$ rpki-client -vvf repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft File: 919B60E4D7E1171B6624F318ADA1B74502A3A018.mft (raw, json) Hash identifier: pQguqca5WyoNO0ESYDrnkVMK7j+V7QGKplay4dKFynk= Subject key identifier: EC:E9:BD:E6:E2:8F:A2:D0:47:E5:56:8B:B7:89:B8:D2:E2:C3:B0:2E Authority key identifier: 91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18 Certificate issuer: /CN=919B60E4D7E1171B6624F318ADA1B74502A3A018 Certificate serial: 53F415C9FC5B98B5132EB881B0AB41332A433207 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer Subject info access: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft Manifest number: 04E5 Signing time: Wed 02 Jul 2025 10:50:38 +0000 Manifest this update: Wed 02 Jul 2025 10:45:38 +0000 Manifest next update: Sat 05 Jul 2025 21:21:38 +0000 Files and hashes: 1: 919B60E4D7E1171B6624F318ADA1B74502A3A018.crl (hash: whHxrILTTa6g5OStAxZi22gKb/+7c9Zc5PLSbGcNkp0=) 2: 3130332e3130362e3131362e302f32342d3234203d3e20313336383836.roa (hash: orZMBlY9QwaffF3Sj5GAYnuUKegFXWi6cel4pBtcO+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.crl rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f4:15:c9:fc:5b:98:b5:13:2e:b8:81:b0:ab:41:33:2a:43:32:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=919B60E4D7E1171B6624F318ADA1B74502A3A018 Validity Not Before: Jul 2 10:45:38 2025 GMT Not After : Jul 5 21:21:38 2025 GMT Subject: CN=ECE9BDE6E28FA2D047E5568BB789B8D2E2C3B02E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:19:a6:6e:8c:72:c0:14:bc:d7:78:18:62: 50:92:b6:fc:3a:66:f5:3b:61:71:d9:d5:33:fa:7d: e9:26:89:7e:fe:d6:e0:84:3e:35:9f:cb:e2:09:37: 72:0f:46:2f:47:cf:3d:ed:06:c8:df:a3:7f:35:dd: 53:d1:bf:95:33:a2:03:1c:29:ef:34:0c:9a:94:83: 8a:a0:1f:1e:ae:73:b6:92:87:a7:76:91:d3:51:f6: cb:27:0b:d9:bc:da:b0:f6:2f:9a:d7:f6:a3:d1:2d: ee:28:e4:ca:84:39:44:b1:54:a9:aa:ae:bf:d4:8f: 1b:5e:7a:50:35:a4:39:12:f8:34:4a:48:88:cf:e2: 07:d7:6a:e8:c9:55:55:aa:05:cc:79:67:f2:c7:e7: 22:05:1a:d6:07:64:21:27:b1:bc:bf:3e:e7:48:0c: bb:f4:37:f3:8b:71:78:96:0d:1a:87:8e:e5:b1:e9: 15:50:71:65:ff:36:c3:b3:24:28:87:e0:0a:d2:11: bf:ae:1e:71:9f:d1:85:5e:4e:3e:b3:b9:ce:fe:62: 42:a7:9b:f2:65:7e:6e:79:da:22:f4:d7:0a:f0:50: 07:45:e7:54:5f:41:19:46:58:18:71:93:2c:47:7a: 00:87:dd:f5:99:87:fd:f2:9c:34:24:d5:09:99:97: 4f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E9:BD:E6:E2:8F:A2:D0:47:E5:56:8B:B7:89:B8:D2:E2:C3:B0:2E X509v3 Authority Key Identifier: keyid:91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:06:67:bc:a3:fb:17:83:72:01:75:38:6a:e0:a9:89:65:33: 87:3d:e0:e8:1c:c1:51:ff:8a:15:71:90:af:f6:3a:b3:96:d5: fc:31:17:01:76:96:4c:ad:1e:6d:56:81:d0:69:2c:c6:b9:cf: d5:74:6c:fe:39:0e:7c:e4:19:6c:67:2b:ef:67:90:f0:17:6f: 2b:09:2c:e5:cd:ea:07:c4:9d:f3:eb:9a:f2:24:18:11:35:b1: 84:3e:03:df:52:ec:ee:a7:f3:6b:3d:fe:e5:97:30:6e:da:1c: fa:e5:02:73:73:08:b9:50:12:fa:29:51:85:e4:a6:45:dc:6a: 59:68:0c:27:1c:90:e1:e4:09:62:fe:ca:54:26:e4:da:11:8c: 21:a5:8d:e2:c6:97:90:d0:8c:b5:59:e9:5d:1d:c5:77:20:c9: c5:60:88:f8:00:27:e8:3f:2e:2a:e1:50:bd:cb:d1:f8:21:bd: 88:d9:b3:95:4c:72:eb:34:32:72:88:a3:a7:8c:ac:bc:2e:25: ca:a6:1a:2b:58:b8:3a:24:ff:fe:38:79:d9:72:5c:1f:8d:0d: f1:69:03:32:45:35:37:da:b3:c4:3a:3d:da:8c:9a:87:ae:cb: 6a:07:c8:6d:97:92:a7:f2:b8:0a:5c:dc:b4:8c:c6:32:b6:29: 0d:93:c1:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU/QVyfxbmLUTLriBsKtBMypDMgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE5QjYwRTREN0UxMTcxQjY2MjRGMzE4QURBMUI3NDUw MkEzQTAxODAeFw0yNTA3MDIxMDQ1MzhaFw0yNTA3MDUyMTIxMzhaMDMxMTAvBgNV BAMTKEVDRTlCREU2RTI4RkEyRDA0N0U1NTY4QkI3ODlCOEQyRTJDM0IwMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/MhmmboxywBS813gYYlCStvw6 ZvU7YXHZ1TP6fekmiX7+1uCEPjWfy+IJN3IPRi9Hzz3tBsjfo3813VPRv5UzogMc Ke80DJqUg4qgHx6uc7aSh6d2kdNR9ssnC9m82rD2L5rX9qPRLe4o5MqEOUSxVKmq rr/UjxteelA1pDkS+DRKSIjP4gfXaujJVVWqBcx5Z/LH5yIFGtYHZCEnsby/PudI DLv0N/OLcXiWDRqHjuWx6RVQcWX/NsOzJCiH4ArSEb+uHnGf0YVeTj6zuc7+YkKn m/Jlfm552iL01wrwUAdF51RfQRlGWBhxkyxHegCH3fWZh/3ynDQk1QmZl08FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Om95uKPotBH5VaLt4m40uLDsC4wHwYDVR0j BBgwFoAUkZtg5NfhFxtmJPMYraG3RQKjoBgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MDBhZWQxZC05NGM5LTQ5YTYtYTYwOS04ODJlMDNjZDA3YmEvMC85MTlCNjBFNEQ3 RTExNzFCNjYyNEYzMThBREExQjc0NTAyQTNBMDE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE5QjYwRTREN0UxMTcxQjY2MjRGMzE4QURBMUI3NDUwMkEz QTAxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzAwYWVkMWQtOTRjOS00OWE2LWE2 MDktODgyZTAzY2QwN2JhLzAvOTE5QjYwRTREN0UxMTcxQjY2MjRGMzE4QURBMUI3 NDUwMkEzQTAxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgGZ7yj+xeDcgF1OGrgqYllM4c94OgcwVH/ ihVxkK/2OrOW1fwxFwF2lkytHm1WgdBpLMa5z9V0bP45DnzkGWxnK+9nkPAXbysJ LOXN6gfEnfPrmvIkGBE1sYQ+A99S7O6n82s9/uWXMG7aHPrlAnNzCLlQEvopUYXk pkXcalloDCcckOHkCWL+ylQm5NoRjCGljeLGl5DQjLVZ6V0dxXcgycVgiPgAJ+g/ LirhUL3L0fghvYjZs5VMcus0MnKIo6eMrLwuJcqmGitYuDok//44edlyXB+NDfFp AzJFNTfas8Q6PdqMmoeuy2oHyG2XkqfyuApc3LSMxjK2KQ2Twak= -----END CERTIFICATE-----Generated at Fri Jul 4 13:37:30 2025 by rpki-client