$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft File: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft (raw, json) Hash identifier: glmfNcHx5Z6+7eHrGTlpWF3hCkVSR1Jz92uM++7pcCg= Subject key identifier: 4B:86:A2:E1:E2:43:75:BA:E6:E6:6C:E1:06:0B:D1:0D:1C:27:9A:43 Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 Certificate issuer: /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Certificate serial: 7B5C41FBB32920296D4D73C55B7E7CB0E44C86DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft Manifest number: 01E4 Signing time: Sat 14 Jun 2025 23:20:39 +0000 Manifest this update: Sat 14 Jun 2025 23:15:39 +0000 Manifest next update: Wed 18 Jun 2025 08:27:39 +0000 Files and hashes: 1: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: Alr3MmF3FComiYShgHs/7REcddrGc/AGrj1Fejo7KUI=) 2: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl (hash: mJpCl+v/XoG2+9+FK8bLDNlFxkzHKXqCxbV51Dm+ITk=) 3: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: b9POD8lIGTkSBPPG5UCEDWwytPa4KOI/X1gSRB0o140=) 4: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: pIxViXZoycBV8A7CIi1fmiiQDu+3Ugcswhk6WPEdvN8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 08:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:5c:41:fb:b3:29:20:29:6d:4d:73:c5:5b:7e:7c:b0:e4:4c:86:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Validity Not Before: Jun 14 23:15:39 2025 GMT Not After : Jun 18 08:27:39 2025 GMT Subject: CN=4B86A2E1E24375BAE6E66CE1060BD10D1C279A43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ba:41:6f:e5:84:e0:05:a4:7a:e8:d1:4d:aa: 89:f0:5e:8b:b4:40:ab:34:bb:bf:92:a0:99:5d:a6: f1:c5:c6:b5:12:c3:98:92:7f:ee:d8:90:67:7f:54: 85:27:c7:cf:7e:46:79:8d:24:d2:e0:df:ed:b0:98: b8:b5:bf:75:23:17:b0:80:a3:f3:3d:25:18:29:f8: fe:90:b0:35:9c:79:a0:0b:87:bb:b4:30:fb:51:9f: 9c:e1:ee:cf:8d:ab:01:9e:e7:ec:ff:f5:f5:19:c5: 81:91:ff:74:69:e4:c1:6f:36:f0:ab:3f:3b:4a:25: bd:ec:19:15:72:76:15:72:5c:31:19:bc:c6:ae:bf: 88:dc:94:fa:86:c9:7a:84:2c:85:1d:d7:73:58:80: 7e:16:af:88:2c:e9:62:e3:b9:f2:c8:fd:43:23:43: 47:18:45:4f:fa:d3:f2:c2:4a:7a:ee:6a:25:47:e8: bb:7a:e2:b3:02:c4:da:ac:0b:17:3d:2f:9a:f4:98: 09:cc:e5:57:3b:d0:12:54:eb:6f:2e:7f:c5:1d:23: 15:06:bb:29:5b:23:c5:fb:76:74:6d:75:e0:7f:d2: cf:74:dc:25:fc:4a:a7:67:d4:a3:04:a3:d9:5e:1b: d6:02:6f:f3:5d:57:82:d2:cb:a9:30:f9:d7:a1:78: e0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:86:A2:E1:E2:43:75:BA:E6:E6:6C:E1:06:0B:D1:0D:1C:27:9A:43 X509v3 Authority Key Identifier: keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:7c:16:e8:bb:36:a7:25:dc:40:70:db:cb:24:6d:6b:41:35: c7:ba:0e:5f:bf:2a:63:fe:9b:6c:26:83:6f:b4:9a:36:15:47: 37:f5:bd:1a:35:fb:84:32:94:82:b4:e5:30:97:40:30:55:70: 36:09:13:ff:2e:61:a5:00:1b:c7:2a:04:3a:ea:ff:24:4f:32: b5:5e:25:43:9c:f1:04:e0:38:52:24:d1:6a:e0:02:eb:0e:91: a9:b0:38:61:46:53:e4:c4:44:5e:b0:22:90:7f:d2:6e:bc:a1: b1:b5:bb:29:03:3d:dd:01:84:84:cf:79:fb:2e:8d:6c:69:20: 7c:d5:55:94:51:98:3f:99:36:9b:1e:0c:64:cc:b5:34:65:6d: 8d:68:9d:00:12:38:00:9a:00:af:f7:b7:3a:52:70:d9:62:8b: d3:92:97:48:fe:a8:36:90:19:cc:f3:4b:49:8d:0f:52:7d:63: 7a:60:32:0b:f7:a2:b8:9c:fb:2e:ce:6c:82:f6:89:73:4f:12: a2:3b:74:53:ad:3f:d0:fd:84:b9:0b:c1:87:a2:32:df:44:e2: a1:e1:82:cc:1e:f3:bf:e8:4d:3f:9e:df:33:93:dd:37:8f:e2: 5c:8e:a7:be:4e:d6:30:26:10:c8:07:d1:0f:2d:8d:3d:6b:dd: 5d:85:c9:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe1xB+7MpICltTXPFW358sORMht4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVB NkY0OENFNzAeFw0yNTA2MTQyMzE1MzlaFw0yNTA2MTgwODI3MzlaMDMxMTAvBgNV BAMTKDRCODZBMkUxRTI0Mzc1QkFFNkU2NkNFMTA2MEJEMTBEMUMyNzlBNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQukFv5YTgBaR66NFNqonwXou0 QKs0u7+SoJldpvHFxrUSw5iSf+7YkGd/VIUnx89+RnmNJNLg3+2wmLi1v3UjF7CA o/M9JRgp+P6QsDWceaALh7u0MPtRn5zh7s+NqwGe5+z/9fUZxYGR/3Rp5MFvNvCr PztKJb3sGRVydhVyXDEZvMauv4jclPqGyXqELIUd13NYgH4Wr4gs6WLjufLI/UMj Q0cYRU/60/LCSnruaiVH6Lt64rMCxNqsCxc9L5r0mAnM5Vc70BJU628uf8UdIxUG uylbI8X7dnRtdeB/0s903CX8Sqdn1KMEo9leG9YCb/NdV4LSy6kw+deheOCJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS4ai4eJDdbrm5mzhBgvRDRwnmkMwHwYDVR0j BBgwFoAUGZ09aE7O7/uxfdWYomiINab0jOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTgzODNlMi0yMDZjLTRiNzQtYmE0YS1jZDhhNGQ3Y2Q4NjEvMC8xOTlEM0Q2ODRF Q0VFRkZCQjE3REQ1OThBMjY4ODgzNUE2RjQ4Q0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVBNkY0 OENFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4 MzVBNkY0OENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGx8Fui7Nqcl3EBw28skbWtBNce6Dl+/KmP+ m2wmg2+0mjYVRzf1vRo1+4QylIK05TCXQDBVcDYJE/8uYaUAG8cqBDrq/yRPMrVe JUOc8QTgOFIk0WrgAusOkamwOGFGU+TERF6wIpB/0m68obG1uykDPd0BhITPefsu jWxpIHzVVZRRmD+ZNpseDGTMtTRlbY1onQASOACaAK/3tzpScNlii9OSl0j+qDaQ GczzS0mND1J9Y3pgMgv3oric+y7ObIL2iXNPEqI7dFOtP9D9hLkLwYeiMt9E4qHh gswe87/oTT+e3zOT3TeP4lyOp75O1jAmEMgH0Q8tjT1r3V2FyRE= -----END CERTIFICATE-----Generated at Sun Jun 15 16:00:08 2025 by rpki-client