$ rpki-client -vvf repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft File: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft (raw, json) Hash identifier: W+4/XaxhDf1KGwyvd6YNlVOjrY4q7zt/qjLKGqY++9s= Subject key identifier: 2B:9C:10:0E:2A:71:1F:BF:55:0E:F5:3E:0F:DD:81:C9:C0:C3:16:97 Authority key identifier: 19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E Certificate issuer: /CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Certificate serial: 6853D879195460748B29470D6B0E183C75DC5628 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft Manifest number: 0207 Signing time: Fri 27 Jun 2025 13:01:25 +0000 Manifest this update: Fri 27 Jun 2025 12:56:25 +0000 Manifest next update: Mon 30 Jun 2025 23:10:25 +0000 Files and hashes: 1: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl (hash: PZNMzwUZGnKafEoF1kYz/glDPdhVrldJayffbbAg5fo=) 2: 3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa (hash: 1jAZDRG2bBRpFXXfdfwzy9SEYQeFjRv7T68Dlx8L+iE=) 3: 3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa (hash: dddpXAXd6NN4T55cPDxa5oEHzFYeojSlOpK24ou6O1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 23:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:53:d8:79:19:54:60:74:8b:29:47:0d:6b:0e:18:3c:75:dc:56:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Validity Not Before: Jun 27 12:56:25 2025 GMT Not After : Jun 30 23:10:25 2025 GMT Subject: CN=2B9C100E2A711FBF550EF53E0FDD81C9C0C31697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9c:32:a2:69:de:9b:87:fe:94:bc:8a:90:57: 49:cd:8c:d2:f9:62:6a:60:8c:1a:06:03:9d:e8:17: 9a:2c:af:4e:11:d5:2c:b2:1b:4a:1e:4f:16:fc:75: 3a:21:49:ef:59:b8:4c:cc:91:41:47:b6:b1:05:d0: 72:fb:c2:2c:c0:a0:6a:84:88:a7:d0:71:b8:38:d0: 3c:76:1b:41:69:35:32:dd:62:a7:24:3a:a3:42:dc: d9:c0:3e:6c:13:0d:a6:fa:0a:32:26:21:fb:23:38: e9:7b:5a:90:96:a8:48:8f:2e:54:2f:c0:13:f2:af: 30:ae:f7:f3:e2:48:51:e4:76:08:54:05:73:df:74: 28:58:8f:70:eb:5d:be:ae:10:e0:a4:8e:45:bf:90: 1a:ff:6c:a4:43:ae:a7:54:8a:2b:e6:2c:2d:fb:0c: 9d:e8:bc:b7:1c:62:69:eb:cd:15:79:54:37:f5:89: 31:a5:25:de:55:aa:41:02:5a:03:7b:83:68:4b:f1: a4:20:4a:9a:b6:16:54:d7:6e:84:61:47:31:71:e4: 0a:ca:0f:ad:57:1a:10:a5:51:63:cb:cb:ee:5e:3c: 5d:40:ad:56:8e:c2:9a:27:b4:89:31:b5:7e:cc:c0: 0f:17:05:e3:8e:5a:fb:36:49:ae:40:c4:9d:04:84: 55:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9C:10:0E:2A:71:1F:BF:55:0E:F5:3E:0F:DD:81:C9:C0:C3:16:97 X509v3 Authority Key Identifier: keyid:19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:7b:57:4f:57:58:76:83:39:85:77:46:21:df:c3:cb:e8:39: d9:08:ec:51:e3:5c:31:d4:2e:df:6b:ad:b2:74:c1:ac:b4:fa: 3b:60:1d:2e:1a:eb:42:35:e9:e3:d7:ad:a2:a6:4a:b6:1b:94: 2a:64:61:b4:e7:86:49:d1:67:e1:6d:63:4f:15:e1:6d:91:55: e8:d8:67:e5:32:94:72:20:b7:5d:cd:c9:12:a2:75:7d:71:5a: 76:d3:62:a0:e5:3c:4a:fc:b5:0d:91:3d:50:c3:69:36:8e:53: b5:16:36:c5:d9:7a:eb:0a:50:47:89:c3:3a:ff:62:e9:9c:79: 13:2a:09:1f:9c:19:d7:90:22:0a:d7:11:b5:ae:38:ee:1b:cc: 9e:8a:6e:d0:79:58:0a:72:6c:46:dc:e1:3b:9a:99:68:7d:df: bb:85:5e:c5:9a:32:1e:b2:05:43:88:87:ae:8f:5a:b5:16:f6: 1e:37:16:3f:e7:39:56:91:4b:57:9e:51:42:23:7b:88:68:de: d8:f9:c8:c7:6c:b8:de:99:91:84:69:b3:fb:46:10:98:7b:fc: 06:c2:0b:a2:e4:49:d1:b6:65:9c:30:1b:b0:ca:4f:b2:8c:89: be:02:4a:5e:ba:2d:46:d6:6e:55:46:1e:9e:a6:f7:48:e9:3e: 2a:13:f8:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaFPYeRlUYHSLKUcNaw4YPHXcVigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNE MTJCRkQyRTAeFw0yNTA2MjcxMjU2MjVaFw0yNTA2MzAyMzEwMjVaMDMxMTAvBgNV BAMTKDJCOUMxMDBFMkE3MTFGQkY1NTBFRjUzRTBGREQ4MUM5QzBDMzE2OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/nDKiad6bh/6UvIqQV0nNjNL5 YmpgjBoGA53oF5osr04R1SyyG0oeTxb8dTohSe9ZuEzMkUFHtrEF0HL7wizAoGqE iKfQcbg40Dx2G0FpNTLdYqckOqNC3NnAPmwTDab6CjImIfsjOOl7WpCWqEiPLlQv wBPyrzCu9/PiSFHkdghUBXPfdChYj3DrXb6uEOCkjkW/kBr/bKRDrqdUiivmLC37 DJ3ovLccYmnrzRV5VDf1iTGlJd5VqkECWgN7g2hL8aQgSpq2FlTXboRhRzFx5ArK D61XGhClUWPLy+5ePF1ArVaOwpontIkxtX7MwA8XBeOOWvs2Sa5AxJ0EhFUJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK5wQDipxH79VDvU+D92BycDDFpcwHwYDVR0j BBgwFoAUGVTDPPuvigcro7kLPoONY9Er/S4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDE5NmQ2NS0yMWE4LTRiMDQtYTlkZS03MjgzZmJlM2MxY2IvMC8xOTU0QzMzQ0ZC QUY4QTA3MkJBM0I5MEIzRTgzOEQ2M0QxMkJGRDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNEMTJC RkQyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQxOTZkNjUtMjFhOC00YjA0LWE5 ZGUtNzI4M2ZiZTNjMWNiLzAvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhE NjNEMTJCRkQyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI17V09XWHaDOYV3RiHfw8voOdkI7FHjXDHU Lt9rrbJ0way0+jtgHS4a60I16ePXraKmSrYblCpkYbTnhknRZ+FtY08V4W2RVejY Z+UylHIgt13NyRKidX1xWnbTYqDlPEr8tQ2RPVDDaTaOU7UWNsXZeusKUEeJwzr/ YumceRMqCR+cGdeQIgrXEbWuOO4bzJ6KbtB5WApybEbc4TuamWh937uFXsWaMh6y BUOIh66PWrUW9h43Fj/nOVaRS1eeUUIje4ho3tj5yMdsuN6ZkYRps/tGEJh7/AbC C6LkSdG2ZZwwG7DKT7KMib4CSl66LUbWblVGHp6m90jpPioT+Gg= -----END CERTIFICATE-----Generated at Sun Jun 29 18:17:45 2025 by rpki-client