$ rpki-client -vvf repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft File: 19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft (raw, json) Hash identifier: edXSO780WAsDGczPmQqA1mGhmBfaZe0NYmpY1EjEXQs= Subject key identifier: 4F:43:76:06:B1:4B:79:02:AC:6D:4B:39:25:5D:D7:08:81:AC:94:E0 Authority key identifier: 19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE Certificate issuer: /CN=19280B8F5AA4FBDEC679C351EB040D284CF791BE Certificate serial: 5E6A97D9152BDC0B6366813CC700824F2A24D8FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft Manifest number: 0199 Signing time: Fri 22 Aug 2025 19:12:09 +0000 Manifest this update: Fri 22 Aug 2025 19:07:09 +0000 Manifest next update: Tue 26 Aug 2025 06:54:09 +0000 Files and hashes: 1: 3130332e36382e3231342e302f32332d3234203d3e20313530353137.roa (hash: tbt+hpy8ToUXUjWyR8QE4BU+KE7C2NtbzZcO6JiudhY=) 2: 19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl (hash: 8oBhOJIcuUfLGmTI3B5FlFFmFsfG5sT1HzAqovCiY38=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 06:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:6a:97:d9:15:2b:dc:0b:63:66:81:3c:c7:00:82:4f:2a:24:d8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19280B8F5AA4FBDEC679C351EB040D284CF791BE Validity Not Before: Aug 22 19:07:09 2025 GMT Not After : Aug 26 06:54:09 2025 GMT Subject: CN=4F437606B14B7902AC6D4B39255DD70881AC94E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bd:21:f9:7c:1a:91:fd:54:cc:ff:f0:f7:90: 47:9f:0c:ab:aa:92:af:0a:44:d1:e7:6f:a4:7f:0a: 34:f9:31:f1:a9:18:db:f2:ef:00:91:e9:65:5d:f5: 04:a7:89:0a:d7:2d:67:af:b8:44:bc:60:4f:71:fe: eb:fa:47:ba:2b:84:72:f2:39:07:ee:c9:62:b2:fb: ea:13:c9:1a:56:11:d1:b8:b3:61:ce:da:49:3f:ee: 21:47:75:9c:96:22:fb:28:6f:01:1e:90:32:cb:4c: 16:e9:e5:cb:05:08:28:5d:ff:b6:eb:3d:a6:3a:9d: fc:6a:b5:48:9b:2f:9e:c9:87:57:2d:3f:24:40:dd: 0c:22:9a:e0:06:a5:7f:a4:a9:0a:90:44:f7:dc:16: 58:0a:1e:df:02:04:04:f3:f4:af:26:b4:b7:93:8a: 3f:09:48:1a:86:95:e0:51:33:71:8f:aa:66:74:c0: 7e:ef:0b:94:51:91:c6:2d:3e:4e:c4:d9:f5:a2:dc: 6d:20:5b:94:27:34:70:08:4d:60:5d:bf:b5:3e:53: ea:0f:37:52:f3:f3:fc:02:e1:99:c7:60:0f:01:9a: 97:4c:32:26:a4:a4:20:10:67:81:7d:88:d5:eb:97: 4c:85:06:75:2a:e9:a4:7e:ad:8b:e7:ee:e1:f3:28: 8d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:43:76:06:B1:4B:79:02:AC:6D:4B:39:25:5D:D7:08:81:AC:94:E0 X509v3 Authority Key Identifier: keyid:19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:bd:ec:c2:57:7c:96:cf:0c:19:4b:19:60:0d:c1:37:40:90: ed:b5:47:4a:03:41:0e:ef:d2:eb:78:14:72:9c:24:43:b7:0e: 1f:32:9d:af:da:49:00:49:9b:1f:dd:64:82:5a:b0:7b:0b:66: 6b:e5:2c:bb:af:f3:c0:39:c0:e0:dd:86:fa:36:3b:54:e3:ac: 6d:3f:57:6d:b1:32:a7:5b:1e:ab:a5:d2:4b:14:be:0c:6b:1b: 93:d9:0d:d0:b2:24:fd:c8:b3:6a:61:9e:61:2e:5a:7a:aa:23: a0:40:fc:47:80:c0:0d:5f:30:b7:0e:87:3e:0b:a7:69:6f:74: fc:cc:f2:4b:d1:61:b5:1f:33:fe:b6:6d:29:5f:56:9c:68:d8: 48:34:f9:1c:22:0c:d4:92:ee:af:12:80:40:63:21:de:06:68: 91:cc:ef:94:95:13:20:c4:0e:58:cd:2a:d6:01:7e:97:03:ba: de:95:19:84:25:b1:8f:fc:85:be:18:bc:60:7f:3a:d2:84:13: 94:d3:0b:7f:52:21:7b:f9:2f:6c:fa:4c:68:1b:20:c1:17:8e: d2:00:5a:c3:23:b8:d8:02:d3:13:ed:2e:84:a1:1b:7e:1f:ea: 94:ce:c1:b0:b0:5c:7a:8c:b1:6d:93:22:b3:d1:6f:22:7b:ab: a2:5e:0d:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXmqX2RUr3AtjZoE8xwCCTyok2PwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBEMjg0 Q0Y3OTFCRTAeFw0yNTA4MjIxOTA3MDlaFw0yNTA4MjYwNjU0MDlaMDMxMTAvBgNV BAMTKDRGNDM3NjA2QjE0Qjc5MDJBQzZENEIzOTI1NURENzA4ODFBQzk0RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHvSH5fBqR/VTM//D3kEefDKuq kq8KRNHnb6R/CjT5MfGpGNvy7wCR6WVd9QSniQrXLWevuES8YE9x/uv6R7orhHLy OQfuyWKy++oTyRpWEdG4s2HO2kk/7iFHdZyWIvsobwEekDLLTBbp5csFCChd/7br PaY6nfxqtUibL57Jh1ctPyRA3QwimuAGpX+kqQqQRPfcFlgKHt8CBATz9K8mtLeT ij8JSBqGleBRM3GPqmZ0wH7vC5RRkcYtPk7E2fWi3G0gW5QnNHAITWBdv7U+U+oP N1Lz8/wC4ZnHYA8BmpdMMiakpCAQZ4F9iNXrl0yFBnUq6aR+rYvn7uHzKI2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT0N2BrFLeQKsbUs5JV3XCIGslOAwHwYDVR0j BBgwFoAUGSgLj1qk+97GecNR6wQNKEz3kb4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZWJmNjNlZC1kNDUwLTQ3N2UtYjMxYi1hZjkyYjE3MjZkMmUvMC8xOTI4MEI4RjVB QTRGQkRFQzY3OUMzNTFFQjA0MEQyODRDRjc5MUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBEMjg0Q0Y3 OTFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGViZjYzZWQtZDQ1MC00NzdlLWIz MWItYWY5MmIxNzI2ZDJlLzAvMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBE Mjg0Q0Y3OTFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHW97MJXfJbPDBlLGWANwTdAkO21R0oDQQ7v 0ut4FHKcJEO3Dh8yna/aSQBJmx/dZIJasHsLZmvlLLuv88A5wODdhvo2O1TjrG0/ V22xMqdbHqul0ksUvgxrG5PZDdCyJP3Is2phnmEuWnqqI6BA/EeAwA1fMLcOhz4L p2lvdPzM8kvRYbUfM/62bSlfVpxo2Eg0+RwiDNSS7q8SgEBjId4GaJHM75SVEyDE DljNKtYBfpcDut6VGYQlsY/8hb4YvGB/OtKEE5TTC39SIXv5L2z6TGgbIMEXjtIA WsMjuNgC0xPtLoShG34f6pTOwbCwXHqMsW2TIrPRbyJ7q6JeDbU= -----END CERTIFICATE-----Generated at Sat Aug 23 12:04:37 2025 by rpki-client