$ rpki-client -vvf repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft File: 3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft (raw, json) Hash identifier: CZgJ28nwRMMZaSlxe6BhtxSC3v+3LXsDN1M7uH/kUcw= Subject key identifier: 1C:A4:91:9F:C5:9A:03:2B:5B:6C:F3:69:BE:96:CB:41:E7:17:EB:62 Authority key identifier: 31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 Certificate issuer: /CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5 Certificate serial: 7A3E8B10F0B6E9F006511E7E74C2E88B433E5190 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft Manifest number: 69 Signing time: Fri 22 Aug 2025 13:20:45 +0000 Manifest this update: Fri 22 Aug 2025 13:15:45 +0000 Manifest next update: Mon 25 Aug 2025 14:21:45 +0000 Files and hashes: 1: 3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl (hash: AKKjDFhQuf+Hqhgx7X/0p3Zq53QnOwXh082ZU2vWO00=) 2: 3130332e3136322e33352e302f32342d3234203d3e20313431363535.roa (hash: 2q+rh+u7xtZBbh00UB11LmVHu3mC0doj4usif/1P0SE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 14:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:3e:8b:10:f0:b6:e9:f0:06:51:1e:7e:74:c2:e8:8b:43:3e:51:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5 Validity Not Before: Aug 22 13:15:45 2025 GMT Not After : Aug 25 14:21:45 2025 GMT Subject: CN=1CA4919FC59A032B5B6CF369BE96CB41E717EB62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:93:2b:71:27:24:74:f4:83:4c:cc:f5:0a:f8: c2:14:d2:a5:81:29:8c:a4:95:33:c3:6f:72:df:49: 4b:f7:7a:2a:46:8a:ec:bc:c6:1a:fd:cc:b1:29:9d: 9e:8c:3c:f0:93:e5:12:0b:2d:ee:15:fa:f5:40:46: e3:55:69:43:98:2b:9d:5a:90:0a:f2:05:7a:c2:6d: 42:3c:5d:8b:74:fa:a0:59:5e:7f:2f:07:42:b6:12: 96:66:41:05:bc:08:3b:a3:c7:41:4d:48:c9:0a:b5: fd:5a:2b:50:93:e5:e8:6f:e5:81:a9:fd:62:64:5e: 3b:e6:0d:fd:da:fb:00:cb:db:49:3b:4f:c8:40:5c: 07:90:5d:38:73:5d:6f:c1:50:7b:19:dc:95:5d:86: 3a:67:32:1d:f0:14:54:92:6f:37:47:61:62:c7:2b: eb:bf:24:e3:03:22:c5:cd:91:0b:ec:ed:6c:3d:5d: bb:b5:20:17:86:73:e8:cf:1a:e3:ae:4a:e4:d0:36: 4d:c5:40:75:47:78:6b:02:58:79:d4:3f:1f:1f:5b: be:1c:0d:a5:ce:eb:fc:4c:1d:51:21:4d:36:c2:73: fe:7d:d5:5d:da:90:76:c7:ea:f1:f3:81:a9:73:b6: 86:c3:06:64:cd:55:02:3d:e6:09:95:42:92:af:f5: 13:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A4:91:9F:C5:9A:03:2B:5B:6C:F3:69:BE:96:CB:41:E7:17:EB:62 X509v3 Authority Key Identifier: keyid:31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:64:21:5c:0c:09:28:ef:3b:5f:ff:01:54:5a:aa:b6:2d:7e: c3:44:7d:2b:76:f3:f5:1f:dd:27:73:09:c5:bf:a3:2b:2f:c0: cf:f1:c4:5f:2e:4a:c4:f2:52:7d:d2:36:49:3c:4f:de:f3:0a: 0a:ed:ae:d2:d9:f6:d8:6e:2f:39:32:41:eb:28:3f:4b:dd:2a: b7:37:48:57:13:03:35:08:50:6c:31:f8:85:4a:b2:a9:d0:98: 9a:1d:40:d8:d5:b3:80:f5:18:62:71:71:c0:ca:8f:28:a1:ae: 5a:d1:89:c1:e5:6f:78:4a:0c:3e:f3:f9:a0:0f:34:f9:dd:ed: 65:e6:d8:3b:0a:57:36:c5:27:67:10:45:3b:45:ba:6b:29:d7: ba:8b:bb:86:b2:67:06:41:a0:a2:3b:df:cc:7e:c7:16:df:27: 2e:c8:7e:2c:c1:44:e6:6f:43:45:07:93:94:98:85:86:32:73: e6:c2:97:78:d5:26:b0:ae:63:30:d8:d9:02:3f:f7:57:12:6a: b9:6c:9c:6e:f0:e2:2c:e3:21:43:ae:12:40:ce:d0:2a:44:ea: d2:cc:95:5a:ed:e7:24:16:d6:99:fe:12:ec:fc:5c:f9:f4:f8: 80:66:f9:6e:60:30:1d:fa:f1:27:70:20:e5:55:c3:4a:d6:05: 47:d5:92:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUej6LEPC26fAGUR5+dMLoi0M+UZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2QURF RjEzMjlCNTAeFw0yNTA4MjIxMzE1NDVaFw0yNTA4MjUxNDIxNDVaMDMxMTAvBgNV BAMTKDFDQTQ5MTlGQzU5QTAzMkI1QjZDRjM2OUJFOTZDQjQxRTcxN0VCNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzkytxJyR09INMzPUK+MIU0qWB KYyklTPDb3LfSUv3eipGiuy8xhr9zLEpnZ6MPPCT5RILLe4V+vVARuNVaUOYK51a kAryBXrCbUI8XYt0+qBZXn8vB0K2EpZmQQW8CDujx0FNSMkKtf1aK1CT5ehv5YGp /WJkXjvmDf3a+wDL20k7T8hAXAeQXThzXW/BUHsZ3JVdhjpnMh3wFFSSbzdHYWLH K+u/JOMDIsXNkQvs7Ww9Xbu1IBeGc+jPGuOuSuTQNk3FQHVHeGsCWHnUPx8fW74c DaXO6/xMHVEhTTbCc/591V3akHbH6vHzgalztobDBmTNVQI95gmVQpKv9RPPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHKSRn8WaAytbbPNpvpbLQecX62IwHwYDVR0j BBgwFoAUMZTf1mRXNZr3vzvwnqdmre8TKbUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y M2JhMDI0Yi04N2YyLTRlZGQtODlmZi1hNGZjYTcwMDhjMzYvMC8zMTk0REZENjY0 NTczNTlBRjdCRjNCRjA5RUE3NjZBREVGMTMyOUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2QURFRjEz MjlCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjNiYTAyNGItODdmMi00ZWRkLTg5 ZmYtYTRmY2E3MDA4YzM2LzAvMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2 QURFRjEzMjlCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxkIVwMCSjvO1//AVRaqrYtfsNEfSt28/Uf 3SdzCcW/oysvwM/xxF8uSsTyUn3SNkk8T97zCgrtrtLZ9thuLzkyQesoP0vdKrc3 SFcTAzUIUGwx+IVKsqnQmJodQNjVs4D1GGJxccDKjyihrlrRicHlb3hKDD7z+aAP NPnd7WXm2DsKVzbFJ2cQRTtFumsp17qLu4ayZwZBoKI738x+xxbfJy7IfizBROZv Q0UHk5SYhYYyc+bCl3jVJrCuYzDY2QI/91cSarlsnG7w4izjIUOuEkDO0CpE6tLM lVrt5yQW1pn+Euz8XPn0+IBm+W5gMB368SdwIOVVw0rWBUfVkgw= -----END CERTIFICATE-----Generated at Sat Aug 23 15:28:40 2025 by rpki-client