$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft File: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft (raw, json) Hash identifier: dMXjz9zh54B3PCxg5BygNKKJq2WCUpXuWltgHvlkRcA= Subject key identifier: 08:84:AA:A1:EE:A8:05:E7:D7:D7:FF:5B:6D:A9:A4:D4:0B:33:FF:A5 Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A Certificate issuer: /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Certificate serial: 09C9F56C45BA50C3D7D3DAC4A2EC55DAFEDE6B17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft Manifest number: 86 Signing time: Fri 22 Aug 2025 04:21:26 +0000 Manifest this update: Fri 22 Aug 2025 04:16:26 +0000 Manifest next update: Mon 25 Aug 2025 09:34:26 +0000 Files and hashes: 1: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (hash: YpIBjqK/gGPSCbvsDHOwTz44pQAN0MQfXErjudoCzGo=) 2: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl (hash: u3WFgrXDcwof9fH6u4VDaBYqxB2WuxCY2cATgG6inCc=) 3: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (hash: 6WbVS+v7HN+Kets1foBaT2kDE0v8xmm7+65g6YMRGEk=) 4: 3130332e37352e35352e302f32342d3234203d3e203436303233.roa (hash: Wy3XFvvxWlmSMqptgoEgqs9HlG+jenjszHddJNByUP8=) 5: 3130332e37352e35322e302f32332d3234203d3e203436303233.roa (hash: LliQsaEGmOxiFYn7eU4CgTQQMhXBR9mQg+Ga47dX8vc=) 6: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (hash: eYux8MlazvFG7evneWwa6f79HrtIQhEs6bQRxE8BgeE=) 7: 3130332e37352e35342e302f32342d3234203d3e203436303233.roa (hash: BSqOBaWfJQqz33lACDAWl5BBUo8xhKyti0YdsIQS7aQ=) 8: 3130332e37352e35322e302f32322d3234203d3e203436303233.roa (hash: reynj2rdnK/jisos3BLgNO3WmPAN7XuUU4JIx1owC9M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 09:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c9:f5:6c:45:ba:50:c3:d7:d3:da:c4:a2:ec:55:da:fe:de:6b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Validity Not Before: Aug 22 04:16:26 2025 GMT Not After : Aug 25 09:34:26 2025 GMT Subject: CN=0884AAA1EEA805E7D7D7FF5B6DA9A4D40B33FFA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fc:0c:ea:01:35:89:92:34:d1:ab:05:0c:4b: ca:14:c2:40:79:c6:9b:b3:4e:be:16:cd:bc:ba:07: a4:c4:18:07:f9:64:77:4b:48:39:06:0c:ef:a5:3a: 4f:1f:04:30:16:59:9e:fc:e0:e0:a8:75:75:72:32: c0:82:03:1a:0a:86:34:37:5e:12:cd:e8:8e:d8:5d: 70:3e:9c:1e:47:cb:a7:c4:34:6b:3f:53:1a:f6:53: 89:8e:4a:8a:27:f0:1a:ad:f8:5f:25:b3:0c:d7:0c: 7e:39:ca:80:4c:01:c9:b9:3f:0c:6d:f0:e5:bd:b6: 0f:ec:17:85:0e:3b:be:42:f7:bd:b2:a3:94:b1:ac: 06:98:14:68:55:16:3a:c8:92:ce:e4:e4:cf:26:70: 62:03:ed:d6:3b:b9:6f:00:ea:80:fc:bd:51:54:21: b8:a4:cb:61:eb:a6:c6:c8:98:ab:70:b2:56:46:91: ef:20:3e:10:c1:0d:ee:a9:42:7b:0f:d7:04:58:c6: 9b:fd:e2:dd:11:65:88:83:f1:45:d3:9f:9f:48:70: 06:d3:4f:01:50:8b:dd:67:ef:a7:45:01:ec:eb:25: 36:13:af:7f:70:d6:f6:ff:3e:54:f4:b7:90:66:0d: 54:02:1a:ff:2f:87:6a:d2:0b:29:c3:44:03:9b:57: 79:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:84:AA:A1:EE:A8:05:E7:D7:D7:FF:5B:6D:A9:A4:D4:0B:33:FF:A5 X509v3 Authority Key Identifier: keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:44:1e:d1:79:20:67:a6:c1:8d:66:80:db:1e:8c:63:07:26: 74:93:85:42:11:4c:95:52:09:38:20:a5:79:18:ed:26:9e:0e: a9:b6:73:38:60:42:a8:32:4a:49:a2:fc:eb:bc:45:0c:90:d4: 8b:6f:8e:f5:6e:c4:3b:0f:21:e5:a1:d0:ac:a4:a2:1d:41:e9: 29:38:b1:d0:f6:03:c9:5e:ce:d6:65:79:3b:ba:a6:ba:d8:80: 7f:28:fa:a2:6c:fc:af:b4:4b:d8:69:fc:e9:4e:5c:51:bc:b2: 62:ac:cc:05:5a:e5:c6:a7:bc:c4:87:fc:df:d2:78:70:59:9e: f4:46:8c:1f:ad:04:d1:64:35:ab:fe:7c:84:47:7f:43:46:d2: 37:f8:bc:c3:64:f7:a7:3c:c5:2e:64:a0:92:cf:8a:63:7b:d8: f4:01:9f:99:d5:e8:1d:a9:d4:56:3a:6e:ba:85:6a:05:24:80: b0:d1:ed:55:ae:2d:d1:03:c9:49:0d:be:6f:1a:4e:b0:78:7b: 85:a6:77:78:ee:42:17:c6:10:fe:d9:db:ce:b8:1e:d1:1d:94: e1:5a:7a:b2:b8:ad:68:42:5c:53:75:ef:79:ff:ca:44:9c:27: ff:76:37:ca:01:5d:c4:31:a8:af:53:c4:d4:43:23:65:ab:3d: e3:91:34:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCcn1bEW6UMPX09rEouxV2v7eaxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlD MDNCNEQyQTAeFw0yNTA4MjIwNDE2MjZaFw0yNTA4MjUwOTM0MjZaMDMxMTAvBgNV BAMTKDA4ODRBQUExRUVBODA1RTdEN0Q3RkY1QjZEQTlBNEQ0MEIzM0ZGQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0/AzqATWJkjTRqwUMS8oUwkB5 xpuzTr4Wzby6B6TEGAf5ZHdLSDkGDO+lOk8fBDAWWZ784OCodXVyMsCCAxoKhjQ3 XhLN6I7YXXA+nB5Hy6fENGs/Uxr2U4mOSoon8Bqt+F8lswzXDH45yoBMAcm5Pwxt 8OW9tg/sF4UOO75C972yo5SxrAaYFGhVFjrIks7k5M8mcGID7dY7uW8A6oD8vVFU Ibiky2HrpsbImKtwslZGke8gPhDBDe6pQnsP1wRYxpv94t0RZYiD8UXTn59IcAbT TwFQi91n76dFAezrJTYTr39w1vb/PlT0t5BmDVQCGv8vh2rSCynDRAObV3kzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCISqoe6oBefX1/9bbamk1Asz/6UwHwYDVR0j BBgwFoAUFUyvlGtP75wu4P+iRbukKcA7TSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmU1MDRjNS1kN2JhLTRmZTktOWU1Ni03OTJkYzAxYTk3Y2IvMC8xNTRDQUY5NDZC NEZFRjlDMkVFMEZGQTI0NUJCQTQyOUMwM0I0RDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlDMDNC NEQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlNTA0YzUtZDdiYS00ZmU5LTll NTYtNzkyZGMwMWE5N2NiLzAvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0 MjlDMDNCNEQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZEHtF5IGemwY1mgNsejGMHJnSThUIRTJVS CTggpXkY7SaeDqm2czhgQqgySkmi/Ou8RQyQ1ItvjvVuxDsPIeWh0Kykoh1B6Sk4 sdD2A8leztZleTu6prrYgH8o+qJs/K+0S9hp/OlOXFG8smKszAVa5canvMSH/N/S eHBZnvRGjB+tBNFkNav+fIRHf0NG0jf4vMNk96c8xS5koJLPimN72PQBn5nV6B2p 1FY6brqFagUkgLDR7VWuLdEDyUkNvm8aTrB4e4Wmd3juQhfGEP7Z2864HtEdlOFa erK4rWhCXFN173n/ykScJ/92N8oBXcQxqK9TxNRDI2WrPeORNNc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:05:20 2025 by rpki-client