$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft File: 194F6EF659F1115C068AB59065D57F150E23F5B6.mft (raw, json) Hash identifier: xXLyVQ6Gt0mmN3R2u8a0bMV23nvvvTknhYXhB8KYiv4= Subject key identifier: 07:6A:2B:42:0C:92:F9:AB:98:B1:2F:F0:DB:03:91:4B:5A:25:BA:41 Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Certificate serial: 564142820113C61B3D24668BC15CE602D4ECCA8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft Manifest number: 01E1 Signing time: Sat 18 Oct 2025 22:12:18 +0000 Manifest this update: Sat 18 Oct 2025 22:07:18 +0000 Manifest next update: Wed 22 Oct 2025 08:47:18 +0000 Files and hashes: 1: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (hash: iiMdXC5IwE7CrNkyDM/L6svytNKfCeHud3DpbhTkmXw=) 2: 34332e3234302e3232362e302f32342d3234203d3e20313530323130.roa (hash: 1Tei5fGxwqBxz6xN5gHTRqivy8w2htgn+IA2ReOzZk8=) 3: 194F6EF659F1115C068AB59065D57F150E23F5B6.crl (hash: 8US9cYP59nhHEeIp0rlzn8IjGzkmgTdrV9D7VAb1TFg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:41:42:82:01:13:c6:1b:3d:24:66:8b:c1:5c:e6:02:d4:ec:ca:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Validity Not Before: Oct 18 22:07:18 2025 GMT Not After : Oct 22 08:47:18 2025 GMT Subject: CN=076A2B420C92F9AB98B12FF0DB03914B5A25BA41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c8:4d:16:f4:b2:01:28:65:9f:7f:47:4e:2f: 9b:64:0f:e1:2a:d7:7c:fd:5b:53:41:85:dc:1b:f6: 3d:63:63:cb:b3:e6:ac:db:d3:08:88:e3:19:75:ee: dc:5d:d9:b9:a6:ce:ad:5a:75:fb:71:28:6c:76:89: 08:5d:53:08:62:b5:21:23:c5:67:fd:ba:b2:c8:56: 5b:3b:5a:ff:d1:70:d8:06:b5:0e:3b:5a:59:57:a2: 38:d2:43:e0:a2:c2:a1:79:64:fc:d3:24:bb:23:80: 1c:5b:28:4d:56:f2:3f:a8:d6:06:58:73:ee:91:c3: 10:f3:33:bf:7d:17:a7:ab:47:bd:cc:f5:31:98:10: a2:0a:de:fe:cb:a4:8f:26:fd:0e:f5:59:dd:ff:99: 1f:53:65:11:b3:b9:e8:91:ad:9d:ba:75:d1:9b:4e: 15:a1:33:4f:b2:e9:ac:ee:69:9e:7c:7c:c0:c1:f0: b6:fa:81:62:26:2f:6f:0f:0b:ec:68:06:3b:32:46: be:33:8b:2c:64:45:e8:f8:90:41:70:27:b1:2c:fb: cb:92:23:2d:f7:f4:54:eb:1d:ef:ec:11:68:76:9a: 80:ea:fd:90:6f:b2:55:56:33:c0:52:80:b1:00:0b: fa:09:e2:14:62:d9:75:a2:da:f6:41:4b:9e:8f:c6: e6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6A:2B:42:0C:92:F9:AB:98:B1:2F:F0:DB:03:91:4B:5A:25:BA:41 X509v3 Authority Key Identifier: keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:98:0e:c4:b3:05:4d:cf:95:3e:c8:ab:c4:ee:f3:56:7c:51: 58:ce:06:ff:8d:6f:9d:88:f2:ce:1e:47:26:5a:4b:6e:7e:3c: 5b:dd:70:a9:b0:69:b4:20:ff:20:f6:e1:a8:aa:44:aa:cf:a2: 1b:39:21:52:27:d1:0f:38:e1:fa:67:94:4c:3d:a8:8e:36:6b: b8:11:43:29:c6:57:50:22:dc:0d:5a:39:f7:bc:4b:99:80:d3: d9:c8:b0:ec:be:d7:d2:bc:d6:08:85:e1:aa:c1:2c:a3:60:24: a4:7b:80:f1:65:32:8a:73:85:04:fa:c4:44:6c:17:f8:89:75: ad:93:b9:3d:8e:ce:16:69:55:38:68:df:12:e0:2a:7c:56:47: 5e:03:39:4a:20:bc:6b:96:c1:bd:f8:7a:34:0c:c7:7f:55:c3: ed:af:e4:87:e4:73:0b:af:fb:b1:1e:1d:08:c2:8c:f2:bd:b2: f3:c9:59:d3:7f:02:24:66:7c:15:52:04:7b:26:86:13:8e:ee: de:52:cc:79:91:ea:64:af:ca:25:33:50:d6:31:14:8d:65:47: f3:3f:3f:ce:2f:ab:d6:6b:d8:d9:17:cb:ef:c6:53:5c:b3:9a: 8b:25:12:b9:3c:ad:46:15:1b:19:88:24:2c:2e:9a:e6:57:dc: 78:6f:e4:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVkFCggETxhs9JGaLwVzmAtTsyo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUw RTIzRjVCNjAeFw0yNTEwMTgyMjA3MThaFw0yNTEwMjIwODQ3MThaMDMxMTAvBgNV BAMTKDA3NkEyQjQyMEM5MkY5QUI5OEIxMkZGMERCMDM5MTRCNUEyNUJBNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7yE0W9LIBKGWff0dOL5tkD+Eq 13z9W1NBhdwb9j1jY8uz5qzb0wiI4xl17txd2bmmzq1adftxKGx2iQhdUwhitSEj xWf9urLIVls7Wv/RcNgGtQ47WllXojjSQ+CiwqF5ZPzTJLsjgBxbKE1W8j+o1gZY c+6RwxDzM799F6erR73M9TGYEKIK3v7LpI8m/Q71Wd3/mR9TZRGzueiRrZ26ddGb ThWhM0+y6azuaZ58fMDB8Lb6gWImL28PC+xoBjsyRr4ziyxkRej4kEFwJ7Es+8uS Iy339FTrHe/sEWh2moDq/ZBvslVWM8BSgLEAC/oJ4hRi2XWi2vZBS56PxuZpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB2orQgyS+auYsS/w2wORS1olukEwHwYDVR0j BBgwFoAUGU9u9lnxEVwGirWQZdV/FQ4j9bYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmFiZWM3MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMC8xOTRGNkVGNjU5 RjExMTVDMDY4QUI1OTA2NUQ1N0YxNTBFMjNGNUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUwRTIz RjVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZhYmVjNzEtN2VjYi00ZGJkLWE0 MjEtOTliOWNkMjA5MDNhLzAvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdG MTUwRTIzRjVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWYDsSzBU3PlT7Iq8Tu81Z8UVjOBv+Nb52I 8s4eRyZaS25+PFvdcKmwabQg/yD24aiqRKrPohs5IVIn0Q844fpnlEw9qI42a7gR QynGV1Ai3A1aOfe8S5mA09nIsOy+19K81giF4arBLKNgJKR7gPFlMopzhQT6xERs F/iJda2TuT2OzhZpVTho3xLgKnxWR14DOUogvGuWwb34ejQMx39Vw+2v5Ifkcwuv +7EeHQjCjPK9svPJWdN/AiRmfBVSBHsmhhOO7t5SzHmR6mSvyiUzUNYxFI1lR/M/ P84vq9Zr2NkXy+/GU1yzmoslErk8rUYVGxmIJCwumuZX3Hhv5MM= -----END CERTIFICATE-----Generated at Mon Oct 20 15:53:55 2025 by rpki-client