$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft File: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft (raw, json) Hash identifier: PJ/AC2Jui0aDB1Uibg3aOWe2cNxp+Cjxjoj2UHeQk9U= Subject key identifier: 4B:EF:D6:21:03:12:E4:95:D0:BA:62:EE:37:51:D2:67:D7:9A:84:CF Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A Certificate issuer: /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Certificate serial: 70F9ABC31F25694C767B010DEA08D01BD6E9E651 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft Manifest number: A1 Signing time: Sun 19 Oct 2025 23:21:27 +0000 Manifest this update: Sun 19 Oct 2025 23:16:27 +0000 Manifest next update: Thu 23 Oct 2025 04:18:27 +0000 Files and hashes: 1: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (hash: u/Rqg/DBL28ST9LkFtb756oaQy6poB4UdD9nfAM75kQ=) 2: 3130332e37352e35342e302f32342d3234203d3e203436303233.roa (hash: itzoTElJfDBgRSPccVv4bZDERMP8o0I1zPcdqucno78=) 3: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl (hash: ifokv9psfRRY1+2zAHEw9kDk+sm4M5G3rCwltDUZoUM=) 4: 3130332e37352e35352e302f32342d3234203d3e203436303233.roa (hash: BOb9anLJdpDwlKD+KK0kxGNWqYzi/fXunRvflhVgFzc=) 5: 3130332e37352e35322e302f32332d3234203d3e203436303233.roa (hash: T0MXrhbK6xjnBNdXhOMqxz1Yf/0TdUbbbVSQf9Bnwwk=) 6: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (hash: W72scnHA7zHvPLJz5BxsoijLHmQFgwe9kKm/vIV1T+I=) 7: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (hash: jrvWdDxnPwyaZeoT4XE3YhrJWOxok241/P+m4LKDews=) 8: 3130332e37352e35322e302f32322d3234203d3e203436303233.roa (hash: qyDdwv5epobK+GRznDOnZgdcRlyuSTrE0I2ZxAmsKz4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 04:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f9:ab:c3:1f:25:69:4c:76:7b:01:0d:ea:08:d0:1b:d6:e9:e6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Validity Not Before: Oct 19 23:16:27 2025 GMT Not After : Oct 23 04:18:27 2025 GMT Subject: CN=4BEFD6210312E495D0BA62EE3751D267D79A84CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f2:b3:d1:6a:0e:e5:8f:67:44:d9:6c:4a:9c: ac:66:2c:94:9c:fe:21:78:60:24:36:68:10:b0:2b: 18:4e:37:b1:42:5b:58:5d:56:7a:fd:5e:5e:32:f1: a0:f8:9d:3d:04:2f:06:2b:fd:3d:48:a2:c3:cf:52: b1:ba:a2:00:57:49:fe:d8:97:6f:b3:52:0d:47:b4: ad:e3:18:f9:06:2a:4c:de:4c:3f:6e:b4:d1:c6:a8: 60:6a:68:49:bd:f8:94:bb:94:a8:ba:4b:63:0e:36: 70:26:79:e8:2a:04:65:38:11:0d:9d:8c:f5:34:16: c5:29:2b:61:ba:d2:56:30:00:d5:f4:ac:39:46:44: 02:62:94:46:60:71:7e:ca:e7:c6:5e:11:d2:53:11: 60:f3:d4:3c:0d:94:be:22:b7:a2:dd:98:fc:dd:53: 0e:c4:dd:1a:bf:45:d2:e5:27:9a:3e:9e:92:f6:0c: 78:aa:8d:b7:0b:30:a0:f8:ce:fe:05:c8:47:81:3f: eb:ee:44:b6:9e:1d:c7:81:f2:b5:d1:1f:e2:1a:7f: 27:55:12:c4:a4:c0:50:22:1d:85:f3:47:da:4e:57: 8f:8a:2c:9f:19:94:a6:ac:9e:cd:51:67:b8:97:13: 74:04:fd:63:bc:a6:8b:07:3f:67:cc:55:f9:6f:a6: f9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EF:D6:21:03:12:E4:95:D0:BA:62:EE:37:51:D2:67:D7:9A:84:CF X509v3 Authority Key Identifier: keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:da:da:3a:5f:d5:4c:9d:30:a5:b6:90:75:c0:0d:13:f9:27: c8:d8:1d:98:2f:3e:37:d4:81:0c:08:51:35:49:df:1f:ba:9e: 3a:e8:9d:67:3b:da:17:10:6b:95:fa:80:5f:fc:d1:f6:6d:35: 19:51:3b:37:49:25:b8:06:24:b5:e0:04:b4:89:b1:79:b3:b0: fe:d1:5a:1f:06:a0:4b:3c:9c:b0:23:a9:56:ef:af:8d:aa:42: c3:41:75:dc:5d:fa:a6:f9:0c:68:fd:67:a6:27:b5:28:62:a7: 30:a6:c9:f1:b0:84:f5:23:25:d1:14:f0:14:0c:8a:b1:30:2e: ba:41:87:60:08:f1:99:b2:fc:17:3e:9d:b2:05:21:68:de:c8: 5f:ea:49:94:92:b4:4d:93:51:1b:32:a2:9e:39:4d:13:4f:4d: 09:fa:ea:22:04:0a:2b:d5:08:57:83:62:f8:cb:77:29:36:75: 89:ef:1a:68:63:0a:a6:ed:a1:e9:a0:92:e9:51:57:ff:b4:88: 1c:a2:6f:49:52:ab:43:87:39:ee:9a:c3:2c:3f:6a:19:61:6d: 6d:73:55:61:de:11:b8:da:a4:54:84:a6:b1:2a:cf:d1:9f:fc: ee:21:74:b7:6e:5d:a3:00:77:05:12:6a:c3:d3:9c:c9:30:b0: e5:d7:4b:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcPmrwx8laUx2ewEN6gjQG9bp5lEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlD MDNCNEQyQTAeFw0yNTEwMTkyMzE2MjdaFw0yNTEwMjMwNDE4MjdaMDMxMTAvBgNV BAMTKDRCRUZENjIxMDMxMkU0OTVEMEJBNjJFRTM3NTFEMjY3RDc5QTg0Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF8rPRag7lj2dE2WxKnKxmLJSc /iF4YCQ2aBCwKxhON7FCW1hdVnr9Xl4y8aD4nT0ELwYr/T1IosPPUrG6ogBXSf7Y l2+zUg1HtK3jGPkGKkzeTD9utNHGqGBqaEm9+JS7lKi6S2MONnAmeegqBGU4EQ2d jPU0FsUpK2G60lYwANX0rDlGRAJilEZgcX7K58ZeEdJTEWDz1DwNlL4it6LdmPzd Uw7E3Rq/RdLlJ5o+npL2DHiqjbcLMKD4zv4FyEeBP+vuRLaeHceB8rXRH+IafydV EsSkwFAiHYXzR9pOV4+KLJ8ZlKasns1RZ7iXE3QE/WO8posHP2fMVflvpvnVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS+/WIQMS5JXQumLuN1HSZ9eahM8wHwYDVR0j BBgwFoAUFUyvlGtP75wu4P+iRbukKcA7TSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmU1MDRjNS1kN2JhLTRmZTktOWU1Ni03OTJkYzAxYTk3Y2IvMC8xNTRDQUY5NDZC NEZFRjlDMkVFMEZGQTI0NUJCQTQyOUMwM0I0RDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlDMDNC NEQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlNTA0YzUtZDdiYS00ZmU5LTll NTYtNzkyZGMwMWE5N2NiLzAvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0 MjlDMDNCNEQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIva2jpf1UydMKW2kHXADRP5J8jYHZgvPjfU gQwIUTVJ3x+6njronWc72hcQa5X6gF/80fZtNRlROzdJJbgGJLXgBLSJsXmzsP7R Wh8GoEs8nLAjqVbvr42qQsNBddxd+qb5DGj9Z6YntShipzCmyfGwhPUjJdEU8BQM irEwLrpBh2AI8Zmy/Bc+nbIFIWjeyF/qSZSStE2TURsyop45TRNPTQn66iIECivV CFeDYvjLdyk2dYnvGmhjCqbtoemgkulRV/+0iByib0lSq0OHOe6awyw/ahlhbW1z VWHeEbjapFSEprEqz9Gf/O4hdLduXaMAdwUSasPTnMkwsOXXS6Q= -----END CERTIFICATE-----Generated at Mon Oct 20 18:08:33 2025 by rpki-client