:f5:d2:6f:9b: a4:43:0c:47:7c:10:da:ba:52:7a:af:44:0b:47:84: 26:47:c0:90:f6:37:27:02:5e:f4:be:b0:56:5a:29: 5e:d0:47:6f:fa:1b:99:ae:76:a3:f3:18:73:ed:b4: 80:38:c5:38:3d:c3:4e:8a:17:b5:cd:e4:1c:35:77: cf:97:ef:56:e2:60:ab:70:db:fb:ba:f8:10:9b:4c: e1:02:50:f0:0c:27:1a:49:e5:40:e1:c5:e1:0c:89: 3a:b5:0a:22:b7:b1:4b:d1:18:07:78:57:7a:11:b6: 9b:0b:9a:be:22:4f:a0:0b:0d:e0:25:d9:ee:27:ef: c0:b8:c4:2c:ce:a8:8e:3c:a5:7d:ad:0c:56:6b:0d: 49:d0:39:12:1f:a8:42:ab:28:fc:16:c3:bc:0b:dd: 4b:a8:d5:8c:2a:c4:1b:9d:45:b0:bf:c1:5c:d3:0e: 0c:d5:7e:96:3b:95:25:f4:01:88:e6:19:c1:9b:db: e4:00:ea:1c:28:6d:53:b1:a5:30:73:3f:5f:39:90: 24:69:0d:e2:d2:6e:49:31:e0:ad:74:22:db:67:78: 82:48:e7:be:da:9d:c8:79:ee:3b:cf:69:e0:b0:90: 01:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8F:A4:B6:69:20:8A:D7:C5:37:A8:AD:BB:70:1A:4C:83:C8:5A:B9 X509v3 Authority Key Identifier: keyid:19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:6f:ed:7b:d3:37:16:7b:45:be:44:2e:d6:8c:72:e3:9b:51: 3c:d9:c3:52:5b:41:fc:ae:32:6b:68:5f:67:81:b1:7b:f7:d7: 9d:e7:ea:c1:c7:b7:43:8a:81:2b:0f:15:91:b5:53:aa:ab:f4: a8:2d:eb:cc:3b:7f:30:5c:ea:5b:a3:6a:c0:95:f1:93:88:ed: ba:76:03:a8:87:5d:44:0a:90:5f:c1:d7:8e:48:d8:5e:a1:13: b5:07:97:ac:3a:59:dd:57:9a:3e:91:78:8a:91:d3:28:eb:dd: 60:82:f1:de:0a:83:55:92:c3:ea:59:1d:4b:b5:cf:90:11:7d: 3c:86:5e:bc:17:bf:52:f4:cd:45:35:11:13:5f:61:a8:dd:be: ff:81:bf:eb:2e:de:7c:6b:b6:bd:d0:4d:98:58:ae:fc:c3:df: fd:31:d1:b9:d1:74:d5:86:e1:1e:d4:86:17:2c:e3:60:62:67: 15:94:2a:ff:f0:44:ab:9e:ce:46:55:fd:70:d6:e4:6c:7b:d1: 59:1d:cd:97:f7:c7:c1:f9:af:2b:c9:e7:ff:fb:ea:4e:f6:a5: fd:cf:b7:75:33:31:8f:8f:74:ec:e5:ae:91:56:04:fc:c6:9d: 16:43:ef:83:87:d6:96:1b:55:33:f4:16:1f:4a:ba:cd:ad:3c: 66:c0:13:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaPszyc+AyA+Pslxew9SK+aupRNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5 RjVBNzBCNTAeFw0yNTA5MDcwODU2MzJaFw0yNTA5MTAxOTU3MzJaMDMxMTAvBgNV BAMTKDM4OEZBNEI2NjkyMDhBRDdDNTM3QThBREJCNzAxQTRDODNDODVBQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKUyXyB05cS/dP149tB89kFo9r eQv1n7u+9dJvm6RDDEd8ENq6UnqvRAtHhCZHwJD2NycCXvS+sFZaKV7QR2/6G5mu dqPzGHPttIA4xTg9w06KF7XN5Bw1d8+X71biYKtw2/u6+BCbTOECUPAMJxpJ5UDh xeEMiTq1CiK3sUvRGAd4V3oRtpsLmr4iT6ALDeAl2e4n78C4xCzOqI48pX2tDFZr DUnQORIfqEKrKPwWw7wL3Uuo1YwqxBudRbC/wVzTDgzVfpY7lSX0AYjmGcGb2+QA 6hwobVOxpTBzP185kCRpDeLSbkkx4K10IttneIJI577anch57jvPaeCwkAF9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOI+ktmkgitfFN6itu3AaTIPIWrkwHwYDVR0j BBgwFoAUGW29BhtFd++EhgCxeiZtaJ9acLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM4MDFhMC03OTEyLTRiMDEtYTI4MS04ODAyNDYyNGEyZDQvMC8xOTZEQkQwNjFC NDU3N0VGODQ4NjAwQjE3QTI2NkQ2ODlGNUE3MEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5RjVB NzBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjODAxYTAtNzkxMi00YjAxLWEy ODEtODgwMjQ2MjRhMmQ0LzAvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZE Njg5RjVBNzBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFv7XvTNxZ7Rb5ELtaMcuObUTzZw1JbQfyu MmtoX2eBsXv3153n6sHHt0OKgSsPFZG1U6qr9Kgt68w7fzBc6lujasCV8ZOI7bp2 A6iHXUQKkF/B145I2F6hE7UHl6w6Wd1Xmj6ReIqR0yjr3WCC8d4Kg1WSw+pZHUu1 z5ARfTyGXrwXv1L0zUU1ERNfYajdvv+Bv+su3nxrtr3QTZhYrvzD3/0x0bnRdNWG 4R7Uhhcs42BiZxWUKv/wRKuezkZV/XDW5Gx70VkdzZf3x8H5ryvJ5//76k72pf3P t3UzMY+PdOzlrpFWBPzGnRZD74OH1pYbVTP0Fh9Kus2tPGbAE14= -----END CERTIFICATE-----Generated at Sun Sep 7 15:28:40 2025 by rpki-client