$ rpki-client -vvf repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft File: 1154D920B6A4209131871530AEE1F8B8A3D303D6.mft (raw, json) Hash identifier: k2sgnZQDIcXEv2ZePTUzUMAw7A3YNukuXI6W1AfXpFA= Subject key identifier: F0:1B:CE:11:0D:24:2F:41:EB:93:6C:BE:97:98:3A:E1:97:BE:BB:CB Authority key identifier: 11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 Certificate issuer: /CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Certificate serial: 0B6105F9E0FB7E9C2AEC3182F1DC8F51647F8B3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft Manifest number: 01ED Signing time: Sat 19 Jul 2025 16:41:08 +0000 Manifest this update: Sat 19 Jul 2025 16:36:08 +0000 Manifest next update: Tue 22 Jul 2025 19:45:08 +0000 Files and hashes: 1: 1154D920B6A4209131871530AEE1F8B8A3D303D6.crl (hash: HrMXn5gzl1NyNWL7ZHsaQBFK2RkP5Qy7GugPkoW5vQo=) 2: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: Pil6JjAZAhk6oGR6yVNwjzUnJBqxVVzN/QVFAe7clnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 19:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:61:05:f9:e0:fb:7e:9c:2a:ec:31:82:f1:dc:8f:51:64:7f:8b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Validity Not Before: Jul 19 16:36:08 2025 GMT Not After : Jul 22 19:45:08 2025 GMT Subject: CN=F01BCE110D242F41EB936CBE97983AE197BEBBCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5e:ff:a5:50:01:08:74:4a:6a:72:cf:cc:f4: 3e:31:ff:02:0f:33:6b:44:25:16:fc:f6:99:6b:25: e5:dd:62:7b:90:66:c1:45:89:01:70:26:2c:6e:75: 1b:f0:12:d2:55:95:56:fc:e1:3f:4f:8f:05:1b:f9: 29:5a:4a:ae:47:aa:7f:2f:c0:a6:6b:4c:f2:82:9a: 68:ae:10:33:67:9c:88:58:9d:99:38:36:4d:d7:a2: 91:b5:a0:2a:15:6f:25:d9:80:28:07:e3:1a:00:d6: 56:42:21:39:db:ff:d9:a4:d6:18:77:41:c7:fa:7d: ff:10:e1:3a:87:7f:bf:54:6d:5a:12:e0:79:79:b7: 24:b4:e6:be:5b:39:87:a4:26:30:f5:3c:91:7c:70: 34:39:18:62:60:fa:25:4b:a4:a1:f8:b7:28:be:2d: f4:fc:0c:84:71:26:8e:d8:dc:7e:8f:c2:99:5c:6f: fa:bc:e8:ea:1f:bb:6c:a6:a0:af:26:4d:f6:6f:a7: 3c:63:9a:ba:e2:f3:eb:50:23:6d:37:b0:44:d8:2b: 62:04:41:b2:d4:dd:63:ba:af:68:8e:c4:97:e1:8f: 5a:a4:ec:38:40:28:60:43:e8:a1:a8:61:9e:06:c1: 84:25:57:e1:f1:3f:9d:de:e6:bd:21:d9:af:7c:42: 2c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1B:CE:11:0D:24:2F:41:EB:93:6C:BE:97:98:3A:E1:97:BE:BB:CB X509v3 Authority Key Identifier: keyid:11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:2c:c2:19:e8:90:8e:cc:22:2c:71:b2:5b:c0:db:de:7b:86: b7:65:cc:14:b5:d3:da:c1:b8:69:b1:44:81:05:ad:19:bc:9f: f8:b1:60:ba:c6:86:6b:6d:d8:ba:ee:8d:25:1c:47:28:5d:0f: 8d:6c:1f:8f:89:00:e4:4a:4d:cb:30:aa:fd:2b:57:98:84:d0: c9:4a:25:a1:63:4e:b5:56:d7:9e:9a:56:d9:8e:86:b3:46:44: f5:6d:46:f3:dd:ea:ce:76:b1:87:71:7b:4c:c7:14:cf:2a:0d: f1:12:e9:43:51:9b:ae:bb:5f:15:6f:cb:76:61:9f:69:25:8d: c6:ae:72:d0:e9:c5:ec:fd:f7:42:01:1e:0b:45:50:af:d3:25: 2d:f3:b8:ad:c8:c4:84:73:8e:3a:0c:41:a9:4c:a9:a6:1b:ea: da:bf:97:cd:95:a8:9a:ba:74:6b:85:96:ca:e7:9c:03:9c:de: e1:5c:60:b0:52:0c:06:80:04:9c:1b:b1:a6:56:bc:e7:9a:a6: 78:93:ae:8a:79:b6:cc:f4:b2:90:5b:3f:4e:d8:a4:cd:d4:c0: 2c:3b:ea:31:74:24:91:a0:3e:75:b0:ba:61:6c:99:6b:00:c6: c5:24:f9:f9:e2:be:dd:c0:2b:69:59:f7:7f:7f:d2:a2:a4:42: ca:16:d4:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC2EF+eD7fpwq7DGC8dyPUWR/iz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhB M0QzMDNENjAeFw0yNTA3MTkxNjM2MDhaFw0yNTA3MjIxOTQ1MDhaMDMxMTAvBgNV BAMTKEYwMUJDRTExMEQyNDJGNDFFQjkzNkNCRTk3OTgzQUUxOTdCRUJCQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Xv+lUAEIdEpqcs/M9D4x/wIP M2tEJRb89plrJeXdYnuQZsFFiQFwJixudRvwEtJVlVb84T9PjwUb+SlaSq5Hqn8v wKZrTPKCmmiuEDNnnIhYnZk4Nk3XopG1oCoVbyXZgCgH4xoA1lZCITnb/9mk1hh3 Qcf6ff8Q4TqHf79UbVoS4Hl5tyS05r5bOYekJjD1PJF8cDQ5GGJg+iVLpKH4tyi+ LfT8DIRxJo7Y3H6Pwplcb/q86Oofu2ymoK8mTfZvpzxjmrri8+tQI203sETYK2IE QbLU3WO6r2iOxJfhj1qk7DhAKGBD6KGoYZ4GwYQlV+HxP53e5r0h2a98QiyLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8BvOEQ0kL0Hrk2y+l5g64Ze+u8swHwYDVR0j BBgwFoAUEVTZILakIJExhxUwruH4uKPTA9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY3ZWMzMy01YTcyLTRjNjUtOWZkMy02NmVmODQ3OTM5NGQvMC8xMTU0RDkyMEI2 QTQyMDkxMzE4NzE1MzBBRUUxRjhCOEEzRDMwM0Q2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhBM0Qz MDNENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2N2VjMzMtNWE3Mi00YzY1LTlm ZDMtNjZlZjg0NzkzOTRkLzAvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4 QjhBM0QzMDNENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIswhnokI7MIixxslvA2957hrdlzBS109rB uGmxRIEFrRm8n/ixYLrGhmtt2LrujSUcRyhdD41sH4+JAORKTcswqv0rV5iE0MlK JaFjTrVW156aVtmOhrNGRPVtRvPd6s52sYdxe0zHFM8qDfES6UNRm667XxVvy3Zh n2kljcauctDpxez990IBHgtFUK/TJS3zuK3IxIRzjjoMQalMqaYb6tq/l82VqJq6 dGuFlsrnnAOc3uFcYLBSDAaABJwbsaZWvOeapniTrop5tsz0spBbP07YpM3UwCw7 6jF0JJGgPnWwumFsmWsAxsUk+fnivt3AK2lZ939/0qKkQsoW1AA= -----END CERTIFICATE-----Generated at Mon Jul 21 03:07:50 2025 by rpki-client