$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft File: C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft (raw, json) Hash identifier: UNuLi2SPF7eX4LYkPR3sVnmIG9bbee+K9DmUvKVjnQA= Subject key identifier: 54:18:21:8F:C9:00:86:4F:CB:63:6F:88:A7:7A:8C:95:B4:C0:E1:FC Authority key identifier: C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 Certificate issuer: /CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Certificate serial: 71F4F634C25D3E427D62D671954DDAE823878EFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft Manifest number: 01BC Signing time: Sat 18 Oct 2025 21:51:17 +0000 Manifest this update: Sat 18 Oct 2025 21:46:17 +0000 Manifest next update: Wed 22 Oct 2025 02:31:17 +0000 Files and hashes: 1: C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl (hash: LqoBFUxQHwuzt3Pzq3DEETYnpI7OXyhdImgfpiEpBO8=) 2: 3130332e3138362e322e302f32342d3234203d3e20313439383837.roa (hash: dald9idU/rHkiXT+Hb4ViPOAu0GAF+vadWJH9YDYXzE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 02:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:f4:f6:34:c2:5d:3e:42:7d:62:d6:71:95:4d:da:e8:23:87:8e:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Validity Not Before: Oct 18 21:46:17 2025 GMT Not After : Oct 22 02:31:17 2025 GMT Subject: CN=5418218FC900864FCB636F88A77A8C95B4C0E1FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5a:32:fe:75:3a:78:52:a4:9b:e3:4a:4c:53: a3:e1:ac:a9:bd:3d:8a:95:2a:ea:c5:fe:28:34:3d: 18:42:95:d6:e0:3c:eb:7d:9b:de:50:03:d4:79:a2: 37:dd:b3:d8:1a:e0:86:07:0a:1a:72:ab:96:dc:e2: a0:4d:80:27:64:5a:65:96:5f:d9:a5:3e:05:89:f5: 08:02:6c:4d:2f:27:f6:73:fb:63:d2:fd:7a:68:0c: ee:cc:7b:bd:58:87:b1:ac:a5:c1:1d:6b:c2:a0:0f: bf:bb:d1:0d:7e:04:56:ea:20:c7:b3:22:eb:0b:71: 80:93:4d:73:14:f5:c8:95:47:55:87:18:16:ff:ac: dc:bc:5f:62:49:e9:d4:0a:f3:86:81:11:8b:e7:e5: 37:00:b7:5a:92:61:dd:42:62:27:39:7a:bf:8d:4f: 77:0a:79:f1:5a:a8:63:f5:c6:68:b5:30:18:ba:43: 74:10:fd:2d:a1:a6:7c:6a:bd:dc:42:fe:18:3c:e5: d7:b5:6f:0c:35:e7:f3:b0:00:29:de:9e:d4:f4:ae: 9c:1f:1b:09:0c:6f:49:0f:de:1c:fe:08:1e:fc:13: 50:53:a9:e8:29:d5:7c:1e:79:2c:ae:92:89:a8:d7: f9:de:9c:20:66:59:0b:15:c5:bd:25:10:76:1e:75: d6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:18:21:8F:C9:00:86:4F:CB:63:6F:88:A7:7A:8C:95:B4:C0:E1:FC X509v3 Authority Key Identifier: keyid:C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0c:ff:9f:cb:61:29:4f:52:6a:7e:8d:ae:cb:84:f9:f2:71: 4b:48:0d:0d:8c:05:c4:89:55:1a:04:5d:a5:a3:9a:73:18:b9: aa:a1:ee:e9:8a:56:a4:96:4e:13:f6:ca:8e:b8:4c:cd:17:fc: 2c:77:1c:f3:c8:9b:f2:3a:81:5c:12:68:b7:52:1d:8e:05:9c: 14:13:8a:f3:1e:95:01:2c:77:1d:37:04:a7:37:e7:1a:db:7f: 44:60:8c:3b:ab:8f:5f:67:4b:d8:4b:4e:7e:e8:99:05:9a:2e: b9:cc:ad:6c:ba:4d:54:54:22:49:40:77:e1:db:08:f1:69:17: 8d:70:a1:91:60:3f:cb:87:6a:37:fa:b0:8e:25:55:a3:1b:74: 64:0a:65:de:09:cc:c4:36:2c:91:21:3c:ed:3c:58:84:e7:7a: 9d:f6:89:5a:1c:7f:69:7d:70:e8:4e:46:55:f0:e2:97:e0:23: 27:51:8c:79:1b:48:4b:9b:19:06:9b:a9:82:7a:f0:4f:9d:45: f6:90:0a:69:22:72:95:01:3e:26:2c:86:76:6b:d3:74:91:0c: 58:70:02:14:80:bb:21:09:17:f8:6e:75:b7:37:3d:9e:65:8d: 5a:28:30:2f:fd:0e:69:fb:28:e1:3d:c7:d1:1f:e9:04:63:67: da:95:71:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcfT2NMJdPkJ9YtZxlU3a6COHjvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJB QkM3QTZCMjAeFw0yNTEwMTgyMTQ2MTdaFw0yNTEwMjIwMjMxMTdaMDMxMTAvBgNV BAMTKDU0MTgyMThGQzkwMDg2NEZDQjYzNkY4OEE3N0E4Qzk1QjRDMEUxRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxWjL+dTp4UqSb40pMU6PhrKm9 PYqVKurF/ig0PRhCldbgPOt9m95QA9R5ojfds9ga4IYHChpyq5bc4qBNgCdkWmWW X9mlPgWJ9QgCbE0vJ/Zz+2PS/XpoDO7Me71Yh7GspcEda8KgD7+70Q1+BFbqIMez IusLcYCTTXMU9ciVR1WHGBb/rNy8X2JJ6dQK84aBEYvn5TcAt1qSYd1CYic5er+N T3cKefFaqGP1xmi1MBi6Q3QQ/S2hpnxqvdxC/hg85de1bww15/OwACnentT0rpwf GwkMb0kP3hz+CB78E1BTqegp1XweeSyukomo1/nenCBmWQsVxb0lEHYeddZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVBghj8kAhk/LY2+Ip3qMlbTA4fwwHwYDVR0j BBgwFoAUwZsTMCWy2UcDTysPxYK58qvHprIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGY2ZDg2Yi1lM2RmLTRlMmYtOTM2Zi1lZDliOTYzNTAzYTEvMC9DMTlCMTMzMDI1 QjJEOTQ3MDM0RjJCMEZDNTgyQjlGMkFCQzdBNkIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJBQkM3 QTZCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmNmQ4NmItZTNkZi00ZTJmLTkz NmYtZWQ5Yjk2MzUwM2ExLzAvQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5 RjJBQkM3QTZCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4M/5/LYSlPUmp+ja7LhPnycUtIDQ2MBcSJ VRoEXaWjmnMYuaqh7umKVqSWThP2yo64TM0X/Cx3HPPIm/I6gVwSaLdSHY4FnBQT ivMelQEsdx03BKc35xrbf0RgjDurj19nS9hLTn7omQWaLrnMrWy6TVRUIklAd+Hb CPFpF41woZFgP8uHajf6sI4lVaMbdGQKZd4JzMQ2LJEhPO08WITnep32iVocf2l9 cOhORlXw4pfgIydRjHkbSEubGQabqYJ68E+dRfaQCmkicpUBPiYshnZr03SRDFhw AhSAuyEJF/hudbc3PZ5ljVooMC/9Dmn7KOE9x9Ef6QRjZ9qVccw= -----END CERTIFICATE-----Generated at Mon Oct 20 22:48:23 2025 by rpki-client