$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft File: 19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft (raw, json) Hash identifier: WJH9Vi9VxrOoijsIxeFVmRVswDPh3lweAXQ5aNIgQug= Subject key identifier: B9:BE:A1:6F:70:B9:58:B6:1C:CA:97:C0:FF:3F:31:F6:C4:3A:18:95 Authority key identifier: 19:B0:5C:44:D9:C6:EB:80:26:B6:C6:50:65:89:E4:C2:FB:B1:32:D3 Certificate issuer: /CN=19B05C44D9C6EB8026B6C6506589E4C2FBB132D3 Certificate serial: 2CABA51C2A2A2BD5C494075099A44AFBC06A6BEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft Manifest number: 9B Signing time: Fri 22 Aug 2025 13:10:49 +0000 Manifest this update: Fri 22 Aug 2025 13:05:49 +0000 Manifest next update: Tue 26 Aug 2025 00:33:49 +0000 Files and hashes: 1: 19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.crl (hash: +QDr4+52g56RV1UfMLq1IO2ShQCRDhcgW6MGpWorRTU=) 2: 3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa (hash: UlKfFD3Jx7idatTOHjtFDcw+Wj0A2uPP8QvwywC4jKg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 00:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ab:a5:1c:2a:2a:2b:d5:c4:94:07:50:99:a4:4a:fb:c0:6a:6b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19B05C44D9C6EB8026B6C6506589E4C2FBB132D3 Validity Not Before: Aug 22 13:05:49 2025 GMT Not After : Aug 26 00:33:49 2025 GMT Subject: CN=B9BEA16F70B958B61CCA97C0FF3F31F6C43A1895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:db:8b:12:1f:a7:15:c0:f4:73:c8:71:2c:21: a4:cd:a6:4f:70:01:e9:6d:1f:ac:65:dc:98:1d:af: ee:d7:bd:5d:94:a8:f5:76:86:07:77:e1:ac:d6:7a: 55:f8:ff:28:db:6e:31:97:15:cb:07:6e:80:7f:16: 9a:45:cf:30:88:ce:c2:74:c0:af:6b:32:99:bb:f7: e7:89:05:fb:71:d7:56:01:44:54:19:95:a1:7b:f1: cd:a9:4f:99:36:50:f7:c9:08:30:dc:21:5e:72:fb: 95:83:71:33:d3:ca:47:6d:12:c6:f2:84:e1:1b:9d: c0:8c:97:84:88:d9:4a:2f:50:13:52:a3:25:e8:4a: e9:eb:a6:77:ce:cf:45:56:f4:28:64:11:0a:c2:71: 3a:94:9f:c7:50:72:2d:f0:26:49:6a:83:4f:93:4e: 6f:68:be:6b:72:e3:30:dc:45:e4:c1:90:91:cc:f4: 6d:e6:73:2e:f7:f4:41:a0:80:67:99:37:cf:01:52: a8:d4:ce:b2:a6:45:09:40:a4:0e:f2:43:67:3a:36: 10:33:c6:47:d6:98:d0:8e:61:ae:26:63:bf:d4:6e: 98:7d:19:0a:89:a5:71:ff:42:5d:3b:bd:5d:ee:0e: a6:e7:b0:e6:72:b9:a6:1b:cc:de:27:ab:89:d3:39: f6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BE:A1:6F:70:B9:58:B6:1C:CA:97:C0:FF:3F:31:F6:C4:3A:18:95 X509v3 Authority Key Identifier: keyid:19:B0:5C:44:D9:C6:EB:80:26:B6:C6:50:65:89:E4:C2:FB:B1:32:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:bd:be:9f:fd:fe:14:82:8e:5b:b1:f4:9a:4b:b6:b5:a6:bc: 85:42:20:02:01:7c:77:f7:4e:1a:0c:a4:84:ad:6c:69:6e:d6: 56:bc:21:1b:7f:cf:13:5c:ae:43:37:bb:e4:3b:8b:79:7d:1f: fd:01:a9:c8:02:87:cb:f5:c7:74:71:11:b7:33:48:61:8e:d3: d5:ec:13:a6:7a:4e:c9:73:87:4c:7b:79:55:1a:d2:dc:62:98: 2a:da:e6:82:d3:a0:c2:9e:7d:db:7d:59:d0:2d:1e:4d:65:82: 2a:b6:af:bc:b1:af:5e:dc:0a:a6:d3:e9:c6:21:c5:04:e2:5f: f0:4d:e0:91:4d:cc:5d:2c:2a:24:8a:3b:98:f8:a9:30:c9:3e: 2f:a2:93:7d:71:9c:b7:c0:91:f3:24:8c:9f:5e:bb:15:cb:68: b7:90:39:6a:a1:20:bc:56:8a:ad:d4:ad:d8:76:4a:6d:7c:fb: f5:86:7b:03:db:71:13:ce:e0:67:ce:60:fb:83:88:b5:ca:d6: 20:60:c2:90:06:13:92:f0:c0:2b:a1:34:ac:23:08:a9:df:b0: d3:cd:06:7b:27:a1:2a:53:42:a4:a2:fc:ea:1d:90:0c:3e:a8: 93:99:cc:c7:da:e9:fb:2f:74:de:75:29:6a:d7:91:f9:3a:a0: f2:da:e8:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULKulHCoqK9XElAdQmaRK+8Bqa+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlCMDVDNDREOUM2RUI4MDI2QjZDNjUwNjU4OUU0QzJG QkIxMzJEMzAeFw0yNTA4MjIxMzA1NDlaFw0yNTA4MjYwMDMzNDlaMDMxMTAvBgNV BAMTKEI5QkVBMTZGNzBCOTU4QjYxQ0NBOTdDMEZGM0YzMUY2QzQzQTE4OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC624sSH6cVwPRzyHEsIaTNpk9w AeltH6xl3Jgdr+7XvV2UqPV2hgd34azWelX4/yjbbjGXFcsHboB/FppFzzCIzsJ0 wK9rMpm79+eJBftx11YBRFQZlaF78c2pT5k2UPfJCDDcIV5y+5WDcTPTykdtEsby hOEbncCMl4SI2UovUBNSoyXoSunrpnfOz0VW9ChkEQrCcTqUn8dQci3wJklqg0+T Tm9ovmty4zDcReTBkJHM9G3mcy739EGggGeZN88BUqjUzrKmRQlApA7yQ2c6NhAz xkfWmNCOYa4mY7/Ubph9GQqJpXH/Ql07vV3uDqbnsOZyuaYbzN4nq4nTOfaJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUub6hb3C5WLYcypfA/z8x9sQ6GJUwHwYDVR0j BBgwFoAUGbBcRNnG64AmtsZQZYnkwvuxMtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMC8xOUIwNUM0NEQ5 QzZFQjgwMjZCNkM2NTA2NTg5RTRDMkZCQjEzMkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTlCMDVDNDREOUM2RUI4MDI2QjZDNjUwNjU4OUU0QzJGQkIx MzJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzAvMTlCMDVDNDREOUM2RUI4MDI2QjZDNjUwNjU4OUU0 QzJGQkIxMzJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEO9vp/9/hSCjlux9JpLtrWmvIVCIAIBfHf3 ThoMpIStbGlu1la8IRt/zxNcrkM3u+Q7i3l9H/0BqcgCh8v1x3RxEbczSGGO09Xs E6Z6Tslzh0x7eVUa0tximCra5oLToMKefdt9WdAtHk1lgiq2r7yxr17cCqbT6cYh xQTiX/BN4JFNzF0sKiSKO5j4qTDJPi+ik31xnLfAkfMkjJ9euxXLaLeQOWqhILxW iq3Urdh2Sm18+/WGewPbcRPO4GfOYPuDiLXK1iBgwpAGE5LwwCuhNKwjCKnfsNPN BnsnoSpTQqSi/OodkAw+qJOZzMfa6fsvdN51KWrXkfk6oPLa6Io= -----END CERTIFICATE-----Generated at Sat Aug 23 23:17:11 2025 by rpki-client