$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft File: 19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft (raw, json) Hash identifier: 9QhY0ENOseGaarVXYNp62pnV45k1xTDtJjh72UcwHbY= Subject key identifier: 1D:3C:45:75:0E:B1:EC:01:AA:A3:05:96:20:59:F5:ED:E9:57:B4:55 Authority key identifier: 19:B0:5C:44:D9:C6:EB:80:26:B6:C6:50:65:89:E4:C2:FB:B1:32:D3 Certificate issuer: /CN=19B05C44D9C6EB8026B6C6506589E4C2FBB132D3 Certificate serial: 2BAA66F133C1BB74C4CF93863ABFF1C44193FF3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft Manifest number: 7C Signing time: Sat 14 Jun 2025 12:50:47 +0000 Manifest this update: Sat 14 Jun 2025 12:45:47 +0000 Manifest next update: Tue 17 Jun 2025 18:27:47 +0000 Files and hashes: 1: 19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.crl (hash: fhDxFdBB/DknEbUcP+t4FLo5aRRtRB9A4CY8hd0DJ6E=) 2: 3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa (hash: 9PCqgM4cYwxJhzjcC5PwzOGJSMyyIfUQz/Yhckz5Cok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 18:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:aa:66:f1:33:c1:bb:74:c4:cf:93:86:3a:bf:f1:c4:41:93:ff:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19B05C44D9C6EB8026B6C6506589E4C2FBB132D3 Validity Not Before: Jun 14 12:45:47 2025 GMT Not After : Jun 17 18:27:47 2025 GMT Subject: CN=1D3C45750EB1EC01AAA305962059F5EDE957B455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cf:90:49:57:49:5a:9f:6b:95:86:60:b2:da: 91:01:b2:94:cb:95:96:4d:a9:7d:30:9d:63:12:ff: 38:ab:3d:cc:11:47:18:1f:d5:18:9a:f7:af:b2:5b: f6:38:6a:07:c6:8d:82:98:5f:20:04:41:de:b4:ff: d4:bf:54:8e:83:40:c8:6f:59:91:28:68:18:66:d4: ce:e2:fa:82:44:68:a8:12:d9:9f:00:14:cb:4d:0f: bb:76:ed:6b:3c:ac:08:7a:8d:ac:1d:f8:e7:12:58: f8:56:94:4a:79:fe:1b:ea:39:29:09:73:84:a4:11: ce:0f:e9:01:83:c5:5e:61:9c:64:19:c3:dd:e2:83: 29:ab:f2:8e:55:84:40:b9:8b:88:4d:f1:04:5a:cb: 60:8e:67:ee:9a:3d:cd:d5:a5:6d:aa:87:b0:a1:11: a5:03:b8:a5:3f:ae:6d:86:e6:13:4d:99:3c:32:b8: e3:78:25:e4:d4:58:4d:15:8f:f8:09:63:59:87:ec: 7a:63:2e:4e:0a:fb:ea:12:93:be:04:76:2b:fb:31: eb:99:18:76:75:e7:bd:f7:45:70:90:be:5d:ed:87: c0:a1:cf:9a:76:2b:88:63:ae:50:1f:de:a3:29:ef: 98:ff:57:6b:13:06:7f:8a:a6:a9:b8:50:87:08:3d: be:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3C:45:75:0E:B1:EC:01:AA:A3:05:96:20:59:F5:ED:E9:57:B4:55 X509v3 Authority Key Identifier: keyid:19:B0:5C:44:D9:C6:EB:80:26:B6:C6:50:65:89:E4:C2:FB:B1:32:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a7:23:f2:e6:1d:07:24:65:af:75:ae:75:f5:5d:79:8e:b5: 55:3c:b6:f7:a6:a8:d8:3d:a0:3c:79:de:e0:a2:40:07:7c:bd: 56:67:58:ab:71:72:d4:53:4c:0d:12:ec:68:05:58:41:c7:ff: 7f:85:03:96:e1:44:c7:38:d6:a0:a5:68:98:a5:4e:76:59:67: c8:8a:ec:3b:2e:7a:7e:ae:11:9c:61:bf:d2:de:7f:70:1c:5f: f1:7b:e0:c6:47:8f:f2:21:e4:e6:8b:31:25:c2:fc:91:76:69: 0e:6b:1b:a3:80:c7:cf:df:1d:60:8a:e8:f6:f8:e8:10:bb:eb: 87:b8:c2:03:5e:bf:cf:9c:78:85:b1:40:39:5c:ea:aa:d5:43: cc:c5:44:e0:63:29:62:bb:33:5f:1c:b2:03:1f:56:71:b1:50: 5c:b8:6b:2c:ba:00:e1:44:1f:79:e9:52:c5:99:e4:9c:46:72: dd:60:c7:18:27:3a:8f:9d:a4:8a:4b:f4:bc:8d:ae:54:24:e8: 11:86:63:fa:14:6a:7a:23:40:7c:8e:a8:af:f2:85:5e:34:ec: 77:32:ea:82:df:b2:c4:d0:da:c8:de:2e:52:14:00:59:28:b5: cd:75:a8:24:2b:2a:fb:f3:b0:fb:28:01:72:cb:7a:ad:9c:6a: 7b:4d:9e:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK6pm8TPBu3TEz5OGOr/xxEGT/zwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlCMDVDNDREOUM2RUI4MDI2QjZDNjUwNjU4OUU0QzJG QkIxMzJEMzAeFw0yNTA2MTQxMjQ1NDdaFw0yNTA2MTcxODI3NDdaMDMxMTAvBgNV BAMTKDFEM0M0NTc1MEVCMUVDMDFBQUEzMDU5NjIwNTlGNUVERTk1N0I0NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBz5BJV0lan2uVhmCy2pEBspTL lZZNqX0wnWMS/zirPcwRRxgf1Ria96+yW/Y4agfGjYKYXyAEQd60/9S/VI6DQMhv WZEoaBhm1M7i+oJEaKgS2Z8AFMtND7t27Ws8rAh6jawd+OcSWPhWlEp5/hvqOSkJ c4SkEc4P6QGDxV5hnGQZw93igymr8o5VhEC5i4hN8QRay2COZ+6aPc3VpW2qh7Ch EaUDuKU/rm2G5hNNmTwyuON4JeTUWE0Vj/gJY1mH7HpjLk4K++oSk74Ediv7MeuZ GHZ15733RXCQvl3th8Chz5p2K4hjrlAf3qMp75j/V2sTBn+Kpqm4UIcIPb57AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHTxFdQ6x7AGqowWWIFn17elXtFUwHwYDVR0j BBgwFoAUGbBcRNnG64AmtsZQZYnkwvuxMtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMC8xOUIwNUM0NEQ5 QzZFQjgwMjZCNkM2NTA2NTg5RTRDMkZCQjEzMkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTlCMDVDNDREOUM2RUI4MDI2QjZDNjUwNjU4OUU0QzJGQkIx MzJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzAvMTlCMDVDNDREOUM2RUI4MDI2QjZDNjUwNjU4OUU0 QzJGQkIxMzJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWnI/LmHQckZa91rnX1XXmOtVU8tvemqNg9 oDx53uCiQAd8vVZnWKtxctRTTA0S7GgFWEHH/3+FA5bhRMc41qClaJilTnZZZ8iK 7Dsuen6uEZxhv9Lef3AcX/F74MZHj/Ih5OaLMSXC/JF2aQ5rG6OAx8/fHWCK6Pb4 6BC764e4wgNev8+ceIWxQDlc6qrVQ8zFROBjKWK7M18csgMfVnGxUFy4ayy6AOFE H3npUsWZ5JxGct1gxxgnOo+dpIpL9LyNrlQk6BGGY/oUanojQHyOqK/yhV407Hcy 6oLfssTQ2sjeLlIUAFkotc11qCQrKvvzsPsoAXLLeq2cantNnv0= -----END CERTIFICATE-----Generated at Mon Jun 16 17:43:16 2025 by rpki-client