$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft File: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft (raw, json) Hash identifier: JRu/siGdou9BVCsFoMF/5edBOnD2SoECX5zJ6cb//2I= Subject key identifier: 0E:9A:1F:4D:C8:D1:74:33:AE:C2:29:DE:46:2E:2E:B1:0E:83:26:80 Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 Certificate issuer: /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Certificate serial: 124B29102A9DCB2D475E261F20C75988C7774248 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft Manifest number: 0208 Signing time: Wed 03 Sep 2025 14:00:39 +0000 Manifest this update: Wed 03 Sep 2025 13:55:39 +0000 Manifest next update: Sat 06 Sep 2025 18:57:39 +0000 Files and hashes: 1: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: b9POD8lIGTkSBPPG5UCEDWwytPa4KOI/X1gSRB0o140=) 2: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: Alr3MmF3FComiYShgHs/7REcddrGc/AGrj1Fejo7KUI=) 3: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl (hash: C4FiXu+OksxtT1nLKX7QBqg7nHkcMuyHNyTw7LP1M10=) 4: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: pIxViXZoycBV8A7CIi1fmiiQDu+3Ugcswhk6WPEdvN8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 18:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:4b:29:10:2a:9d:cb:2d:47:5e:26:1f:20:c7:59:88:c7:77:42:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Validity Not Before: Sep 3 13:55:39 2025 GMT Not After : Sep 6 18:57:39 2025 GMT Subject: CN=0E9A1F4DC8D17433AEC229DE462E2EB10E832680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2d:1c:42:09:40:57:1b:c1:44:9d:07:e3:44: fd:d7:9e:4b:3b:10:33:65:29:ee:69:7c:5b:72:a0: 12:d8:82:5e:78:3a:1d:b7:a8:ff:ef:7b:aa:8c:7d: 0f:9c:bd:d8:d4:d6:d0:c7:b0:cf:ae:5b:2b:c1:75: dc:ab:bf:99:13:04:ea:47:58:4b:32:e5:a2:3e:d6: 88:95:d5:1b:6f:4c:a5:1e:65:6e:d5:03:46:81:08: e7:ce:04:a3:48:dc:fb:2a:85:af:30:47:5c:a1:08: c5:c0:81:b4:28:c7:a2:02:2e:69:2c:87:88:76:1e: 33:34:f6:48:42:5d:ad:cc:e5:62:e1:69:46:96:7c: 86:d6:f9:e6:8e:bf:12:ee:2f:18:4c:f5:ae:44:6e: 85:6e:28:e1:4d:c3:cc:fd:6c:63:08:7c:cf:ac:15: e1:16:a2:95:16:92:ed:9e:c8:e1:1d:39:1a:a6:c6: f2:62:24:c2:00:1d:bc:00:98:df:11:34:62:ac:ab: 2d:e8:f1:96:9c:c1:22:7f:2c:5d:45:37:c5:94:bb: 13:6d:70:40:1c:47:8a:4f:6e:16:40:fb:e0:1b:63: f1:ee:29:df:8f:e5:cd:46:0b:6c:10:b9:a1:98:18: f5:30:81:79:aa:ae:32:1e:de:44:c6:0e:c6:de:af: 14:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9A:1F:4D:C8:D1:74:33:AE:C2:29:DE:46:2E:2E:B1:0E:83:26:80 X509v3 Authority Key Identifier: keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:6e:e1:b1:f4:4c:67:68:c7:49:a9:c9:04:08:40:f8:a8:a6: 8c:c0:0f:85:ff:d4:3c:61:ea:64:ae:fc:64:bf:58:8b:b3:82: cd:62:86:ba:c4:54:ab:3c:44:71:58:ba:58:4a:d7:69:cb:0d: e9:6a:6d:6a:bd:09:03:49:6f:41:3a:d2:42:d9:0f:74:e0:32: 96:ab:03:36:82:3a:54:b8:b2:9b:cf:d3:9f:6f:5f:0e:97:f0: be:65:26:c4:6f:4c:3a:58:1d:56:4d:8a:1c:0e:07:97:94:25: 55:09:04:cd:00:93:f0:90:36:af:07:46:a4:80:1a:e0:5d:dd: c2:af:aa:57:36:76:b0:12:c4:1f:c5:0a:f7:5c:94:2a:4c:bd: 00:00:bd:24:a9:02:7a:d0:44:58:75:be:a0:7c:67:63:15:ff: 35:55:04:6a:4b:41:34:a4:88:af:d5:1d:85:8e:b6:33:45:37: 3c:da:2c:bc:57:18:d0:a6:dd:6c:cb:a5:b2:e3:71:d1:cb:2c: d7:b9:fb:95:2f:91:6a:75:04:97:f8:36:d2:19:1c:6d:50:b4: ee:91:b9:2d:df:a7:da:c8:5e:c3:9f:c2:c7:fc:7d:47:40:72: 6c:67:e6:9e:4e:ba:db:97:a5:1e:68:00:7c:7d:bd:91:a7:05: 41:0c:8c:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEkspECqdyy1HXiYfIMdZiMd3QkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVB NkY0OENFNzAeFw0yNTA5MDMxMzU1MzlaFw0yNTA5MDYxODU3MzlaMDMxMTAvBgNV BAMTKDBFOUExRjREQzhEMTc0MzNBRUMyMjlERTQ2MkUyRUIxMEU4MzI2ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGLRxCCUBXG8FEnQfjRP3Xnks7 EDNlKe5pfFtyoBLYgl54Oh23qP/ve6qMfQ+cvdjU1tDHsM+uWyvBddyrv5kTBOpH WEsy5aI+1oiV1RtvTKUeZW7VA0aBCOfOBKNI3Psqha8wR1yhCMXAgbQox6ICLmks h4h2HjM09khCXa3M5WLhaUaWfIbW+eaOvxLuLxhM9a5EboVuKOFNw8z9bGMIfM+s FeEWopUWku2eyOEdORqmxvJiJMIAHbwAmN8RNGKsqy3o8ZacwSJ/LF1FN8WUuxNt cEAcR4pPbhZA++AbY/HuKd+P5c1GC2wQuaGYGPUwgXmqrjIe3kTGDsberxRLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDpofTcjRdDOuwineRi4usQ6DJoAwHwYDVR0j BBgwFoAUGZ09aE7O7/uxfdWYomiINab0jOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTgzODNlMi0yMDZjLTRiNzQtYmE0YS1jZDhhNGQ3Y2Q4NjEvMC8xOTlEM0Q2ODRF Q0VFRkZCQjE3REQ1OThBMjY4ODgzNUE2RjQ4Q0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVBNkY0 OENFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4 MzVBNkY0OENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL1u4bH0TGdox0mpyQQIQPiopozAD4X/1Dxh 6mSu/GS/WIuzgs1ihrrEVKs8RHFYulhK12nLDelqbWq9CQNJb0E60kLZD3TgMpar AzaCOlS4spvP059vXw6X8L5lJsRvTDpYHVZNihwOB5eUJVUJBM0Ak/CQNq8HRqSA GuBd3cKvqlc2drASxB/FCvdclCpMvQAAvSSpAnrQRFh1vqB8Z2MV/zVVBGpLQTSk iK/VHYWOtjNFNzzaLLxXGNCm3WzLpbLjcdHLLNe5+5UvkWp1BJf4NtIZHG1QtO6R uS3fp9rIXsOfwsf8fUdAcmxn5p5OutuXpR5oAHx9vZGnBUEMjPA= -----END CERTIFICATE-----Generated at Fri Sep 5 10:18:46 2025 by rpki-client