$ rpki-client -vvf repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft File: 19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft (raw, json) Hash identifier: 3wwbfR8GjhDS7++YeGUUeu5Y/P+84o4xHMRadkcIf44= Subject key identifier: 39:D2:5D:72:2E:A4:43:57:14:A6:EF:70:A0:85:D3:64:F7:8F:B3:D6 Authority key identifier: 19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E Certificate issuer: /CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E Certificate serial: 28C9DD8A97839E6A7783EA97190F2D587FAE1269 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft Manifest number: 01E4 Signing time: Wed 02 Jul 2025 00:01:41 +0000 Manifest this update: Tue 01 Jul 2025 23:56:41 +0000 Manifest next update: Sat 05 Jul 2025 07:06:41 +0000 Files and hashes: 1: 3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa (hash: 0sBtxCmbxKq6J3NSJMDZXL4qE7kDKeTCzfpwrIBogLg=) 2: 3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa (hash: 6ROZVbNEcqpl1HbbpFIZhVYZrNJ1M6DcybOk7PyTnVE=) 3: 19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl (hash: ioeYtushJS3kq8Y9pGFuNW8mteHvYcNNinbjeLscSNI=) 4: 323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa (hash: efHKgumm4W/iDiNoEk+pEOF7/XIOUKbYG+7UFPzA9VU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 07:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c9:dd:8a:97:83:9e:6a:77:83:ea:97:19:0f:2d:58:7f:ae:12:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E Validity Not Before: Jul 1 23:56:41 2025 GMT Not After : Jul 5 07:06:41 2025 GMT Subject: CN=39D25D722EA4435714A6EF70A085D364F78FB3D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:41:f3:c4:18:da:0a:d9:70:8e:18:fd:c0: e5:48:87:ed:ad:26:41:2d:9d:58:01:54:cc:40:8a: 17:4f:d8:d5:03:98:b4:a8:ed:52:0b:f8:2a:50:42: dd:fc:2c:b9:b5:4f:1c:f0:2a:f0:32:49:5d:b3:3c: 40:72:88:6f:87:f9:eb:e6:86:69:96:a2:a4:6e:1a: 78:50:9a:c2:97:38:b7:8f:86:d6:50:e0:ea:1e:e2: ba:26:40:af:00:f6:2f:42:38:f0:93:a6:2f:af:46: 80:22:1e:e2:a7:35:c6:a8:82:fa:6e:6a:79:65:4d: 12:68:8e:d3:5f:7a:b0:75:ae:c9:e3:35:48:2b:42: 97:c1:c3:10:e6:22:63:cb:a4:84:9f:8a:cd:ea:ff: 41:d8:08:d4:6f:ad:82:c9:21:e5:a8:80:cc:18:c7: 37:1a:d2:d4:bc:8a:26:35:ce:87:40:05:22:cc:3e: 58:0d:55:ed:d0:00:42:3d:7a:24:66:3c:05:5e:82: 74:ba:a0:06:80:39:1c:e7:fe:12:c8:3f:f6:b9:ba: 86:e9:94:65:fe:31:f0:c6:e5:62:38:35:9f:26:5a: 6d:38:90:02:72:aa:49:8d:da:3c:ca:25:4e:26:18: 73:7c:4e:02:34:87:76:59:74:9e:a3:94:ce:ca:ca: dd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D2:5D:72:2E:A4:43:57:14:A6:EF:70:A0:85:D3:64:F7:8F:B3:D6 X509v3 Authority Key Identifier: keyid:19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:74:ff:77:8b:a5:af:6e:d5:71:d4:67:95:fb:40:fd:46:67: eb:88:2b:b7:f4:c7:42:90:68:6d:96:e5:f1:9c:e6:c3:b1:52: 67:fe:fc:08:b6:e1:cf:5a:c3:ca:67:7d:d7:4e:68:3f:1a:a8: c2:4b:e7:68:68:43:9a:18:3b:0d:af:57:0a:ec:00:e2:76:56: 85:a7:7b:a1:af:75:98:d2:1b:32:c8:70:71:4d:61:8c:e2:cc: 4d:c1:4d:49:c6:d8:48:f4:01:71:c9:e5:83:69:0d:05:bf:b8: 14:51:d7:af:25:c3:86:fa:f0:90:ee:0a:92:97:86:2f:b6:b9: af:04:48:ce:59:71:37:63:03:ef:31:8b:bd:4d:9d:7f:5a:5d: 12:58:33:c9:92:6b:1b:ef:f6:0c:11:7c:af:55:51:a4:01:29: 98:af:62:f5:a0:0f:e7:47:cb:8f:21:c9:bb:aa:d2:fe:79:3d: 7c:d8:73:ea:8c:8a:68:23:99:dd:ae:7a:74:dc:79:8b:e3:f7: 04:63:59:61:e4:46:b2:eb:0f:19:60:55:38:60:20:b5:a6:18: 2c:23:90:26:7d:ea:75:d9:85:a1:20:1d:9e:c2:0a:ea:ef:c7: a8:d1:28:5c:5f:d3:b2:f5:a6:33:a5:c5:ec:c5:d9:a8:bb:48: db:5b:83:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKMndipeDnmp3g+qXGQ8tWH+uEmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlFRDc5N0FEQkI4RDBBMzE4NEQyQjAyRDdEMUMyMzYy QTZGRjg3RTAeFw0yNTA3MDEyMzU2NDFaFw0yNTA3MDUwNzA2NDFaMDMxMTAvBgNV BAMTKDM5RDI1RDcyMkVBNDQzNTcxNEE2RUY3MEEwODVEMzY0Rjc4RkIzRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1VUHzxBjaCtlwjhj9wOVIh+2t JkEtnVgBVMxAihdP2NUDmLSo7VIL+CpQQt38LLm1TxzwKvAySV2zPEByiG+H+evm hmmWoqRuGnhQmsKXOLePhtZQ4Ooe4romQK8A9i9COPCTpi+vRoAiHuKnNcaogvpu anllTRJojtNferB1rsnjNUgrQpfBwxDmImPLpISfis3q/0HYCNRvrYLJIeWogMwY xzca0tS8iiY1zodABSLMPlgNVe3QAEI9eiRmPAVegnS6oAaAORzn/hLIP/a5uobp lGX+MfDG5WI4NZ8mWm04kAJyqkmN2jzKJU4mGHN8TgI0h3ZZdJ6jlM7Kyt0dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOdJdci6kQ1cUpu9woIXTZPePs9YwHwYDVR0j BBgwFoAUGe15etu40KMYTSsC19HCNipv+H4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTFkNmM5Yy1lYWQ3LTQ1ZmUtYTE5YS00MjIzNWZjNTM3ODAvMC8xOUVENzk3QURC QjhEMEEzMTg0RDJCMDJEN0QxQzIzNjJBNkZGODdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlFRDc5N0FEQkI4RDBBMzE4NEQyQjAyRDdEMUMyMzYyQTZG Rjg3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjUxZDZjOWMtZWFkNy00NWZlLWEx OWEtNDIyMzVmYzUzNzgwLzAvMTlFRDc5N0FEQkI4RDBBMzE4NEQyQjAyRDdEMUMy MzYyQTZGRjg3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI50/3eLpa9u1XHUZ5X7QP1GZ+uIK7f0x0KQ aG2W5fGc5sOxUmf+/Ai24c9aw8pnfddOaD8aqMJL52hoQ5oYOw2vVwrsAOJ2VoWn e6GvdZjSGzLIcHFNYYzizE3BTUnG2Ej0AXHJ5YNpDQW/uBRR168lw4b68JDuCpKX hi+2ua8ESM5ZcTdjA+8xi71NnX9aXRJYM8mSaxvv9gwRfK9VUaQBKZivYvWgD+dH y48hybuq0v55PXzYc+qMimgjmd2uenTceYvj9wRjWWHkRrLrDxlgVThgILWmGCwj kCZ96nXZhaEgHZ7CCurvx6jRKFxf07L1pjOlxezF2ai7SNtbg6U= -----END CERTIFICATE-----Generated at Thu Jul 3 00:41:54 2025 by rpki-client