$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft File: 194F6EF659F1115C068AB59065D57F150E23F5B6.mft (raw, json) Hash identifier: fXLIs8ABYAltYVr16kZc/KlGUV+l6TYgMfdGwaCinlo= Subject key identifier: E9:15:41:59:FF:1A:32:F8:8E:0F:F6:23:8F:32:43:8A:67:91:AC:FE Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Certificate serial: 70FD5396458DBD92914CBF6DCB81123046140DA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft Manifest number: 01C7 Signing time: Fri 22 Aug 2025 12:22:19 +0000 Manifest this update: Fri 22 Aug 2025 12:17:19 +0000 Manifest next update: Mon 25 Aug 2025 16:00:19 +0000 Files and hashes: 1: 194F6EF659F1115C068AB59065D57F150E23F5B6.crl (hash: u5cSNpNhQHako+6v5meD6L16QpmYeJ/up/GQg0I0Sv0=) 2: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (hash: OiZZEQMDYAjWvUr2V8yTuhgbwOSZs8jYfIrtVvafVY0=) 3: 34332e3234302e3232362e302f32342d3234203d3e20313530323130.roa (hash: 1Tei5fGxwqBxz6xN5gHTRqivy8w2htgn+IA2ReOzZk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:fd:53:96:45:8d:bd:92:91:4c:bf:6d:cb:81:12:30:46:14:0d:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Validity Not Before: Aug 22 12:17:19 2025 GMT Not After : Aug 25 16:00:19 2025 GMT Subject: CN=E9154159FF1A32F88E0FF6238F32438A6791ACFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:dd:32:1d:e4:4b:ce:6b:28:6a:bf:3f:54:01: 31:0f:e7:03:a0:42:5d:dc:b1:54:d9:66:06:cf:b2: 99:c4:89:9a:39:a0:04:6b:07:40:28:0f:25:01:91: 16:5d:69:41:a8:f4:36:13:c9:5a:2d:d6:5c:67:47: 84:3c:01:32:49:fe:5b:f1:b5:ec:99:d8:b4:fa:c1: 92:f4:53:18:1e:9c:85:a1:fb:1d:5f:34:ae:c6:fe: e0:97:9a:af:68:a8:b4:11:5d:dc:e3:2e:fd:2a:4e: c7:20:6b:dc:e3:a3:b1:65:b9:45:bc:92:3e:df:3e: 41:3d:6f:0f:92:4c:6f:b4:51:0a:c6:e7:2a:f2:56: f1:5f:be:c4:18:15:0f:85:d6:e6:a3:d8:d1:3d:bf: d8:18:62:1e:eb:65:ea:26:9a:a6:4f:a3:ec:f7:53: 6b:be:af:56:bc:37:f2:16:d7:ac:a9:0c:16:c3:1c: a5:5d:db:47:f1:b9:fb:bb:74:51:44:f3:c3:b7:0b: d3:4b:01:20:42:2a:ff:52:3c:32:2b:d2:6c:08:29: 4b:40:33:ef:5d:41:16:3c:fe:3a:b7:6f:ed:45:b0: 15:5e:e1:bd:e6:14:5a:d3:1c:c1:90:e2:59:24:1d: 55:82:2e:39:25:50:e0:fb:fe:8f:c3:bd:9d:77:8a: a1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:15:41:59:FF:1A:32:F8:8E:0F:F6:23:8F:32:43:8A:67:91:AC:FE X509v3 Authority Key Identifier: keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:86:11:60:09:4d:49:df:89:fc:11:0b:7a:44:3a:ee:cd:73: da:3c:a5:78:2f:7b:0b:27:59:e9:a3:d3:b3:4c:53:78:61:df: db:17:09:16:aa:73:e9:e8:20:49:be:37:88:23:e1:52:29:19: e3:58:2a:16:89:e3:58:2e:b6:50:cb:78:3a:5e:f0:99:d7:cc: ce:ed:32:02:48:4c:7c:a0:e2:2c:49:ae:db:5f:b6:62:eb:3d: 49:f5:59:61:a2:bf:83:e4:05:e1:39:67:2d:91:e8:ee:12:2d: b5:ab:ba:cf:ce:44:f0:4c:da:7f:ea:8d:a8:98:4b:11:56:0a: 7d:74:7f:e5:be:fd:0c:92:54:45:f3:ba:f0:ee:61:2b:64:d2: b1:84:b8:6f:3a:bd:06:0a:52:52:4e:eb:a9:bf:51:33:f2:f7: ab:71:de:38:fa:21:35:ab:1a:19:c4:8d:b5:34:5f:08:1c:6e: 75:36:d5:eb:8a:65:33:b0:0e:a0:78:24:8f:5d:82:fb:d8:5d: 7a:ad:53:a5:d9:76:36:63:51:38:0a:b6:c7:8c:2e:68:6c:d4: 03:37:c5:fd:f4:69:c9:fe:7c:d6:c0:7e:a8:78:9f:60:59:b3: e1:c0:9c:7a:14:3e:24:93:9c:ef:bb:b0:11:94:85:4d:e9:ca: 16:1d:67:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcP1TlkWNvZKRTL9ty4ESMEYUDaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUw RTIzRjVCNjAeFw0yNTA4MjIxMjE3MTlaFw0yNTA4MjUxNjAwMTlaMDMxMTAvBgNV BAMTKEU5MTU0MTU5RkYxQTMyRjg4RTBGRjYyMzhGMzI0MzhBNjc5MUFDRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf3TId5EvOayhqvz9UATEP5wOg Ql3csVTZZgbPspnEiZo5oARrB0AoDyUBkRZdaUGo9DYTyVot1lxnR4Q8ATJJ/lvx teyZ2LT6wZL0UxgenIWh+x1fNK7G/uCXmq9oqLQRXdzjLv0qTscga9zjo7FluUW8 kj7fPkE9bw+STG+0UQrG5yryVvFfvsQYFQ+F1uaj2NE9v9gYYh7rZeommqZPo+z3 U2u+r1a8N/IW16ypDBbDHKVd20fxufu7dFFE88O3C9NLASBCKv9SPDIr0mwIKUtA M+9dQRY8/jq3b+1FsBVe4b3mFFrTHMGQ4lkkHVWCLjklUOD7/o/DvZ13iqF1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6RVBWf8aMviOD/YjjzJDimeRrP4wHwYDVR0j BBgwFoAUGU9u9lnxEVwGirWQZdV/FQ4j9bYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmFiZWM3MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMC8xOTRGNkVGNjU5 RjExMTVDMDY4QUI1OTA2NUQ1N0YxNTBFMjNGNUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUwRTIz RjVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZhYmVjNzEtN2VjYi00ZGJkLWE0 MjEtOTliOWNkMjA5MDNhLzAvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdG MTUwRTIzRjVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2GEWAJTUnfifwRC3pEOu7Nc9o8pXgvewsn Wemj07NMU3hh39sXCRaqc+noIEm+N4gj4VIpGeNYKhaJ41gutlDLeDpe8JnXzM7t MgJITHyg4ixJrttftmLrPUn1WWGiv4PkBeE5Zy2R6O4SLbWrus/ORPBM2n/qjaiY SxFWCn10f+W+/QySVEXzuvDuYStk0rGEuG86vQYKUlJO66m/UTPy96tx3jj6ITWr GhnEjbU0XwgcbnU21euKZTOwDqB4JI9dgvvYXXqtU6XZdjZjUTgKtseMLmhs1AM3 xf30acn+fNbAfqh4n2BZs+HAnHoUPiSTnO+7sBGUhU3pyhYdZ44= -----END CERTIFICATE-----Generated at Sat Aug 23 12:23:25 2025 by rpki-client