$ rpki-client -vvf repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft File: 196DBD061B4577EF848600B17A266D689F5A70B5.mft (raw, json) Hash identifier: zyKQjcuIrbVTaox+GzS7BAixSrTrDspw0/uqSmJhZ1c= Subject key identifier: C3:56:4E:7F:18:F2:E7:8D:BD:AE:BA:60:DC:71:31:73:4C:2B:F8:0F Authority key identifier: 19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 Certificate issuer: /CN=196DBD061B4577EF848600B17A266D689F5A70B5 Certificate serial: 68F3EBCDFC4A631FA38F171E549039F92299A683 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft Manifest number: 0206 Signing time: Sat 18 Oct 2025 23:21:32 +0000 Manifest this update: Sat 18 Oct 2025 23:16:32 +0000 Manifest next update: Wed 22 Oct 2025 05:13:32 +0000 Files and hashes: 1: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (hash: EDPK0eOxqBPQlG42EiZMre0RjhVvjul6NQmz0+X17bE=) 2: 196DBD061B4577EF848600B17A266D689F5A70B5.crl (hash: 2JLeSgt0JX3DNg09BSoWgiRKJvC4mnPNmwbnZ48Pk6Y=) 3: 3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa (hash: 34/R8QTjCFJsUx7prL6eX2eJ9Y/fnEucfem7nusLMB8=) 4: 3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (hash: 5lY4f9V94dB+03La5b3P91qI5RBjwa5CSpgEJJRGvxc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f3:eb:cd:fc:4a:63:1f:a3:8f:17:1e:54:90:39:f9:22:99:a6:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=196DBD061B4577EF848600B17A266D689F5A70B5 Validity Not Before: Oct 18 23:16:32 2025 GMT Not After : Oct 22 05:13:32 2025 GMT Subject: CN=C3564E7F18F2E78DBDAEBA60DC7131734C2BF80F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:4d:7f:2e:66:56:5f:63:20:17:b0:a1:cb: a3:7d:42:1b:19:07:03:10:98:3e:b2:e5:08:b7:16: a2:e9:61:8f:bb:72:27:de:c9:d0:ef:f9:02:81:3f: bf:5d:0b:34:be:87:41:8d:f1:19:3c:bf:5a:4b:37: 40:64:8d:2a:7f:ef:49:cb:b3:6e:b9:db:12:1a:3f: 40:38:16:84:29:b9:5f:33:8f:91:47:2c:9a:1b:c8: 8b:83:27:e0:d8:e9:39:a6:5b:87:5c:be:60:07:99: 38:2f:a9:7f:3e:b8:59:7b:98:fc:e5:be:9d:54:c3: ca:da:b6:31:0c:98:db:45:6c:68:1b:53:d4:46:08: be:7b:38:9d:f8:50:a8:0f:e8:97:6a:e5:fb:68:d2: 10:2f:ea:52:42:7a:9e:7d:16:d8:96:c7:7f:37:47: 7b:27:47:e7:ef:d8:dd:df:0b:2a:d4:65:f8:7d:a0: 05:de:6a:2b:d3:0b:16:a7:ae:cc:07:c0:64:ed:fa: 20:fc:b4:d2:01:a5:c9:7c:40:cd:69:91:df:c6:c7: 1c:d3:5c:cc:bf:7f:d6:0e:f2:10:f2:dc:74:67:64: 5c:1b:01:c4:7c:53:fa:5c:56:43:2d:65:fa:fe:3e: bf:37:d8:2a:16:58:a5:98:c1:02:5f:80:64:56:0d: 9a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:56:4E:7F:18:F2:E7:8D:BD:AE:BA:60:DC:71:31:73:4C:2B:F8:0F X509v3 Authority Key Identifier: keyid:19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:10:13:c9:93:22:67:43:da:f8:f5:42:97:40:c8:32:e9:18: eb:4c:d5:ad:51:d8:be:bd:55:15:b8:12:0f:4b:e7:66:b9:52: 84:d8:7c:d2:b3:bb:ac:e5:fa:01:13:01:16:9c:46:aa:4e:22: cb:79:d1:2c:e8:92:d3:b1:9c:61:d1:0b:01:bb:17:70:7c:c3: 8b:f2:d3:da:2d:fa:72:29:82:0b:9b:a9:17:00:e4:79:d8:47: 8b:8d:66:59:cc:a4:7b:23:01:52:22:39:0a:94:7c:b1:13:4b: a3:1c:b8:66:a0:f8:17:8d:92:4a:be:b2:24:e8:d5:dc:e6:d1: 25:98:a0:52:59:79:6c:f9:9b:66:77:0c:18:21:d2:cc:0e:b0: a5:4d:51:b4:fe:f8:a9:ce:ac:1b:6f:ec:06:3b:db:41:53:c2: 74:af:65:75:7e:30:bb:2c:5d:a4:1b:59:4e:89:0c:3c:07:3f: c3:5d:f8:39:96:7b:9e:df:5d:a2:ff:fc:63:0f:fb:8c:38:65: 83:ee:98:7b:70:5b:b9:f0:f8:cb:13:47:4c:07:85:ac:f2:af: 9b:5c:15:82:be:f3:ad:14:1a:d2:fa:e2:ea:20:22:e3:72:9c: 40:36:32:73:bc:6d:eb:99:52:fb:56:06:9e:b6:1c:a7:8f:b0: 2f:a9:49:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaPPrzfxKYx+jjxceVJA5+SKZpoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5 RjVBNzBCNTAeFw0yNTEwMTgyMzE2MzJaFw0yNTEwMjIwNTEzMzJaMDMxMTAvBgNV BAMTKEMzNTY0RTdGMThGMkU3OERCREFFQkE2MERDNzEzMTczNEMyQkY4MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAnE1/LmZWX2MgF7Chy6N9QhsZ BwMQmD6y5Qi3FqLpYY+7cifeydDv+QKBP79dCzS+h0GN8Rk8v1pLN0BkjSp/70nL s2652xIaP0A4FoQpuV8zj5FHLJobyIuDJ+DY6TmmW4dcvmAHmTgvqX8+uFl7mPzl vp1Uw8ratjEMmNtFbGgbU9RGCL57OJ34UKgP6Jdq5fto0hAv6lJCep59FtiWx383 R3snR+fv2N3fCyrUZfh9oAXeaivTCxanrswHwGTt+iD8tNIBpcl8QM1pkd/GxxzT XMy/f9YO8hDy3HRnZFwbAcR8U/pcVkMtZfr+Pr832CoWWKWYwQJfgGRWDZpPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw1ZOfxjy5429rrpg3HExc0wr+A8wHwYDVR0j BBgwFoAUGW29BhtFd++EhgCxeiZtaJ9acLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM4MDFhMC03OTEyLTRiMDEtYTI4MS04ODAyNDYyNGEyZDQvMC8xOTZEQkQwNjFC NDU3N0VGODQ4NjAwQjE3QTI2NkQ2ODlGNUE3MEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5RjVB NzBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjODAxYTAtNzkxMi00YjAxLWEy ODEtODgwMjQ2MjRhMmQ0LzAvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZE Njg5RjVBNzBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkQE8mTImdD2vj1QpdAyDLpGOtM1a1R2L69 VRW4Eg9L52a5UoTYfNKzu6zl+gETARacRqpOIst50SzoktOxnGHRCwG7F3B8w4vy 09ot+nIpggubqRcA5HnYR4uNZlnMpHsjAVIiOQqUfLETS6McuGag+BeNkkq+siTo 1dzm0SWYoFJZeWz5m2Z3DBgh0swOsKVNUbT++KnOrBtv7AY720FTwnSvZXV+MLss XaQbWU6JDDwHP8Nd+DmWe57fXaL//GMP+4w4ZYPumHtwW7nw+MsTR0wHhazyr5tc FYK+860UGtL64uogIuNynEA2MnO8beuZUvtWBp62HKePsC+pSYM= -----END CERTIFICATE-----Generated at Mon Oct 20 09:23:27 2025 by rpki-client