$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft File: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft (raw, json) Hash identifier: LIjYf5Ddd0q0eTYGBJn4moriGDUrLcPzCKTNFP1TZ6s= Subject key identifier: 54:C7:C6:91:77:42:C9:21:C7:E4:B3:51:0F:1A:66:AF:EF:C8:82:96 Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A Certificate issuer: /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Certificate serial: 162B25CF748B813D714630D54866F15B21E49CF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft Manifest number: 56 Signing time: Wed 07 May 2025 21:42:20 +0000 Manifest this update: Wed 07 May 2025 21:37:20 +0000 Manifest next update: Sun 11 May 2025 07:55:20 +0000 Files and hashes: 1: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (hash: YpIBjqK/gGPSCbvsDHOwTz44pQAN0MQfXErjudoCzGo=) 2: 3130332e37352e35342e302f32342d3234203d3e203436303233.roa (hash: BSqOBaWfJQqz33lACDAWl5BBUo8xhKyti0YdsIQS7aQ=) 3: 3130332e37352e35322e302f32322d3234203d3e203436303233.roa (hash: reynj2rdnK/jisos3BLgNO3WmPAN7XuUU4JIx1owC9M=) 4: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (hash: 6WbVS+v7HN+Kets1foBaT2kDE0v8xmm7+65g6YMRGEk=) 5: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl (hash: Ng0yUZ3m5zbUv4RlH/KA8dv2Gdatqnw5Nx33L1TyBKU=) 6: 3130332e37352e35322e302f32332d3234203d3e203436303233.roa (hash: LliQsaEGmOxiFYn7eU4CgTQQMhXBR9mQg+Ga47dX8vc=) 7: 3130332e37352e35352e302f32342d3234203d3e203436303233.roa (hash: Wy3XFvvxWlmSMqptgoEgqs9HlG+jenjszHddJNByUP8=) 8: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (hash: eYux8MlazvFG7evneWwa6f79HrtIQhEs6bQRxE8BgeE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 07:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:2b:25:cf:74:8b:81:3d:71:46:30:d5:48:66:f1:5b:21:e4:9c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Validity Not Before: May 7 21:37:20 2025 GMT Not After : May 11 07:55:20 2025 GMT Subject: CN=54C7C6917742C921C7E4B3510F1A66AFEFC88296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6b:86:4b:63:c0:25:48:eb:45:da:43:9d:f8: 98:63:d7:05:35:18:11:0b:55:4e:c7:bf:57:a5:ec: 04:dd:54:96:81:af:7b:5c:36:cb:9b:de:8f:9e:83: a6:49:0e:7f:e6:d9:2a:9c:57:70:6b:ab:1b:de:25: ec:19:fa:18:3c:45:01:fa:67:d0:3e:33:cf:d6:88: 51:8c:d1:54:36:f4:12:ad:63:c6:9f:cb:13:a9:21: dd:32:71:b4:ec:b7:a6:a1:27:a4:4d:84:ce:ce:9e: bc:de:e6:3c:93:d9:c8:e8:44:3a:61:7c:f2:a1:e6: 01:e3:2e:d4:e2:d4:5c:7f:22:d7:6e:d6:62:69:88: 9f:ff:22:02:45:e9:aa:a4:70:8a:e4:f3:b0:a0:66: 91:e4:11:c5:dd:57:2e:01:13:0e:83:c5:26:56:03: c6:9d:a0:71:9f:de:6d:41:7f:f7:dd:ef:85:80:7d: 7b:66:4d:4a:a8:09:fe:81:ff:34:b0:c3:c3:8e:95: fc:6f:02:12:74:e3:7f:0b:82:08:78:5a:c9:1e:24: 8a:de:8a:67:8b:fb:70:db:1a:47:af:bc:2d:66:fa: 8b:52:48:82:7c:40:75:91:51:63:ca:37:e9:f6:f3: 48:f4:1f:b6:ca:3e:b3:a9:da:19:17:03:ea:36:58: 13:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C7:C6:91:77:42:C9:21:C7:E4:B3:51:0F:1A:66:AF:EF:C8:82:96 X509v3 Authority Key Identifier: keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:f3:1b:b0:0b:ea:20:b6:b2:17:78:47:65:4b:0c:79:96:1e: 08:e0:79:8a:b5:73:2c:dd:b9:88:3f:59:81:5e:6f:3c:59:ff: 43:c5:98:24:f5:45:37:c9:93:35:96:69:e6:33:d8:c9:b2:37: 37:5f:a5:4a:44:39:62:59:f6:84:b5:66:67:ad:6c:f4:23:25: cc:a3:28:c9:a4:9e:69:fe:50:7a:3a:be:0d:cb:0a:1c:d6:91: fa:ab:1a:8c:5b:c9:24:33:01:8a:62:10:29:6c:bb:e8:9f:c1: cc:a6:59:7e:b4:09:fb:2b:20:9d:af:5a:5c:cf:62:39:b7:52: d5:56:91:95:11:96:49:6d:60:50:02:d2:ef:27:9e:58:ce:d5: 05:d5:c1:b9:da:1b:36:2f:51:d2:79:6e:93:e1:d8:dd:20:0d: 4d:0f:2c:75:a1:69:9f:52:2c:68:fd:f8:16:e9:58:db:ed:07: 1a:45:3e:69:5a:77:37:12:9e:c9:c4:2b:25:be:23:f7:91:09: 55:a6:a7:22:71:26:2c:4e:74:d9:88:36:9e:2c:93:bb:31:c8: 90:91:50:da:a6:7d:3e:28:e6:a5:49:7e:f9:70:53:36:0d:a8: d1:01:17:77:dd:f5:d1:b5:5e:ca:49:ed:89:cc:7e:c7:ef:71: 71:db:40:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFislz3SLgT1xRjDVSGbxWyHknPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlD MDNCNEQyQTAeFw0yNTA1MDcyMTM3MjBaFw0yNTA1MTEwNzU1MjBaMDMxMTAvBgNV BAMTKDU0QzdDNjkxNzc0MkM5MjFDN0U0QjM1MTBGMUE2NkFGRUZDODgyOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCca4ZLY8AlSOtF2kOd+Jhj1wU1 GBELVU7Hv1el7ATdVJaBr3tcNsub3o+eg6ZJDn/m2SqcV3BrqxveJewZ+hg8RQH6 Z9A+M8/WiFGM0VQ29BKtY8afyxOpId0ycbTst6ahJ6RNhM7Onrze5jyT2cjoRDph fPKh5gHjLtTi1Fx/Itdu1mJpiJ//IgJF6aqkcIrk87CgZpHkEcXdVy4BEw6DxSZW A8adoHGf3m1Bf/fd74WAfXtmTUqoCf6B/zSww8OOlfxvAhJ0438Lggh4WskeJIre imeL+3DbGkevvC1m+otSSIJ8QHWRUWPKN+n280j0H7bKPrOp2hkXA+o2WBNTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVMfGkXdCySHH5LNRDxpmr+/IgpYwHwYDVR0j BBgwFoAUFUyvlGtP75wu4P+iRbukKcA7TSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmU1MDRjNS1kN2JhLTRmZTktOWU1Ni03OTJkYzAxYTk3Y2IvMC8xNTRDQUY5NDZC NEZFRjlDMkVFMEZGQTI0NUJCQTQyOUMwM0I0RDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlDMDNC NEQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlNTA0YzUtZDdiYS00ZmU5LTll NTYtNzkyZGMwMWE5N2NiLzAvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0 MjlDMDNCNEQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjzG7AL6iC2shd4R2VLDHmWHgjgeYq1cyzd uYg/WYFebzxZ/0PFmCT1RTfJkzWWaeYz2MmyNzdfpUpEOWJZ9oS1ZmetbPQjJcyj KMmknmn+UHo6vg3LChzWkfqrGoxbySQzAYpiEClsu+ifwcymWX60CfsrIJ2vWlzP Yjm3UtVWkZURlkltYFAC0u8nnljO1QXVwbnaGzYvUdJ5bpPh2N0gDU0PLHWhaZ9S LGj9+BbpWNvtBxpFPmladzcSnsnEKyW+I/eRCVWmpyJxJixOdNmINp4sk7sxyJCR UNqmfT4o5qVJfvlwUzYNqNEBF3fd9dG1XspJ7YnMfsfvcXHbQPk= -----END CERTIFICATE-----Generated at Sat May 10 03:04:06 2025 by rpki-client