$ rpki-client -vvf repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft File: 19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft (raw, json) Hash identifier: vGk4r/jSD0nykFlfPqap8GZ+PAEO09LGZKT3E52+V4g= Subject key identifier: 0A:F4:09:EA:46:22:10:09:C0:0F:77:35:50:8D:81:29:0B:AA:7D:9F Authority key identifier: 19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C Certificate issuer: /CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C Certificate serial: 424D27CFD2698F595FF5C2ED0A488BC0A2ECFCED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft Manifest number: 0519 Signing time: Sun 19 Oct 2025 23:51:35 +0000 Manifest this update: Sun 19 Oct 2025 23:46:35 +0000 Manifest next update: Thu 23 Oct 2025 09:06:35 +0000 Files and hashes: 1: 3131322e37382e34302e302f32312d3234203d3e203435333032.roa (hash: Be1o2enB5OVbfeTb11FQx0y/6KQQnTeDSPNmLL8NRc4=) 2: 3135372e3131392e3232302e302f32322d3234203d3e203435333032.roa (hash: HO0xgGTKI8hDqeJBD1vkonWKYqVkEjngRgMiBcK+FFk=) 3: 3130332e33302e3138302e302f32322d3234203d3e203435333032.roa (hash: U5fnoyr/5IIStrT2HEQ+BlCOUuRxzROoZ8IEFi9/L1Q=) 4: 19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl (hash: CTaZOBduE0jR6uDWBBjwRDLxl4cmoUMVdAhZAZIUp0k=) 5: 323430333a393130303a3a2f33322d3332203d3e203435333032.roa (hash: yCfGLKGWTw0wAfTHt+3rKRfpUiZgwzZqi9YE0DFo8qw=) 6: 323430333a393130303a3a2f33322d3438203d3e203435333032.roa (hash: 4brGPOCgGPQmWwoETwSHHbE2lw9R22KEcXYm0M7Fp90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:4d:27:cf:d2:69:8f:59:5f:f5:c2:ed:0a:48:8b:c0:a2:ec:fc:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C Validity Not Before: Oct 19 23:46:35 2025 GMT Not After : Oct 23 09:06:35 2025 GMT Subject: CN=0AF409EA46221009C00F7735508D81290BAA7D9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5f:2e:4d:11:18:77:26:d6:23:06:8d:73:30: 44:d6:13:2a:7e:14:58:66:b9:57:06:b3:b3:aa:31: 36:d2:27:b7:b1:8c:b0:22:1b:c5:3e:2a:56:b8:dd: f6:bd:73:a5:b6:31:0e:fe:d2:dd:d3:1c:15:66:35: 94:40:5a:24:4b:6f:da:d8:03:fa:83:b1:44:25:6d: 54:17:c9:47:d4:41:f5:3f:51:b8:23:3a:5a:46:97: f3:26:e1:e9:d6:4a:3b:6c:b2:30:55:e1:74:99:4a: bb:8c:58:3b:81:47:5c:51:72:65:67:be:ba:70:0a: 82:60:0f:83:16:19:2a:3c:e5:3b:41:f2:d8:81:43: a2:94:1b:22:65:6c:b3:81:ea:d7:6e:fa:b4:e1:8c: 88:36:4b:2f:8b:ac:46:fe:fc:6a:7d:8a:52:98:65: 77:5e:3c:b2:09:7a:f9:43:85:a8:b4:30:4e:ee:c5: 23:07:ce:e0:8f:02:cd:34:68:9d:76:ad:da:44:b0: b6:aa:74:88:b5:0d:64:41:6b:13:5e:d7:31:96:e4: f2:52:c0:2f:a9:f5:fc:4a:a0:54:5a:33:83:af:ec: df:e1:6a:e2:f6:ed:e8:1b:e1:19:3c:25:1b:94:f3: a2:6b:0d:c9:d3:9b:35:d8:be:40:c5:29:f2:ee:10: 44:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F4:09:EA:46:22:10:09:C0:0F:77:35:50:8D:81:29:0B:AA:7D:9F X509v3 Authority Key Identifier: keyid:19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:fb:3d:54:99:58:e4:cb:cd:76:e9:52:d8:e6:6c:58:39:05: 8e:65:6b:3d:04:ee:89:4b:7f:86:ab:71:38:7d:9b:79:59:20: c8:e9:c6:55:e8:2d:bf:81:2d:5c:b1:ff:b8:c2:56:c5:e6:bf: 26:3d:c7:f7:82:6f:14:55:49:38:f7:e8:db:6d:45:11:a5:79: d1:15:8b:59:30:48:d7:2d:e4:b0:df:01:f2:e6:24:c3:60:54: c0:cd:70:e0:26:da:5b:99:7d:e7:36:aa:68:41:7a:be:68:fe: dc:8b:07:4a:27:94:8e:ea:89:45:65:06:63:3c:7d:9d:3b:01: e2:3a:18:ee:28:a2:2a:a1:15:7a:ec:7b:7a:1c:1b:9c:a3:fa: 14:c2:ea:36:de:e8:70:64:5e:c1:7e:b1:33:cc:10:e8:44:18: 46:70:b0:66:89:ce:4b:54:1b:e3:5f:e7:d0:03:fd:52:2a:65: 28:fb:bb:74:fe:c6:b3:80:d6:5c:41:e5:5d:20:4d:06:87:71: 91:cb:43:c2:66:f5:de:39:d0:ea:e0:46:e5:8d:aa:a7:b4:22: 86:b3:70:47:65:30:91:35:1f:cb:b1:00:df:31:dc:71:65:ca: 29:22:7b:e7:bb:6d:dd:d7:8a:04:7a:44:5d:24:dd:14:5c:8b: 44:0d:4c:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQk0nz9Jpj1lf9cLtCkiLwKLs/O0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMxNjM4 N0U2NUMzQzAeFw0yNTEwMTkyMzQ2MzVaFw0yNTEwMjMwOTA2MzVaMDMxMTAvBgNV BAMTKDBBRjQwOUVBNDYyMjEwMDlDMDBGNzczNTUwOEQ4MTI5MEJBQTdEOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJXy5NERh3JtYjBo1zMETWEyp+ FFhmuVcGs7OqMTbSJ7exjLAiG8U+Kla43fa9c6W2MQ7+0t3THBVmNZRAWiRLb9rY A/qDsUQlbVQXyUfUQfU/UbgjOlpGl/Mm4enWSjtssjBV4XSZSruMWDuBR1xRcmVn vrpwCoJgD4MWGSo85TtB8tiBQ6KUGyJlbLOB6tdu+rThjIg2Sy+LrEb+/Gp9ilKY ZXdePLIJevlDhai0ME7uxSMHzuCPAs00aJ12rdpEsLaqdIi1DWRBaxNe1zGW5PJS wC+p9fxKoFRaM4Ov7N/hauL27egb4Rk8JRuU86JrDcnTmzXYvkDFKfLuEETjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCvQJ6kYiEAnAD3c1UI2BKQuqfZ8wHwYDVR0j BBgwFoAUGaGW9eW6ujGSbFru9E/BY4fmXDwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yjg4NThlMC1lY2YwLTRlNTMtYTQ5MC0zYjdjMmRlMTY5M2MvMC8xOUExOTZGNUU1 QkFCQTMxOTI2QzVBRUVGNDRGQzE2Mzg3RTY1QzNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMxNjM4N0U2 NUMzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmI4ODU4ZTAtZWNmMC00ZTUzLWE0 OTAtM2I3YzJkZTE2OTNjLzAvMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMx NjM4N0U2NUMzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKf7PVSZWOTLzXbpUtjmbFg5BY5laz0E7olL f4arcTh9m3lZIMjpxlXoLb+BLVyx/7jCVsXmvyY9x/eCbxRVSTj36NttRRGledEV i1kwSNct5LDfAfLmJMNgVMDNcOAm2luZfec2qmhBer5o/tyLB0onlI7qiUVlBmM8 fZ07AeI6GO4ooiqhFXrse3ocG5yj+hTC6jbe6HBkXsF+sTPMEOhEGEZwsGaJzktU G+Nf59AD/VIqZSj7u3T+xrOA1lxB5V0gTQaHcZHLQ8Jm9d450OrgRuWNqqe0Ioaz cEdlMJE1H8uxAN8x3HFlyikie+e7bd3XigR6RF0k3RRci0QNTB4= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:50 2025 by rpki-client