$ rpki-client -vvf repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft File: 754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft (raw, json) Hash identifier: TDbZJ9S8rvAXWN+2eaTdAbPpU4PSOyPlWx8bV9IDj2o= Subject key identifier: 4B:03:3D:DA:CE:5F:CF:0F:88:D4:EE:52:A3:08:E5:C1:5A:51:29:E9 Authority key identifier: 75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB Certificate issuer: /CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB Certificate serial: 58FC2BBD34A97EBE577D036148F37BCB96C9C5BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft Manifest number: 022F Signing time: Fri 22 Aug 2025 03:11:38 +0000 Manifest this update: Fri 22 Aug 2025 03:06:38 +0000 Manifest next update: Mon 25 Aug 2025 07:59:38 +0000 Files and hashes: 1: 3131302e39332e31322e302f32322d3234203d3e203435373037.roa (hash: 7iXx5jGESFjpBjO3AiKnrpyYnQjS82YYkQqBjeaeWk0=) 2: 3230322e34332e3131362e302f32332d3234203d3e203435373037.roa (hash: Sf9PeSZZ7a8NKRrtWUTmVWuqUtTX2GsdEZGDuX14gwU=) 3: 754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl (hash: GFh3fFnziCJMhml0XV7dIHGhHaU/HH91UlPcMKmG89A=) 4: 3130332e382e35362e302f32322d3234203d3e203435373037.roa (hash: e0FCZrIOKWaH0btSP4kAUqXaQNeE2QggQ8Gj6R8jPew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:fc:2b:bd:34:a9:7e:be:57:7d:03:61:48:f3:7b:cb:96:c9:c5:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB Validity Not Before: Aug 22 03:06:38 2025 GMT Not After : Aug 25 07:59:38 2025 GMT Subject: CN=4B033DDACE5FCF0F88D4EE52A308E5C15A5129E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:81:02:28:39:2b:b2:a8:8b:d7:68:51:c0:0f: 37:37:da:53:8f:a3:40:e8:c7:16:9e:4d:ca:1d:88: be:34:69:d1:95:b5:7f:07:ea:74:37:cf:07:84:12: c6:3a:1b:18:06:a4:39:e2:21:df:30:8c:f4:43:7a: 09:b8:22:0c:dc:05:8c:c7:32:8f:55:9a:4a:b1:3a: 48:07:bd:68:aa:a3:5c:0d:89:7b:71:08:7a:1a:ae: 81:f9:51:e6:0d:5e:42:f6:9c:b4:d3:ce:54:7e:19: b1:e1:ca:03:12:cd:a7:23:8c:a2:b0:67:75:88:a4: fc:bf:76:fa:06:89:83:63:c2:ef:e1:8a:53:05:76: 85:af:ca:c7:09:c8:d1:b4:08:2e:df:33:02:ec:2b: 08:c5:d7:d4:dc:54:db:ca:2d:3f:3a:8c:ef:69:b6: 7f:f3:a9:81:e4:7e:7e:0a:e0:17:d5:8b:b7:b7:8f: 6b:97:71:0e:2f:4e:00:7a:89:06:67:ec:9b:1b:9b: f8:dc:db:02:3f:d7:71:06:f5:77:4a:db:1e:63:31: 0f:fb:b2:b3:dd:b3:40:a1:ee:ac:b9:fc:76:e9:79: b9:7c:bc:c2:83:4d:e3:cb:1e:dd:ee:f9:74:34:a1: e3:29:8d:6a:6f:34:fd:4a:6f:58:d1:58:42:f0:ea: 79:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:03:3D:DA:CE:5F:CF:0F:88:D4:EE:52:A3:08:E5:C1:5A:51:29:E9 X509v3 Authority Key Identifier: keyid:75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:a3:62:88:74:40:c1:d6:9a:8b:36:b1:d0:de:9e:32:5d:c1: 30:f9:30:f8:cb:7e:3d:76:c7:a7:09:3b:77:3c:0f:d5:52:8e: d8:53:a5:ee:9e:79:ea:cb:52:71:37:da:75:2e:16:ed:9c:86: 28:87:fe:91:66:f7:e2:05:f9:3d:41:9a:f7:9f:29:82:c3:1f: b1:4e:38:70:f1:52:a2:7e:d9:6c:a5:da:86:b5:1d:6c:f6:d0: 79:7f:ae:fd:96:57:ca:54:b0:3c:fe:db:18:82:7d:81:2a:ae: 8a:c4:be:4e:0f:8e:3d:a9:a4:ca:89:8c:fa:59:34:ff:26:8b: ae:64:d6:94:d4:63:5c:80:b5:91:b2:8a:88:19:9e:22:5e:e4: f7:7e:04:73:d6:23:ac:4d:3a:08:80:59:c2:7f:5f:c5:bb:44: 31:65:96:12:7f:06:d6:0e:89:5b:75:6f:67:93:5f:24:a9:9b: 22:d8:f4:29:f6:2d:52:40:c9:0b:16:e9:26:03:80:30:db:92: 13:09:3d:10:8f:3d:ac:aa:2a:85:b5:c4:6d:34:79:08:45:02: 47:16:bd:36:67:be:2e:84:13:28:5b:85:5b:44:f0:da:2d:0a: 3a:4b:4d:e8:0c:16:ad:a9:38:75:95:13:d1:82:8a:df:eb:3e: b5:93:ec:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWPwrvTSpfr5XfQNhSPN7y5bJxbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1QjcxQzU5 QjJBM0NDQjAeFw0yNTA4MjIwMzA2MzhaFw0yNTA4MjUwNzU5MzhaMDMxMTAvBgNV BAMTKDRCMDMzRERBQ0U1RkNGMEY4OEQ0RUU1MkEzMDhFNUMxNUE1MTI5RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4gQIoOSuyqIvXaFHADzc32lOP o0DoxxaeTcodiL40adGVtX8H6nQ3zweEEsY6GxgGpDniId8wjPRDegm4IgzcBYzH Mo9VmkqxOkgHvWiqo1wNiXtxCHoaroH5UeYNXkL2nLTTzlR+GbHhygMSzacjjKKw Z3WIpPy/dvoGiYNjwu/hilMFdoWvyscJyNG0CC7fMwLsKwjF19TcVNvKLT86jO9p tn/zqYHkfn4K4BfVi7e3j2uXcQ4vTgB6iQZn7Jsbm/jc2wI/13EG9XdK2x5jMQ/7 srPds0Ch7qy5/Hbpebl8vMKDTePLHt3u+XQ0oeMpjWpvNP1Kb1jRWELw6nlpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSwM92s5fzw+I1O5SowjlwVpRKekwHwYDVR0j BBgwFoAUdUvASJJDBjKoyWWvTFtxxZsqPMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGQyYmRlNC0wNTZiLTQ1YzYtODBiZi1mNWQ0ZDI3NzMzNmIvMC83NTRCQzA0ODky NDMwNjMyQThDOTY1QUY0QzVCNzFDNTlCMkEzQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1QjcxQzU5QjJB M0NDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBkMmJkZTQtMDU2Yi00NWM2LTgw YmYtZjVkNGQyNzczMzZiLzAvNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1Qjcx QzU5QjJBM0NDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL+jYoh0QMHWmos2sdDenjJdwTD5MPjLfj12 x6cJO3c8D9VSjthTpe6eeerLUnE32nUuFu2chiiH/pFm9+IF+T1BmvefKYLDH7FO OHDxUqJ+2Wyl2oa1HWz20Hl/rv2WV8pUsDz+2xiCfYEqrorEvk4Pjj2ppMqJjPpZ NP8mi65k1pTUY1yAtZGyiogZniJe5Pd+BHPWI6xNOgiAWcJ/X8W7RDFllhJ/BtYO iVt1b2eTXySpmyLY9Cn2LVJAyQsW6SYDgDDbkhMJPRCPPayqKoW1xG00eQhFAkcW vTZnvi6EEyhbhVtE8NotCjpLTegMFq2pOHWVE9GCit/rPrWT7NU= -----END CERTIFICATE-----Generated at Sat Aug 23 17:34:26 2025 by rpki-client