$ rpki-client -vvf repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft File: 1154D920B6A4209131871530AEE1F8B8A3D303D6.mft (raw, json) Hash identifier: junXblxdbSNipODTfDhYJwgnOiih4PJgP8A+nRPPYpU= Subject key identifier: A4:7A:3E:B9:8C:CE:CC:9C:AA:B8:7C:35:C0:B4:A2:A6:3E:D7:16:25 Authority key identifier: 11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 Certificate issuer: /CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Certificate serial: 10DA57AFCAB867EAEA5DD4C391D1F6C74D7882E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft Manifest number: 01FC Signing time: Thu 21 Aug 2025 14:41:08 +0000 Manifest this update: Thu 21 Aug 2025 14:36:08 +0000 Manifest next update: Sun 24 Aug 2025 20:26:08 +0000 Files and hashes: 1: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: Pil6JjAZAhk6oGR6yVNwjzUnJBqxVVzN/QVFAe7clnM=) 2: 1154D920B6A4209131871530AEE1F8B8A3D303D6.crl (hash: 5SuY02/NXyIGNZ3/EvD//nzo3qk787GPiCwvaALHS8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:da:57:af:ca:b8:67:ea:ea:5d:d4:c3:91:d1:f6:c7:4d:78:82:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Validity Not Before: Aug 21 14:36:08 2025 GMT Not After : Aug 24 20:26:08 2025 GMT Subject: CN=A47A3EB98CCECC9CAAB87C35C0B4A2A63ED71625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a7:18:25:ca:e2:c9:41:70:3f:d7:09:6a:d0: bf:90:d7:84:71:6a:38:5d:76:82:7e:6e:78:be:0c: ee:ac:89:a6:39:a4:07:12:12:d9:a4:4c:4e:52:fe: 3a:3f:b6:74:f9:84:db:de:4f:db:87:00:2c:40:05: ef:99:2b:1e:68:ce:11:25:1d:ad:e0:53:fa:f8:90: 4f:8b:75:b6:31:0b:7c:6f:41:98:21:c4:61:3a:df: 00:db:96:ab:6a:12:e8:9a:81:0e:cf:b7:53:51:31: 48:13:3e:d8:fa:96:63:b3:ee:68:40:87:4d:75:59: 6e:90:7e:c2:93:0a:81:a8:b9:6e:3c:d9:2a:05:64: 99:7c:27:d7:df:86:64:c6:d7:83:a1:40:05:ed:e6: d4:56:35:68:11:56:8c:0c:01:b0:92:82:53:9d:16: 20:31:e2:78:d2:e3:80:35:52:42:e5:e9:e8:61:23: 52:36:31:17:4a:eb:1c:70:2c:6d:23:cb:40:3c:d5: 7a:82:44:8c:65:c7:b8:18:31:3c:26:c8:ba:02:24: 24:8c:ef:bb:e0:20:e4:44:00:5b:9f:d1:7e:fb:b8: b1:d1:ef:7b:82:31:c5:44:8f:fa:74:cc:06:47:2a: 12:a9:13:30:80:00:16:a1:ad:2c:7e:3a:a5:c1:d1: c0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7A:3E:B9:8C:CE:CC:9C:AA:B8:7C:35:C0:B4:A2:A6:3E:D7:16:25 X509v3 Authority Key Identifier: keyid:11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:5a:c8:00:d0:4b:3a:d2:11:ff:12:9f:42:91:47:d6:66:ab: d1:fe:15:11:59:b1:ee:8f:42:b0:6c:40:c6:a1:3a:39:20:ce: 6a:e0:b2:ab:be:71:98:a6:03:66:9c:87:78:9a:af:6b:c1:4c: 38:f5:97:9a:9e:0b:df:db:0f:62:ba:b2:ad:fc:56:4e:fb:f7: a5:9f:ce:66:9d:c5:65:9a:fd:d0:f2:76:ed:9d:34:83:e3:df: 1b:df:48:49:36:64:ff:22:04:08:87:06:32:d9:db:96:df:fd: fa:02:d1:f4:02:91:eb:66:fa:ad:87:b6:d5:06:3f:fb:b1:aa: 58:0e:74:0a:93:8e:68:d6:ee:e9:b4:b1:ac:0c:e0:1c:71:28: 5e:fb:96:9e:28:bb:40:f5:a7:f1:b0:c7:c0:b2:6d:00:5e:0c: 0f:fd:2f:ca:b5:50:69:99:64:85:d8:18:88:61:ea:0b:55:8a: b6:7f:a2:5a:62:35:43:ab:5c:26:80:4d:d6:ff:24:89:f6:66: 08:f1:2a:73:4a:23:67:67:23:1c:19:b7:70:df:26:c8:aa:6c: 9e:32:a2:b6:7c:65:8b:02:80:93:f1:96:50:df:f3:3f:17:e1: 86:4c:a9:a7:7a:a6:8d:c0:8d:a1:8a:bc:61:b4:17:03:fa:db: 96:51:9d:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUENpXr8q4Z+rqXdTDkdH2x014gukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhB M0QzMDNENjAeFw0yNTA4MjExNDM2MDhaFw0yNTA4MjQyMDI2MDhaMDMxMTAvBgNV BAMTKEE0N0EzRUI5OENDRUNDOUNBQUI4N0MzNUMwQjRBMkE2M0VENzE2MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcpxglyuLJQXA/1wlq0L+Q14Rx ajhddoJ+bni+DO6siaY5pAcSEtmkTE5S/jo/tnT5hNveT9uHACxABe+ZKx5ozhEl Ha3gU/r4kE+LdbYxC3xvQZghxGE63wDblqtqEuiagQ7Pt1NRMUgTPtj6lmOz7mhA h011WW6QfsKTCoGouW482SoFZJl8J9ffhmTG14OhQAXt5tRWNWgRVowMAbCSglOd FiAx4njS44A1UkLl6ehhI1I2MRdK6xxwLG0jy0A81XqCRIxlx7gYMTwmyLoCJCSM 77vgIOREAFuf0X77uLHR73uCMcVEj/p0zAZHKhKpEzCAABahrSx+OqXB0cBlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpHo+uYzOzJyquHw1wLSipj7XFiUwHwYDVR0j BBgwFoAUEVTZILakIJExhxUwruH4uKPTA9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY3ZWMzMy01YTcyLTRjNjUtOWZkMy02NmVmODQ3OTM5NGQvMC8xMTU0RDkyMEI2 QTQyMDkxMzE4NzE1MzBBRUUxRjhCOEEzRDMwM0Q2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhBM0Qz MDNENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2N2VjMzMtNWE3Mi00YzY1LTlm ZDMtNjZlZjg0NzkzOTRkLzAvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4 QjhBM0QzMDNENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChayADQSzrSEf8Sn0KRR9Zmq9H+FRFZse6P QrBsQMahOjkgzmrgsqu+cZimA2ach3iar2vBTDj1l5qeC9/bD2K6sq38Vk7796Wf zmadxWWa/dDydu2dNIPj3xvfSEk2ZP8iBAiHBjLZ25bf/foC0fQCketm+q2HttUG P/uxqlgOdAqTjmjW7um0sawM4BxxKF77lp4ou0D1p/Gwx8CybQBeDA/9L8q1UGmZ ZIXYGIhh6gtVirZ/olpiNUOrXCaATdb/JIn2ZgjxKnNKI2dnIxwZt3DfJsiqbJ4y orZ8ZYsCgJPxllDf8z8X4YZMqad6po3AjaGKvGG0FwP625ZRnaA= -----END CERTIFICATE-----Generated at Sat Aug 23 20:25:01 2025 by rpki-client