$ rpki-client -vvf repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft File: 1154D920B6A4209131871530AEE1F8B8A3D303D6.mft (raw, json) Hash identifier: ihqheUeCYR4897OcVlr1Cjp6YlBHMIzbgzM3LO029Jg= Subject key identifier: 96:2D:57:5D:B9:E4:BA:57:BD:74:22:4F:5A:2F:58:80:7D:75:38:F1 Authority key identifier: 11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 Certificate issuer: /CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Certificate serial: 1C33C5E4D99F72B3F7DC98222EED796DA3810CFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft Manifest number: 0202 Signing time: Wed 03 Sep 2025 23:01:08 +0000 Manifest this update: Wed 03 Sep 2025 22:56:08 +0000 Manifest next update: Sun 07 Sep 2025 05:02:08 +0000 Files and hashes: 1: 1154D920B6A4209131871530AEE1F8B8A3D303D6.crl (hash: 7wEauSreoqKOjV+b+6A6BQzKcTOOPa2AJ3EdeHvqXX8=) 2: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: Pil6JjAZAhk6oGR6yVNwjzUnJBqxVVzN/QVFAe7clnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 05:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:33:c5:e4:d9:9f:72:b3:f7:dc:98:22:2e:ed:79:6d:a3:81:0c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Validity Not Before: Sep 3 22:56:08 2025 GMT Not After : Sep 7 05:02:08 2025 GMT Subject: CN=962D575DB9E4BA57BD74224F5A2F58807D7538F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c6:17:e6:65:d8:c1:6b:30:46:d6:a1:1e:ff: d9:70:a7:dc:10:dd:6f:2f:bb:d6:f0:e8:99:73:36: 4c:d7:81:04:44:5b:60:b1:24:0c:a4:a7:5f:76:7e: 5c:5c:0f:dd:d3:d0:cf:b4:ea:44:20:d1:0a:36:72: 34:b0:f2:02:e7:83:97:bc:e5:e7:41:11:f0:3e:45: ea:af:1e:b9:d3:61:7a:52:8c:ce:60:c2:8a:9f:38: 33:bf:ba:ef:f2:2d:cf:a5:a9:ec:83:e9:6f:29:ec: 87:32:b7:15:5f:43:7c:8d:51:18:0c:91:ab:56:84: ea:d4:68:1a:67:0a:b0:78:33:b5:f6:11:e6:5b:a4: 4f:d6:b0:c9:d0:aa:58:f9:e8:48:68:f5:9f:9a:da: 89:8a:b8:2d:84:b3:80:3c:69:d5:19:be:07:99:c7: 75:ac:d4:35:9a:78:7c:95:f7:b0:23:6e:c6:9a:49: 51:72:ac:3e:0e:d8:fe:7e:01:15:57:38:59:ff:fb: e8:0b:e1:f4:2e:b9:55:ce:40:04:97:07:50:89:a8: 1d:8a:68:ff:3e:c5:ba:53:2f:76:c2:71:86:df:5d: bf:8e:81:45:5f:64:03:b3:6c:c7:01:1f:fc:5f:9a: e8:cd:3c:d5:30:35:ce:22:d1:52:6f:ec:ce:34:ca: 6b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2D:57:5D:B9:E4:BA:57:BD:74:22:4F:5A:2F:58:80:7D:75:38:F1 X509v3 Authority Key Identifier: keyid:11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e6:98:0f:f9:84:a0:72:d6:24:38:a9:48:bc:7a:c7:94:ff: ee:d1:03:a8:b5:84:ea:42:da:6d:d0:85:5e:25:66:8d:ba:a2: a2:16:94:76:4f:ae:a6:b9:6f:74:3a:47:4f:05:13:9a:88:12: 15:f0:0c:e4:d2:6a:1a:e4:78:48:39:75:8a:9b:d1:77:03:25: 2d:89:c5:32:cf:02:c2:20:f3:34:ff:37:16:a5:79:7d:61:53: e3:d8:f9:69:79:ad:f6:9f:9b:e5:4e:f7:1a:9b:74:4a:04:15: 3b:af:47:64:85:cc:93:49:0d:23:a0:0a:10:d7:26:89:9d:ec: 18:33:13:79:37:68:e0:32:36:3c:d2:fb:fb:78:2d:b1:d4:61: 8f:c6:81:b1:ac:21:04:7f:58:32:0e:3a:11:50:a0:87:54:95: 95:77:57:b8:21:c9:e7:86:ae:df:ce:ae:4c:6a:b2:f8:bc:e9: 1e:e6:b4:9d:69:6a:db:1c:67:6e:50:f9:a6:5d:10:7c:1f:83: 56:6f:a4:20:b4:fd:d0:03:e3:bf:ed:24:97:61:b1:ee:00:71: af:67:46:39:f1:2d:e2:59:07:2c:7b:f4:65:ca:c1:ff:d8:74: 6f:4c:c5:a7:29:f4:7b:6a:2b:19:33:28:b2:4d:a6:39:c4:ae: 68:72:4c:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHDPF5NmfcrP33JgiLu15baOBDPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhB M0QzMDNENjAeFw0yNTA5MDMyMjU2MDhaFw0yNTA5MDcwNTAyMDhaMDMxMTAvBgNV BAMTKDk2MkQ1NzVEQjlFNEJBNTdCRDc0MjI0RjVBMkY1ODgwN0Q3NTM4RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCxhfmZdjBazBG1qEe/9lwp9wQ 3W8vu9bw6JlzNkzXgQREW2CxJAykp192flxcD93T0M+06kQg0Qo2cjSw8gLng5e8 5edBEfA+ReqvHrnTYXpSjM5gwoqfODO/uu/yLc+lqeyD6W8p7IcytxVfQ3yNURgM katWhOrUaBpnCrB4M7X2EeZbpE/WsMnQqlj56Eho9Z+a2omKuC2Es4A8adUZvgeZ x3Ws1DWaeHyV97AjbsaaSVFyrD4O2P5+ARVXOFn/++gL4fQuuVXOQASXB1CJqB2K aP8+xbpTL3bCcYbfXb+OgUVfZAOzbMcBH/xfmujNPNUwNc4i0VJv7M40ymvLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUli1XXbnkule9dCJPWi9YgH11OPEwHwYDVR0j BBgwFoAUEVTZILakIJExhxUwruH4uKPTA9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY3ZWMzMy01YTcyLTRjNjUtOWZkMy02NmVmODQ3OTM5NGQvMC8xMTU0RDkyMEI2 QTQyMDkxMzE4NzE1MzBBRUUxRjhCOEEzRDMwM0Q2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhBM0Qz MDNENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2N2VjMzMtNWE3Mi00YzY1LTlm ZDMtNjZlZjg0NzkzOTRkLzAvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4 QjhBM0QzMDNENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvmmA/5hKBy1iQ4qUi8eseU/+7RA6i1hOpC 2m3QhV4lZo26oqIWlHZPrqa5b3Q6R08FE5qIEhXwDOTSahrkeEg5dYqb0XcDJS2J xTLPAsIg8zT/NxaleX1hU+PY+Wl5rfafm+VO9xqbdEoEFTuvR2SFzJNJDSOgChDX Jomd7BgzE3k3aOAyNjzS+/t4LbHUYY/GgbGsIQR/WDIOOhFQoIdUlZV3V7ghyeeG rt/Orkxqsvi86R7mtJ1patscZ25Q+aZdEHwfg1ZvpCC0/dAD47/tJJdhse4Aca9n RjnxLeJZByx79GXKwf/YdG9Mxacp9HtqKxkzKLJNpjnErmhyTNo= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:36 2025 by rpki-client