$ rpki-client -vvf repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft File: 754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft (raw, json) Hash identifier: xKq8PITVu8818/RjHfHV0jF9oBEU0UvXe5j9yniIEiM= Subject key identifier: 84:4B:A9:9B:C9:C4:8B:BA:3D:E2:A3:1B:B9:17:6E:48:C0:D2:18:B5 Authority key identifier: 75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB Certificate issuer: /CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB Certificate serial: 2E9D50A8519F1734C309ED6D39F14F5F95AC9AF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft Manifest number: 0249 Signing time: Sun 19 Oct 2025 01:51:37 +0000 Manifest this update: Sun 19 Oct 2025 01:46:37 +0000 Manifest next update: Wed 22 Oct 2025 10:03:37 +0000 Files and hashes: 1: 3230322e34332e3131362e302f32332d3234203d3e203435373037.roa (hash: Sf9PeSZZ7a8NKRrtWUTmVWuqUtTX2GsdEZGDuX14gwU=) 2: 3131302e39332e31322e302f32322d3234203d3e203435373037.roa (hash: 7iXx5jGESFjpBjO3AiKnrpyYnQjS82YYkQqBjeaeWk0=) 3: 3130332e382e35362e302f32322d3234203d3e203435373037.roa (hash: e0FCZrIOKWaH0btSP4kAUqXaQNeE2QggQ8Gj6R8jPew=) 4: 754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl (hash: WiO7FYTn8S61CgUfMyANposd25qG1MYKjOVrnpSRunE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:9d:50:a8:51:9f:17:34:c3:09:ed:6d:39:f1:4f:5f:95:ac:9a:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB Validity Not Before: Oct 19 01:46:37 2025 GMT Not After : Oct 22 10:03:37 2025 GMT Subject: CN=844BA99BC9C48BBA3DE2A31BB9176E48C0D218B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c6:2a:07:23:e2:6e:39:d8:d2:57:35:bf:7a: c9:8a:78:0d:c7:59:6d:81:08:57:0a:fa:e1:95:f9: 3c:49:65:69:63:ee:7f:52:62:ba:54:bc:bf:0a:e1: 9f:f7:03:2d:58:f1:a5:91:06:ba:42:9a:c0:76:88: 51:18:69:ae:55:74:90:78:40:66:3c:11:5b:08:96: 77:c2:64:09:f7:7f:08:94:97:b8:c8:2d:00:64:77: 2d:47:50:00:a9:1d:8a:3b:52:0c:4b:35:3f:1c:f2: 7d:69:91:99:9f:18:eb:d1:52:b9:ce:30:2b:4c:a1: ea:83:54:7a:ee:9d:d9:d4:6e:b5:ee:82:87:c8:9b: 98:b3:e5:4b:b3:4a:82:bf:2f:1d:66:0d:30:d6:ec: 19:67:62:55:92:b9:f4:ca:ac:f2:2c:3a:a7:dd:49: eb:30:d1:87:66:c3:eb:6f:ea:23:1a:2e:8d:b4:32: 1f:5c:3e:3c:26:aa:26:5f:0b:e6:65:cf:55:f0:12: 77:bc:d9:a4:8b:99:29:05:5d:bd:02:f4:d4:61:00: 85:dc:ec:1a:90:d6:03:b9:1b:5a:4b:90:c1:cd:f0: 3f:29:6b:8f:5f:56:1e:d3:cf:6e:9d:31:d3:26:8d: 1e:97:68:c5:f0:39:19:3e:2a:e0:73:e1:66:9a:9e: 26:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4B:A9:9B:C9:C4:8B:BA:3D:E2:A3:1B:B9:17:6E:48:C0:D2:18:B5 X509v3 Authority Key Identifier: keyid:75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:34:1f:f5:38:94:57:be:8a:df:d6:c1:ff:9c:db:77:62:b0: 43:45:64:ca:10:f2:20:af:70:62:f3:36:4b:5b:b7:b2:a1:1d: 4a:5a:06:ce:02:e3:c6:41:c2:6b:f0:cb:2c:35:95:1e:88:69: b0:3f:8d:8d:64:6a:a8:5c:fe:34:1a:ab:b2:d9:9f:c2:c2:18: 77:e5:7d:3b:b0:68:48:5b:79:80:76:cb:da:de:57:49:07:4f: 3e:e6:12:e9:7a:a7:69:ee:c4:b6:b0:a5:34:f1:df:ac:c6:c0: c6:eb:46:7d:5f:b5:b0:80:a7:c8:2c:87:b6:ff:dc:c0:f6:0c: d9:19:5d:50:dd:22:2d:12:a6:34:c9:19:64:98:d1:b3:f0:77: 87:ee:9b:9a:1f:cc:45:91:72:3e:f0:0a:ad:16:64:91:95:13: 85:15:4b:45:01:05:0b:3a:63:fe:80:9a:1d:fd:e8:98:e3:e3: ef:2b:dd:b0:1d:a9:7e:4a:a3:e8:5f:47:21:66:79:75:5c:e2: c9:16:1c:37:cb:13:6f:ef:61:5e:5b:21:c3:ce:40:1f:65:33: cb:8c:57:2d:fe:e6:64:33:05:80:25:08:36:0b:50:49:36:02: 26:f6:b2:55:76:5f:84:52:31:45:9a:fc:2b:b5:b4:6e:c4:33: 7c:57:e9:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULp1QqFGfFzTDCe1tOfFPX5WsmvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1QjcxQzU5 QjJBM0NDQjAeFw0yNTEwMTkwMTQ2MzdaFw0yNTEwMjIxMDAzMzdaMDMxMTAvBgNV BAMTKDg0NEJBOTlCQzlDNDhCQkEzREUyQTMxQkI5MTc2RTQ4QzBEMjE4QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWxioHI+JuOdjSVzW/esmKeA3H WW2BCFcK+uGV+TxJZWlj7n9SYrpUvL8K4Z/3Ay1Y8aWRBrpCmsB2iFEYaa5VdJB4 QGY8EVsIlnfCZAn3fwiUl7jILQBkdy1HUACpHYo7UgxLNT8c8n1pkZmfGOvRUrnO MCtMoeqDVHrundnUbrXugofIm5iz5UuzSoK/Lx1mDTDW7BlnYlWSufTKrPIsOqfd Sesw0Ydmw+tv6iMaLo20Mh9cPjwmqiZfC+Zlz1XwEne82aSLmSkFXb0C9NRhAIXc 7BqQ1gO5G1pLkMHN8D8pa49fVh7Tz26dMdMmjR6XaMXwORk+KuBz4WaaniYvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhEupm8nEi7o94qMbuRduSMDSGLUwHwYDVR0j BBgwFoAUdUvASJJDBjKoyWWvTFtxxZsqPMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGQyYmRlNC0wNTZiLTQ1YzYtODBiZi1mNWQ0ZDI3NzMzNmIvMC83NTRCQzA0ODky NDMwNjMyQThDOTY1QUY0QzVCNzFDNTlCMkEzQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1QjcxQzU5QjJB M0NDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBkMmJkZTQtMDU2Yi00NWM2LTgw YmYtZjVkNGQyNzczMzZiLzAvNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1Qjcx QzU5QjJBM0NDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALg0H/U4lFe+it/Wwf+c23disENFZMoQ8iCv cGLzNktbt7KhHUpaBs4C48ZBwmvwyyw1lR6IabA/jY1kaqhc/jQaq7LZn8LCGHfl fTuwaEhbeYB2y9reV0kHTz7mEul6p2nuxLawpTTx36zGwMbrRn1ftbCAp8gsh7b/ 3MD2DNkZXVDdIi0SpjTJGWSY0bPwd4fum5ofzEWRcj7wCq0WZJGVE4UVS0UBBQs6 Y/6Amh396Jjj4+8r3bAdqX5Ko+hfRyFmeXVc4skWHDfLE2/vYV5bIcPOQB9lM8uM Vy3+5mQzBYAlCDYLUEk2Aib2slV2X4RSMUWa/Cu1tG7EM3xX6dA= -----END CERTIFICATE-----Generated at Mon Oct 20 09:21:43 2025 by rpki-client