$ rpki-client -vvf repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft File: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft (raw, json) Hash identifier: pUkAZN+WipzvwclLGY5WFH6dV0v4Felrc661KxxuRUQ= Subject key identifier: 49:45:A2:3E:E2:A3:92:5D:47:53:91:D4:D9:CE:0A:F0:88:FF:AD:32 Authority key identifier: 19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E Certificate issuer: /CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Certificate serial: 2A4BC9FD55560A0955C6FE77CB57C6D57EBC594A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft Manifest number: 0212 Signing time: Mon 21 Jul 2025 09:51:26 +0000 Manifest this update: Mon 21 Jul 2025 09:46:26 +0000 Manifest next update: Thu 24 Jul 2025 18:54:26 +0000 Files and hashes: 1: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl (hash: 1uaAYbTaVzhY/G2lw1gIz9W48Zz950dFpgyNP6fn/w0=) 2: 3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa (hash: 1jAZDRG2bBRpFXXfdfwzy9SEYQeFjRv7T68Dlx8L+iE=) 3: 3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa (hash: dddpXAXd6NN4T55cPDxa5oEHzFYeojSlOpK24ou6O1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 18:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:4b:c9:fd:55:56:0a:09:55:c6:fe:77:cb:57:c6:d5:7e:bc:59:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Validity Not Before: Jul 21 09:46:26 2025 GMT Not After : Jul 24 18:54:26 2025 GMT Subject: CN=4945A23EE2A3925D475391D4D9CE0AF088FFAD32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:17:0d:74:9e:74:4c:59:62:11:eb:62:68:ab: 39:6d:c3:9a:b1:78:0e:a3:c5:6f:07:5b:8f:e2:79: a4:ae:d2:96:ae:85:ab:6d:8b:30:03:fc:fd:fa:19: da:b2:0e:3a:af:d2:5c:55:a5:05:ca:05:e1:c0:62: fd:d2:fc:ea:65:98:13:e5:bb:1e:1e:de:af:60:14: c6:19:00:ac:08:16:d6:91:59:a4:64:f0:ce:d6:06: 36:4e:5d:79:0f:fe:d8:12:71:6a:b7:30:f1:98:e2: 4d:1f:9c:7b:d9:8b:6e:9a:3c:0e:e8:20:8a:e5:f1: ba:fd:fe:84:57:a3:9e:0c:ce:15:ac:7a:30:5c:88: fc:9b:58:5a:39:c9:3a:be:5a:3d:99:f5:ba:59:ef: 20:0f:1d:c2:5d:0d:7c:f5:59:24:08:67:bb:b9:8c: ec:13:1b:89:19:e4:29:e8:de:85:7d:02:2a:6e:8b: a6:93:ac:28:32:33:66:63:40:7c:37:38:8a:96:8a: 07:e9:ee:51:96:72:90:fd:4a:b9:30:ab:30:41:04: 43:be:1e:c1:92:99:ea:be:e4:37:b4:ed:67:58:18: c1:2e:ad:80:32:eb:b7:c8:e1:31:f2:96:7e:00:a1: 08:39:0a:e9:84:81:29:34:d8:b4:8e:f5:bc:91:db: 93:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:45:A2:3E:E2:A3:92:5D:47:53:91:D4:D9:CE:0A:F0:88:FF:AD:32 X509v3 Authority Key Identifier: keyid:19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:bc:38:86:4f:bc:74:dc:ac:04:9a:98:97:5b:e0:ad:df:6d: ec:2a:86:65:85:a5:f2:82:e3:7b:6c:c6:4c:7e:51:0b:7c:de: dd:de:bb:51:60:4a:62:74:96:a6:1f:2b:87:59:d2:63:f7:db: 9e:57:d6:a6:b8:52:b0:09:d0:ff:6a:5a:dd:ff:1c:7b:b3:c6: be:78:12:ea:41:98:f8:03:c5:c0:62:b3:b7:46:22:f3:f5:78: 67:75:4e:30:62:d5:17:cd:f6:9d:6d:99:2c:29:61:e2:90:b3: 9e:76:57:ae:68:5f:27:bc:17:49:27:98:6f:ed:6d:3f:63:a7: 22:e9:35:d4:96:b3:c3:a6:64:b0:08:d3:ed:cb:97:c7:cb:42: 96:b1:79:9f:3f:04:9c:d6:b1:80:32:e7:20:63:50:bd:5d:7b: 88:94:8a:c9:d3:6f:74:dd:f7:e9:2a:f3:91:08:fb:2d:47:d3: 2d:d3:71:f2:1d:79:e1:62:32:ab:80:8f:5c:c1:55:28:ad:b8: 3f:37:f7:c2:f1:b2:27:c1:6c:ea:f3:4b:e3:f1:f6:4c:02:86: 4d:5c:21:c8:a1:37:5c:be:ee:e4:6c:99:e7:f4:14:da:f4:fd: cd:98:0f:d9:0b:1f:65:af:33:74:0b:e8:74:4f:e2:a1:7e:95: ea:a7:60:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKkvJ/VVWCglVxv53y1fG1X68WUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNE MTJCRkQyRTAeFw0yNTA3MjEwOTQ2MjZaFw0yNTA3MjQxODU0MjZaMDMxMTAvBgNV BAMTKDQ5NDVBMjNFRTJBMzkyNUQ0NzUzOTFENEQ5Q0UwQUYwODhGRkFEMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHFw10nnRMWWIR62Joqzltw5qx eA6jxW8HW4/ieaSu0pauhattizAD/P36GdqyDjqv0lxVpQXKBeHAYv3S/OplmBPl ux4e3q9gFMYZAKwIFtaRWaRk8M7WBjZOXXkP/tgScWq3MPGY4k0fnHvZi26aPA7o IIrl8br9/oRXo54MzhWsejBciPybWFo5yTq+Wj2Z9bpZ7yAPHcJdDXz1WSQIZ7u5 jOwTG4kZ5Cno3oV9Aipui6aTrCgyM2ZjQHw3OIqWigfp7lGWcpD9SrkwqzBBBEO+ HsGSmeq+5De07WdYGMEurYAy67fI4THyln4AoQg5CumEgSk02LSO9byR25MhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSUWiPuKjkl1HU5HU2c4K8Ij/rTIwHwYDVR0j BBgwFoAUGVTDPPuvigcro7kLPoONY9Er/S4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDE5NmQ2NS0yMWE4LTRiMDQtYTlkZS03MjgzZmJlM2MxY2IvMC8xOTU0QzMzQ0ZC QUY4QTA3MkJBM0I5MEIzRTgzOEQ2M0QxMkJGRDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNEMTJC RkQyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQxOTZkNjUtMjFhOC00YjA0LWE5 ZGUtNzI4M2ZiZTNjMWNiLzAvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhE NjNEMTJCRkQyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADC8OIZPvHTcrASamJdb4K3fbewqhmWFpfKC 43tsxkx+UQt83t3eu1FgSmJ0lqYfK4dZ0mP3255X1qa4UrAJ0P9qWt3/HHuzxr54 EupBmPgDxcBis7dGIvP1eGd1TjBi1RfN9p1tmSwpYeKQs552V65oXye8F0knmG/t bT9jpyLpNdSWs8OmZLAI0+3Ll8fLQpaxeZ8/BJzWsYAy5yBjUL1de4iUisnTb3Td 9+kq85EI+y1H0y3TcfIdeeFiMquAj1zBVSituD8398LxsifBbOrzS+Px9kwChk1c IcihN1y+7uRsmef0FNr0/c2YD9kLH2WvM3QL6HRP4qF+leqnYC0= -----END CERTIFICATE-----Generated at Mon Jul 21 10:32:36 2025 by rpki-client