$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft File: 19D983F92968E71520E086B32ACAFEFB5BF04943.mft (raw, json) Hash identifier: vA7P2YaRpdlOt/zqC9qvrCirJEGeSQWc1TQIymDmxsw= Subject key identifier: 8A:12:D9:71:DB:5C:53:83:31:B5:84:73:3F:8D:8F:64:20:C5:BB:76 Authority key identifier: 19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43 Certificate issuer: /CN=19D983F92968E71520E086B32ACAFEFB5BF04943 Certificate serial: 5177B4565EEEC0115B8F5704F4005F6B9C81CFBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft Manifest number: 04F6 Signing time: Mon 04 Aug 2025 18:32:24 +0000 Manifest this update: Mon 04 Aug 2025 18:27:24 +0000 Manifest next update: Fri 08 Aug 2025 05:40:24 +0000 Files and hashes: 1: 3130332e31382e3134342e302f32322d3234203d3e203538383137.roa (hash: 5e8rSnnuFx8UzgnzTqPOgNkN7iU6KGmkspkL1P/ryrM=) 2: 19D983F92968E71520E086B32ACAFEFB5BF04943.crl (hash: LCb9xEHcmAR3/ezVGq7/gfh1ET6ZLQ0SzJ/2ftlQX/4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.crl rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 05:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:77:b4:56:5e:ee:c0:11:5b:8f:57:04:f4:00:5f:6b:9c:81:cf:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19D983F92968E71520E086B32ACAFEFB5BF04943 Validity Not Before: Aug 4 18:27:24 2025 GMT Not After : Aug 8 05:40:24 2025 GMT Subject: CN=8A12D971DB5C538331B584733F8D8F6420C5BB76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4b:fd:a0:6c:4b:c2:92:fc:3c:ff:e5:0d:92: bd:2b:d4:8e:e1:66:34:78:2b:3f:f5:f1:f0:ba:12: cd:eb:f4:e9:4b:ce:a9:ad:a3:40:62:7a:88:14:81: 37:0f:e2:70:1e:66:3a:34:77:1a:27:db:09:f3:ed: a4:af:34:70:7c:6a:0e:13:0c:b2:96:84:1f:4b:7c: b4:ef:cd:cb:77:17:42:fd:4a:60:a8:9a:ab:b4:ab: 65:93:53:21:f9:d0:bb:47:33:35:7e:aa:1d:51:ed: 14:ac:bc:64:06:fa:87:25:7d:0e:e5:ae:ef:ed:83: 85:4f:9f:6b:34:0e:a1:bd:7b:56:23:a7:1f:bd:a5: 88:fb:4e:17:d4:e0:dc:dc:bb:33:e3:d8:be:dc:eb: 17:46:ef:9c:aa:94:47:6c:ab:d8:c7:1c:59:8e:ad: 6a:73:cb:b1:a1:be:b7:81:4f:d2:17:0b:e5:b9:af: 1b:a8:29:0c:08:3c:73:ea:15:1e:43:27:c7:59:cc: c6:7b:28:52:fe:eb:e7:14:ac:a0:50:c9:11:b2:d5: c2:fd:10:5f:17:d4:dd:5f:56:d3:3a:6a:ec:e2:e0: be:76:90:75:9e:e0:6a:9b:dd:22:de:77:e0:0c:20: 75:79:a7:fe:21:0c:b1:a5:b0:b6:6e:5e:83:4d:f7: 97:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:12:D9:71:DB:5C:53:83:31:B5:84:73:3F:8D:8F:64:20:C5:BB:76 X509v3 Authority Key Identifier: keyid:19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:7b:f4:08:35:93:a7:48:7b:bc:8a:5f:5c:8b:44:46:14:b7: 4f:90:17:0f:46:9e:74:4b:c4:ed:32:54:3e:86:20:ef:34:3e: 6b:3e:89:de:f2:cf:a0:20:8d:ff:37:66:4c:f8:78:41:f4:8d: ba:cb:56:8d:a4:67:22:76:81:15:5f:7e:c1:af:6f:53:bf:32: 6f:81:4d:a1:1a:02:2e:ac:1c:ae:c3:37:42:c6:2b:24:c9:4d: a2:aa:8f:18:c5:63:b2:2f:79:cd:82:3e:c5:15:3e:68:81:8f: e0:91:7f:54:ca:99:ab:75:4f:4f:db:26:fc:14:a6:24:ea:58: 34:1e:7b:48:76:eb:84:eb:db:4c:21:38:62:d5:bb:81:07:31: c3:66:2a:cf:d4:fd:e8:fd:78:15:fe:ae:5d:7a:cf:b3:9f:f4: 60:e4:20:76:b1:af:55:73:5f:3d:35:dc:d5:74:7d:d6:eb:b6: 50:63:46:33:c5:93:cd:fc:53:a9:77:92:2a:58:96:a6:82:42: c8:15:08:19:9b:7d:bb:ca:05:6f:5b:80:bb:8e:d8:b7:af:de: 73:4e:82:35:f5:42:4e:f8:7d:27:b2:58:54:a8:ba:60:43:15: cd:04:c9:06:97:e9:65:8e:ea:f5:21:72:88:27:59:fe:a7:ab: b3:ad:8c:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUXe0Vl7uwBFbj1cE9ABfa5yBz70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZFRkI1 QkYwNDk0MzAeFw0yNTA4MDQxODI3MjRaFw0yNTA4MDgwNTQwMjRaMDMxMTAvBgNV BAMTKDhBMTJEOTcxREI1QzUzODMzMUI1ODQ3MzNGOEQ4RjY0MjBDNUJCNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrS/2gbEvCkvw8/+UNkr0r1I7h ZjR4Kz/18fC6Es3r9OlLzqmto0BieogUgTcP4nAeZjo0dxon2wnz7aSvNHB8ag4T DLKWhB9LfLTvzct3F0L9SmComqu0q2WTUyH50LtHMzV+qh1R7RSsvGQG+oclfQ7l ru/tg4VPn2s0DqG9e1Yjpx+9pYj7ThfU4NzcuzPj2L7c6xdG75yqlEdsq9jHHFmO rWpzy7GhvreBT9IXC+W5rxuoKQwIPHPqFR5DJ8dZzMZ7KFL+6+cUrKBQyRGy1cL9 EF8X1N1fVtM6auzi4L52kHWe4Gqb3SLed+AMIHV5p/4hDLGlsLZuXoNN95dpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUihLZcdtcU4MxtYRzP42PZCDFu3YwHwYDVR0j BBgwFoAUGdmD+Slo5xUg4IazKsr++1vwSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2IxZjEwOS1iOWZlLTQzMjMtODRlMy1iNjBiYjRkYzFlY2MvMC8xOUQ5ODNGOTI5 NjhFNzE1MjBFMDg2QjMyQUNBRkVGQjVCRjA0OTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZFRkI1QkYw NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNiMWYxMDktYjlmZS00MzIzLTg0 ZTMtYjYwYmI0ZGMxZWNjLzAvMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZF RkI1QkYwNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKR79Ag1k6dIe7yKX1yLREYUt0+QFw9GnnRL xO0yVD6GIO80Pms+id7yz6Agjf83Zkz4eEH0jbrLVo2kZyJ2gRVffsGvb1O/Mm+B TaEaAi6sHK7DN0LGKyTJTaKqjxjFY7Ivec2CPsUVPmiBj+CRf1TKmat1T0/bJvwU piTqWDQee0h264Tr20whOGLVu4EHMcNmKs/U/ej9eBX+rl16z7Of9GDkIHaxr1Vz Xz013NV0fdbrtlBjRjPFk838U6l3kipYlqaCQsgVCBmbfbvKBW9bgLuO2Lev3nNO gjX1Qk74fSeyWFSoumBDFc0EyQaX6WWO6vUhcognWf6nq7OtjDw= -----END CERTIFICATE-----Generated at Wed Aug 6 07:43:46 2025 by rpki-client