$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft File: B197F427572524588487CFDB163A9E512FAE4DF2.mft (raw, json) Hash identifier: Zz6iG0IpfmWeWenaCUeVDj364vGH/GuV61zc3aGrjAs= Subject key identifier: 1B:7C:7E:8E:8E:13:11:8A:90:64:8F:E4:F6:6C:D8:08:F4:F6:71:9B Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 Certificate issuer: /CN=B197F427572524588487CFDB163A9E512FAE4DF2 Certificate serial: 141E954532AE538FE72CC31B3313B28E9FE0933F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft Manifest number: 0218 Signing time: Tue 05 Aug 2025 22:51:23 +0000 Manifest this update: Tue 05 Aug 2025 22:46:23 +0000 Manifest next update: Sat 09 Aug 2025 06:15:23 +0000 Files and hashes: 1: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: IlIKis9hrjcqU4gajZ2m+r4qTrp6BInf4S11M61jB+A=) 2: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: sqH8mgq0fr+XiznMLTzogmtodA1+q341U0FlkHOzY5k=) 3: B197F427572524588487CFDB163A9E512FAE4DF2.crl (hash: WkWcM/4KWmJRwwN4F0J+iY3ESMUVu4clqr1AZmQZAJY=) 4: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: BU1Q0ryHM0MlXG1Q7vZvhi4oAbOwc3sWBEiOeckA5Ms=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 06:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:1e:95:45:32:ae:53:8f:e7:2c:c3:1b:33:13:b2:8e:9f:e0:93:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2 Validity Not Before: Aug 5 22:46:23 2025 GMT Not After : Aug 9 06:15:23 2025 GMT Subject: CN=1B7C7E8E8E13118A90648FE4F66CD808F4F6719B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f5:ab:ef:06:90:02:58:e8:a8:39:77:92:70: 0d:db:b2:ca:a6:37:22:41:fc:f1:8f:43:51:0d:66: fc:26:54:4a:a0:ca:b7:ed:f1:fa:ca:b4:06:0d:6b: 89:95:f8:82:90:26:d8:fe:57:98:8d:5a:0c:82:5d: 74:c5:e7:f6:66:eb:7e:4a:ac:ed:d1:15:df:63:7e: be:c9:70:c8:92:74:89:59:c7:bb:f0:cf:06:20:f3: 4d:de:33:61:3f:d0:75:6c:f1:96:60:9c:cf:f0:0a: 54:bc:0f:ab:f5:65:05:3e:14:e8:20:5a:03:e8:ec: 80:1d:03:4b:ed:4e:28:d2:fe:d9:dd:d5:66:df:e1: 56:6f:e2:4c:6a:af:2c:ea:41:15:69:b0:fc:97:81: ff:dd:8a:12:a5:28:9a:1e:59:2a:85:08:56:62:51: 26:84:39:52:d1:d2:37:5f:07:23:f8:9e:64:23:58: 71:5c:34:69:28:8b:61:bd:67:6e:30:9d:3a:c2:6c: 4d:9e:ad:bb:a2:62:d8:39:6f:63:60:a3:df:09:26: 03:76:f3:74:5f:38:80:51:a8:e8:f2:5c:6a:04:c9: b3:49:6d:df:b0:c8:59:8c:7d:22:54:df:e3:c9:33: 08:45:1a:27:0c:97:7b:79:26:e6:91:cc:8d:13:f4: 15:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7C:7E:8E:8E:13:11:8A:90:64:8F:E4:F6:6C:D8:08:F4:F6:71:9B X509v3 Authority Key Identifier: keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:76:b5:08:21:9c:69:b9:9c:e9:51:ac:6c:c3:7c:d4:81:82: 8c:4c:f0:93:80:29:90:35:31:ef:55:09:7f:13:17:50:a2:0f: 05:f9:9a:30:77:cd:dd:cd:e2:15:f4:a5:55:10:8c:55:bb:d3: da:cf:02:a4:08:86:3d:59:40:59:84:9e:d6:89:fa:51:9f:a5: e7:17:c7:0d:3d:4b:9a:96:6c:1d:41:0d:52:d8:28:46:48:15: 87:53:97:13:67:34:8c:22:3e:f5:94:04:3e:31:d2:fa:3f:a3: cf:08:83:d9:70:18:2d:c3:ce:c6:89:a1:56:cf:6a:35:8c:6b: 94:b5:5e:c0:73:0a:49:e9:63:08:0e:33:70:35:6a:33:87:45: ed:1c:05:7d:a2:34:b6:5c:6e:c1:d3:c2:65:9a:6b:8d:00:e7: cd:6b:ed:f2:c5:71:9b:05:44:ea:48:5e:30:eb:a8:5f:53:dd: c8:b7:2a:f8:c2:7d:31:4a:bb:8e:81:6e:3d:61:f3:bd:fb:5e: 9a:a1:b8:51:8e:08:39:d8:78:54:94:32:7e:fa:a8:6d:0d:16: 4d:ab:78:a7:0b:a2:7d:d1:d7:a9:8e:73:24:72:6d:63:40:c2: a0:fd:b1:5d:46:bd:2d:75:8c:cd:c6:e9:8c:22:28:39:b1:58: ce:c7:7a:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFB6VRTKuU4/nLMMbMxOyjp/gkz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEy RkFFNERGMjAeFw0yNTA4MDUyMjQ2MjNaFw0yNTA4MDkwNjE1MjNaMDMxMTAvBgNV BAMTKDFCN0M3RThFOEUxMzExOEE5MDY0OEZFNEY2NkNEODA4RjRGNjcxOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT9avvBpACWOioOXeScA3bssqm NyJB/PGPQ1ENZvwmVEqgyrft8frKtAYNa4mV+IKQJtj+V5iNWgyCXXTF5/Zm635K rO3RFd9jfr7JcMiSdIlZx7vwzwYg803eM2E/0HVs8ZZgnM/wClS8D6v1ZQU+FOgg WgPo7IAdA0vtTijS/tnd1Wbf4VZv4kxqryzqQRVpsPyXgf/dihKlKJoeWSqFCFZi USaEOVLR0jdfByP4nmQjWHFcNGkoi2G9Z24wnTrCbE2erbuiYtg5b2Ngo98JJgN2 83RfOIBRqOjyXGoEybNJbd+wyFmMfSJU3+PJMwhFGicMl3t5JuaRzI0T9BW/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG3x+jo4TEYqQZI/k9mzYCPT2cZswHwYDVR0j BBgwFoAUsZf0J1clJFiEh8/bFjqeUS+uTfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGNmNDA2Ny1hNjlkLTQ5MDgtYmVlOC1iNDY1NWJkYzE1ZjgvMC9CMTk3RjQyNzU3 MjUyNDU4ODQ4N0NGREIxNjNBOUU1MTJGQUU0REYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEyRkFF NERGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlF NTEyRkFFNERGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABd2tQghnGm5nOlRrGzDfNSBgoxM8JOAKZA1 Me9VCX8TF1CiDwX5mjB3zd3N4hX0pVUQjFW709rPAqQIhj1ZQFmEntaJ+lGfpecX xw09S5qWbB1BDVLYKEZIFYdTlxNnNIwiPvWUBD4x0vo/o88Ig9lwGC3DzsaJoVbP ajWMa5S1XsBzCknpYwgOM3A1ajOHRe0cBX2iNLZcbsHTwmWaa40A581r7fLFcZsF ROpIXjDrqF9T3ci3KvjCfTFKu46Bbj1h8737XpqhuFGOCDnYeFSUMn76qG0NFk2r eKcLon3R16mOcyRybWNAwqD9sV1GvS11jM3G6YwiKDmxWM7Hej0= -----END CERTIFICATE-----Generated at Thu Aug 7 07:28:11 2025 by rpki-client