$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft File: 194F6EF659F1115C068AB59065D57F150E23F5B6.mft (raw, json) Hash identifier: PvkIrDWfYH7xLHOkAy9/36EA8bmkoYGAopVl/2e0ZgQ= Subject key identifier: 31:B7:FF:3A:FB:B7:39:D1:E8:AC:C3:F9:27:5F:EB:AF:3F:07:F7:CC Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Certificate serial: 1407EDBEDCD5740ACED389F863D42BB28176852B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft Manifest number: 0195 Signing time: Tue 29 Apr 2025 16:32:15 +0000 Manifest this update: Tue 29 Apr 2025 16:27:15 +0000 Manifest next update: Sat 03 May 2025 03:56:15 +0000 Files and hashes: 1: 194F6EF659F1115C068AB59065D57F150E23F5B6.crl (hash: GKs6QuWb7zUtiHS9gIg+ue3lVqYq9xCSCCw4NlNJeEo=) 2: 34332e3234302e3232362e302f32342d3234203d3e20313530323130.roa (hash: 1Tei5fGxwqBxz6xN5gHTRqivy8w2htgn+IA2ReOzZk8=) 3: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (hash: OiZZEQMDYAjWvUr2V8yTuhgbwOSZs8jYfIrtVvafVY0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 03:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:07:ed:be:dc:d5:74:0a:ce:d3:89:f8:63:d4:2b:b2:81:76:85:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Validity Not Before: Apr 29 16:27:15 2025 GMT Not After : May 3 03:56:15 2025 GMT Subject: CN=31B7FF3AFBB739D1E8ACC3F9275FEBAF3F07F7CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:25:b8:9f:20:6b:5c:31:fc:e0:ec:89:a7:cc: 4d:14:8e:45:a6:23:d9:5a:a4:90:a4:86:ff:e4:69: f4:06:31:fe:b5:ee:86:fa:8c:2d:43:d8:24:6f:e5: d6:f3:7a:be:a8:07:d1:37:91:d7:ce:f4:45:62:55: 9a:a3:93:bc:9b:e6:e5:b4:e6:d2:41:dc:2b:4a:27: 43:60:2e:44:00:81:38:91:d2:d9:17:3c:46:22:2b: 5c:ab:d4:9c:ac:5c:aa:dc:9c:3c:00:17:ff:f5:b9: 84:a2:dd:64:7b:24:af:77:d1:6b:8b:60:3a:7b:37: b9:b9:0d:9c:58:93:f8:cb:89:53:f8:1f:e3:4c:30: a6:7f:97:26:ad:5c:69:cc:8b:72:af:32:9b:0c:c3: 44:e3:f8:a3:6e:ab:e9:58:e7:3c:04:3f:3b:17:63: 08:84:4e:d5:a6:d1:69:e7:be:6f:79:65:c6:bd:41: be:5f:83:fb:5f:ef:79:24:7a:e6:2e:74:46:35:c1: d1:c6:3b:1c:4b:72:5d:fa:b9:34:44:8a:88:44:01: 61:fc:03:c1:f4:0a:c8:03:db:f3:50:b8:48:0c:f6: e3:57:a0:9a:cb:83:71:99:ed:0a:ff:34:c5:2b:4d: 33:13:d5:2a:b1:83:da:87:ff:af:00:66:e4:98:ae: c6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B7:FF:3A:FB:B7:39:D1:E8:AC:C3:F9:27:5F:EB:AF:3F:07:F7:CC X509v3 Authority Key Identifier: keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:99:ad:43:c2:0f:d1:d5:9c:3e:d0:3a:45:eb:76:3c:de:f0: 03:f6:1d:d3:62:39:85:a0:a0:0e:35:9d:e1:12:2d:f6:22:b3: 9d:01:3b:c7:1b:61:3d:e7:01:93:fe:56:ff:82:61:e0:f0:ba: 70:ef:97:3a:57:4f:df:c6:fc:ed:02:36:a2:ec:2d:b1:23:dd: 96:35:d2:ef:c2:ac:40:c0:f7:49:e9:e1:61:07:ba:d8:7a:6d: 24:c0:46:59:98:ba:28:03:c5:56:d5:1a:91:00:6e:14:da:74: d0:cb:bc:35:57:85:fe:61:70:86:5e:d9:a8:44:0a:0a:a4:73: 91:c0:8a:e5:1a:3f:03:4e:49:7c:f5:b8:29:b4:b1:49:1b:cf: 5f:23:ea:62:d5:13:8c:b9:16:47:91:98:10:69:0c:15:5c:a3: b6:b0:c9:c2:08:b5:67:13:e0:1f:a0:b4:2c:10:e0:43:ed:5c: 62:15:90:92:c2:6d:ff:83:ea:5e:94:85:42:f2:dd:df:88:cc: 24:99:4f:c6:fa:4c:a8:56:7b:5f:5e:ad:ee:61:01:95:cc:c1: cc:11:05:55:56:fd:05:70:7f:07:bb:e6:6e:8d:16:d4:c7:16: f0:ae:9b:66:de:17:a4:79:83:af:09:5d:9d:10:dd:9b:01:60: 19:6a:aa:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFAftvtzVdArO04n4Y9QrsoF2hSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUw RTIzRjVCNjAeFw0yNTA0MjkxNjI3MTVaFw0yNTA1MDMwMzU2MTVaMDMxMTAvBgNV BAMTKDMxQjdGRjNBRkJCNzM5RDFFOEFDQzNGOTI3NUZFQkFGM0YwN0Y3Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1JbifIGtcMfzg7ImnzE0UjkWm I9lapJCkhv/kafQGMf617ob6jC1D2CRv5dbzer6oB9E3kdfO9EViVZqjk7yb5uW0 5tJB3CtKJ0NgLkQAgTiR0tkXPEYiK1yr1JysXKrcnDwAF//1uYSi3WR7JK930WuL YDp7N7m5DZxYk/jLiVP4H+NMMKZ/lyatXGnMi3KvMpsMw0Tj+KNuq+lY5zwEPzsX YwiETtWm0Wnnvm95Zca9Qb5fg/tf73kkeuYudEY1wdHGOxxLcl36uTREiohEAWH8 A8H0CsgD2/NQuEgM9uNXoJrLg3GZ7Qr/NMUrTTMT1Sqxg9qH/68AZuSYrsZlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMbf/Ovu3OdHorMP5J1/rrz8H98wwHwYDVR0j BBgwFoAUGU9u9lnxEVwGirWQZdV/FQ4j9bYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmFiZWM3MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMC8xOTRGNkVGNjU5 RjExMTVDMDY4QUI1OTA2NUQ1N0YxNTBFMjNGNUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUwRTIz RjVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZhYmVjNzEtN2VjYi00ZGJkLWE0 MjEtOTliOWNkMjA5MDNhLzAvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdG MTUwRTIzRjVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWZrUPCD9HVnD7QOkXrdjze8AP2HdNiOYWg oA41neESLfYis50BO8cbYT3nAZP+Vv+CYeDwunDvlzpXT9/G/O0CNqLsLbEj3ZY1 0u/CrEDA90np4WEHuth6bSTARlmYuigDxVbVGpEAbhTadNDLvDVXhf5hcIZe2ahE Cgqkc5HAiuUaPwNOSXz1uCm0sUkbz18j6mLVE4y5FkeRmBBpDBVco7awycIItWcT 4B+gtCwQ4EPtXGIVkJLCbf+D6l6UhULy3d+IzCSZT8b6TKhWe19ere5hAZXMwcwR BVVW/QVwfwe75m6NFtTHFvCum2beF6R5g68JXZ0Q3ZsBYBlqqv8= -----END CERTIFICATE-----Generated at Wed Apr 30 05:46:40 2025 by rpki-client