$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft File: 19D983F92968E71520E086B32ACAFEFB5BF04943.mft (raw, json) Hash identifier: P0YTc81ds44O9NaI2GZrxBEuxTfZn9v9U+RQiV6V7hg= Subject key identifier: 0F:22:7A:90:CB:A1:43:DB:08:4E:AF:AF:71:92:E3:3A:68:0A:55:44 Authority key identifier: 19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43 Certificate issuer: /CN=19D983F92968E71520E086B32ACAFEFB5BF04943 Certificate serial: 1EBD05BEF4579BE80E3A77C6607B3210DEB65E5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft Manifest number: 04FE Signing time: Sat 23 Aug 2025 11:02:24 +0000 Manifest this update: Sat 23 Aug 2025 10:57:24 +0000 Manifest next update: Tue 26 Aug 2025 17:10:24 +0000 Files and hashes: 1: 3130332e31382e3134342e302f32322d3234203d3e203538383137.roa (hash: 5e8rSnnuFx8UzgnzTqPOgNkN7iU6KGmkspkL1P/ryrM=) 2: 19D983F92968E71520E086B32ACAFEFB5BF04943.crl (hash: H73+O52GTZ1081AdZNDwq/VCpJQhxXwbYB1N3TWteTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.crl rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 17:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:bd:05:be:f4:57:9b:e8:0e:3a:77:c6:60:7b:32:10:de:b6:5e:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19D983F92968E71520E086B32ACAFEFB5BF04943 Validity Not Before: Aug 23 10:57:24 2025 GMT Not After : Aug 26 17:10:24 2025 GMT Subject: CN=0F227A90CBA143DB084EAFAF7192E33A680A5544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:fd:be:57:51:9a:15:0c:db:96:94:27:02: 24:ba:b2:db:82:89:89:18:d8:63:47:e5:18:59:ae: 43:6c:29:ca:30:9b:70:1a:a9:d4:20:1b:ae:99:e0: ff:e2:f2:9d:cc:7b:1d:8f:90:2a:de:07:a1:fe:33: 28:94:da:df:0d:20:df:39:80:fa:c5:48:a9:36:d5: 01:72:96:50:40:5f:8d:46:85:dd:6e:f5:3f:1c:bb: b5:71:0d:7b:2b:b1:97:0d:e4:0f:af:75:46:5a:e0: 56:82:1b:3b:7e:40:5a:eb:cc:92:bd:6e:6f:0b:f8: 3b:65:64:d1:9b:86:3c:83:54:4d:e4:52:0c:f2:34: 81:8b:83:e9:d2:e2:7d:9d:a4:0d:84:7f:56:f7:69: 2c:d4:e8:2d:10:95:2f:63:d8:dd:1c:f1:af:c7:3c: e4:f1:a7:fd:ab:5c:e6:7c:81:ed:1d:32:99:62:81: f4:27:62:1d:95:b4:22:59:56:a7:ac:fa:26:4d:5c: 17:a4:d2:2a:83:90:61:83:5f:55:ca:da:ea:de:51: 94:6c:75:74:7d:b7:2c:85:1e:96:64:0d:bb:49:59: 5c:bd:f0:b1:78:b9:a2:35:5e:2e:f6:41:5e:41:30: ff:be:59:27:29:4d:83:e0:2a:f6:3e:ac:21:b5:eb: 8a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:22:7A:90:CB:A1:43:DB:08:4E:AF:AF:71:92:E3:3A:68:0A:55:44 X509v3 Authority Key Identifier: keyid:19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:d0:8e:95:1e:44:42:29:7a:3d:3e:3b:72:1a:d5:2d:97:cd: 08:ba:09:27:d9:6f:2d:87:3a:45:c4:81:8e:0e:59:d7:7f:3f: ad:f0:3f:14:6c:f9:3c:84:f5:7f:ea:8c:45:c7:0e:fc:ff:e7: 08:ae:25:8d:64:a3:9f:25:67:ba:d5:a8:e3:ab:87:e4:f7:4a: 3b:79:3f:60:36:ff:fa:f3:80:e9:c8:e0:e1:ec:50:b2:bf:fa: 02:87:de:ad:9f:f5:f4:e5:c4:db:ed:4f:d1:98:af:9f:f0:ec: 01:2a:34:06:76:ea:47:db:dc:ee:44:c0:46:22:87:1d:24:0e: ff:ac:f5:d8:b4:1f:93:2b:b1:d7:19:33:02:71:67:58:09:2f: 2c:cf:67:db:c0:4e:29:fe:33:52:00:5f:4f:20:91:5a:6e:cc: 86:2c:ae:b2:ff:d9:83:28:69:bb:8c:34:3b:81:c3:9d:cb:c7: a2:4f:65:74:5a:2d:b0:40:b1:9b:6a:4b:d8:67:b9:53:63:55: e2:97:d3:94:9f:81:bf:82:4d:1a:3c:4b:2a:a7:35:0d:5e:a7: f7:0a:fa:e7:8b:ea:65:de:44:07:23:eb:92:81:d2:f7:5a:a1: 78:33:22:55:c4:8c:8f:e0:65:94:5f:eb:d3:f7:bf:59:9c:62: 47:d9:2f:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHr0FvvRXm+gOOnfGYHsyEN62Xl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZFRkI1 QkYwNDk0MzAeFw0yNTA4MjMxMDU3MjRaFw0yNTA4MjYxNzEwMjRaMDMxMTAvBgNV BAMTKDBGMjI3QTkwQ0JBMTQzREIwODRFQUZBRjcxOTJFMzNBNjgwQTU1NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDILP2+V1GaFQzblpQnAiS6stuC iYkY2GNH5RhZrkNsKcowm3AaqdQgG66Z4P/i8p3Mex2PkCreB6H+MyiU2t8NIN85 gPrFSKk21QFyllBAX41Ghd1u9T8cu7VxDXsrsZcN5A+vdUZa4FaCGzt+QFrrzJK9 bm8L+DtlZNGbhjyDVE3kUgzyNIGLg+nS4n2dpA2Ef1b3aSzU6C0QlS9j2N0c8a/H POTxp/2rXOZ8ge0dMpligfQnYh2VtCJZVqes+iZNXBek0iqDkGGDX1XK2ureUZRs dXR9tyyFHpZkDbtJWVy98LF4uaI1Xi72QV5BMP++WScpTYPgKvY+rCG164obAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDyJ6kMuhQ9sITq+vcZLjOmgKVUQwHwYDVR0j BBgwFoAUGdmD+Slo5xUg4IazKsr++1vwSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2IxZjEwOS1iOWZlLTQzMjMtODRlMy1iNjBiYjRkYzFlY2MvMC8xOUQ5ODNGOTI5 NjhFNzE1MjBFMDg2QjMyQUNBRkVGQjVCRjA0OTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZFRkI1QkYw NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNiMWYxMDktYjlmZS00MzIzLTg0 ZTMtYjYwYmI0ZGMxZWNjLzAvMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZF RkI1QkYwNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTQjpUeREIpej0+O3Ia1S2XzQi6CSfZby2H OkXEgY4OWdd/P63wPxRs+TyE9X/qjEXHDvz/5wiuJY1ko58lZ7rVqOOrh+T3Sjt5 P2A2//rzgOnI4OHsULK/+gKH3q2f9fTlxNvtT9GYr5/w7AEqNAZ26kfb3O5EwEYi hx0kDv+s9di0H5MrsdcZMwJxZ1gJLyzPZ9vATin+M1IAX08gkVpuzIYsrrL/2YMo abuMNDuBw53Lx6JPZXRaLbBAsZtqS9hnuVNjVeKX05Sfgb+CTRo8SyqnNQ1ep/cK +ueL6mXeRAcj65KB0vdaoXgzIlXEjI/gZZRf69P3v1mcYkfZL8A= -----END CERTIFICATE-----Generated at Sat Aug 23 20:22:11 2025 by rpki-client