$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft File: B197F427572524588487CFDB163A9E512FAE4DF2.mft (raw, json) Hash identifier: ufIvoXoAQ5fbCF0lD9ukqtyPf/1R/FmXqDV2FGn6SuQ= Subject key identifier: BF:6D:88:99:AA:EA:99:8B:41:5D:98:BD:AB:66:BA:41:5D:58:B3:FC Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 Certificate issuer: /CN=B197F427572524588487CFDB163A9E512FAE4DF2 Certificate serial: 3F2C8DC430FFC5130BAACA0CE8849E71E6F851F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft Manifest number: 0208 Signing time: Mon 30 Jun 2025 09:21:20 +0000 Manifest this update: Mon 30 Jun 2025 09:16:20 +0000 Manifest next update: Thu 03 Jul 2025 14:31:20 +0000 Files and hashes: 1: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: sqH8mgq0fr+XiznMLTzogmtodA1+q341U0FlkHOzY5k=) 2: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: IlIKis9hrjcqU4gajZ2m+r4qTrp6BInf4S11M61jB+A=) 3: B197F427572524588487CFDB163A9E512FAE4DF2.crl (hash: OTPkVS5U2Au65xhQIiDelPJlkw4D3N13SMxjMC5exiA=) 4: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: BU1Q0ryHM0MlXG1Q7vZvhi4oAbOwc3sWBEiOeckA5Ms=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 14:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:2c:8d:c4:30:ff:c5:13:0b:aa:ca:0c:e8:84:9e:71:e6:f8:51:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2 Validity Not Before: Jun 30 09:16:20 2025 GMT Not After : Jul 3 14:31:20 2025 GMT Subject: CN=BF6D8899AAEA998B415D98BDAB66BA415D58B3FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:26:5d:8f:77:78:70:79:4d:82:53:eb:8c:63: 6c:86:69:de:d1:6f:0d:44:88:e1:c0:08:aa:80:b8: 48:ae:1b:13:fe:22:c7:8b:74:9c:f8:a6:e1:63:7d: 3f:58:c4:8a:d6:e8:00:c6:3c:7b:11:3a:7d:0b:19: 5b:58:d5:e5:77:c4:d7:50:fa:b3:67:76:4a:7e:27: 32:4b:f6:ef:7d:bd:b5:a7:0f:8c:df:4f:e3:39:4c: de:00:b5:03:53:31:a5:b4:66:d7:4c:46:de:c7:68: b7:54:11:41:61:3c:23:7b:9d:71:bb:1c:5d:39:49: 29:2c:da:92:19:5a:66:e7:2d:6a:84:7d:7c:5b:69: a7:41:c0:94:f5:40:6f:cd:2a:24:aa:7b:44:7e:5f: 4d:f5:3d:be:a4:16:d5:48:5c:7e:72:83:26:e7:3f: c5:21:27:15:50:c0:6f:0f:70:57:12:60:eb:7a:2d: 3c:a2:1e:c5:4d:e8:91:0b:5e:78:f8:0f:8e:90:9d: 79:0a:6d:11:37:60:d6:03:cb:c8:32:db:d1:00:72: c3:d1:17:1c:a4:e7:b3:64:82:08:a9:34:35:5c:b5: 32:63:fd:2c:c8:c1:29:75:9b:16:b4:de:37:06:4d: d8:de:12:a0:06:1b:c4:f0:86:f9:84:28:c8:ab:36: 8f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6D:88:99:AA:EA:99:8B:41:5D:98:BD:AB:66:BA:41:5D:58:B3:FC X509v3 Authority Key Identifier: keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e4:fb:20:de:68:c3:42:cf:c7:b3:90:fa:8d:4b:d8:3d:3b: 28:a2:83:f4:3a:f8:3c:10:42:a2:2d:39:12:00:42:cf:17:a3: f5:7e:85:97:14:86:70:6d:ae:dd:57:ae:88:67:00:24:28:2c: ae:1b:1a:9d:59:55:13:82:60:4f:8d:e1:b1:d0:af:c1:90:0e: 4e:6e:28:49:17:14:bb:ee:a0:7c:eb:2f:b2:8b:f6:26:8e:67: ee:a5:d9:5b:58:e3:ee:a2:b5:f9:c4:45:fa:6f:52:50:50:97: 31:b5:a1:d3:93:30:03:76:bc:12:ea:a3:c2:23:16:f9:3e:17: 9e:f6:e0:7d:c4:40:1c:9b:03:41:b2:f2:e5:d1:db:69:44:7c: 5f:bb:8d:03:10:73:02:1a:4a:8a:10:b0:d4:1c:e4:cd:1b:3e: 0d:73:6d:ea:b4:ce:10:a0:ca:c2:57:af:d6:b2:34:de:ae:59: 21:b2:43:c5:5b:87:59:58:99:ce:82:a5:c5:15:9d:3a:bf:b8: 24:14:14:f9:52:8d:5f:f3:a2:fa:97:03:ef:0e:75:70:be:54: f0:bf:79:ce:49:96:53:89:51:6c:78:69:98:6c:bf:08:8f:2d: 8a:90:ec:cb:97:f3:57:ab:7e:67:f4:96:4b:30:68:06:c5:87: 94:b0:cd:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPyyNxDD/xRMLqsoM6ISeceb4UfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEy RkFFNERGMjAeFw0yNTA2MzAwOTE2MjBaFw0yNTA3MDMxNDMxMjBaMDMxMTAvBgNV BAMTKEJGNkQ4ODk5QUFFQTk5OEI0MTVEOThCREFCNjZCQTQxNUQ1OEIzRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkJl2Pd3hweU2CU+uMY2yGad7R bw1EiOHACKqAuEiuGxP+IseLdJz4puFjfT9YxIrW6ADGPHsROn0LGVtY1eV3xNdQ +rNndkp+JzJL9u99vbWnD4zfT+M5TN4AtQNTMaW0ZtdMRt7HaLdUEUFhPCN7nXG7 HF05SSks2pIZWmbnLWqEfXxbaadBwJT1QG/NKiSqe0R+X031Pb6kFtVIXH5ygybn P8UhJxVQwG8PcFcSYOt6LTyiHsVN6JELXnj4D46QnXkKbRE3YNYDy8gy29EAcsPR Fxyk57NkggipNDVctTJj/SzIwSl1mxa03jcGTdjeEqAGG8TwhvmEKMirNo9nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv22ImarqmYtBXZi9q2a6QV1Ys/wwHwYDVR0j BBgwFoAUsZf0J1clJFiEh8/bFjqeUS+uTfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGNmNDA2Ny1hNjlkLTQ5MDgtYmVlOC1iNDY1NWJkYzE1ZjgvMC9CMTk3RjQyNzU3 MjUyNDU4ODQ4N0NGREIxNjNBOUU1MTJGQUU0REYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEyRkFF NERGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlF NTEyRkFFNERGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnk+yDeaMNCz8ezkPqNS9g9Oyiig/Q6+DwQ QqItORIAQs8Xo/V+hZcUhnBtrt1XrohnACQoLK4bGp1ZVROCYE+N4bHQr8GQDk5u KEkXFLvuoHzrL7KL9iaOZ+6l2VtY4+6itfnERfpvUlBQlzG1odOTMAN2vBLqo8Ij Fvk+F5724H3EQBybA0Gy8uXR22lEfF+7jQMQcwIaSooQsNQc5M0bPg1zbeq0zhCg ysJXr9ayNN6uWSGyQ8Vbh1lYmc6CpcUVnTq/uCQUFPlSjV/zovqXA+8OdXC+VPC/ ec5JllOJUWx4aZhsvwiPLYqQ7MuX81erfmf0lkswaAbFh5SwzWE= -----END CERTIFICATE-----Generated at Mon Jun 30 22:22:34 2025 by rpki-client