$ rpki-client -vvf repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft File: 19B904DED71657E1E79F9B50507DCCCB817E9635.mft (raw, json) Hash identifier: UKmL3h9a92Ob2HeJxaRpHes9JlMEMrL6lx5LQOJc6H4= Subject key identifier: EC:29:F0:84:48:B8:A6:4E:01:84:5D:FF:6B:DB:54:63:00:2C:0F:49 Authority key identifier: 19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35 Certificate issuer: /CN=19B904DED71657E1E79F9B50507DCCCB817E9635 Certificate serial: 71F8065258F0FA8E2BCAC8EEE8B88B9180433F11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft Manifest number: 01DB Signing time: Sun 02 Nov 2025 19:51:18 +0000 Manifest this update: Sun 02 Nov 2025 19:46:18 +0000 Manifest next update: Wed 05 Nov 2025 22:31:18 +0000 Files and hashes: 1: 19B904DED71657E1E79F9B50507DCCCB817E9635.crl (hash: kbXNRm/3djoA8dmQQwqzWlxRVl3+4EWSdHOp3DXrSiM=) 2: 3130332e38332e38342e302f32342d3234203d3e20313530323533.roa (hash: rxQ2JaYw7ULxDCv5OE6MiX+tQg4bCcbyeQJKcyeV4Tw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.crl rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 22:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:f8:06:52:58:f0:fa:8e:2b:ca:c8:ee:e8:b8:8b:91:80:43:3f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19B904DED71657E1E79F9B50507DCCCB817E9635 Validity Not Before: Nov 2 19:46:18 2025 GMT Not After : Nov 5 22:31:18 2025 GMT Subject: CN=EC29F08448B8A64E01845DFF6BDB5463002C0F49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7e:89:2d:da:14:1a:b2:1f:01:c8:d1:2b:4d: 17:b9:d8:90:08:17:b9:3e:64:1a:a5:7c:1a:58:75: 76:9c:65:71:95:c2:89:ca:3e:b4:9a:f4:c2:40:05: 61:8a:94:1d:6c:a9:aa:2f:a4:5b:c8:3a:17:d8:e8: b7:bf:2d:ba:d6:f6:37:59:c6:40:ad:d1:aa:78:06: ad:56:bb:ea:76:bc:69:37:8d:af:86:b5:38:63:6e: e9:3f:b6:b9:a9:c8:f1:e9:44:d0:39:29:bd:3b:b3: 88:47:93:b1:cf:c4:5c:c7:19:d4:0d:46:48:1b:7f: ce:a0:5a:20:97:74:8a:3f:6b:6c:24:ee:3e:42:86: f7:90:2b:8e:3c:70:a3:d1:5c:51:7d:e0:cb:a5:79: 23:20:39:e0:38:79:d9:ee:9e:75:8c:50:96:ee:2f: 12:82:b3:6e:48:6c:f3:f4:53:18:a1:48:c8:c5:7b: f9:38:7c:9a:f8:07:87:12:62:40:c3:18:40:8d:06: be:cb:2d:f6:06:3f:24:7e:20:06:f4:a8:9b:18:9d: 48:bd:98:cc:de:ef:06:4d:03:60:c8:5c:8e:00:e8: 98:b9:86:8d:c8:85:2f:d8:5b:e6:61:3a:47:f6:63: 3e:64:0b:c8:94:e4:55:3f:a9:65:c1:34:6d:cb:80: 28:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:29:F0:84:48:B8:A6:4E:01:84:5D:FF:6B:DB:54:63:00:2C:0F:49 X509v3 Authority Key Identifier: keyid:19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:00:cc:5d:4f:7c:d2:b3:9e:d7:f1:d0:86:a5:81:d3:99:ec: c7:83:a2:a7:08:e5:02:3e:05:31:8b:7f:67:64:6d:8f:7b:a1: 45:a6:b4:6c:9b:32:2e:06:24:93:3f:83:87:90:fe:1d:3c:2c: e5:db:b7:99:f6:b4:14:de:2d:c6:8a:77:7b:20:3d:d7:75:62: 40:12:98:31:5f:75:72:9e:d1:71:dd:bd:0e:94:bd:3a:15:98: 32:48:e5:fc:f0:3f:87:1b:e8:85:76:74:cc:d2:7c:4d:5b:7b: c4:47:4c:74:2d:13:70:1c:13:98:e4:19:31:09:86:bc:6d:42: 4e:f9:1c:23:99:b7:29:40:d0:96:bf:8d:88:07:ac:17:98:4f: e8:85:c9:7e:09:99:ac:69:21:b4:4e:77:c4:3a:33:c8:12:bf: fb:c1:24:12:96:50:7b:9c:84:b5:f3:d5:9d:0e:35:32:dd:71: c1:73:20:5c:c2:80:ec:fd:ee:ff:95:ea:11:be:6b:ff:e4:35: 52:8a:84:c2:db:20:03:4e:a9:19:13:43:da:f2:19:ee:c5:74: 97:b5:7d:a7:38:43:a2:9f:55:eb:d2:8a:17:2a:a0:57:55:57: e5:5a:1c:f8:af:9a:d9:cf:84:86:22:a6:e8:9b:df:fe:25:b0: 84:47:d6:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcfgGUljw+o4rysju6LiLkYBDPxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3RENDQ0I4 MTdFOTYzNTAeFw0yNTExMDIxOTQ2MThaFw0yNTExMDUyMjMxMThaMDMxMTAvBgNV BAMTKEVDMjlGMDg0NDhCOEE2NEUwMTg0NURGRjZCREI1NDYzMDAyQzBGNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAfokt2hQash8ByNErTRe52JAI F7k+ZBqlfBpYdXacZXGVwonKPrSa9MJABWGKlB1sqaovpFvIOhfY6Le/LbrW9jdZ xkCt0ap4Bq1Wu+p2vGk3ja+GtThjbuk/trmpyPHpRNA5Kb07s4hHk7HPxFzHGdQN Rkgbf86gWiCXdIo/a2wk7j5ChveQK448cKPRXFF94MuleSMgOeA4ednunnWMUJbu LxKCs25IbPP0UxihSMjFe/k4fJr4B4cSYkDDGECNBr7LLfYGPyR+IAb0qJsYnUi9 mMze7wZNA2DIXI4A6Ji5ho3IhS/YW+ZhOkf2Yz5kC8iU5FU/qWXBNG3LgChNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7CnwhEi4pk4BhF3/a9tUYwAsD0kwHwYDVR0j BBgwFoAUGbkE3tcWV+Hnn5tQUH3My4F+ljUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmU0MGE5OC05M2VmLTRhZjgtYTQzNi00Njk3NDAxNTQ3ODIvMC8xOUI5MDRERUQ3 MTY1N0UxRTc5RjlCNTA1MDdEQ0NDQjgxN0U5NjM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3RENDQ0I4MTdF OTYzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZlNDBhOTgtOTNlZi00YWY4LWE0 MzYtNDY5NzQwMTU0NzgyLzAvMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3REND Q0I4MTdFOTYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQAzF1PfNKzntfx0IalgdOZ7MeDoqcI5QI+ BTGLf2dkbY97oUWmtGybMi4GJJM/g4eQ/h08LOXbt5n2tBTeLcaKd3sgPdd1YkAS mDFfdXKe0XHdvQ6UvToVmDJI5fzwP4cb6IV2dMzSfE1be8RHTHQtE3AcE5jkGTEJ hrxtQk75HCOZtylA0Ja/jYgHrBeYT+iFyX4JmaxpIbROd8Q6M8gSv/vBJBKWUHuc hLXz1Z0ONTLdccFzIFzCgOz97v+V6hG+a//kNVKKhMLbIANOqRkTQ9ryGe7FdJe1 fac4Q6KfVevSihcqoFdVV+VaHPivmtnPhIYipuib3/4lsIRH1jo= -----END CERTIFICATE-----Generated at Tue Nov 4 08:21:18 2025 by rpki-client