$ rpki-client -vvf repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft File: 919B60E4D7E1171B6624F318ADA1B74502A3A018.mft (raw, json) Hash identifier: dYPHFZ17GUeH1J2i81g8NEZyTcQMCUoQaq63VRA5ObM= Subject key identifier: E7:56:4F:69:16:0C:F2:BB:65:5A:6E:0D:03:E7:AB:17:ED:18:22:04 Authority key identifier: 91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18 Certificate issuer: /CN=919B60E4D7E1171B6624F318ADA1B74502A3A018 Certificate serial: 740DD12A8B15E7E4AEA7BBDBFD9E32F9D07C9B06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer Subject info access: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft Manifest number: 04FC Signing time: Fri 22 Aug 2025 14:10:40 +0000 Manifest this update: Fri 22 Aug 2025 14:05:40 +0000 Manifest next update: Mon 25 Aug 2025 21:28:40 +0000 Files and hashes: 1: 3130332e3130362e3131362e302f32342d3234203d3e20313336383836.roa (hash: orZMBlY9QwaffF3Sj5GAYnuUKegFXWi6cel4pBtcO+Y=) 2: 919B60E4D7E1171B6624F318ADA1B74502A3A018.crl (hash: /8gED4L49RBRY7GWMNRZRr2qXh4zKeuA/Ng6EGKbU4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.crl rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:0d:d1:2a:8b:15:e7:e4:ae:a7:bb:db:fd:9e:32:f9:d0:7c:9b:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=919B60E4D7E1171B6624F318ADA1B74502A3A018 Validity Not Before: Aug 22 14:05:40 2025 GMT Not After : Aug 25 21:28:40 2025 GMT Subject: CN=E7564F69160CF2BB655A6E0D03E7AB17ED182204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e0:a8:26:ad:53:18:05:c6:a9:64:da:ca:08: 30:ab:d3:e5:97:e8:17:c6:eb:2b:d3:71:c9:31:8e: 8a:2a:c3:90:20:b2:af:6e:be:27:a4:1c:c1:7f:29: 67:3d:ba:32:99:78:6c:67:b9:24:20:af:3e:7e:56: a6:17:ab:6f:0b:10:37:e1:38:a2:ba:fb:04:1e:e4: 40:fc:27:7f:68:58:ef:8f:77:5f:e3:0b:5f:cd:c5: 0e:e8:cd:89:84:d7:1d:80:26:a2:b8:3a:34:64:fc: 96:1a:06:2d:4d:df:11:a4:df:e3:24:c9:ac:dd:a3: 19:85:c1:f9:c6:ec:75:54:0e:fc:29:8e:57:86:4b: 8f:b7:4a:d5:c3:86:86:39:63:13:5e:da:fb:d9:a4: bb:fe:41:89:4c:18:6e:56:81:de:35:8c:65:3c:73: 17:e0:db:cb:0d:f4:7e:8c:ec:a0:83:b3:af:0e:ca: 5a:f9:34:6c:55:23:86:93:88:67:25:03:24:2e:0b: 64:16:dd:5e:66:ad:c0:62:4a:b5:60:bd:aa:46:42: a6:1b:c0:33:94:15:b8:fd:74:5e:3d:db:d3:f9:46: 24:04:41:aa:db:69:4c:48:8e:9b:26:9f:f0:6d:b8: e5:a8:d5:06:30:e8:a2:89:27:e6:16:d2:4d:c5:5a: f8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:56:4F:69:16:0C:F2:BB:65:5A:6E:0D:03:E7:AB:17:ED:18:22:04 X509v3 Authority Key Identifier: keyid:91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:1e:72:be:f6:a4:1d:b9:f0:77:f1:09:dc:71:b2:36:37:73: ad:98:6b:f6:1b:9b:a9:ed:db:af:15:7a:05:db:f2:8d:38:a4: 83:2a:b4:cd:95:fa:ee:b1:ed:ab:d4:4e:60:f1:47:ab:10:e5: 2d:3b:43:b5:0a:d1:7f:a0:c0:6f:59:4a:5f:c1:6c:aa:d6:ea: 5d:d9:72:a9:34:b0:df:b8:fb:90:cc:2b:d0:5b:a1:f9:59:08: 0c:25:18:6a:bd:c7:c5:14:f5:ab:f9:06:eb:86:ea:b2:73:cf: f4:f1:65:67:04:5b:f8:66:c1:6a:10:86:52:51:9e:3f:8d:d8: c4:53:64:43:e8:91:80:43:27:e1:6a:35:48:13:84:c5:c6:7a: e7:16:92:2d:ff:58:7e:a6:d1:18:13:f5:30:0d:40:b7:11:27: 22:a0:02:3a:98:ff:39:06:d4:60:2f:49:04:80:5f:98:50:7b: d7:b1:87:5d:7b:fa:e2:ae:2b:02:28:b9:7b:0c:3e:ba:d5:68: 8d:c8:f9:bd:63:23:ec:a0:3d:37:4f:2b:c1:d7:8f:a5:1f:e6: e9:4a:f5:81:71:ae:3b:f7:42:c1:cc:ee:b4:2d:f8:bc:5d:f8: 7e:2a:c2:ad:bc:6e:4a:6c:d2:77:64:30:16:b4:dc:4b:2f:34: 70:9a:3e:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdA3RKosV5+Sup7vb/Z4y+dB8mwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE5QjYwRTREN0UxMTcxQjY2MjRGMzE4QURBMUI3NDUw MkEzQTAxODAeFw0yNTA4MjIxNDA1NDBaFw0yNTA4MjUyMTI4NDBaMDMxMTAvBgNV BAMTKEU3NTY0RjY5MTYwQ0YyQkI2NTVBNkUwRDAzRTdBQjE3RUQxODIyMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp4KgmrVMYBcapZNrKCDCr0+WX 6BfG6yvTcckxjooqw5Agsq9uviekHMF/KWc9ujKZeGxnuSQgrz5+VqYXq28LEDfh OKK6+wQe5ED8J39oWO+Pd1/jC1/NxQ7ozYmE1x2AJqK4OjRk/JYaBi1N3xGk3+Mk yazdoxmFwfnG7HVUDvwpjleGS4+3StXDhoY5YxNe2vvZpLv+QYlMGG5Wgd41jGU8 cxfg28sN9H6M7KCDs68Oylr5NGxVI4aTiGclAyQuC2QW3V5mrcBiSrVgvapGQqYb wDOUFbj9dF4929P5RiQEQarbaUxIjpsmn/BtuOWo1QYw6KKJJ+YW0k3FWvi3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU51ZPaRYM8rtlWm4NA+erF+0YIgQwHwYDVR0j BBgwFoAUkZtg5NfhFxtmJPMYraG3RQKjoBgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MDBhZWQxZC05NGM5LTQ5YTYtYTYwOS04ODJlMDNjZDA3YmEvMC85MTlCNjBFNEQ3 RTExNzFCNjYyNEYzMThBREExQjc0NTAyQTNBMDE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE5QjYwRTREN0UxMTcxQjY2MjRGMzE4QURBMUI3NDUwMkEz QTAxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzAwYWVkMWQtOTRjOS00OWE2LWE2 MDktODgyZTAzY2QwN2JhLzAvOTE5QjYwRTREN0UxMTcxQjY2MjRGMzE4QURBMUI3 NDUwMkEzQTAxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMecr72pB258HfxCdxxsjY3c62Ya/Ybm6nt 268VegXb8o04pIMqtM2V+u6x7avUTmDxR6sQ5S07Q7UK0X+gwG9ZSl/BbKrW6l3Z cqk0sN+4+5DMK9BboflZCAwlGGq9x8UU9av5BuuG6rJzz/TxZWcEW/hmwWoQhlJR nj+N2MRTZEPokYBDJ+FqNUgThMXGeucWki3/WH6m0RgT9TANQLcRJyKgAjqY/zkG 1GAvSQSAX5hQe9exh117+uKuKwIouXsMPrrVaI3I+b1jI+ygPTdPK8HXj6Uf5ulK 9YFxrjv3QsHM7rQt+Lxd+H4qwq28bkps0ndkMBa03EsvNHCaPqY= -----END CERTIFICATE-----Generated at Sat Aug 23 10:26:55 2025 by rpki-client