$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft File: C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft (raw, json) Hash identifier: ePuU2BrpUEMargXLMlL7zWMDUv3idPQYRJWX0+8Rcv4= Subject key identifier: 4E:FD:7D:B0:D6:3C:93:36:03:C2:60:ED:BA:56:6C:44:24:3A:5E:34 Authority key identifier: C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 Certificate issuer: /CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Certificate serial: 6C64455622E084C5D845A67E94255DA8DC744F47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft Manifest number: 018A Signing time: Sun 29 Jun 2025 09:21:16 +0000 Manifest this update: Sun 29 Jun 2025 09:16:16 +0000 Manifest next update: Wed 02 Jul 2025 18:00:16 +0000 Files and hashes: 1: C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl (hash: fGSBeZ7k7KvdaT1c6pQWA2OrYRlSwgLowUKjvq7YJMw=) 2: 3130332e3138362e322e302f32342d3234203d3e20313439383837.roa (hash: dald9idU/rHkiXT+Hb4ViPOAu0GAF+vadWJH9YDYXzE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:64:45:56:22:e0:84:c5:d8:45:a6:7e:94:25:5d:a8:dc:74:4f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Validity Not Before: Jun 29 09:16:16 2025 GMT Not After : Jul 2 18:00:16 2025 GMT Subject: CN=4EFD7DB0D63C933603C260EDBA566C44243A5E34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:15:41:45:1c:03:cc:54:a0:ed:70:8c:2c:23: 69:6a:23:b4:cb:df:f3:e9:35:c0:95:5c:15:3a:a6: 60:b1:eb:3e:4c:34:8b:f0:a7:18:37:ec:09:80:3c: c1:ad:6e:d1:64:69:93:f1:03:b3:cc:1f:4c:dd:04: cd:07:8e:c3:c4:66:1f:42:15:18:69:d7:e5:6b:b8: 75:59:49:22:b6:a2:22:36:ee:12:8d:85:1d:3b:d7: e0:97:25:96:01:4f:43:3d:cc:72:95:25:e6:c0:b9: 92:34:b2:e4:5d:d2:b2:25:99:6c:55:da:9f:e2:db: df:66:3e:31:19:ee:bb:5e:d2:bb:24:6e:6f:62:1d: 96:90:1a:79:f0:42:ff:55:cd:a1:6f:c0:88:a3:7d: 91:68:b6:b5:8f:9f:d5:2e:9b:64:79:1f:1e:b2:57: 6d:c1:23:28:7a:14:05:8b:51:fc:6e:51:87:97:85: fa:d2:a2:20:7e:04:30:77:0c:8c:59:81:da:69:08: e5:d9:fc:96:f6:d2:3c:2d:f2:73:e9:74:fe:fb:b7: 95:02:0d:08:f9:18:a0:37:10:90:7b:4d:06:35:d4: 99:76:6d:09:12:90:6c:b9:67:25:ba:73:be:bf:d3: 95:78:21:4f:33:67:34:01:32:b7:86:b0:05:b7:e2: 75:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FD:7D:B0:D6:3C:93:36:03:C2:60:ED:BA:56:6C:44:24:3A:5E:34 X509v3 Authority Key Identifier: keyid:C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:2b:dd:98:38:fe:e3:ed:ca:a9:f7:fa:0c:aa:a6:88:59:df: 06:0e:ea:a8:43:3c:c1:4f:7e:cd:23:cc:5d:19:f2:0b:34:a8: b5:e4:00:d9:11:1e:7b:cd:31:60:40:5c:2d:cb:96:2d:44:f3: 1c:61:26:bd:00:76:47:ca:d9:84:a2:51:f1:cf:5b:4c:6b:d5: 1e:ea:9b:37:57:9d:08:55:2d:4c:fe:e3:e0:e8:73:d0:6c:a9: 5b:6d:6c:c3:cb:de:8d:05:f5:01:5b:fb:50:01:ca:d5:b8:ae: 56:99:ca:b9:76:8d:42:f4:3a:2b:8a:ce:96:ad:22:b9:50:41: 1e:7c:72:50:c1:0a:79:a3:c5:de:5a:07:0e:14:ab:bf:d7:6f: 04:97:b2:a0:42:e9:98:c4:03:84:a4:b6:31:88:b9:35:cf:bf: 36:dc:30:ad:d4:c0:af:3b:55:40:98:a4:c0:00:72:ee:96:dc: a0:e1:8c:d1:66:b1:f5:f0:f2:38:c6:3f:e2:ce:bc:70:d9:77: 85:76:4c:b8:65:b0:6f:aa:46:1e:c9:f9:19:75:41:8a:be:74: 84:cb:54:52:90:40:88:09:5b:f5:c6:d0:1c:fb:09:1d:49:57: 0a:df:ec:a9:1a:70:d0:35:87:66:09:38:3a:2c:d8:06:83:82: 19:e9:1f:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbGRFViLghMXYRaZ+lCVdqNx0T0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJB QkM3QTZCMjAeFw0yNTA2MjkwOTE2MTZaFw0yNTA3MDIxODAwMTZaMDMxMTAvBgNV BAMTKDRFRkQ3REIwRDYzQzkzMzYwM0MyNjBFREJBNTY2QzQ0MjQzQTVFMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRFUFFHAPMVKDtcIwsI2lqI7TL 3/PpNcCVXBU6pmCx6z5MNIvwpxg37AmAPMGtbtFkaZPxA7PMH0zdBM0HjsPEZh9C FRhp1+VruHVZSSK2oiI27hKNhR071+CXJZYBT0M9zHKVJebAuZI0suRd0rIlmWxV 2p/i299mPjEZ7rte0rskbm9iHZaQGnnwQv9VzaFvwIijfZFotrWPn9Uum2R5Hx6y V23BIyh6FAWLUfxuUYeXhfrSoiB+BDB3DIxZgdppCOXZ/Jb20jwt8nPpdP77t5UC DQj5GKA3EJB7TQY11Jl2bQkSkGy5ZyW6c76/05V4IU8zZzQBMreGsAW34nUfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTv19sNY8kzYDwmDtulZsRCQ6XjQwHwYDVR0j BBgwFoAUwZsTMCWy2UcDTysPxYK58qvHprIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGY2ZDg2Yi1lM2RmLTRlMmYtOTM2Zi1lZDliOTYzNTAzYTEvMC9DMTlCMTMzMDI1 QjJEOTQ3MDM0RjJCMEZDNTgyQjlGMkFCQzdBNkIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJBQkM3 QTZCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmNmQ4NmItZTNkZi00ZTJmLTkz NmYtZWQ5Yjk2MzUwM2ExLzAvQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5 RjJBQkM3QTZCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwr3Zg4/uPtyqn3+gyqpohZ3wYO6qhDPMFP fs0jzF0Z8gs0qLXkANkRHnvNMWBAXC3Lli1E8xxhJr0AdkfK2YSiUfHPW0xr1R7q mzdXnQhVLUz+4+Doc9BsqVttbMPL3o0F9QFb+1ABytW4rlaZyrl2jUL0OiuKzpat IrlQQR58clDBCnmjxd5aBw4Uq7/XbwSXsqBC6ZjEA4SktjGIuTXPvzbcMK3UwK87 VUCYpMAAcu6W3KDhjNFmsfXw8jjGP+LOvHDZd4V2TLhlsG+qRh7J+Rl1QYq+dITL VFKQQIgJW/XG0Bz7CR1JVwrf7KkacNA1h2YJODos2AaDghnpH/w= -----END CERTIFICATE-----Generated at Sun Jun 29 21:11:55 2025 by rpki-client