$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft File: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft (raw, json) Hash identifier: C0yPLPU46agOxdYecj8EdJCv+E3UWbNioVdgPbYSL08= Subject key identifier: D7:36:49:1C:23:B9:DF:19:E0:7A:81:3C:C3:6A:B5:1E:98:8E:C5:E7 Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 Certificate issuer: /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Certificate serial: 14087CC254DB7B579119A097784B32814D53D9B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft Manifest number: 0202 Signing time: Thu 21 Aug 2025 03:40:40 +0000 Manifest this update: Thu 21 Aug 2025 03:35:40 +0000 Manifest next update: Sun 24 Aug 2025 10:59:40 +0000 Files and hashes: 1: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: b9POD8lIGTkSBPPG5UCEDWwytPa4KOI/X1gSRB0o140=) 2: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: Alr3MmF3FComiYShgHs/7REcddrGc/AGrj1Fejo7KUI=) 3: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl (hash: 8eqvh/e2ZPWOCrVyZRqQg1eS5HM8ddaaDhuGi2iQ0SA=) 4: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: pIxViXZoycBV8A7CIi1fmiiQDu+3Ugcswhk6WPEdvN8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 10:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:08:7c:c2:54:db:7b:57:91:19:a0:97:78:4b:32:81:4d:53:d9:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Validity Not Before: Aug 21 03:35:40 2025 GMT Not After : Aug 24 10:59:40 2025 GMT Subject: CN=D736491C23B9DF19E07A813CC36AB51E988EC5E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8b:1d:dc:1c:0a:e1:1f:63:8e:9c:8e:47:ad: 62:95:02:81:41:d1:c2:3d:65:ca:78:7c:1f:18:46: 0e:13:87:02:52:85:93:af:6c:4c:0b:bb:b0:98:3c: 9a:2d:1f:b9:09:12:29:c0:0a:7a:50:50:28:04:23: 6a:34:76:c5:39:32:7e:60:ef:00:3b:92:14:d6:87: b8:8b:76:b9:b8:a2:1f:f3:03:bd:6f:68:3e:9c:0b: f3:d9:08:b1:61:bc:5e:38:6f:18:32:a4:3f:3c:32: 8e:b2:c5:e9:c8:f8:70:27:0e:db:b4:44:f1:7d:8e: 24:c5:19:cb:18:cb:55:81:8b:3c:6b:03:d7:df:6c: 2c:ba:91:ce:fa:fa:94:f9:63:f0:c8:a1:12:c4:9a: 71:f6:a8:5a:91:d6:bc:02:c2:67:1c:e5:ff:42:7a: 4c:dd:57:68:14:fa:ab:b2:44:bd:8e:2a:be:09:6e: be:4e:23:6f:38:6f:33:2f:5d:81:34:98:f6:ca:ab: 10:76:b3:0e:9a:ed:14:cc:55:7f:28:dd:ed:7e:ae: 37:25:3e:21:81:7e:f0:1a:1e:59:47:44:a5:6b:8e: dc:62:08:a4:20:91:21:d7:29:a3:c9:e8:36:a7:aa: a2:9a:32:97:8f:52:78:86:48:ee:8c:10:3a:84:69: c9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:36:49:1C:23:B9:DF:19:E0:7A:81:3C:C3:6A:B5:1E:98:8E:C5:E7 X509v3 Authority Key Identifier: keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:fa:79:91:a3:d9:77:d5:cd:49:5e:4d:ab:76:9f:5d:79:69: 26:c8:f2:e5:d0:67:bc:ae:46:49:07:5a:9b:97:f6:fe:a6:8b: 00:1e:85:e8:f8:f7:42:63:79:cb:6c:a2:51:b7:88:df:52:33: 1c:5b:57:64:3b:be:fb:eb:36:e2:26:87:ab:68:1c:6a:22:38: 5f:7c:f8:2c:47:45:b5:5b:d8:04:ff:23:8f:4b:e8:4e:7e:b0: 39:38:c7:c5:93:0e:71:ac:ee:cf:57:66:b6:7e:61:23:94:9a: 6d:16:90:9b:8c:5e:c8:20:b1:66:2a:04:ad:a8:cb:58:a7:60: 39:34:8e:25:91:d5:7a:e7:52:36:da:47:e1:ef:50:57:57:66: aa:c2:94:ef:16:da:bb:3e:5f:85:97:16:32:d9:10:35:33:93: cc:1f:43:b9:98:fa:13:d8:3d:58:7d:d1:21:43:7f:a7:31:a4: c3:46:f9:f1:44:66:69:9a:d1:fc:63:7c:0c:de:55:0f:4a:67: c2:26:fd:64:5e:90:79:e4:ad:1e:a5:61:de:b8:2c:65:7b:96: 81:52:83:62:f1:bf:9d:76:53:a6:8a:c9:b7:58:e6:7d:50:04: 88:7d:b6:c3:43:b8:d1:1b:e7:2c:d0:77:82:c4:95:a9:55:cc: 80:1e:d1:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFAh8wlTbe1eRGaCXeEsygU1T2bkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVB NkY0OENFNzAeFw0yNTA4MjEwMzM1NDBaFw0yNTA4MjQxMDU5NDBaMDMxMTAvBgNV BAMTKEQ3MzY0OTFDMjNCOURGMTlFMDdBODEzQ0MzNkFCNTFFOTg4RUM1RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjix3cHArhH2OOnI5HrWKVAoFB 0cI9Zcp4fB8YRg4ThwJShZOvbEwLu7CYPJotH7kJEinACnpQUCgEI2o0dsU5Mn5g 7wA7khTWh7iLdrm4oh/zA71vaD6cC/PZCLFhvF44bxgypD88Mo6yxenI+HAnDtu0 RPF9jiTFGcsYy1WBizxrA9ffbCy6kc76+pT5Y/DIoRLEmnH2qFqR1rwCwmcc5f9C ekzdV2gU+quyRL2OKr4Jbr5OI284bzMvXYE0mPbKqxB2sw6a7RTMVX8o3e1+rjcl PiGBfvAaHllHRKVrjtxiCKQgkSHXKaPJ6DanqqKaMpePUniGSO6MEDqEacktAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1zZJHCO53xngeoE8w2q1HpiOxecwHwYDVR0j BBgwFoAUGZ09aE7O7/uxfdWYomiINab0jOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTgzODNlMi0yMDZjLTRiNzQtYmE0YS1jZDhhNGQ3Y2Q4NjEvMC8xOTlEM0Q2ODRF Q0VFRkZCQjE3REQ1OThBMjY4ODgzNUE2RjQ4Q0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVBNkY0 OENFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4 MzVBNkY0OENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAv6eZGj2XfVzUleTat2n115aSbI8uXQZ7yu RkkHWpuX9v6miwAehej490JjectsolG3iN9SMxxbV2Q7vvvrNuImh6toHGoiOF98 +CxHRbVb2AT/I49L6E5+sDk4x8WTDnGs7s9XZrZ+YSOUmm0WkJuMXsggsWYqBK2o y1inYDk0jiWR1XrnUjbaR+HvUFdXZqrClO8W2rs+X4WXFjLZEDUzk8wfQ7mY+hPY PVh90SFDf6cxpMNG+fFEZmma0fxjfAzeVQ9KZ8Im/WRekHnkrR6lYd64LGV7loFS g2Lxv512U6aKybdY5n1QBIh9tsNDuNEb5yzQd4LElalVzIAe0bw= -----END CERTIFICATE-----Generated at Sat Aug 23 12:16:14 2025 by rpki-client