$ rpki-client -vvf repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft File: 754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft (raw, json) Hash identifier: DpQR18fDh1JcOht2cJVWJWD8NlB+MkNj8DbhH4Z/js8= Subject key identifier: 06:48:A6:A3:C0:89:63:D7:4C:84:75:7A:DE:A3:AC:2D:26:38:48:0D Authority key identifier: 75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB Certificate issuer: /CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB Certificate serial: 4A517F1F72C1800F59E22B2AD54C26BAC52FDC8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft Manifest number: 020D Signing time: Fri 06 Jun 2025 18:41:36 +0000 Manifest this update: Fri 06 Jun 2025 18:36:36 +0000 Manifest next update: Tue 10 Jun 2025 01:19:36 +0000 Files and hashes: 1: 3230322e34332e3131362e302f32332d3234203d3e203435373037.roa (hash: Sf9PeSZZ7a8NKRrtWUTmVWuqUtTX2GsdEZGDuX14gwU=) 2: 3130332e382e35362e302f32322d3234203d3e203435373037.roa (hash: e0FCZrIOKWaH0btSP4kAUqXaQNeE2QggQ8Gj6R8jPew=) 3: 754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl (hash: nLmI2xvSNAO4PKES1/gCK8fg5qUOTl+2Pz3pNNNDojk=) 4: 3131302e39332e31322e302f32322d3234203d3e203435373037.roa (hash: 7iXx5jGESFjpBjO3AiKnrpyYnQjS82YYkQqBjeaeWk0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 01:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:51:7f:1f:72:c1:80:0f:59:e2:2b:2a:d5:4c:26:ba:c5:2f:dc:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB Validity Not Before: Jun 6 18:36:36 2025 GMT Not After : Jun 10 01:19:36 2025 GMT Subject: CN=0648A6A3C08963D74C84757ADEA3AC2D2638480D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cf:f6:b0:4e:f8:6c:e6:0b:88:4a:5f:b5:6d: e0:32:74:22:7b:7e:6a:44:fb:37:cd:63:5d:4d:f6: ac:da:cd:70:a2:d1:b0:31:fe:04:c2:4c:cd:d8:f9: e1:2b:30:56:5a:8e:0e:87:5f:e7:68:27:c8:f6:34: 1d:75:9d:4e:ad:91:9b:c3:94:aa:0a:ff:17:18:c6: ca:09:b3:c0:6b:a8:3d:05:e1:0b:31:e3:a8:cd:fc: 50:1b:be:14:3d:ba:18:98:fb:b2:e1:7d:7f:99:33: f7:9a:d7:53:c4:a9:87:04:7c:f7:94:87:71:cf:5f: b2:f6:4d:75:e6:ec:2a:a6:b7:ff:2c:28:dc:a1:f0: e6:9a:50:70:0b:c1:58:96:02:31:f4:7f:cc:28:bf: 78:61:69:82:5d:a2:d9:75:31:b9:6d:8a:db:07:30: f7:8a:0f:71:bd:50:d3:75:7a:82:58:b7:b4:be:e5: 42:40:b2:0a:b8:0f:46:b7:e5:cf:34:45:f1:f8:cb: fe:dd:28:b5:c0:cb:24:1b:d2:1c:b0:cb:e7:0a:91: 69:bc:92:13:41:35:25:64:7c:1a:a4:5b:4c:58:be: cf:a5:a9:72:5f:a3:13:e3:72:71:90:a2:71:5e:6b: 7b:ba:1e:d7:63:f7:5a:5f:3f:3d:dc:41:39:11:8e: bc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:48:A6:A3:C0:89:63:D7:4C:84:75:7A:DE:A3:AC:2D:26:38:48:0D X509v3 Authority Key Identifier: keyid:75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:bf:dc:1a:e0:dc:2a:10:51:00:d3:5b:87:c7:59:a9:06:0c: e0:f7:e5:bc:98:ac:82:c1:96:b5:bd:f7:d9:0b:d2:68:e1:10: 49:f1:75:f8:b5:26:55:bd:7b:71:5c:99:c2:51:54:b0:da:ce: 01:0b:13:df:69:99:9f:03:5a:d9:2a:5b:eb:15:29:24:c7:af: 39:b8:b0:a5:68:ee:a7:d8:56:52:8f:f2:b6:e9:74:20:a1:9d: 9c:91:97:b4:d5:38:91:6d:24:00:30:71:f6:bb:31:67:cf:72: 2d:f2:04:32:bd:1a:82:0b:e7:be:89:8e:f8:04:ee:13:8f:0b: c8:18:a6:d2:70:0e:e2:d5:23:08:9f:8e:bb:05:84:7d:19:35: 11:ff:3b:3e:f8:2e:2e:ea:40:b5:7d:d0:76:9d:1a:e8:58:c2: 2e:9c:cf:64:27:11:f7:7b:4f:0b:61:0b:17:17:e3:1b:1b:c6: 3d:d8:1b:0f:18:39:28:30:57:5f:ee:4f:45:85:85:46:ef:7e: 90:c8:d6:1a:b3:90:b5:28:5b:2d:f5:62:0d:49:0f:d7:3b:eb: 2a:f9:9e:5b:18:4e:a5:81:ce:dc:9a:63:bb:2c:3e:84:67:8c: 35:17:a1:19:6f:29:fe:d5:29:44:98:d3:ce:f4:13:3a:e2:f9: 26:9e:fd:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSlF/H3LBgA9Z4isq1UwmusUv3I8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1QjcxQzU5 QjJBM0NDQjAeFw0yNTA2MDYxODM2MzZaFw0yNTA2MTAwMTE5MzZaMDMxMTAvBgNV BAMTKDA2NDhBNkEzQzA4OTYzRDc0Qzg0NzU3QURFQTNBQzJEMjYzODQ4MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3z/awTvhs5guISl+1beAydCJ7 fmpE+zfNY11N9qzazXCi0bAx/gTCTM3Y+eErMFZajg6HX+doJ8j2NB11nU6tkZvD lKoK/xcYxsoJs8BrqD0F4Qsx46jN/FAbvhQ9uhiY+7LhfX+ZM/ea11PEqYcEfPeU h3HPX7L2TXXm7Cqmt/8sKNyh8OaaUHALwViWAjH0f8wov3hhaYJdotl1MbltitsH MPeKD3G9UNN1eoJYt7S+5UJAsgq4D0a35c80RfH4y/7dKLXAyyQb0hywy+cKkWm8 khNBNSVkfBqkW0xYvs+lqXJfoxPjcnGQonFea3u6Htdj91pfPz3cQTkRjrzlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBkimo8CJY9dMhHV63qOsLSY4SA0wHwYDVR0j BBgwFoAUdUvASJJDBjKoyWWvTFtxxZsqPMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGQyYmRlNC0wNTZiLTQ1YzYtODBiZi1mNWQ0ZDI3NzMzNmIvMC83NTRCQzA0ODky NDMwNjMyQThDOTY1QUY0QzVCNzFDNTlCMkEzQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1QjcxQzU5QjJB M0NDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBkMmJkZTQtMDU2Yi00NWM2LTgw YmYtZjVkNGQyNzczMzZiLzAvNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1Qjcx QzU5QjJBM0NDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACa/3Brg3CoQUQDTW4fHWakGDOD35byYrILB lrW999kL0mjhEEnxdfi1JlW9e3FcmcJRVLDazgELE99pmZ8DWtkqW+sVKSTHrzm4 sKVo7qfYVlKP8rbpdCChnZyRl7TVOJFtJAAwcfa7MWfPci3yBDK9GoIL576JjvgE 7hOPC8gYptJwDuLVIwifjrsFhH0ZNRH/Oz74Li7qQLV90HadGuhYwi6cz2QnEfd7 TwthCxcX4xsbxj3YGw8YOSgwV1/uT0WFhUbvfpDI1hqzkLUoWy31Yg1JD9c76yr5 nlsYTqWBztyaY7ssPoRnjDUXoRlvKf7VKUSY0870Ezri+Sae/Rw= -----END CERTIFICATE-----Generated at Sun Jun 8 04:11:45 2025 by rpki-client