$ rpki-client -vvf repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft File: 754AE571E3432B20E78045BE7B2C99E39E0F1873.mft (raw, json) Hash identifier: Oriuha2VONjihVxiE/v0nw4WLp1YHKIQbmHRlUX7+eI= Subject key identifier: AB:BE:8F:12:77:FF:AA:51:A9:22:D6:E5:8B:0B:35:B5:D3:E7:FC:58 Authority key identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 Certificate issuer: /CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Certificate serial: 7FF1BB13C09721555F3B1C1C680456C061C2EF71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft Manifest number: 0211 Signing time: Fri 22 Aug 2025 18:12:06 +0000 Manifest this update: Fri 22 Aug 2025 18:07:06 +0000 Manifest next update: Mon 25 Aug 2025 23:27:06 +0000 Files and hashes: 1: 3130332e372e3232362e302f32342d3234203d3e203539313335.roa (hash: d1VqPlCHSAGRA/UEI5pUZ6WXcTK62ba2i6gugZCVB1Y=) 2: 3130332e372e3232372e302f32342d3234203d3e203539313335.roa (hash: Fle5qLzNk23ZNkYRzf8mlYQ/OLfLBGZjvUjXRT80jgM=) 3: 3130332e372e3232362e302f32332d3233203d3e203539313335.roa (hash: /qz+/FrTyvqN+lKfQMLM9vGRBCrWv6ZRIa9kSi7cy5M=) 4: 754AE571E3432B20E78045BE7B2C99E39E0F1873.crl (hash: moezPAGdmZ7Vybqav/sd95X7PwMASIgVgaAdXQa7s28=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 23:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f1:bb:13:c0:97:21:55:5f:3b:1c:1c:68:04:56:c0:61:c2:ef:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Validity Not Before: Aug 22 18:07:06 2025 GMT Not After : Aug 25 23:27:06 2025 GMT Subject: CN=ABBE8F1277FFAA51A922D6E58B0B35B5D3E7FC58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fa:8a:a0:c3:d2:e5:db:8c:c3:8b:db:bc:0d: 79:f9:0c:45:cc:1f:3a:82:21:1f:76:84:88:4c:10: 2f:a1:d8:dc:37:8a:1e:7e:92:9c:1c:f3:19:8c:2c: ed:79:cf:84:d9:ac:35:87:23:12:ca:32:73:92:ef: f5:b8:b7:94:0c:a1:87:6e:89:8e:8d:e2:6e:71:4d: c6:7c:05:79:c6:be:d8:75:bf:84:93:43:9a:2b:69: ee:52:ae:7d:b3:5d:a7:27:92:ba:01:ff:7a:cc:87: 97:9a:f7:10:50:ba:8e:39:40:92:66:c7:71:77:6a: e8:85:2f:60:6b:05:6f:1b:94:f3:a2:de:4a:1b:cb: 00:dd:cb:60:5c:e6:35:92:ac:c5:06:89:0a:d2:8d: 30:4d:49:2b:77:4e:29:9b:0e:ff:5f:d7:44:fb:85: f1:5b:ff:e1:aa:87:ec:9f:d1:d0:21:01:47:86:90: 97:43:ac:3b:2c:91:04:f9:87:9f:41:d0:f9:8a:6f: 4d:fd:6c:7c:32:c5:1a:87:00:59:c8:f3:b7:ec:3f: 5c:c6:ef:ab:80:dd:d1:42:64:c9:5e:02:37:ef:ab: fa:12:23:29:4c:38:64:43:c1:0d:b8:6c:a0:81:7e: 7a:c5:ad:bf:9f:ef:9c:d5:1c:9c:4a:4b:af:94:bc: 2c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BE:8F:12:77:FF:AA:51:A9:22:D6:E5:8B:0B:35:B5:D3:E7:FC:58 X509v3 Authority Key Identifier: keyid:75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:f6:aa:2d:c4:a5:19:5e:66:63:ad:11:ca:3e:b6:4b:aa:b0: 3b:37:57:91:25:24:ed:f7:25:af:c8:b8:2c:28:59:16:3f:1f: 9a:ac:75:85:d8:d7:81:52:85:03:95:a9:2a:b3:15:10:20:0b: 34:6a:29:02:9a:d3:95:d3:d1:90:26:0f:fc:bc:46:1a:1b:5d: ba:ac:00:0b:24:e6:b3:f3:79:18:a1:cf:8c:f7:8a:e3:3c:63: 80:78:88:73:7d:ee:33:fe:2a:40:7c:f1:6f:cc:bc:5f:4b:ba: a3:42:0b:79:3e:d4:8a:9c:34:3b:89:e2:c1:99:b6:95:af:0e: c4:c0:d4:b8:a5:67:6c:04:cb:8d:f3:a4:84:ec:e1:76:ea:cd: 09:d5:d9:d7:80:6a:f9:cb:cf:54:47:74:32:69:3b:e9:90:37: b5:60:66:91:8d:c8:0f:e1:88:89:b5:99:be:85:b4:ac:9e:c8: b7:26:cb:ef:ec:26:ba:40:f9:6a:d9:96:c1:1e:8c:bd:35:1d: e3:71:67:f6:20:5e:5d:9b:83:25:9d:80:0d:71:73:f1:9d:a6: 18:f5:bf:97:00:3d:eb:8a:0f:86:a5:6a:d8:24:37:3e:28:78: 01:c0:27:99:56:c9:d0:14:5d:db:e3:ca:0d:fc:76:86:f3:fb: 72:aa:d6:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf/G7E8CXIVVfOxwcaARWwGHC73EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5 RTBGMTg3MzAeFw0yNTA4MjIxODA3MDZaFw0yNTA4MjUyMzI3MDZaMDMxMTAvBgNV BAMTKEFCQkU4RjEyNzdGRkFBNTFBOTIyRDZFNThCMEIzNUI1RDNFN0ZDNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA+oqgw9Ll24zDi9u8DXn5DEXM HzqCIR92hIhMEC+h2Nw3ih5+kpwc8xmMLO15z4TZrDWHIxLKMnOS7/W4t5QMoYdu iY6N4m5xTcZ8BXnGvth1v4STQ5orae5Srn2zXacnkroB/3rMh5ea9xBQuo45QJJm x3F3auiFL2BrBW8blPOi3kobywDdy2Bc5jWSrMUGiQrSjTBNSSt3TimbDv9f10T7 hfFb/+Gqh+yf0dAhAUeGkJdDrDsskQT5h59B0PmKb039bHwyxRqHAFnI87fsP1zG 76uA3dFCZMleAjfvq/oSIylMOGRDwQ24bKCBfnrFrb+f75zVHJxKS6+UvCyhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq76PEnf/qlGpItbliws1tdPn/FgwHwYDVR0j BBgwFoAUdUrlceNDKyDngEW+eyyZ454PGHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM1OGRkYS0wZmYxLTRmNmEtYmI2Ni02MGY0Y2EwNGM0OTAvMC83NTRBRTU3MUUz NDMyQjIwRTc4MDQ1QkU3QjJDOTlFMzlFMEYxODczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5RTBG MTg3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNThkZGEtMGZmMS00ZjZhLWJi NjYtNjBmNGNhMDRjNDkwLzAvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5 RTM5RTBGMTg3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADT2qi3EpRleZmOtEco+tkuqsDs3V5ElJO33 Ja/IuCwoWRY/H5qsdYXY14FShQOVqSqzFRAgCzRqKQKa05XT0ZAmD/y8RhobXbqs AAsk5rPzeRihz4z3iuM8Y4B4iHN97jP+KkB88W/MvF9LuqNCC3k+1IqcNDuJ4sGZ tpWvDsTA1LilZ2wEy43zpITs4XbqzQnV2deAavnLz1RHdDJpO+mQN7VgZpGNyA/h iIm1mb6FtKyeyLcmy+/sJrpA+WrZlsEejL01HeNxZ/YgXl2bgyWdgA1xc/Gdphj1 v5cAPeuKD4alatgkNz4oeAHAJ5lWydAUXdvjyg38dobz+3Kq1jU= -----END CERTIFICATE-----Generated at Sat Aug 23 10:37:38 2025 by rpki-client