$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft File: 194F6EF659F1115C068AB59065D57F150E23F5B6.mft (raw, json) Hash identifier: L3zE5wbU7qexTFvH1B5vPZdHlDzz7JUovZVlRVYnDDo= Subject key identifier: 68:04:35:B8:09:D7:48:C6:7C:23:31:DF:A6:86:A5:F8:10:86:90:74 Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Certificate serial: 3E61E9155F756C961155AD092E077C7EC5C1C955 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft Manifest number: 01C1 Signing time: Fri 08 Aug 2025 12:02:20 +0000 Manifest this update: Fri 08 Aug 2025 11:57:20 +0000 Manifest next update: Mon 11 Aug 2025 21:07:20 +0000 Files and hashes: 1: 194F6EF659F1115C068AB59065D57F150E23F5B6.crl (hash: iw1VuuFg0HExJW4YdiHvpMkyVACQi7OM0nnpQeoKcFo=) 2: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (hash: OiZZEQMDYAjWvUr2V8yTuhgbwOSZs8jYfIrtVvafVY0=) 3: 34332e3234302e3232362e302f32342d3234203d3e20313530323130.roa (hash: 1Tei5fGxwqBxz6xN5gHTRqivy8w2htgn+IA2ReOzZk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 21:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:61:e9:15:5f:75:6c:96:11:55:ad:09:2e:07:7c:7e:c5:c1:c9:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Validity Not Before: Aug 8 11:57:20 2025 GMT Not After : Aug 11 21:07:20 2025 GMT Subject: CN=680435B809D748C67C2331DFA686A5F810869074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3a:38:4d:54:ae:a4:01:d0:49:d3:d5:8e:ca: eb:20:97:9a:d2:29:0b:b5:28:8d:09:44:59:cb:f2: 2f:e7:59:b7:65:40:a7:bd:57:7d:d2:f6:56:ad:de: 3b:ea:74:35:95:8f:37:57:ca:e2:b1:f2:5c:7b:cd: fd:e8:c8:86:d9:e0:d4:79:22:e6:71:59:f3:09:e7: eb:70:e5:96:77:e3:eb:d1:07:11:c2:f0:7a:27:19: 0f:d8:79:8c:ea:3c:1e:99:46:97:e4:00:6b:ab:ce: df:5d:26:94:9e:26:d5:cd:b8:62:7d:d9:cf:d4:2b: b4:fd:39:00:c4:11:70:3c:c3:74:d8:d2:16:46:61: c5:ff:e2:f5:e1:5b:06:6f:14:f6:5b:ad:b3:8f:4d: db:eb:96:64:f0:9a:cc:67:0f:e0:27:f1:d3:e1:a3: a2:09:2d:c6:76:a8:bd:f2:b3:66:e5:5e:60:db:26: 3a:35:92:71:8a:1d:47:b6:68:e1:d6:be:95:01:55: 4c:b0:99:7a:af:9b:64:2e:49:82:f3:8a:35:1b:7e: 31:3c:66:5a:33:87:1e:92:90:bb:17:50:14:65:e1: 72:6d:45:70:f4:73:d4:f1:79:f0:c8:24:fc:09:be: d3:61:1d:7a:9b:57:cb:cf:ca:56:ca:47:08:26:c2: e0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:04:35:B8:09:D7:48:C6:7C:23:31:DF:A6:86:A5:F8:10:86:90:74 X509v3 Authority Key Identifier: keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:84:51:d9:d5:46:69:2d:a3:26:a7:b5:b0:dc:0f:43:43:fb: 07:64:86:9e:88:2e:b0:f3:9d:37:67:e3:7d:29:dd:6d:ee:51: 33:06:16:5a:07:97:5f:e7:ac:f3:64:e2:b9:76:10:ca:02:24: 45:34:8e:7e:f5:81:49:f1:d3:d8:68:50:ca:c1:22:55:fa:08: 2a:02:0d:0a:c8:84:c2:ac:5e:36:16:b8:70:a4:02:d9:4b:c6: d5:23:77:28:11:4c:a8:60:b4:29:58:f7:a6:ae:08:f0:60:77: 9f:04:67:99:62:d3:ee:0a:7a:9d:c2:b5:26:09:02:5f:08:50: 48:dd:40:ca:f4:48:9f:25:0c:2c:5c:54:57:53:ed:22:24:1d: 3e:5f:04:e1:4a:9a:85:53:ee:f7:aa:7c:97:25:7a:90:3d:ee: 0e:67:bc:a4:8d:78:92:bf:c4:c5:31:5f:c7:5f:f6:e0:37:53: b4:e4:43:85:ca:7f:22:2d:86:2a:dd:bd:51:13:c8:0f:4c:5a: eb:26:cf:04:5c:99:9d:24:34:61:3d:2e:b2:44:e2:e7:54:a5: 72:30:cc:05:cf:8d:bc:b0:31:28:f1:2d:25:65:66:cc:36:31: ca:8f:b3:c9:a9:44:d1:63:34:9f:9a:a8:b9:41:44:e7:72:07: 8f:fd:db:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPmHpFV91bJYRVa0JLgd8fsXByVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUw RTIzRjVCNjAeFw0yNTA4MDgxMTU3MjBaFw0yNTA4MTEyMTA3MjBaMDMxMTAvBgNV BAMTKDY4MDQzNUI4MDlENzQ4QzY3QzIzMzFERkE2ODZBNUY4MTA4NjkwNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBOjhNVK6kAdBJ09WOyusgl5rS KQu1KI0JRFnL8i/nWbdlQKe9V33S9lat3jvqdDWVjzdXyuKx8lx7zf3oyIbZ4NR5 IuZxWfMJ5+tw5ZZ34+vRBxHC8HonGQ/YeYzqPB6ZRpfkAGurzt9dJpSeJtXNuGJ9 2c/UK7T9OQDEEXA8w3TY0hZGYcX/4vXhWwZvFPZbrbOPTdvrlmTwmsxnD+An8dPh o6IJLcZ2qL3ys2blXmDbJjo1knGKHUe2aOHWvpUBVUywmXqvm2QuSYLzijUbfjE8 Zlozhx6SkLsXUBRl4XJtRXD0c9TxefDIJPwJvtNhHXqbV8vPylbKRwgmwuBTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaAQ1uAnXSMZ8IzHfpoal+BCGkHQwHwYDVR0j BBgwFoAUGU9u9lnxEVwGirWQZdV/FQ4j9bYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmFiZWM3MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMC8xOTRGNkVGNjU5 RjExMTVDMDY4QUI1OTA2NUQ1N0YxNTBFMjNGNUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUwRTIz RjVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZhYmVjNzEtN2VjYi00ZGJkLWE0 MjEtOTliOWNkMjA5MDNhLzAvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdG MTUwRTIzRjVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMqEUdnVRmktoyantbDcD0ND+wdkhp6ILrDz nTdn430p3W3uUTMGFloHl1/nrPNk4rl2EMoCJEU0jn71gUnx09hoUMrBIlX6CCoC DQrIhMKsXjYWuHCkAtlLxtUjdygRTKhgtClY96auCPBgd58EZ5li0+4Kep3CtSYJ Al8IUEjdQMr0SJ8lDCxcVFdT7SIkHT5fBOFKmoVT7veqfJclepA97g5nvKSNeJK/ xMUxX8df9uA3U7TkQ4XKfyIthirdvVETyA9MWusmzwRcmZ0kNGE9LrJE4udUpXIw zAXPjbywMSjxLSVlZsw2McqPs8mpRNFjNJ+aqLlBROdyB4/92w0= -----END CERTIFICATE-----Generated at Sat Aug 9 05:53:17 2025 by rpki-client