$ rpki-client -vvf repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft File: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft (raw, json) Hash identifier: 7fo0IRGC7JoT6GmiCke4gKEc5mZAdhfq5nDEOIy2gy4= Subject key identifier: 43:F0:D4:64:E7:55:15:EB:AE:47:8B:15:40:7E:50:38:75:50:40:62 Authority key identifier: 19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E Certificate issuer: /CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Certificate serial: 60B9AAF79DBA5F938F3CD0D7EC3FB0BAF31754B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft Manifest number: 023A Signing time: Sun 19 Oct 2025 16:01:28 +0000 Manifest this update: Sun 19 Oct 2025 15:56:28 +0000 Manifest next update: Thu 23 Oct 2025 03:06:28 +0000 Files and hashes: 1: 3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa (hash: 1jAZDRG2bBRpFXXfdfwzy9SEYQeFjRv7T68Dlx8L+iE=) 2: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl (hash: vmTnEH+vzAHEGGMtZi82LBkxVneu56s4Db+pqu7znYg=) 3: 3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa (hash: dddpXAXd6NN4T55cPDxa5oEHzFYeojSlOpK24ou6O1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b9:aa:f7:9d:ba:5f:93:8f:3c:d0:d7:ec:3f:b0:ba:f3:17:54:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Validity Not Before: Oct 19 15:56:28 2025 GMT Not After : Oct 23 03:06:28 2025 GMT Subject: CN=43F0D464E75515EBAE478B15407E503875504062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:54:40:0c:fd:8d:a9:24:96:f2:d1:ec:66:56: 10:5c:c6:bb:9f:0e:bb:9c:42:31:cb:f9:73:53:e3: 49:7e:9f:4a:ab:f9:36:10:6f:4c:b0:4d:e5:42:1e: b5:e4:79:61:74:48:a9:5b:42:e0:83:af:89:36:76: 38:1b:c4:e7:4a:55:e7:e4:96:87:a7:db:eb:21:89: ca:d1:02:c4:2d:01:66:fd:aa:16:f7:59:24:5d:07: b3:bf:45:4a:a5:df:95:55:b4:44:53:dc:07:43:fa: 52:90:ca:1f:92:9d:a3:7d:55:35:ae:e1:6c:f0:57: 70:1e:22:2c:26:71:9c:65:f0:19:98:ad:53:3f:18: 36:5a:e1:0e:51:d5:bc:3f:0d:8d:a4:2d:c9:30:9c: 6f:5b:a7:b0:bc:f7:ab:91:a4:67:e4:ec:0b:da:b3: 74:7c:11:ad:42:84:72:9f:55:15:7c:0f:c2:19:4e: 72:12:b5:54:c5:97:94:2b:2b:0e:43:94:b1:8f:ad: 2e:6a:1c:07:50:1a:42:4c:b2:92:2e:19:3f:34:5c: 2e:26:99:69:27:20:d8:18:13:ab:37:8c:35:f1:59: 96:bc:b4:ad:c5:b8:e1:8a:46:05:cd:b4:bd:81:59: 33:91:a6:62:2c:66:27:4f:66:be:d9:0b:8e:87:02: 3a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F0:D4:64:E7:55:15:EB:AE:47:8B:15:40:7E:50:38:75:50:40:62 X509v3 Authority Key Identifier: keyid:19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:16:7f:f8:b5:16:64:bb:10:69:64:f0:28:58:45:9a:30:4d: 51:cb:d6:9e:16:48:d4:e6:4e:37:af:11:d9:95:84:fd:cb:95: 91:94:be:2e:34:1f:7e:23:69:6d:a7:22:f3:3f:bf:2c:84:88: f2:a3:e3:c2:35:ec:32:84:33:cb:24:9c:29:df:b8:bd:5c:e7: 83:e9:f1:82:69:3b:b5:cd:09:d0:35:92:68:c3:63:95:fb:f2: 9e:18:69:3e:8d:f3:a1:64:42:4f:d1:ad:0c:b9:3a:cf:69:6a: 47:00:b0:42:12:ca:e5:86:27:f0:6d:9d:7c:de:35:62:16:fa: da:c4:dd:63:20:3e:f7:11:9e:50:81:14:89:4f:c8:d5:46:8f: ea:9d:ff:d1:1e:e1:81:95:13:8e:93:69:13:7d:5d:bb:38:3f: 50:48:a4:1f:9b:d2:4e:98:44:13:46:72:82:5b:c5:84:3c:76: 15:63:c5:00:86:8a:3c:24:74:5b:6b:7a:cd:40:92:3d:e7:64: eb:e3:84:35:19:7c:90:5b:ea:20:27:f0:03:c0:6e:a3:d9:a9: 0d:eb:00:0c:3d:0d:39:24:82:2f:23:ee:2c:54:b7:56:04:b6: 57:5f:9e:1f:ee:08:2e:58:b9:e2:66:eb:b2:3b:3d:01:c6:1a: f9:20:48:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYLmq9526X5OPPNDX7D+wuvMXVLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNE MTJCRkQyRTAeFw0yNTEwMTkxNTU2MjhaFw0yNTEwMjMwMzA2MjhaMDMxMTAvBgNV BAMTKDQzRjBENDY0RTc1NTE1RUJBRTQ3OEIxNTQwN0U1MDM4NzU1MDQwNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrVEAM/Y2pJJby0exmVhBcxruf DrucQjHL+XNT40l+n0qr+TYQb0ywTeVCHrXkeWF0SKlbQuCDr4k2djgbxOdKVefk loen2+shicrRAsQtAWb9qhb3WSRdB7O/RUql35VVtERT3AdD+lKQyh+SnaN9VTWu 4WzwV3AeIiwmcZxl8BmYrVM/GDZa4Q5R1bw/DY2kLckwnG9bp7C896uRpGfk7Ava s3R8Ea1ChHKfVRV8D8IZTnIStVTFl5QrKw5DlLGPrS5qHAdQGkJMspIuGT80XC4m mWknINgYE6s3jDXxWZa8tK3FuOGKRgXNtL2BWTORpmIsZidPZr7ZC46HAjptAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ/DUZOdVFeuuR4sVQH5QOHVQQGIwHwYDVR0j BBgwFoAUGVTDPPuvigcro7kLPoONY9Er/S4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDE5NmQ2NS0yMWE4LTRiMDQtYTlkZS03MjgzZmJlM2MxY2IvMC8xOTU0QzMzQ0ZC QUY4QTA3MkJBM0I5MEIzRTgzOEQ2M0QxMkJGRDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNEMTJC RkQyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQxOTZkNjUtMjFhOC00YjA0LWE5 ZGUtNzI4M2ZiZTNjMWNiLzAvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhE NjNEMTJCRkQyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgWf/i1FmS7EGlk8ChYRZowTVHL1p4WSNTm TjevEdmVhP3LlZGUvi40H34jaW2nIvM/vyyEiPKj48I17DKEM8sknCnfuL1c54Pp 8YJpO7XNCdA1kmjDY5X78p4YaT6N86FkQk/RrQy5Os9pakcAsEISyuWGJ/BtnXze NWIW+trE3WMgPvcRnlCBFIlPyNVGj+qd/9Ee4YGVE46TaRN9Xbs4P1BIpB+b0k6Y RBNGcoJbxYQ8dhVjxQCGijwkdFtres1Akj3nZOvjhDUZfJBb6iAn8APAbqPZqQ3r AAw9DTkkgi8j7ixUt1YEtldfnh/uCC5YueJm67I7PQHGGvkgSCg= -----END CERTIFICATE-----Generated at Mon Oct 20 20:27:38 2025 by rpki-client