$ rpki-client -vvf repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft File: 1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft (raw, json) Hash identifier: Fwj71Ip59cHJW10wNGmP/GTUc0Oepw3uM5tY7jSJ+/g= Subject key identifier: 04:C0:E3:06:E5:B0:71:2B:E8:8C:43:31:82:0D:EA:99:6C:A6:B4:B1 Authority key identifier: 19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08 Certificate issuer: /CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808 Certificate serial: 1C80785E708A4E712009C8E3C2B3C5D672CD1D8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft Manifest number: E4 Signing time: Mon 04 Aug 2025 17:30:01 +0000 Manifest this update: Mon 04 Aug 2025 17:25:01 +0000 Manifest next update: Fri 08 Aug 2025 03:46:01 +0000 Files and hashes: 1: 1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl (hash: j9J3j+U9IPkvxrVnDGor5R9khhi0zQOJf89yj3kwSUs=) 2: 3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa (hash: Jwv0gA8fk3yoBN8wNHBZ8Dx27fR4hWBf2um8D+vcr6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 03:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:80:78:5e:70:8a:4e:71:20:09:c8:e3:c2:b3:c5:d6:72:cd:1d:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808 Validity Not Before: Aug 4 17:25:01 2025 GMT Not After : Aug 8 03:46:01 2025 GMT Subject: CN=04C0E306E5B0712BE88C4331820DEA996CA6B4B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2d:b1:13:61:c4:82:f5:b1:67:22:80:12:2f: a5:00:70:70:c0:a1:52:10:9b:35:17:91:58:08:24: 4e:a0:4f:0e:60:83:78:e4:26:6b:d2:4f:9f:4b:dd: f6:aa:c1:c3:56:1b:fd:dc:86:e4:e5:f3:9d:32:1f: c9:03:6b:c5:f5:74:21:2d:35:2a:5c:f0:c9:fc:34: d0:5b:7e:18:fa:86:cf:59:69:05:7b:a9:1d:fe:ce: 33:45:0a:41:56:cd:2f:29:b0:19:cc:2a:64:11:cf: 39:1f:d6:7e:88:a2:1d:1a:74:ed:48:d4:98:02:ab: eb:88:db:99:31:54:52:66:3d:d6:db:3b:36:9c:d9: 4e:c5:2c:5b:87:02:c1:75:61:64:65:49:07:b3:42: c8:11:ad:0e:fa:b4:48:61:fe:98:1c:2a:ac:70:88: 15:57:83:dc:ea:45:73:30:9f:43:95:af:38:82:4f: ac:0f:5a:05:39:ab:ff:2b:ff:6d:a9:e9:d5:30:bb: 83:df:77:ad:8f:07:0f:e7:73:c4:70:83:09:76:d4: 3c:fa:27:02:39:a5:78:45:ee:56:2f:aa:43:53:a9: b1:79:47:97:12:e6:1d:d5:e6:bc:54:5e:45:84:2c: 86:34:b6:b1:c9:65:31:69:c2:05:cd:9c:89:47:e5: 50:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C0:E3:06:E5:B0:71:2B:E8:8C:43:31:82:0D:EA:99:6C:A6:B4:B1 X509v3 Authority Key Identifier: keyid:19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:1b:8c:57:01:bf:f8:80:84:4a:c0:85:c8:5e:21:21:ee:e0: ce:fb:2c:17:9a:54:fa:a8:5c:ba:ea:fa:b6:b3:57:a7:46:d7: 5a:13:cf:56:2a:9f:6f:09:d8:db:f9:6c:e8:ac:d7:e5:1d:ee: bf:80:44:54:68:6e:e3:42:ab:ee:85:d4:c3:41:1f:e2:32:50: 76:a3:d8:c2:c7:24:3a:7e:13:ea:b6:26:7c:d5:e5:da:49:36: 2a:bb:5b:24:bf:ce:0c:ca:96:01:db:0e:f9:71:12:73:bf:50: f2:3f:ef:77:26:48:6a:84:52:dd:cb:db:68:7e:75:b0:c1:f9: 1f:cf:df:36:5e:a2:26:30:43:84:e4:4e:1b:5e:17:95:9d:62: 2b:99:61:94:42:08:6b:0a:57:63:86:1f:55:4b:72:23:f6:f4: 5e:d1:8d:5a:49:71:c5:3e:90:7b:70:67:93:af:8e:a8:d0:05: 82:fb:7b:ea:c0:71:21:80:83:d9:de:f1:fd:74:2f:d8:4c:c6: 32:f6:e2:78:cc:f7:db:5c:64:0d:54:fe:7a:18:79:ae:cc:a8: 4e:b3:fb:8c:b4:43:9a:e8:91:78:e3:c8:44:ea:eb:2d:33:ea: c1:dd:bf:01:fc:12:4e:dc:a6:c4:0a:1a:99:cf:71:97:c3:72: f9:f4:f2:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHIB4XnCKTnEgCcjjwrPF1nLNHY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTNDMUE2 RTMwRTgwODAeFw0yNTA4MDQxNzI1MDFaFw0yNTA4MDgwMzQ2MDFaMDMxMTAvBgNV BAMTKDA0QzBFMzA2RTVCMDcxMkJFODhDNDMzMTgyMERFQTk5NkNBNkI0QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQLbETYcSC9bFnIoASL6UAcHDA oVIQmzUXkVgIJE6gTw5gg3jkJmvST59L3faqwcNWG/3chuTl850yH8kDa8X1dCEt NSpc8Mn8NNBbfhj6hs9ZaQV7qR3+zjNFCkFWzS8psBnMKmQRzzkf1n6Ioh0adO1I 1JgCq+uI25kxVFJmPdbbOzac2U7FLFuHAsF1YWRlSQezQsgRrQ76tEhh/pgcKqxw iBVXg9zqRXMwn0OVrziCT6wPWgU5q/8r/22p6dUwu4Pfd62PBw/nc8Rwgwl21Dz6 JwI5pXhF7lYvqkNTqbF5R5cS5h3V5rxUXkWELIY0trHJZTFpwgXNnIlH5VCHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBMDjBuWwcSvojEMxgg3qmWymtLEwHwYDVR0j BBgwFoAUGRGuQYRd7i64hJDFdn48Gm4w6AgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTU3ZmE1ZC1mYTY3LTRlNmItODkyMC1jNDc0N2FkYjMwYmIvMC8xOTExQUU0MTg0 NURFRTJFQjg4NDkwQzU3NjdFM0MxQTZFMzBFODA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTNDMUE2RTMw RTgwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk1N2ZhNWQtZmE2Ny00ZTZiLTg5 MjAtYzQ3NDdhZGIzMGJiLzAvMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTND MUE2RTMwRTgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQbjFcBv/iAhErAhcheISHu4M77LBeaVPqo XLrq+razV6dG11oTz1Yqn28J2Nv5bOis1+Ud7r+ARFRobuNCq+6F1MNBH+IyUHaj 2MLHJDp+E+q2JnzV5dpJNiq7WyS/zgzKlgHbDvlxEnO/UPI/73cmSGqEUt3L22h+ dbDB+R/P3zZeoiYwQ4TkThteF5WdYiuZYZRCCGsKV2OGH1VLciP29F7RjVpJccU+ kHtwZ5OvjqjQBYL7e+rAcSGAg9ne8f10L9hMxjL24njM99tcZA1U/noYea7MqE6z +4y0Q5rokXjjyETq6y0z6sHdvwH8Ek7cpsQKGpnPcZfDcvn08hk= -----END CERTIFICATE-----Generated at Thu Aug 7 00:25:50 2025 by rpki-client