$ rpki-client -vvf repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft File: 19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft (raw, json) Hash identifier: ikBfHaS4merQsd8uny9lR7Ukqx12kpmMEW1iRhW/PQw= Subject key identifier: DA:34:01:03:A2:F6:46:80:B9:02:78:0B:E8:F1:B9:66:09:3C:6A:26 Authority key identifier: 19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE Certificate issuer: /CN=19280B8F5AA4FBDEC679C351EB040D284CF791BE Certificate serial: 5E69296A0B1D7CEB16480429B32DC6EB414C5877 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft Manifest number: 01B9 Signing time: Mon 03 Nov 2025 05:21:56 +0000 Manifest this update: Mon 03 Nov 2025 05:16:56 +0000 Manifest next update: Thu 06 Nov 2025 06:20:56 +0000 Files and hashes: 1: 3130332e36382e3231342e302f32332d3234203d3e20313530353137.roa (hash: tbt+hpy8ToUXUjWyR8QE4BU+KE7C2NtbzZcO6JiudhY=) 2: 19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl (hash: k73hbthHQzVir6PNao6hRVAIWfwyG6w8MWWPsa/UgJM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 06:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:69:29:6a:0b:1d:7c:eb:16:48:04:29:b3:2d:c6:eb:41:4c:58:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19280B8F5AA4FBDEC679C351EB040D284CF791BE Validity Not Before: Nov 3 05:16:56 2025 GMT Not After : Nov 6 06:20:56 2025 GMT Subject: CN=DA340103A2F64680B902780BE8F1B966093C6A26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:af:87:83:27:70:1b:0a:43:c2:d5:d2:94:b7: d6:b5:b8:d5:0f:a0:3a:c5:01:57:9d:46:10:9f:7f: 94:8b:0c:e8:70:a6:31:a7:00:23:c4:7a:8c:57:95: de:4e:e8:86:73:14:47:b4:25:fe:08:81:2e:67:f3: 87:1f:bb:df:fb:b3:96:71:15:25:be:9f:66:b0:eb: 4a:7c:1e:c0:b2:85:87:fc:ec:11:da:07:ae:8b:0f: f6:0b:7a:e2:36:a7:b9:bf:38:a3:83:c7:15:be:73: 39:77:77:f9:77:39:b5:4d:15:75:a4:60:d1:37:7a: 89:26:38:d1:e6:a7:79:a3:20:18:9a:6f:98:1f:d7: 0b:d0:38:f9:a4:84:91:50:d4:f5:fe:8c:62:8c:9d: 57:0f:06:4b:e9:49:46:e9:76:a9:3f:ab:1c:0b:f1: d0:c3:72:21:32:c8:b0:15:08:1b:62:31:16:d0:95: 77:e7:2e:00:1e:1c:bd:2e:f0:7c:77:66:8f:09:88: c3:3e:40:45:e3:fb:08:df:0f:03:db:e7:fd:e2:df: 49:44:89:54:7a:cb:70:8a:0c:8e:ca:1c:03:b6:62: be:e4:55:e3:b5:70:0a:58:ec:fa:3c:49:30:fe:e4: 0f:ac:ad:93:c9:b5:f4:74:d5:00:14:52:89:72:69: a2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:34:01:03:A2:F6:46:80:B9:02:78:0B:E8:F1:B9:66:09:3C:6A:26 X509v3 Authority Key Identifier: keyid:19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:5a:87:b8:e4:0d:83:ea:a5:d8:4f:ec:1d:ca:97:d4:b3:78: 5a:4d:f8:5b:66:f9:18:30:40:ac:89:2e:5b:78:f9:48:fb:ec: a2:e4:7e:fd:bd:c7:64:0e:b3:7f:c0:b2:10:53:ab:d7:ac:d1: 95:cc:d9:5e:8e:33:ce:ba:50:99:9b:a0:a2:0f:4c:3f:32:66: 7b:f3:76:0b:ec:f6:65:ad:da:b0:13:bc:56:f2:9f:a0:37:2a: bf:b2:4a:eb:06:e0:51:05:3d:e8:0e:3a:9b:65:72:71:9f:61: ec:35:e7:1d:e4:8a:17:76:e7:28:df:23:5f:83:cc:d9:72:de: 3d:f5:06:be:cb:fc:d9:47:45:18:8b:fe:5a:9a:c9:7b:4a:73: 22:5a:37:bb:3f:ba:1c:77:ff:59:f6:4a:e3:24:33:1e:66:c8: 5e:d6:ac:be:f7:91:8e:12:7b:fc:92:f0:66:4b:54:de:f2:57: 55:2b:c3:88:a8:9a:cc:6c:42:c5:c8:96:9f:70:88:5c:be:b7: c3:c3:5b:3d:09:6c:13:63:23:16:19:7a:77:60:d8:8d:21:e0: 92:38:6a:a2:dd:66:82:66:c3:ba:b7:52:98:9b:1c:ad:41:5b: d9:c7:6f:21:2e:14:18:c8:81:a2:cd:fe:fa:57:da:5a:8e:fb: 8e:d0:6d:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXmkpagsdfOsWSAQpsy3G60FMWHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBEMjg0 Q0Y3OTFCRTAeFw0yNTExMDMwNTE2NTZaFw0yNTExMDYwNjIwNTZaMDMxMTAvBgNV BAMTKERBMzQwMTAzQTJGNjQ2ODBCOTAyNzgwQkU4RjFCOTY2MDkzQzZBMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDr4eDJ3AbCkPC1dKUt9a1uNUP oDrFAVedRhCff5SLDOhwpjGnACPEeoxXld5O6IZzFEe0Jf4IgS5n84cfu9/7s5Zx FSW+n2aw60p8HsCyhYf87BHaB66LD/YLeuI2p7m/OKODxxW+czl3d/l3ObVNFXWk YNE3eokmONHmp3mjIBiab5gf1wvQOPmkhJFQ1PX+jGKMnVcPBkvpSUbpdqk/qxwL 8dDDciEyyLAVCBtiMRbQlXfnLgAeHL0u8Hx3Zo8JiMM+QEXj+wjfDwPb5/3i30lE iVR6y3CKDI7KHAO2Yr7kVeO1cApY7Po8STD+5A+srZPJtfR01QAUUolyaaIfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2jQBA6L2RoC5AngL6PG5Zgk8aiYwHwYDVR0j BBgwFoAUGSgLj1qk+97GecNR6wQNKEz3kb4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZWJmNjNlZC1kNDUwLTQ3N2UtYjMxYi1hZjkyYjE3MjZkMmUvMC8xOTI4MEI4RjVB QTRGQkRFQzY3OUMzNTFFQjA0MEQyODRDRjc5MUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBEMjg0Q0Y3 OTFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGViZjYzZWQtZDQ1MC00NzdlLWIz MWItYWY5MmIxNzI2ZDJlLzAvMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBE Mjg0Q0Y3OTFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFah7jkDYPqpdhP7B3Kl9SzeFpN+Ftm+Rgw QKyJLlt4+Uj77KLkfv29x2QOs3/AshBTq9es0ZXM2V6OM866UJmboKIPTD8yZnvz dgvs9mWt2rATvFbyn6A3Kr+ySusG4FEFPegOOptlcnGfYew15x3kihd25yjfI1+D zNly3j31Br7L/NlHRRiL/lqayXtKcyJaN7s/uhx3/1n2SuMkMx5myF7WrL73kY4S e/yS8GZLVN7yV1Urw4iomsxsQsXIlp9wiFy+t8PDWz0JbBNjIxYZendg2I0h4JI4 aqLdZoJmw7q3UpibHK1BW9nHbyEuFBjIgaLN/vpX2lqO+47QbRk= -----END CERTIFICATE-----Generated at Tue Nov 4 22:57:31 2025 by rpki-client