$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft File: B197F427572524588487CFDB163A9E512FAE4DF2.mft (raw, json) Hash identifier: SU0+ZERnnDMKJAq0sTrIZ6zCCcgRHjJQp8+RAm9MzOI= Subject key identifier: 91:D4:A8:B5:5F:B0:FC:89:E9:93:4A:61:44:75:61:03:4E:D4:32:1E Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 Certificate issuer: /CN=B197F427572524588487CFDB163A9E512FAE4DF2 Certificate serial: 07E18F02486A5DCC15A06B3F5B3E032CA5A2FAF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft Manifest number: 021F Signing time: Thu 21 Aug 2025 14:11:24 +0000 Manifest this update: Thu 21 Aug 2025 14:06:24 +0000 Manifest next update: Sun 24 Aug 2025 14:20:24 +0000 Files and hashes: 1: B197F427572524588487CFDB163A9E512FAE4DF2.crl (hash: aQCHV2FwvMM+psfxGFjCmiYEOv8HcKebk1dPZO1QGOc=) 2: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: sqH8mgq0fr+XiznMLTzogmtodA1+q341U0FlkHOzY5k=) 3: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: IlIKis9hrjcqU4gajZ2m+r4qTrp6BInf4S11M61jB+A=) 4: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: BU1Q0ryHM0MlXG1Q7vZvhi4oAbOwc3sWBEiOeckA5Ms=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 14:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e1:8f:02:48:6a:5d:cc:15:a0:6b:3f:5b:3e:03:2c:a5:a2:fa:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2 Validity Not Before: Aug 21 14:06:24 2025 GMT Not After : Aug 24 14:20:24 2025 GMT Subject: CN=91D4A8B55FB0FC89E9934A61447561034ED4321E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4d:c6:1b:12:50:76:8a:eb:7d:83:89:9d:8d: f3:73:6b:73:52:86:5b:6f:48:d2:00:7b:17:0a:b6: 5a:c1:6f:2b:e3:a7:a8:0e:50:4a:7c:38:45:13:18: 0c:e6:e9:3d:15:e8:ce:90:d6:80:51:bc:ec:b4:ae: 95:42:57:ad:09:bd:40:51:8e:20:50:dd:7d:68:26: 78:ec:05:ac:7e:00:cf:31:16:0f:40:8b:d5:66:f9: 80:86:61:55:9c:6d:a8:72:00:f0:d5:2e:9d:12:c5: 1d:7f:6c:47:15:14:de:fa:a6:97:1d:a5:07:16:96: 6b:c0:03:5d:66:be:13:df:5f:53:71:82:f4:6f:80: 87:bd:81:b0:f9:ab:ea:97:80:d4:3c:e6:00:2c:b6: e1:b9:39:a9:b4:be:b7:38:9c:83:32:76:f0:64:91: dc:37:87:c1:e1:04:4b:68:fe:30:46:15:c8:f5:b7: 31:85:f4:6b:2b:4d:26:87:8a:2a:4c:75:83:30:89: 05:c1:c5:8c:e4:07:ef:72:d1:8a:b8:71:6d:62:69: 5d:a0:8d:59:d6:f4:4c:ce:5e:ca:5c:5d:a6:da:c8: 6a:08:31:44:1e:89:1b:86:e0:f4:31:3b:8a:03:63: 47:93:21:88:91:10:4a:78:a0:c2:4c:a8:11:af:8f: 36:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D4:A8:B5:5F:B0:FC:89:E9:93:4A:61:44:75:61:03:4E:D4:32:1E X509v3 Authority Key Identifier: keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:9d:ff:78:a2:61:03:d1:a0:29:ee:91:9b:98:95:63:20:db: 4c:62:11:f2:99:1f:62:23:2f:33:e6:fe:ab:18:da:9f:74:e4: 47:7f:b9:5e:a6:24:6e:b6:ef:b5:aa:7e:56:8a:dc:8c:1a:16: 25:06:85:b9:90:c4:54:28:ce:db:e2:52:33:fc:9e:75:2d:f5: 6a:42:0f:f2:bb:57:0c:45:49:53:a3:79:5b:04:a0:51:cc:df: 6d:cc:bc:d2:f9:5d:78:47:b1:ab:48:cb:32:bd:4e:6f:09:3f: c0:25:9d:36:fe:64:a0:42:da:3f:a2:97:95:e7:d6:e8:3d:c1: 7d:89:a1:d7:3e:33:6f:ba:4f:65:c1:63:58:9b:b2:fd:18:8b: 43:0e:16:c6:05:d6:41:3c:d9:a0:5e:32:92:ff:74:c3:09:ba: 7f:f2:5d:b6:97:41:4f:08:d9:1a:25:d7:b7:90:3a:3d:cc:8c: ce:76:c5:27:35:5e:74:8e:ff:ed:48:3f:63:73:ba:a1:5b:62: cc:8f:ec:dc:eb:53:93:2a:dd:9a:6a:ce:21:df:bc:f8:71:bc: 57:e2:47:b0:9d:1e:9f:64:a1:7b:96:6f:01:80:6e:04:2d:7f: 6a:54:ce:2e:a2:20:6b:7f:99:0f:24:c7:36:dd:32:bd:f9:85: 5e:39:d1:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB+GPAkhqXcwVoGs/Wz4DLKWi+vMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEy RkFFNERGMjAeFw0yNTA4MjExNDA2MjRaFw0yNTA4MjQxNDIwMjRaMDMxMTAvBgNV BAMTKDkxRDRBOEI1NUZCMEZDODlFOTkzNEE2MTQ0NzU2MTAzNEVENDMyMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGTcYbElB2iut9g4mdjfNza3NS hltvSNIAexcKtlrBbyvjp6gOUEp8OEUTGAzm6T0V6M6Q1oBRvOy0rpVCV60JvUBR jiBQ3X1oJnjsBax+AM8xFg9Ai9Vm+YCGYVWcbahyAPDVLp0SxR1/bEcVFN76ppcd pQcWlmvAA11mvhPfX1NxgvRvgIe9gbD5q+qXgNQ85gAstuG5Oam0vrc4nIMydvBk kdw3h8HhBEto/jBGFcj1tzGF9GsrTSaHiipMdYMwiQXBxYzkB+9y0Yq4cW1iaV2g jVnW9EzOXspcXabayGoIMUQeiRuG4PQxO4oDY0eTIYiREEp4oMJMqBGvjzZBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkdSotV+w/Inpk0phRHVhA07UMh4wHwYDVR0j BBgwFoAUsZf0J1clJFiEh8/bFjqeUS+uTfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGNmNDA2Ny1hNjlkLTQ5MDgtYmVlOC1iNDY1NWJkYzE1ZjgvMC9CMTk3RjQyNzU3 MjUyNDU4ODQ4N0NGREIxNjNBOUU1MTJGQUU0REYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEyRkFF NERGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlF NTEyRkFFNERGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmd/3iiYQPRoCnukZuYlWMg20xiEfKZH2Ij LzPm/qsY2p905Ed/uV6mJG6277WqflaK3IwaFiUGhbmQxFQoztviUjP8nnUt9WpC D/K7VwxFSVOjeVsEoFHM323MvNL5XXhHsatIyzK9Tm8JP8AlnTb+ZKBC2j+il5Xn 1ug9wX2Jodc+M2+6T2XBY1ibsv0Yi0MOFsYF1kE82aBeMpL/dMMJun/yXbaXQU8I 2Rol17eQOj3MjM52xSc1XnSO/+1IP2NzuqFbYsyP7NzrU5Mq3ZpqziHfvPhxvFfi R7CdHp9koXuWbwGAbgQtf2pUzi6iIGt/mQ8kxzbdMr35hV450b8= -----END CERTIFICATE-----Generated at Sat Aug 23 10:20:26 2025 by rpki-client