$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft File: 19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft (raw, json) Hash identifier: 1nHqcgJXbn82U4dTRADMYYQs4U28q2bJ6Vc+t7Tr7M0= Subject key identifier: 9D:B2:5F:FD:50:7D:CA:0A:CD:92:46:FE:36:49:D1:1B:FC:4A:BF:49 Authority key identifier: 19:B0:5C:44:D9:C6:EB:80:26:B6:C6:50:65:89:E4:C2:FB:B1:32:D3 Certificate issuer: /CN=19B05C44D9C6EB8026B6C6506589E4C2FBB132D3 Certificate serial: 2ABF9D9EF7DD6AF517D12B71AE0F8785D0DECF3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft Manifest number: 83 Signing time: Sun 29 Jun 2025 12:00:48 +0000 Manifest this update: Sun 29 Jun 2025 11:55:48 +0000 Manifest next update: Wed 02 Jul 2025 12:27:48 +0000 Files and hashes: 1: 3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa (hash: 9PCqgM4cYwxJhzjcC5PwzOGJSMyyIfUQz/Yhckz5Cok=) 2: 19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.crl (hash: zmSwfaqyKil+r7BANf1TmV3LWQ5Uzs36Cz+zLpckdBk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 12:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:bf:9d:9e:f7:dd:6a:f5:17:d1:2b:71:ae:0f:87:85:d0:de:cf:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19B05C44D9C6EB8026B6C6506589E4C2FBB132D3 Validity Not Before: Jun 29 11:55:48 2025 GMT Not After : Jul 2 12:27:48 2025 GMT Subject: CN=9DB25FFD507DCA0ACD9246FE3649D11BFC4ABF49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:19:5d:33:33:b4:55:2c:c8:88:2a:3e:53:03: 02:7f:e1:60:19:3d:a1:e1:a5:42:0d:7f:91:d5:af: b3:76:13:74:8f:c9:21:24:39:67:cf:44:c0:02:2f: 2f:75:2d:83:8f:f4:dc:3c:d1:72:9d:58:dd:bd:71: 63:5f:e2:c2:ac:b4:b8:2a:1c:78:95:74:25:59:a5: 16:ac:92:07:cb:d5:a8:b0:f2:7d:02:c5:dd:f5:ca: 6e:0c:58:06:97:9c:7b:37:95:4e:0a:a8:ee:49:78: ee:e4:ca:48:19:37:04:64:28:60:10:0d:90:47:3f: 6a:97:4c:7f:68:e5:93:ec:4d:f3:95:95:d0:43:6a: 77:e2:b4:b1:a6:b3:a8:89:24:69:88:7c:09:23:aa: e9:6b:c2:ac:a3:e2:de:8c:84:54:0c:83:aa:1c:e4: 0d:dc:72:b8:57:3c:66:05:84:49:4c:60:b8:1a:1e: fb:06:1a:ed:aa:d0:77:c8:bb:d7:cd:18:e5:44:ae: a2:03:15:64:51:bb:fa:02:30:02:f6:55:f2:48:2b: 54:c7:86:9f:aa:c7:eb:42:3e:74:1e:50:84:e0:92: 88:d0:61:bb:00:95:12:b8:3d:c6:fd:63:6b:36:bc: 46:75:f5:68:9d:dc:3c:60:84:dd:64:3c:1e:21:fc: 5c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B2:5F:FD:50:7D:CA:0A:CD:92:46:FE:36:49:D1:1B:FC:4A:BF:49 X509v3 Authority Key Identifier: keyid:19:B0:5C:44:D9:C6:EB:80:26:B6:C6:50:65:89:E4:C2:FB:B1:32:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:39:9e:52:fd:4e:ab:ab:44:e4:56:4b:58:85:8c:2a:f9:b4: 13:37:fb:63:3f:4d:ef:94:bc:8a:50:fb:91:33:32:dd:c7:b8: 0a:c3:90:4d:71:91:ef:34:9b:d3:48:da:4d:64:fc:b1:e7:aa: e2:d0:35:79:68:66:93:98:a5:25:99:fa:dd:9d:78:3d:01:d6: 8b:18:eb:f4:ad:72:af:d9:40:6e:3f:98:46:98:0e:10:55:5f: d0:f2:38:d8:e1:26:95:10:b4:0f:7b:fb:66:50:00:f9:4e:9f: b8:5b:04:99:7c:72:c5:8a:63:e0:67:3a:45:fc:22:b5:8c:1a: 04:56:e5:df:61:84:40:32:b6:c8:0f:c6:1c:79:25:58:40:ed: cf:c5:09:35:73:f1:90:6a:03:ce:97:44:ab:16:19:f1:27:ca: a3:23:37:e0:ef:5c:5b:39:dc:28:84:dc:3a:66:9c:73:5c:04: 3c:7c:40:fb:5d:ff:92:6b:4b:70:45:1b:2f:69:89:55:53:a7: b5:f1:22:ec:3f:3f:b9:7c:e4:e4:99:28:3f:46:a2:65:1b:37: c2:a7:ee:ee:67:31:4f:a5:40:d4:5a:96:f8:08:50:6a:db:35: f7:2b:d1:f8:4f:1f:22:da:f7:36:a1:20:de:bc:62:ca:7e:d6: a7:0b:38:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKr+dnvfdavUX0Stxrg+HhdDezzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlCMDVDNDREOUM2RUI4MDI2QjZDNjUwNjU4OUU0QzJG QkIxMzJEMzAeFw0yNTA2MjkxMTU1NDhaFw0yNTA3MDIxMjI3NDhaMDMxMTAvBgNV BAMTKDlEQjI1RkZENTA3RENBMEFDRDkyNDZGRTM2NDlEMTFCRkM0QUJGNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1GV0zM7RVLMiIKj5TAwJ/4WAZ PaHhpUINf5HVr7N2E3SPySEkOWfPRMACLy91LYOP9Nw80XKdWN29cWNf4sKstLgq HHiVdCVZpRaskgfL1aiw8n0Cxd31ym4MWAaXnHs3lU4KqO5JeO7kykgZNwRkKGAQ DZBHP2qXTH9o5ZPsTfOVldBDanfitLGms6iJJGmIfAkjqulrwqyj4t6MhFQMg6oc 5A3ccrhXPGYFhElMYLgaHvsGGu2q0HfIu9fNGOVErqIDFWRRu/oCMAL2VfJIK1TH hp+qx+tCPnQeUITgkojQYbsAlRK4Pcb9Y2s2vEZ19Wid3DxghN1kPB4h/FzPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnbJf/VB9ygrNkkb+NknRG/xKv0kwHwYDVR0j BBgwFoAUGbBcRNnG64AmtsZQZYnkwvuxMtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMC8xOUIwNUM0NEQ5 QzZFQjgwMjZCNkM2NTA2NTg5RTRDMkZCQjEzMkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTlCMDVDNDREOUM2RUI4MDI2QjZDNjUwNjU4OUU0QzJGQkIx MzJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzAvMTlCMDVDNDREOUM2RUI4MDI2QjZDNjUwNjU4OUU0 QzJGQkIxMzJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMM5nlL9TqurRORWS1iFjCr5tBM3+2M/Te+U vIpQ+5EzMt3HuArDkE1xke80m9NI2k1k/LHnquLQNXloZpOYpSWZ+t2deD0B1osY 6/Stcq/ZQG4/mEaYDhBVX9DyONjhJpUQtA97+2ZQAPlOn7hbBJl8csWKY+BnOkX8 IrWMGgRW5d9hhEAytsgPxhx5JVhA7c/FCTVz8ZBqA86XRKsWGfEnyqMjN+DvXFs5 3CiE3DpmnHNcBDx8QPtd/5JrS3BFGy9piVVTp7XxIuw/P7l85OSZKD9GomUbN8Kn 7u5nMU+lQNRalvgIUGrbNfcr0fhPHyLa9zahIN68Ysp+1qcLOB8= -----END CERTIFICATE-----Generated at Mon Jun 30 10:33:11 2025 by rpki-client