$ rpki-client -vvf repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft File: 196DBD061B4577EF848600B17A266D689F5A70B5.mft (raw, json) Hash identifier: wFXLj7CPz6YXvgoNhsl0kHGqdIuXD7FzPRyl+T7LfDc= Subject key identifier: 1A:9D:03:7F:74:EF:8A:A7:AB:BB:1A:41:DF:21:7B:AA:88:5B:E6:9D Authority key identifier: 19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 Certificate issuer: /CN=196DBD061B4577EF848600B17A266D689F5A70B5 Certificate serial: 0F3B3960703B1DED794778B510253C914D68EFCF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft Manifest number: 01B8 Signing time: Sun 27 Apr 2025 21:01:31 +0000 Manifest this update: Sun 27 Apr 2025 20:56:31 +0000 Manifest next update: Thu 01 May 2025 02:16:31 +0000 Files and hashes: 1: 3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (hash: EdwKl111q2CtLUHBTONF9R20VzXLHu4+IxkAtHm2voQ=) 2: 196DBD061B4577EF848600B17A266D689F5A70B5.crl (hash: Agf70anbS0yzW9VtlToytYgrZTOw2RrQ6PwTQjvU3wg=) 3: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (hash: 0ITBGJ00BgJjiaRA5n1B3d0PzWeChxwSHb9vKaBZRbM=) 4: 3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa (hash: khKuR3b4PTQaHgWChILIFynR20HNq4BEEZ8cvsbakr8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 02:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:3b:39:60:70:3b:1d:ed:79:47:78:b5:10:25:3c:91:4d:68:ef:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=196DBD061B4577EF848600B17A266D689F5A70B5 Validity Not Before: Apr 27 20:56:31 2025 GMT Not After : May 1 02:16:31 2025 GMT Subject: CN=1A9D037F74EF8AA7ABBB1A41DF217BAA885BE69D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0a:28:d8:e6:7d:3d:d7:86:90:0e:48:27:98: 36:b1:3b:02:4e:1b:3c:fc:47:f5:6a:96:b0:6d:4a: 13:ff:61:e8:74:8a:f5:5d:52:f4:00:3a:01:7b:1f: a5:f2:53:8d:0e:fd:57:53:6c:fc:e2:c2:26:85:55: e1:80:be:c6:6b:8d:20:1b:f9:32:a9:06:6b:ee:73: 93:92:dc:92:c9:71:07:d7:89:de:52:b8:91:3f:a4: 00:a2:8d:ea:64:b9:f1:bc:3d:b4:a7:b0:65:ac:3d: 88:69:49:5d:e1:f0:6b:71:a1:90:5a:50:98:65:db: 95:57:f2:e3:7f:43:e2:58:d6:79:df:a7:44:ce:bb: 21:d9:ad:e9:3d:b0:df:69:81:f0:ca:4c:51:e5:21: 8e:16:f7:88:ad:dc:5b:0e:94:e9:a4:35:42:36:3b: 8f:6c:49:0c:2e:df:0d:95:fe:47:b0:7d:37:6c:73: dd:f5:27:a5:ce:eb:32:64:8c:22:e5:c1:a7:3f:ab: b1:ea:a8:4f:d9:fe:04:af:8f:3a:71:69:2e:08:94: 38:d5:22:92:50:08:7d:1b:8f:05:82:7e:87:92:3e: 9e:1f:3c:e7:10:62:58:76:09:6a:e6:e1:ef:e0:49: 57:43:87:7f:de:f0:56:27:5e:81:96:6f:50:05:04: 9f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9D:03:7F:74:EF:8A:A7:AB:BB:1A:41:DF:21:7B:AA:88:5B:E6:9D X509v3 Authority Key Identifier: keyid:19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:5a:99:c3:bb:fd:d1:c0:6f:b8:54:57:72:15:62:ce:bc:c0: 5e:98:fc:e2:f9:eb:16:96:a9:75:11:67:76:7c:f7:fa:f9:9c: 60:8a:e5:1d:0b:2d:10:2b:a9:c2:d0:a8:db:f6:fa:3e:40:98: 61:29:a4:09:3a:d5:79:d8:22:50:37:9b:56:75:3b:5d:e0:34: 80:e4:2b:ce:f7:ff:45:9f:a5:2a:68:60:3d:f1:5b:31:74:af: 3e:ee:ec:f9:72:9d:40:ef:5e:8d:5d:57:ab:cf:d8:94:13:ca: 78:18:6e:27:a5:a7:35:a4:c3:45:d5:01:de:49:c8:b1:07:1a: d6:ed:50:c6:25:93:d3:5f:3f:7d:ba:6a:dc:5e:31:cc:0c:10: 1b:56:47:6d:ab:9a:53:b7:6b:4f:44:6c:d9:15:c8:6c:21:ac: 52:d7:52:0e:86:4d:7f:37:95:fb:ab:53:70:c0:92:aa:74:7b: be:e0:cf:f4:3a:97:74:26:c0:d8:d6:dd:50:00:45:c0:58:88: 80:08:e0:57:60:4a:cb:77:63:bb:01:b9:33:5e:e5:46:19:bf: fc:40:f7:5f:5a:7b:e5:8b:c9:1c:50:66:cd:b1:47:43:7c:b6: b2:40:f3:d8:55:81:80:73:d0:c3:dc:28:e9:77:d8:aa:6e:b6: b3:6e:d4:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDzs5YHA7He15R3i1ECU8kU1o788wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5 RjVBNzBCNTAeFw0yNTA0MjcyMDU2MzFaFw0yNTA1MDEwMjE2MzFaMDMxMTAvBgNV BAMTKDFBOUQwMzdGNzRFRjhBQTdBQkJCMUE0MURGMjE3QkFBODg1QkU2OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClCijY5n0914aQDkgnmDaxOwJO Gzz8R/VqlrBtShP/Yeh0ivVdUvQAOgF7H6XyU40O/VdTbPziwiaFVeGAvsZrjSAb +TKpBmvuc5OS3JLJcQfXid5SuJE/pACijepkufG8PbSnsGWsPYhpSV3h8GtxoZBa UJhl25VX8uN/Q+JY1nnfp0TOuyHZrek9sN9pgfDKTFHlIY4W94it3FsOlOmkNUI2 O49sSQwu3w2V/kewfTdsc931J6XO6zJkjCLlwac/q7HqqE/Z/gSvjzpxaS4IlDjV IpJQCH0bjwWCfoeSPp4fPOcQYlh2CWrm4e/gSVdDh3/e8FYnXoGWb1AFBJ+LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGp0Df3TviqeruxpB3yF7qohb5p0wHwYDVR0j BBgwFoAUGW29BhtFd++EhgCxeiZtaJ9acLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM4MDFhMC03OTEyLTRiMDEtYTI4MS04ODAyNDYyNGEyZDQvMC8xOTZEQkQwNjFC NDU3N0VGODQ4NjAwQjE3QTI2NkQ2ODlGNUE3MEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5RjVB NzBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjODAxYTAtNzkxMi00YjAxLWEy ODEtODgwMjQ2MjRhMmQ0LzAvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZE Njg5RjVBNzBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZamcO7/dHAb7hUV3IVYs68wF6Y/OL56xaW qXURZ3Z89/r5nGCK5R0LLRArqcLQqNv2+j5AmGEppAk61XnYIlA3m1Z1O13gNIDk K873/0WfpSpoYD3xWzF0rz7u7PlynUDvXo1dV6vP2JQTyngYbielpzWkw0XVAd5J yLEHGtbtUMYlk9NfP326atxeMcwMEBtWR22rmlO3a09EbNkVyGwhrFLXUg6GTX83 lfurU3DAkqp0e77gz/Q6l3QmwNjW3VAARcBYiIAI4FdgSst3Y7sBuTNe5UYZv/xA 919ae+WLyRxQZs2xR0N8trJA89hVgYBz0MPcKOl32KputrNu1LQ= -----END CERTIFICATE-----Generated at Wed Apr 30 01:36:21 2025 by rpki-client