$ rpki-client -vvf repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft File: 3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft (raw, json) Hash identifier: qkPhubVcXyYKm4i5FS32rJmYF0Yf7CqTNcxR2NFzGNQ= Subject key identifier: 4A:6C:DE:C5:8E:73:4F:0E:D1:7E:B5:84:A0:A3:7D:E2:91:F3:ED:E4 Authority key identifier: 31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 Certificate issuer: /CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5 Certificate serial: 0927E0AEBC7E3BF259EFB2AE151A68CAB83E23B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft Manifest number: 61 Signing time: Tue 05 Aug 2025 01:00:46 +0000 Manifest this update: Tue 05 Aug 2025 00:55:46 +0000 Manifest next update: Fri 08 Aug 2025 08:17:46 +0000 Files and hashes: 1: 3130332e3136322e33352e302f32342d3234203d3e20313431363535.roa (hash: 2q+rh+u7xtZBbh00UB11LmVHu3mC0doj4usif/1P0SE=) 2: 3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl (hash: OKDlOytrc6EZEZ0Q9kNy5kQyp03U2xZ7tJ9KlMU84Q4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 08:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:27:e0:ae:bc:7e:3b:f2:59:ef:b2:ae:15:1a:68:ca:b8:3e:23:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5 Validity Not Before: Aug 5 00:55:46 2025 GMT Not After : Aug 8 08:17:46 2025 GMT Subject: CN=4A6CDEC58E734F0ED17EB584A0A37DE291F3EDE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5d:96:4d:fd:d7:41:2e:18:62:ff:07:bb:5f: 9d:4d:fb:80:d8:49:da:b3:7e:f5:7f:b2:40:0b:d7: 72:17:1f:7e:79:70:e6:37:70:b4:82:29:c3:0c:41: af:93:32:51:21:9b:f5:ef:c8:b7:cf:2e:11:f5:c0: 66:28:19:c4:d5:a0:0b:5b:d3:6d:45:d8:24:d3:0d: 3b:6b:ab:4d:23:13:e0:54:22:62:b4:62:a3:50:ad: dc:dd:dc:e3:c7:fc:07:94:95:a4:3c:ba:24:1b:5f: f6:5e:42:3a:cd:a3:77:ae:81:d8:0d:be:f7:ee:83: a8:77:c2:05:da:39:20:5d:3d:f1:61:8e:02:89:8e: 1c:80:67:a1:03:f0:6f:5e:bf:27:c7:f2:3b:ec:ee: e0:14:3f:42:ba:d3:b2:ee:80:dd:e3:19:c5:45:a9: 90:cc:c7:b3:87:f8:83:68:5c:dc:59:8e:13:e0:d0: ca:d9:30:56:a0:13:f9:fc:04:1f:15:37:e5:89:78: b9:c1:b7:a0:17:85:9c:da:dd:71:e0:b0:8e:dc:15: 3b:f9:78:73:0c:7f:74:74:c4:9f:5a:81:77:3f:36: dd:f6:76:4b:bc:20:56:c4:1d:75:11:0d:bf:7f:17: 6f:ac:02:97:12:59:85:10:cd:c9:84:74:14:7f:73: 66:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6C:DE:C5:8E:73:4F:0E:D1:7E:B5:84:A0:A3:7D:E2:91:F3:ED:E4 X509v3 Authority Key Identifier: keyid:31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:08:8f:a7:74:45:3d:ce:07:bc:84:18:d1:c4:4d:50:25:37: f0:dc:21:a0:2d:d7:e0:80:28:86:0e:b3:71:9a:5a:b3:61:a4: d8:e4:1d:81:dc:9b:6d:1b:40:83:03:20:5d:65:d0:ff:c9:9d: 63:71:cf:6b:f6:83:dd:00:ef:f8:59:7f:85:5c:66:b3:47:ec: fe:0a:bd:e5:05:4a:bc:89:0d:fc:91:5b:c5:03:ef:2a:08:9c: 21:5e:73:77:7f:77:fe:4f:d2:b1:bf:8c:ed:96:15:fa:39:55: 49:46:16:0a:c3:05:f5:f8:42:28:a0:4d:4b:21:78:da:05:1b: 26:4a:b5:16:5a:c2:e1:59:bc:00:b5:cc:9c:76:ec:49:95:b5: 5a:bc:39:e9:9e:38:b4:45:a9:e2:a0:74:3f:81:4c:00:3a:7b: b7:d1:6e:57:d0:69:ab:fc:b2:0f:28:61:1f:f0:c9:bd:ac:ef: 1e:2f:36:7f:bf:70:0d:d6:10:af:54:33:b9:89:fd:95:ca:b3: c9:b5:cc:d8:cb:da:2d:11:29:0d:1c:e5:d2:3d:46:47:cf:85: 3f:b0:eb:dd:3e:d5:ad:2d:57:a8:a0:c0:42:00:78:9e:f7:9d: 94:23:50:e6:9c:3e:68:bd:33:86:57:a1:dc:06:0f:5e:c3:4e: cd:d4:b1:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCSfgrrx+O/JZ77KuFRpoyrg+I7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2QURF RjEzMjlCNTAeFw0yNTA4MDUwMDU1NDZaFw0yNTA4MDgwODE3NDZaMDMxMTAvBgNV BAMTKDRBNkNERUM1OEU3MzRGMEVEMTdFQjU4NEEwQTM3REUyOTFGM0VERTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8XZZN/ddBLhhi/we7X51N+4DY SdqzfvV/skAL13IXH355cOY3cLSCKcMMQa+TMlEhm/XvyLfPLhH1wGYoGcTVoAtb 021F2CTTDTtrq00jE+BUImK0YqNQrdzd3OPH/AeUlaQ8uiQbX/ZeQjrNo3eugdgN vvfug6h3wgXaOSBdPfFhjgKJjhyAZ6ED8G9evyfH8jvs7uAUP0K607LugN3jGcVF qZDMx7OH+INoXNxZjhPg0MrZMFagE/n8BB8VN+WJeLnBt6AXhZza3XHgsI7cFTv5 eHMMf3R0xJ9agXc/Nt32dku8IFbEHXURDb9/F2+sApcSWYUQzcmEdBR/c2ZBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSmzexY5zTw7RfrWEoKN94pHz7eQwHwYDVR0j BBgwFoAUMZTf1mRXNZr3vzvwnqdmre8TKbUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y M2JhMDI0Yi04N2YyLTRlZGQtODlmZi1hNGZjYTcwMDhjMzYvMC8zMTk0REZENjY0 NTczNTlBRjdCRjNCRjA5RUE3NjZBREVGMTMyOUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2QURFRjEz MjlCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjNiYTAyNGItODdmMi00ZWRkLTg5 ZmYtYTRmY2E3MDA4YzM2LzAvMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2 QURFRjEzMjlCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALoIj6d0RT3OB7yEGNHETVAlN/DcIaAt1+CA KIYOs3GaWrNhpNjkHYHcm20bQIMDIF1l0P/JnWNxz2v2g90A7/hZf4VcZrNH7P4K veUFSryJDfyRW8UD7yoInCFec3d/d/5P0rG/jO2WFfo5VUlGFgrDBfX4QiigTUsh eNoFGyZKtRZawuFZvAC1zJx27EmVtVq8OemeOLRFqeKgdD+BTAA6e7fRblfQaav8 sg8oYR/wyb2s7x4vNn+/cA3WEK9UM7mJ/ZXKs8m1zNjL2i0RKQ0c5dI9RkfPhT+w 690+1a0tV6igwEIAeJ73nZQjUOacPmi9M4ZXodwGD17DTs3UsfU= -----END CERTIFICATE-----Generated at Thu Aug 7 00:25:40 2025 by rpki-client