$ rpki-client -vvf repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft File: 1154D920B6A4209131871530AEE1F8B8A3D303D6.mft (raw, json) Hash identifier: LBN2CwTczQYykjHZjnzIrFKnzty9+tFIlPTnNSC1tqY= Subject key identifier: 91:3D:86:79:8F:70:F8:F0:DD:BC:8A:DC:ED:EF:ED:3D:0D:B5:4C:58 Authority key identifier: 11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 Certificate issuer: /CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Certificate serial: 2F534A782AB0A2A588D9B896654FEC55FEF50F0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft Manifest number: 0216 Signing time: Sun 19 Oct 2025 10:41:07 +0000 Manifest this update: Sun 19 Oct 2025 10:36:07 +0000 Manifest next update: Wed 22 Oct 2025 13:56:07 +0000 Files and hashes: 1: 1154D920B6A4209131871530AEE1F8B8A3D303D6.crl (hash: BFDKMPboELTm2mkFco2gRbWlWuHeV49xfgp+yGKj5s0=) 2: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: Pil6JjAZAhk6oGR6yVNwjzUnJBqxVVzN/QVFAe7clnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:53:4a:78:2a:b0:a2:a5:88:d9:b8:96:65:4f:ec:55:fe:f5:0f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Validity Not Before: Oct 19 10:36:07 2025 GMT Not After : Oct 22 13:56:07 2025 GMT Subject: CN=913D86798F70F8F0DDBC8ADCEDEFED3D0DB54C58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:95:52:9f:ec:f4:34:16:91:59:44:21:03:ea: 90:d5:b3:2a:2e:9c:57:f3:23:a4:2c:74:a0:65:29: 0b:1a:92:c1:cb:06:3d:29:fa:9c:e0:d6:33:f1:33: 83:87:68:f0:39:8c:ea:e9:ab:8b:23:4e:aa:24:4f: eb:cf:a0:4a:8b:d5:37:51:aa:af:26:e5:ff:f0:ca: 5e:b0:92:28:43:00:2c:00:1a:d2:dd:84:d2:49:dd: c0:0d:64:ea:47:f5:ac:3a:f7:25:66:51:08:69:c7: 8e:ce:40:9f:64:6d:ff:c0:c3:af:f0:b2:f7:f9:ae: d8:d7:43:18:bf:2a:55:6e:e7:10:f8:01:87:4c:da: fe:a1:32:ef:ee:23:d1:75:e7:23:b0:a6:06:cc:e9: a2:fc:06:bc:54:43:13:f6:f7:b8:16:28:f5:4f:60: 1b:13:ca:15:22:a2:53:d7:20:1e:44:56:d7:26:e1: 12:cd:6e:8c:ee:46:32:8a:23:73:bb:81:45:da:d5: 7b:1b:2a:cf:5f:37:23:00:1f:92:1b:4f:3a:25:d9: a2:ee:67:94:4d:b0:92:40:e8:ec:c1:b0:b5:66:34: a4:73:88:23:24:82:74:21:49:e7:ec:f4:53:6e:6c: 48:63:45:d8:b4:86:c4:1c:00:a8:18:16:54:c5:44: 02:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3D:86:79:8F:70:F8:F0:DD:BC:8A:DC:ED:EF:ED:3D:0D:B5:4C:58 X509v3 Authority Key Identifier: keyid:11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:72:c8:ae:33:8b:2a:70:90:b2:29:77:5c:83:e5:4e:f0:a5: 05:0f:54:1a:a6:b6:87:df:3e:a4:aa:bc:20:47:d2:7c:e2:cd: be:f0:2b:42:6a:48:a2:f6:dc:1c:3c:a6:aa:f0:c8:cc:0c:ee: c7:ce:b2:af:30:b9:58:0f:1f:5a:16:e7:c2:e3:01:8c:cf:55: 64:9f:a6:c5:ee:a4:02:ac:2f:5b:be:a3:92:ef:59:9c:9b:f6: d3:71:56:5d:8e:10:ab:d6:f1:64:0a:2b:16:4a:3d:d3:a5:8f: d1:e1:ec:68:6e:51:33:00:3d:4e:ac:a0:e5:d5:aa:94:23:62: 31:78:ac:89:81:5e:df:20:58:4c:c6:b7:ec:53:2d:11:36:21: 78:82:11:fb:18:6e:43:e6:82:3b:fa:a8:f6:45:22:f5:3a:6c: 49:3c:d5:39:e6:b9:5e:27:82:08:e7:cb:fb:2f:c4:80:42:7a: 91:5c:6c:fc:cb:c1:f9:99:e2:40:31:9f:1c:db:77:17:3e:31: 3f:e7:c6:39:17:81:cf:75:6b:3d:1a:e1:cb:4c:6f:0f:f7:76: 0d:c6:e2:df:5f:52:07:a5:16:db:36:5d:99:57:68:ea:c9:fc: 65:ae:1a:02:4a:13:a6:68:64:29:95:d3:19:cb:7c:3c:af:0f: f8:68:6c:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL1NKeCqwoqWI2biWZU/sVf71DwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhB M0QzMDNENjAeFw0yNTEwMTkxMDM2MDdaFw0yNTEwMjIxMzU2MDdaMDMxMTAvBgNV BAMTKDkxM0Q4Njc5OEY3MEY4RjBEREJDOEFEQ0VERUZFRDNEMERCNTRDNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCllVKf7PQ0FpFZRCED6pDVsyou nFfzI6QsdKBlKQsaksHLBj0p+pzg1jPxM4OHaPA5jOrpq4sjTqokT+vPoEqL1TdR qq8m5f/wyl6wkihDACwAGtLdhNJJ3cANZOpH9aw69yVmUQhpx47OQJ9kbf/Aw6/w svf5rtjXQxi/KlVu5xD4AYdM2v6hMu/uI9F15yOwpgbM6aL8BrxUQxP297gWKPVP YBsTyhUiolPXIB5EVtcm4RLNbozuRjKKI3O7gUXa1XsbKs9fNyMAH5IbTzol2aLu Z5RNsJJA6OzBsLVmNKRziCMkgnQhSefs9FNubEhjRdi0hsQcAKgYFlTFRALbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkT2GeY9w+PDdvIrc7e/tPQ21TFgwHwYDVR0j BBgwFoAUEVTZILakIJExhxUwruH4uKPTA9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY3ZWMzMy01YTcyLTRjNjUtOWZkMy02NmVmODQ3OTM5NGQvMC8xMTU0RDkyMEI2 QTQyMDkxMzE4NzE1MzBBRUUxRjhCOEEzRDMwM0Q2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhBM0Qz MDNENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2N2VjMzMtNWE3Mi00YzY1LTlm ZDMtNjZlZjg0NzkzOTRkLzAvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4 QjhBM0QzMDNENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNyyK4ziypwkLIpd1yD5U7wpQUPVBqmtoff PqSqvCBH0nzizb7wK0JqSKL23Bw8pqrwyMwM7sfOsq8wuVgPH1oW58LjAYzPVWSf psXupAKsL1u+o5LvWZyb9tNxVl2OEKvW8WQKKxZKPdOlj9Hh7GhuUTMAPU6soOXV qpQjYjF4rImBXt8gWEzGt+xTLRE2IXiCEfsYbkPmgjv6qPZFIvU6bEk81TnmuV4n ggjny/svxIBCepFcbPzLwfmZ4kAxnxzbdxc+MT/nxjkXgc91az0a4ctMbw/3dg3G 4t9fUgelFts2XZlXaOrJ/GWuGgJKE6ZoZCmV0xnLfDyvD/hobH8= -----END CERTIFICATE-----Generated at Mon Oct 20 19:48:28 2025 by rpki-client