$ rpki-client -vvf repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft File: 196DBD061B4577EF848600B17A266D689F5A70B5.mft (raw, json) Hash identifier: APNcBffCvNuIWIyz+x1PX6bpOSxmGNpxl8DKOStNGdA= Subject key identifier: 93:D0:2E:19:7A:AA:87:46:65:CC:59:F3:0E:4C:DB:D9:A7:2F:EE:86 Authority key identifier: 19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 Certificate issuer: /CN=196DBD061B4577EF848600B17A266D689F5A70B5 Certificate serial: 4F833996A93C88C5C26D647786866202E02A6267 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft Manifest number: 01ED Signing time: Fri 22 Aug 2025 14:31:33 +0000 Manifest this update: Fri 22 Aug 2025 14:26:33 +0000 Manifest next update: Mon 25 Aug 2025 23:04:33 +0000 Files and hashes: 1: 196DBD061B4577EF848600B17A266D689F5A70B5.crl (hash: GvmqBylouJL0Qg4gmZgO776hpwSXDizLG/G2LqVDVrY=) 2: 3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa (hash: 34/R8QTjCFJsUx7prL6eX2eJ9Y/fnEucfem7nusLMB8=) 3: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (hash: EDPK0eOxqBPQlG42EiZMre0RjhVvjul6NQmz0+X17bE=) 4: 3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (hash: 5lY4f9V94dB+03La5b3P91qI5RBjwa5CSpgEJJRGvxc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 23:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:83:39:96:a9:3c:88:c5:c2:6d:64:77:86:86:62:02:e0:2a:62:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=196DBD061B4577EF848600B17A266D689F5A70B5 Validity Not Before: Aug 22 14:26:33 2025 GMT Not After : Aug 25 23:04:33 2025 GMT Subject: CN=93D02E197AAA874665CC59F30E4CDBD9A72FEE86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:f9:c5:a6:41:d4:24:d2:ea:a4:d5:20:69: aa:4b:a3:8e:67:7b:30:dc:49:55:1e:a8:36:cb:f2: e9:90:91:e2:91:18:71:9c:4d:c4:27:e2:fc:ac:e6: 81:c9:d8:9c:2c:0c:95:06:3f:9f:09:6a:53:68:01: 96:a3:9c:78:f0:37:0e:b8:02:68:43:55:3e:de:0b: 28:8f:af:02:f5:88:86:cd:fa:59:38:71:2b:85:54: 3b:d1:4d:d1:32:be:ad:5a:f4:d0:79:ba:1b:26:db: 5f:a5:ba:08:9b:96:3c:9d:ac:c9:df:da:3c:9f:53: 65:fb:45:3e:21:0f:63:17:e8:96:44:47:73:41:71: be:9e:d1:cc:ad:40:f6:02:ed:60:7c:bf:90:fc:1c: b0:51:85:20:90:f9:77:d3:75:fe:bb:4e:eb:9b:5c: ae:91:f1:b1:bd:66:11:b2:6a:c7:c9:62:62:68:50: 4d:4b:af:10:b1:77:c6:d6:b8:f4:80:95:9a:8a:85: e9:75:c4:15:3e:55:c3:77:e7:f9:99:ab:25:fa:5b: 2e:a8:a1:be:d0:02:89:14:de:1f:87:67:88:78:2f: 58:d0:52:be:94:f5:92:0f:6c:84:39:0e:73:20:32: 52:dc:b8:e3:97:ff:e7:95:a1:41:b5:bf:a6:3b:81: ef:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D0:2E:19:7A:AA:87:46:65:CC:59:F3:0E:4C:DB:D9:A7:2F:EE:86 X509v3 Authority Key Identifier: keyid:19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:1e:e2:49:5c:db:74:1c:ac:fc:0b:7b:14:82:ea:06:db:a8: 7f:0d:78:96:a0:3d:4a:92:53:f4:7e:18:f2:8d:43:3b:a1:ad: e0:27:3b:6b:d8:97:e6:54:8b:24:91:e5:3a:2f:9f:9d:e1:04: 64:b6:2f:a7:59:a7:88:2c:d2:8b:7c:cd:6f:5f:75:65:e8:21: 52:86:9c:e2:8b:77:84:7f:b8:24:b8:5b:6f:da:03:16:ef:a6: 9e:b3:df:64:24:55:ed:be:d3:15:b8:98:d6:cb:4c:3b:06:87: 50:44:81:58:f2:bb:c1:f2:51:bd:6c:79:cd:66:e8:22:6b:c3: eb:19:cd:98:d9:03:b8:d6:94:cd:88:f1:0c:57:97:db:7e:dd: 4a:40:6c:ac:a1:a4:da:b6:75:6a:13:89:6a:01:9b:bf:ca:79: b7:45:da:83:21:7f:6a:7f:dd:b6:02:ae:76:7b:aa:f1:2e:3b: b6:86:13:5c:82:a3:f9:ae:30:e1:04:d4:46:3d:cf:05:cb:16: 08:82:85:8d:fe:0b:f5:a7:1e:31:7b:2c:2b:44:aa:f6:ac:e9: a4:3b:4f:95:07:96:29:dc:a6:64:21:e9:33:bb:95:98:57:ce: 1d:9d:e5:ad:be:76:d3:51:0a:f4:96:75:d6:6e:8b:46:e8:3b: 2a:f6:f1:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT4M5lqk8iMXCbWR3hoZiAuAqYmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5 RjVBNzBCNTAeFw0yNTA4MjIxNDI2MzNaFw0yNTA4MjUyMzA0MzNaMDMxMTAvBgNV BAMTKDkzRDAyRTE5N0FBQTg3NDY2NUNDNTlGMzBFNENEQkQ5QTcyRkVFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9afnFpkHUJNLqpNUgaapLo45n ezDcSVUeqDbL8umQkeKRGHGcTcQn4vys5oHJ2JwsDJUGP58JalNoAZajnHjwNw64 AmhDVT7eCyiPrwL1iIbN+lk4cSuFVDvRTdEyvq1a9NB5uhsm21+lugibljydrMnf 2jyfU2X7RT4hD2MX6JZER3NBcb6e0cytQPYC7WB8v5D8HLBRhSCQ+XfTdf67Tuub XK6R8bG9ZhGyasfJYmJoUE1LrxCxd8bWuPSAlZqKhel1xBU+VcN35/mZqyX6Wy6o ob7QAokU3h+HZ4h4L1jQUr6U9ZIPbIQ5DnMgMlLcuOOX/+eVoUG1v6Y7ge+XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk9AuGXqqh0ZlzFnzDkzb2acv7oYwHwYDVR0j BBgwFoAUGW29BhtFd++EhgCxeiZtaJ9acLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM4MDFhMC03OTEyLTRiMDEtYTI4MS04ODAyNDYyNGEyZDQvMC8xOTZEQkQwNjFC NDU3N0VGODQ4NjAwQjE3QTI2NkQ2ODlGNUE3MEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5RjVB NzBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjODAxYTAtNzkxMi00YjAxLWEy ODEtODgwMjQ2MjRhMmQ0LzAvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZE Njg5RjVBNzBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYe4klc23QcrPwLexSC6gbbqH8NeJagPUqS U/R+GPKNQzuhreAnO2vYl+ZUiySR5Tovn53hBGS2L6dZp4gs0ot8zW9fdWXoIVKG nOKLd4R/uCS4W2/aAxbvpp6z32QkVe2+0xW4mNbLTDsGh1BEgVjyu8HyUb1sec1m 6CJrw+sZzZjZA7jWlM2I8QxXl9t+3UpAbKyhpNq2dWoTiWoBm7/KebdF2oMhf2p/ 3bYCrnZ7qvEuO7aGE1yCo/muMOEE1EY9zwXLFgiChY3+C/WnHjF7LCtEqvas6aQ7 T5UHlincpmQh6TO7lZhXzh2d5a2+dtNRCvSWddZui0boOyr28aE= -----END CERTIFICATE-----Generated at Sat Aug 23 13:37:34 2025 by rpki-client