$ rpki-client -vvf repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft File: C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft (raw, json) Hash identifier: uiaOp03KRbu+6+KvSVIDfKb04emFVd1XKN1qqT4Bzjk= Subject key identifier: 36:63:94:84:AB:75:0B:BD:E7:40:A9:E3:52:7B:64:00:2E:C7:4E:EA Authority key identifier: C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 Certificate issuer: /CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Certificate serial: 682AF25AA8CB18989366667ABD5DD50AF5E64868 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft Manifest number: 0204 Signing time: Sat 18 Oct 2025 12:11:58 +0000 Manifest this update: Sat 18 Oct 2025 12:06:58 +0000 Manifest next update: Tue 21 Oct 2025 20:19:58 +0000 Files and hashes: 1: C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl (hash: 2aCseBGpopBZttSFwCvoasoISVgXhLQwqs2is4GyUyA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:2a:f2:5a:a8:cb:18:98:93:66:66:7a:bd:5d:d5:0a:f5:e6:48:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Validity Not Before: Oct 18 12:06:58 2025 GMT Not After : Oct 21 20:19:58 2025 GMT Subject: CN=36639484AB750BBDE740A9E3527B64002EC74EEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:75:9e:01:a1:bf:25:f2:e1:20:97:57:c9:78: 9f:28:fa:4e:dd:84:7a:15:6a:dd:55:d4:7a:df:9e: 97:95:89:a2:f0:17:11:a4:92:e4:1b:b8:a4:4a:15: 80:05:b7:61:c7:bd:2a:62:2e:89:64:d5:00:ba:fe: 72:db:8d:0e:21:6b:4f:8e:94:b9:ec:87:a3:52:66: a1:a4:92:34:df:ba:7a:aa:76:94:09:67:29:e0:7c: ce:6e:17:62:16:9c:fb:e6:46:df:1c:fb:11:69:59: ce:a2:fe:bb:a4:6b:8f:04:8c:13:bb:ca:4d:3d:6d: 30:61:f0:f4:1f:22:1a:48:0e:a2:ad:04:d7:93:3b: 5d:c3:2a:10:d5:a1:92:80:df:62:42:93:8e:d0:7d: b7:13:6b:b0:9b:88:25:19:ce:18:ff:91:99:33:e1: 5d:4b:e6:bf:0d:90:54:4c:98:27:bc:d6:d7:ea:75: 0b:6b:ba:9d:4c:f5:8c:d5:8a:ef:8c:3b:d8:28:30: cf:a7:06:1a:4d:25:43:98:62:01:92:26:93:64:ad: 09:3a:31:74:b4:a3:a3:50:95:ca:e4:0f:85:4f:15: 05:86:e4:99:ba:e0:52:ac:3b:a0:33:d2:0c:34:46: a3:ea:c1:05:a6:cd:c9:66:ff:f4:2f:01:26:60:df: cb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:63:94:84:AB:75:0B:BD:E7:40:A9:E3:52:7B:64:00:2E:C7:4E:EA X509v3 Authority Key Identifier: keyid:C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d9:b2:1e:0a:1d:f0:10:4d:e3:9b:ef:7d:f7:f8:02:dd:df: e3:4c:d4:a2:3e:99:6a:80:4a:34:7d:cf:39:af:6c:87:cc:c1: f2:e6:1b:20:a9:c7:60:c4:60:a9:8c:a4:fb:d8:4f:63:4a:f4: 3b:99:c3:fa:84:aa:c7:02:eb:6f:11:6f:76:f5:55:d0:46:30: d5:f2:20:76:c8:a9:ad:02:71:e0:03:31:f4:16:bd:0d:f3:4c: 42:37:b0:0c:3d:f7:44:1d:41:01:46:93:ba:c1:d1:6c:62:7e: 1f:5f:7d:d1:56:5d:85:95:23:83:85:30:30:58:20:42:a0:ba: fd:92:cd:96:58:c3:ea:d5:61:24:cb:3f:8d:53:04:f1:49:7a: aa:7e:f3:1d:42:6c:49:01:9e:ca:01:d5:a8:a4:fd:0b:9b:60: f1:37:2f:a5:87:65:a4:30:6f:da:49:b3:6a:67:89:2e:da:90: da:c0:2a:4a:a1:7d:b3:c8:36:bb:ba:6f:f3:79:a6:bd:06:ae: 04:a4:d9:6e:e3:39:66:6c:28:d6:e5:03:75:01:d0:21:8c:a3: 9d:4a:22:48:e5:4c:a0:f1:d0:89:12:49:a3:df:f9:1c:be:13: e2:0e:2c:e1:29:c2:a0:c7:d7:3a:3c:a4:26:e1:1c:95:8a:a9: 7d:66:b9:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaCryWqjLGJiTZmZ6vV3VCvXmSGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUy QzYyMUQ2MjAeFw0yNTEwMTgxMjA2NThaFw0yNTEwMjEyMDE5NThaMDMxMTAvBgNV BAMTKDM2NjM5NDg0QUI3NTBCQkRFNzQwQTlFMzUyN0I2NDAwMkVDNzRFRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbdZ4Bob8l8uEgl1fJeJ8o+k7d hHoVat1V1HrfnpeViaLwFxGkkuQbuKRKFYAFt2HHvSpiLolk1QC6/nLbjQ4ha0+O lLnsh6NSZqGkkjTfunqqdpQJZyngfM5uF2IWnPvmRt8c+xFpWc6i/ruka48EjBO7 yk09bTBh8PQfIhpIDqKtBNeTO13DKhDVoZKA32JCk47QfbcTa7CbiCUZzhj/kZkz 4V1L5r8NkFRMmCe81tfqdQtrup1M9YzViu+MO9goMM+nBhpNJUOYYgGSJpNkrQk6 MXS0o6NQlcrkD4VPFQWG5Jm64FKsO6Az0gw0RqPqwQWmzclm//QvASZg38urAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNmOUhKt1C73nQKnjUntkAC7HTuowHwYDVR0j BBgwFoAUwZNE0PTvPK3ip3EUgePRRSxiHWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MWI2ZGQ5Yi1kMTUyLTRjOGYtODdiNy02MjllYjgwOGY5MTEvMC9DMTkzNDREMEY0 RUYzQ0FERTJBNzcxMTQ4MUUzRDE0NTJDNjIxRDYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUyQzYy MUQ2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDFiNmRkOWItZDE1Mi00YzhmLTg3 YjctNjI5ZWI4MDhmOTExLzAvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0Qx NDUyQzYyMUQ2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzZsh4KHfAQTeOb7333+ALd3+NM1KI+mWqA SjR9zzmvbIfMwfLmGyCpx2DEYKmMpPvYT2NK9DuZw/qEqscC628Rb3b1VdBGMNXy IHbIqa0CceADMfQWvQ3zTEI3sAw990QdQQFGk7rB0Wxifh9ffdFWXYWVI4OFMDBY IEKguv2SzZZYw+rVYSTLP41TBPFJeqp+8x1CbEkBnsoB1aik/QubYPE3L6WHZaQw b9pJs2pniS7akNrAKkqhfbPINru6b/N5pr0GrgSk2W7jOWZsKNblA3UB0CGMo51K IkjlTKDx0IkSSaPf+Ry+E+IOLOEpwqDH1zo8pCbhHJWKqX1muTQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:02:37 2025 by rpki-client