$ rpki-client -vvf repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft File: 754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft (raw, json) Hash identifier: cw7tDQ1a/fIBi63pZ+gH3DSYfcLscKaLIN+CKbl1IUE= Subject key identifier: 6A:DA:F4:C8:2C:2C:FF:35:27:84:5B:6D:B0:DD:84:36:DD:02:1B:AB Authority key identifier: 75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB Certificate issuer: /CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB Certificate serial: 643209D58F49F1A4B242877444E13F5A92233431 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft Manifest number: 0235 Signing time: Thu 04 Sep 2025 05:02:35 +0000 Manifest this update: Thu 04 Sep 2025 04:57:35 +0000 Manifest next update: Sun 07 Sep 2025 16:16:35 +0000 Files and hashes: 1: 754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl (hash: U26PNtWvx+ziWnNdg5IBUfvWX/o+91cbE4kN6M83XiE=) 2: 3131302e39332e31322e302f32322d3234203d3e203435373037.roa (hash: 7iXx5jGESFjpBjO3AiKnrpyYnQjS82YYkQqBjeaeWk0=) 3: 3230322e34332e3131362e302f32332d3234203d3e203435373037.roa (hash: Sf9PeSZZ7a8NKRrtWUTmVWuqUtTX2GsdEZGDuX14gwU=) 4: 3130332e382e35362e302f32322d3234203d3e203435373037.roa (hash: e0FCZrIOKWaH0btSP4kAUqXaQNeE2QggQ8Gj6R8jPew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 16:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:32:09:d5:8f:49:f1:a4:b2:42:87:74:44:e1:3f:5a:92:23:34:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB Validity Not Before: Sep 4 04:57:35 2025 GMT Not After : Sep 7 16:16:35 2025 GMT Subject: CN=6ADAF4C82C2CFF3527845B6DB0DD8436DD021BAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:17:77:59:f5:9e:99:63:dd:db:40:96:67:8c: e7:d5:66:9f:ee:90:b0:18:f3:44:6c:78:47:05:f0: 58:34:4e:1c:d3:37:e4:86:93:ef:93:ae:89:5d:99: ed:a7:94:a0:86:a9:96:b7:f1:c6:fd:a3:19:06:c1: db:8f:4b:d2:b6:a1:f8:13:5a:7c:d4:85:68:f7:0c: 4d:e2:e2:f6:c8:43:68:4e:e8:82:e7:6e:cd:dd:ac: 3d:91:e3:91:7b:f3:b4:e6:14:4a:d0:ff:b0:8a:a1: 20:04:f2:bd:b9:2b:38:1f:50:69:b9:34:3b:8f:3d: 78:3a:08:71:42:64:fe:c1:80:e9:22:94:35:b7:0b: 24:27:cc:b5:b5:a3:e9:66:9e:30:2a:4d:ea:e5:18: de:af:c5:82:b5:09:c9:69:81:34:a6:d4:65:67:31: e0:29:d1:4c:b3:f7:e4:98:3b:f9:8d:24:a6:21:8b: 08:e1:d4:65:64:7e:24:f0:1a:e3:bb:e8:cd:e6:5b: 50:fe:e6:f9:b3:c7:a4:47:d4:37:87:ff:fa:62:2f: e9:c3:b1:2a:d1:1c:a1:25:e2:26:d5:10:bb:0d:85: b2:1d:cf:a8:a6:88:41:75:6d:f1:d1:2a:3d:ed:46: 95:a3:77:d9:1c:b7:16:03:9e:23:8f:01:43:16:89: f3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DA:F4:C8:2C:2C:FF:35:27:84:5B:6D:B0:DD:84:36:DD:02:1B:AB X509v3 Authority Key Identifier: keyid:75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:e7:1b:bb:46:52:c5:b5:1f:f1:04:dd:e2:78:7f:a2:ad:13: 50:cc:e7:cb:0b:94:ef:7f:3a:8f:6f:0a:62:37:dc:a5:7e:f7: f4:7e:6a:5e:0e:5f:f5:8b:07:b3:a7:5c:e4:1a:31:07:00:13: ea:4a:fe:1b:d0:ae:09:3b:8d:40:73:ad:ab:f6:12:f5:3a:1e: 32:d3:7a:9d:a7:52:c6:0d:8c:74:1b:25:1c:d9:70:18:32:a5: 9c:39:16:93:36:d7:83:d3:05:fa:1a:0e:50:05:10:91:60:a5: 50:92:d1:70:f6:51:ab:b1:01:0b:aa:f9:7b:2f:a1:74:83:28: db:78:e6:7b:e5:9a:50:0c:07:aa:fb:82:2a:d0:3b:1e:91:4f: 43:d6:f2:cf:b5:cc:1a:e4:1f:5b:14:e1:b3:c2:1d:d7:ad:11: 69:4d:7d:86:d7:6c:62:c9:ed:4e:54:51:13:b3:f6:24:84:66: b5:c5:ab:ba:f0:19:11:05:6e:fe:ea:2f:71:9f:6c:4d:9e:d0: e0:ef:55:ec:d8:89:b8:80:77:24:b9:f7:a6:25:14:62:af:d4: 66:b3:8c:df:bc:bd:f7:cf:23:7c:5d:5e:a4:fb:aa:f6:15:f5: d2:9b:79:32:41:e3:19:bd:ae:f4:f4:6b:dc:0e:aa:e2:97:4c: 80:1a:43:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZDIJ1Y9J8aSyQod0ROE/WpIjNDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1QjcxQzU5 QjJBM0NDQjAeFw0yNTA5MDQwNDU3MzVaFw0yNTA5MDcxNjE2MzVaMDMxMTAvBgNV BAMTKDZBREFGNEM4MkMyQ0ZGMzUyNzg0NUI2REIwREQ4NDM2REQwMjFCQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnF3dZ9Z6ZY93bQJZnjOfVZp/u kLAY80RseEcF8Fg0ThzTN+SGk++Troldme2nlKCGqZa38cb9oxkGwduPS9K2ofgT WnzUhWj3DE3i4vbIQ2hO6ILnbs3drD2R45F787TmFErQ/7CKoSAE8r25KzgfUGm5 NDuPPXg6CHFCZP7BgOkilDW3CyQnzLW1o+lmnjAqTerlGN6vxYK1CclpgTSm1GVn MeAp0Uyz9+SYO/mNJKYhiwjh1GVkfiTwGuO76M3mW1D+5vmzx6RH1DeH//piL+nD sSrRHKEl4ibVELsNhbIdz6imiEF1bfHRKj3tRpWjd9kctxYDniOPAUMWifMFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUatr0yCws/zUnhFttsN2ENt0CG6swHwYDVR0j BBgwFoAUdUvASJJDBjKoyWWvTFtxxZsqPMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGQyYmRlNC0wNTZiLTQ1YzYtODBiZi1mNWQ0ZDI3NzMzNmIvMC83NTRCQzA0ODky NDMwNjMyQThDOTY1QUY0QzVCNzFDNTlCMkEzQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1QjcxQzU5QjJB M0NDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBkMmJkZTQtMDU2Yi00NWM2LTgw YmYtZjVkNGQyNzczMzZiLzAvNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1Qjcx QzU5QjJBM0NDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANnnG7tGUsW1H/EE3eJ4f6KtE1DM58sLlO9/ Oo9vCmI33KV+9/R+al4OX/WLB7OnXOQaMQcAE+pK/hvQrgk7jUBzrav2EvU6HjLT ep2nUsYNjHQbJRzZcBgypZw5FpM214PTBfoaDlAFEJFgpVCS0XD2UauxAQuq+Xsv oXSDKNt45nvlmlAMB6r7girQOx6RT0PW8s+1zBrkH1sU4bPCHdetEWlNfYbXbGLJ 7U5UUROz9iSEZrXFq7rwGREFbv7qL3GfbE2e0ODvVezYibiAdyS596YlFGKv1Gaz jN+8vffPI3xdXqT7qvYV9dKbeTJB4xm9rvT0a9wOquKXTIAaQx4= -----END CERTIFICATE-----Generated at Fri Sep 5 12:46:51 2025 by rpki-client