$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft File: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft (raw, json) Hash identifier: dNkiJwQJroSXh+DcU6HILV9p6vePALInaxF2PD90/QU= Subject key identifier: 2F:91:03:CA:75:7F:6D:AA:F9:F8:7A:5A:CC:24:33:B9:AF:F4:6D:71 Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A Certificate issuer: /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Certificate serial: 3410D1A50C9DCA2651ED335283CE653D7BF944A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft Manifest number: 6D Signing time: Fri 27 Jun 2025 06:11:26 +0000 Manifest this update: Fri 27 Jun 2025 06:06:26 +0000 Manifest next update: Mon 30 Jun 2025 17:16:26 +0000 Files and hashes: 1: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (hash: eYux8MlazvFG7evneWwa6f79HrtIQhEs6bQRxE8BgeE=) 2: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (hash: YpIBjqK/gGPSCbvsDHOwTz44pQAN0MQfXErjudoCzGo=) 3: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (hash: 6WbVS+v7HN+Kets1foBaT2kDE0v8xmm7+65g6YMRGEk=) 4: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl (hash: vEmWhpkEUHHZmaUrY07ie/VN7P1k4QcqZ5fNl74AIbM=) 5: 3130332e37352e35322e302f32332d3234203d3e203436303233.roa (hash: LliQsaEGmOxiFYn7eU4CgTQQMhXBR9mQg+Ga47dX8vc=) 6: 3130332e37352e35342e302f32342d3234203d3e203436303233.roa (hash: BSqOBaWfJQqz33lACDAWl5BBUo8xhKyti0YdsIQS7aQ=) 7: 3130332e37352e35352e302f32342d3234203d3e203436303233.roa (hash: Wy3XFvvxWlmSMqptgoEgqs9HlG+jenjszHddJNByUP8=) 8: 3130332e37352e35322e302f32322d3234203d3e203436303233.roa (hash: reynj2rdnK/jisos3BLgNO3WmPAN7XuUU4JIx1owC9M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 17:16:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:10:d1:a5:0c:9d:ca:26:51:ed:33:52:83:ce:65:3d:7b:f9:44:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Validity Not Before: Jun 27 06:06:26 2025 GMT Not After : Jun 30 17:16:26 2025 GMT Subject: CN=2F9103CA757F6DAAF9F87A5ACC2433B9AFF46D71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:73:b7:7a:99:35:49:5c:f6:f2:45:93:b1:45: a4:d6:fc:be:e3:ce:59:95:59:2d:0c:f2:e6:4a:68: 6a:58:d8:0b:e8:3b:f2:4f:6c:60:9c:0d:66:c7:f5: 86:f8:a1:ed:bb:72:fe:12:25:62:d7:9c:19:31:4d: 69:49:8e:a3:af:35:d3:20:32:d3:64:79:4c:6e:8c: 4b:ac:51:68:f3:38:1d:af:97:93:ff:90:2b:cb:96: 49:a1:a9:fe:87:48:db:89:ef:46:8a:e8:6d:00:17: d0:c4:e6:30:30:f2:ea:4e:20:5d:95:99:16:ae:ad: 50:d4:8f:72:8b:ed:d1:73:8d:10:8c:6e:d0:4e:62: 2a:6b:42:7c:02:0b:df:32:ac:54:02:48:46:15:e0: ca:1a:76:ce:eb:c0:f8:e4:54:5f:43:e5:91:91:20: d8:7e:73:b1:d5:b6:a9:95:b0:cd:82:df:a0:44:d4: 7d:db:b8:ed:b9:c6:08:fc:ff:16:a6:37:4b:7e:ce: 61:91:79:40:f3:43:0a:56:00:0e:da:75:6f:6d:4b: 80:3f:de:63:cf:0c:d5:3b:f0:04:44:c9:46:3b:2b: 10:f3:f7:c5:9d:71:23:0b:4a:aa:57:6e:90:3e:86: 29:c2:8e:85:5b:5e:1f:d5:15:86:10:99:a1:90:13: 21:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:91:03:CA:75:7F:6D:AA:F9:F8:7A:5A:CC:24:33:B9:AF:F4:6D:71 X509v3 Authority Key Identifier: keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:80:dd:50:22:7b:bf:34:e8:d2:75:d9:73:be:f5:99:3c:f9: 42:07:b2:94:d1:e3:7c:1b:84:fd:61:0c:56:46:4b:73:ce:e1: cf:27:2e:46:5a:05:fc:42:b4:9d:89:bd:b7:71:b5:13:1f:e2: f9:8e:97:7a:9c:1f:2b:43:e0:6b:53:f1:85:17:dc:69:ee:93: da:65:74:a0:71:e1:b1:5d:2b:b9:22:22:98:94:74:42:46:a5: b4:e8:ae:71:d0:d4:5c:68:26:2d:b4:3c:3a:90:a3:70:e8:61: 8c:b4:f7:2f:3b:4e:1f:01:0b:d5:5f:0f:94:c4:55:af:90:f8: ee:21:03:8d:20:34:54:02:bc:55:07:ff:d7:fb:e8:ff:c6:ce: 3d:74:28:a9:74:39:46:18:8c:38:81:74:78:33:a9:d3:4e:57: 68:a5:20:fa:72:1e:02:6c:d8:61:be:af:39:d5:34:87:38:6f: 80:c7:c1:39:87:39:14:9b:31:19:e9:8d:25:f4:04:4d:7b:b8: e7:fc:11:96:ab:e5:d6:f5:ee:a6:6d:95:65:f0:6a:a7:e1:4c: dc:c5:45:e7:75:f0:92:64:1c:9c:78:86:2f:c8:77:8c:8c:cf: f2:1d:b1:e9:b8:b0:ba:e3:1a:7e:0a:c5:c4:05:1d:6e:dd:d1: d7:f1:7e:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNBDRpQydyiZR7TNSg85lPXv5RKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlD MDNCNEQyQTAeFw0yNTA2MjcwNjA2MjZaFw0yNTA2MzAxNzE2MjZaMDMxMTAvBgNV BAMTKDJGOTEwM0NBNzU3RjZEQUFGOUY4N0E1QUNDMjQzM0I5QUZGNDZENzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpc7d6mTVJXPbyRZOxRaTW/L7j zlmVWS0M8uZKaGpY2AvoO/JPbGCcDWbH9Yb4oe27cv4SJWLXnBkxTWlJjqOvNdMg MtNkeUxujEusUWjzOB2vl5P/kCvLlkmhqf6HSNuJ70aK6G0AF9DE5jAw8upOIF2V mRaurVDUj3KL7dFzjRCMbtBOYiprQnwCC98yrFQCSEYV4Moads7rwPjkVF9D5ZGR INh+c7HVtqmVsM2C36BE1H3buO25xgj8/xamN0t+zmGReUDzQwpWAA7adW9tS4A/ 3mPPDNU78AREyUY7KxDz98WdcSMLSqpXbpA+hinCjoVbXh/VFYYQmaGQEyFfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL5EDynV/bar5+HpazCQzua/0bXEwHwYDVR0j BBgwFoAUFUyvlGtP75wu4P+iRbukKcA7TSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmU1MDRjNS1kN2JhLTRmZTktOWU1Ni03OTJkYzAxYTk3Y2IvMC8xNTRDQUY5NDZC NEZFRjlDMkVFMEZGQTI0NUJCQTQyOUMwM0I0RDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlDMDNC NEQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlNTA0YzUtZDdiYS00ZmU5LTll NTYtNzkyZGMwMWE5N2NiLzAvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0 MjlDMDNCNEQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmA3VAie7806NJ12XO+9Zk8+UIHspTR43wb hP1hDFZGS3PO4c8nLkZaBfxCtJ2JvbdxtRMf4vmOl3qcHytD4GtT8YUX3Gnuk9pl dKBx4bFdK7kiIpiUdEJGpbTornHQ1FxoJi20PDqQo3DoYYy09y87Th8BC9VfD5TE Va+Q+O4hA40gNFQCvFUH/9f76P/Gzj10KKl0OUYYjDiBdHgzqdNOV2ilIPpyHgJs 2GG+rznVNIc4b4DHwTmHORSbMRnpjSX0BE17uOf8EZar5db17qZtlWXwaqfhTNzF Red18JJkHJx4hi/Id4yMz/Idsem4sLrjGn4KxcQFHW7d0dfxfsU= -----END CERTIFICATE-----Generated at Sun Jun 29 18:43:53 2025 by rpki-client