$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft File: 194F6EF659F1115C068AB59065D57F150E23F5B6.mft (raw, json) Hash identifier: Apsj7BGpKhpMBLdvZeoUJ4pSjkxUSwTzat2YvlGvoDw= Subject key identifier: 9E:E3:A0:35:A9:E5:0D:88:E0:A3:66:24:DF:89:17:5C:33:23:E7:01 Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Certificate serial: 1434656E456F022AA41910B5AA0173856CC7C06B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft Manifest number: 01B0 Signing time: Mon 30 Jun 2025 15:42:14 +0000 Manifest this update: Mon 30 Jun 2025 15:37:14 +0000 Manifest next update: Thu 03 Jul 2025 23:01:14 +0000 Files and hashes: 1: 194F6EF659F1115C068AB59065D57F150E23F5B6.crl (hash: iba6tOOllefrcIwNHZ2fgn4j/eYxq8Z2+4NCL2J8I/s=) 2: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (hash: OiZZEQMDYAjWvUr2V8yTuhgbwOSZs8jYfIrtVvafVY0=) 3: 34332e3234302e3232362e302f32342d3234203d3e20313530323130.roa (hash: 1Tei5fGxwqBxz6xN5gHTRqivy8w2htgn+IA2ReOzZk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 23:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:34:65:6e:45:6f:02:2a:a4:19:10:b5:aa:01:73:85:6c:c7:c0:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Validity Not Before: Jun 30 15:37:14 2025 GMT Not After : Jul 3 23:01:14 2025 GMT Subject: CN=9EE3A035A9E50D88E0A36624DF89175C3323E701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:97:37:d5:c1:c3:8b:21:88:71:2f:83:5e:1f: de:9e:5f:fb:a0:83:c8:5c:f8:a3:b0:2c:12:e0:81: 5b:a2:84:a9:e6:3a:58:89:ad:65:3e:08:a7:1c:4d: 87:85:7f:a1:68:03:66:f8:06:d3:0a:a7:fd:36:80: 07:2c:84:23:e2:6f:e9:53:6c:a6:dd:54:4a:14:20: 8e:02:50:70:38:b0:76:4e:9c:ed:0d:ba:fe:e8:0b: ca:02:e2:fc:7e:4a:2e:f9:6d:20:36:22:35:94:ca: 67:5a:9a:69:ec:dc:cb:02:05:9f:af:cf:b0:95:ad: 13:ec:34:c2:2d:69:95:9f:e7:d0:9c:15:34:c1:5f: 3a:fe:3f:52:a1:fb:3e:74:39:dc:03:94:a8:80:1a: 9a:7a:96:dd:6a:0e:cd:e9:00:67:ad:11:1c:e0:e0: b2:b3:a5:cd:6c:2c:c3:c7:84:5b:6e:15:79:55:9b: 2f:69:2b:b5:a0:40:79:db:b7:c0:ee:0d:59:a2:27: 6a:94:d8:fe:61:19:15:1a:f9:32:11:79:be:46:17: 99:8f:ed:70:11:7a:3e:43:c4:42:d7:f1:8a:e3:3c: 9d:16:50:43:62:b0:3a:59:80:c6:be:0d:5e:e7:18: b5:67:95:13:8e:10:f3:f9:28:88:48:ca:2c:1b:64: c1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E3:A0:35:A9:E5:0D:88:E0:A3:66:24:DF:89:17:5C:33:23:E7:01 X509v3 Authority Key Identifier: keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:5f:aa:04:39:84:e9:53:36:92:48:46:a7:28:1e:e3:b3:fa: 81:d2:2c:1b:e2:c3:ad:5e:67:a3:fe:05:fb:4d:cf:c5:9f:91: c3:bf:84:18:39:58:59:f4:b8:8e:de:64:71:ea:2a:cd:ed:98: e6:b0:cd:55:a3:8c:a7:6e:99:61:01:c1:f0:be:22:29:9d:3b: e8:49:74:c2:9c:27:5f:0a:da:f4:b9:80:95:5b:6d:66:32:59: 23:e7:70:9f:5b:1a:c6:82:9e:02:14:d7:15:1c:d1:fa:77:7c: 39:bc:9b:38:a0:2d:53:a9:92:07:3c:b6:04:c4:db:2f:2b:74: c1:d3:06:50:e1:ec:1a:c4:78:2e:e8:52:f8:56:2e:4c:95:d8: a3:c1:b3:42:29:e5:79:88:bf:fd:0a:d7:1c:88:75:c3:19:8b: bf:1c:e4:ea:88:7f:48:21:8e:8d:f6:1c:e1:3c:de:e8:d3:77: e5:97:d6:08:db:0b:05:3d:69:32:18:e1:d1:16:79:af:73:ad: ce:39:7b:b5:77:b2:fb:27:47:fc:49:eb:db:44:24:57:af:ef: 8e:e9:2d:ef:3e:a8:cf:b4:44:5a:39:79:c2:05:ab:6c:4a:aa: be:01:a4:9a:3a:76:b2:f3:26:28:6a:f7:42:53:74:2c:69:db: 11:1a:bb:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFDRlbkVvAiqkGRC1qgFzhWzHwGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUw RTIzRjVCNjAeFw0yNTA2MzAxNTM3MTRaFw0yNTA3MDMyMzAxMTRaMDMxMTAvBgNV BAMTKDlFRTNBMDM1QTlFNTBEODhFMEEzNjYyNERGODkxNzVDMzMyM0U3MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2lzfVwcOLIYhxL4NeH96eX/ug g8hc+KOwLBLggVuihKnmOliJrWU+CKccTYeFf6FoA2b4BtMKp/02gAcshCPib+lT bKbdVEoUII4CUHA4sHZOnO0Nuv7oC8oC4vx+Si75bSA2IjWUymdammns3MsCBZ+v z7CVrRPsNMItaZWf59CcFTTBXzr+P1Kh+z50OdwDlKiAGpp6lt1qDs3pAGetERzg 4LKzpc1sLMPHhFtuFXlVmy9pK7WgQHnbt8DuDVmiJ2qU2P5hGRUa+TIReb5GF5mP 7XARej5DxELX8YrjPJ0WUENisDpZgMa+DV7nGLVnlROOEPP5KIhIyiwbZMGHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnuOgNanlDYjgo2Yk34kXXDMj5wEwHwYDVR0j BBgwFoAUGU9u9lnxEVwGirWQZdV/FQ4j9bYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmFiZWM3MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMC8xOTRGNkVGNjU5 RjExMTVDMDY4QUI1OTA2NUQ1N0YxNTBFMjNGNUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUwRTIz RjVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZhYmVjNzEtN2VjYi00ZGJkLWE0 MjEtOTliOWNkMjA5MDNhLzAvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdG MTUwRTIzRjVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlfqgQ5hOlTNpJIRqcoHuOz+oHSLBviw61e Z6P+BftNz8WfkcO/hBg5WFn0uI7eZHHqKs3tmOawzVWjjKdumWEBwfC+IimdO+hJ dMKcJ18K2vS5gJVbbWYyWSPncJ9bGsaCngIU1xUc0fp3fDm8mzigLVOpkgc8tgTE 2y8rdMHTBlDh7BrEeC7oUvhWLkyV2KPBs0Ip5XmIv/0K1xyIdcMZi78c5OqIf0gh jo32HOE83ujTd+WX1gjbCwU9aTIY4dEWea9zrc45e7V3svsnR/xJ69tEJFev747p Le8+qM+0RFo5ecIFq2xKqr4BpJo6drLzJihq90JTdCxp2xEau6I= -----END CERTIFICATE-----Generated at Wed Jul 2 04:17:32 2025 by rpki-client