$ rpki-client -vvf repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft File: 19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft (raw, json) Hash identifier: UwKxYcYAuXa1jOEy0H+fSqNh2I/udRGNpCAzN40XiLo= Subject key identifier: 31:FE:5B:18:9A:B2:88:4F:0B:7F:78:AF:11:CE:4F:F0:40:B7:9A:E4 Authority key identifier: 19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C Certificate issuer: /CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C Certificate serial: 19FA89E11E25FE9F14E836A358C41E5279CAB4C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft Manifest number: 04C0 Signing time: Thu 03 Apr 2025 22:31:33 +0000 Manifest this update: Thu 03 Apr 2025 22:26:33 +0000 Manifest next update: Mon 07 Apr 2025 07:06:33 +0000 Files and hashes: 1: 3131322e37382e34302e302f32312d3234203d3e203435333032.roa (hash: edHDzblDFRhSx06oJof4TjRb+BqE1LKTByyhYbMMo3U=) 2: 323430333a393130303a3a2f33322d3332203d3e203435333032.roa (hash: yCfGLKGWTw0wAfTHt+3rKRfpUiZgwzZqi9YE0DFo8qw=) 3: 19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl (hash: u3kED5/eMWIK7HSf06N0LRSIThVzQDSRHKYcpuEaK6Y=) 4: 3135372e3131392e3232302e302f32322d3234203d3e203435333032.roa (hash: vIr8EFYpMesmWpGG8L+iJmePa3KxzvW4o1c9yABNaa4=) 5: 323430333a393130303a3a2f33322d3438203d3e203435333032.roa (hash: dXfOwr4D7hi0pFgBfSAkljLBG11kvd4r3FLz7SkdHtQ=) 6: 3130332e33302e3138302e302f32322d3234203d3e203435333032.roa (hash: zUx2kf2nkQpYSZevtua25+SSipsaj70ohdMYswyhmiA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 07:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:fa:89:e1:1e:25:fe:9f:14:e8:36:a3:58:c4:1e:52:79:ca:b4:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C Validity Not Before: Apr 3 22:26:33 2025 GMT Not After : Apr 7 07:06:33 2025 GMT Subject: CN=31FE5B189AB2884F0B7F78AF11CE4FF040B79AE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8d:c9:cb:83:1f:d0:7b:24:2c:93:d5:c7:cc: d5:21:54:9c:53:f3:4c:f7:7d:0e:d4:0f:6e:1c:ea: aa:ac:ee:82:f1:8f:7e:79:6a:c2:9d:3c:1f:7a:aa: 17:97:53:e6:95:ff:94:e5:da:23:1c:ce:e1:ce:66: 4f:63:4c:5e:04:63:f5:fc:ba:f2:f0:c4:82:4b:71: 47:57:25:f9:11:37:b2:b4:b1:15:aa:8b:77:df:bd: 58:26:6e:25:81:ca:cd:1d:b6:b9:08:e3:ed:5a:c1: 4d:8b:02:81:7b:f3:77:c2:f2:34:36:6f:c8:2e:48: 09:7c:dc:88:a1:b3:9b:fa:32:23:37:18:ae:9a:14: 07:47:cb:2b:91:38:4e:dd:c6:37:14:83:1d:2e:e2: ce:bf:79:0d:36:3f:0c:ff:e9:46:30:b2:44:12:86: aa:2f:b3:14:1f:9f:87:0a:1e:ac:82:24:fc:09:47: 04:35:a4:2e:da:c5:c8:c4:ce:74:9e:dd:a4:bd:5a: 87:b0:ee:c8:e9:38:2c:7e:a7:0a:52:c9:7f:4e:56: 6a:98:0b:69:b2:8a:f2:6b:05:58:a1:45:74:3f:7b: 85:74:20:e3:10:df:5c:9b:18:e9:81:39:8a:ca:b5: ab:19:93:12:d2:51:23:b5:6d:2a:3d:51:15:96:28: 9d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FE:5B:18:9A:B2:88:4F:0B:7F:78:AF:11:CE:4F:F0:40:B7:9A:E4 X509v3 Authority Key Identifier: keyid:19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:b2:56:0c:d9:60:dc:6d:10:a9:3c:55:82:ec:92:cd:ae:17: 5a:ca:c7:88:07:15:72:cd:ed:93:84:c4:9d:8c:ab:98:7e:90: 65:e4:94:0f:be:e3:1a:92:b7:08:d7:d4:ee:79:c0:4a:2e:c3: 37:3f:7f:a0:c0:33:cc:ed:fc:79:c8:ce:5b:26:4e:24:f9:b5: 09:c5:57:44:53:0b:43:40:42:bb:70:31:d7:49:ec:c9:13:a0: 23:89:e8:5b:f3:a2:ca:91:81:a2:68:1e:37:8d:b4:f2:33:33: de:b6:20:74:34:e3:01:5b:31:87:0f:1d:49:e9:97:2a:20:53: a9:0e:4a:a0:dd:ba:05:ae:da:41:c3:17:73:5a:59:fe:ea:f0: aa:52:df:dc:7f:cf:63:08:84:72:4f:97:b3:8c:14:1c:cf:27: 34:2b:9b:cb:35:2a:1f:1a:bd:57:eb:f4:b4:89:d3:f1:06:14: ba:3e:82:4f:25:63:75:11:b0:15:3c:ab:68:c7:03:f9:3e:f7: 3f:d0:89:bc:39:ce:a6:24:07:93:9b:dd:db:70:fc:f8:9c:5d: 52:22:3a:4f:ac:1f:ee:0c:29:79:78:5b:d3:cf:a9:76:2f:02: 1d:03:39:97:93:a1:f4:e9:7d:51:1c:58:ec:46:11:ec:53:f6: 30:83:a3:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGfqJ4R4l/p8U6DajWMQeUnnKtMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMxNjM4 N0U2NUMzQzAeFw0yNTA0MDMyMjI2MzNaFw0yNTA0MDcwNzA2MzNaMDMxMTAvBgNV BAMTKDMxRkU1QjE4OUFCMjg4NEYwQjdGNzhBRjExQ0U0RkYwNDBCNzlBRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6jcnLgx/QeyQsk9XHzNUhVJxT 80z3fQ7UD24c6qqs7oLxj355asKdPB96qheXU+aV/5Tl2iMczuHOZk9jTF4EY/X8 uvLwxIJLcUdXJfkRN7K0sRWqi3ffvVgmbiWBys0dtrkI4+1awU2LAoF783fC8jQ2 b8guSAl83Iihs5v6MiM3GK6aFAdHyyuROE7dxjcUgx0u4s6/eQ02Pwz/6UYwskQS hqovsxQfn4cKHqyCJPwJRwQ1pC7axcjEznSe3aS9Woew7sjpOCx+pwpSyX9OVmqY C2myivJrBVihRXQ/e4V0IOMQ31ybGOmBOYrKtasZkxLSUSO1bSo9URWWKJ2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMf5bGJqyiE8Lf3ivEc5P8EC3muQwHwYDVR0j BBgwFoAUGaGW9eW6ujGSbFru9E/BY4fmXDwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yjg4NThlMC1lY2YwLTRlNTMtYTQ5MC0zYjdjMmRlMTY5M2MvMC8xOUExOTZGNUU1 QkFCQTMxOTI2QzVBRUVGNDRGQzE2Mzg3RTY1QzNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMxNjM4N0U2 NUMzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmI4ODU4ZTAtZWNmMC00ZTUzLWE0 OTAtM2I3YzJkZTE2OTNjLzAvMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMx NjM4N0U2NUMzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECyVgzZYNxtEKk8VYLsks2uF1rKx4gHFXLN 7ZOExJ2Mq5h+kGXklA++4xqStwjX1O55wEouwzc/f6DAM8zt/HnIzlsmTiT5tQnF V0RTC0NAQrtwMddJ7MkToCOJ6FvzosqRgaJoHjeNtPIzM962IHQ04wFbMYcPHUnp lyogU6kOSqDdugWu2kHDF3NaWf7q8KpS39x/z2MIhHJPl7OMFBzPJzQrm8s1Kh8a vVfr9LSJ0/EGFLo+gk8lY3URsBU8q2jHA/k+9z/Qibw5zqYkB5Ob3dtw/PicXVIi Ok+sH+4MKXl4W9PPqXYvAh0DOZeTofTpfVEcWOxGEexT9jCDo+8= -----END CERTIFICATE-----Generated at Sat Apr 5 15:30:50 2025 by rpki-client