$ rpki-client -vvf repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft File: 754AE571E3432B20E78045BE7B2C99E39E0F1873.mft (raw, json) Hash identifier: BzWJ7Dy2+xoXDzJjM9Tgegt1om+o8sMsS9XlfnxNH68= Subject key identifier: 44:63:F5:ED:9B:E7:F3:2D:91:2A:E7:A9:6F:8D:4A:A3:D1:84:D0:FD Authority key identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 Certificate issuer: /CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Certificate serial: 5538EB23F3E9F38CCE54706C5694359EC78AF00C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft Manifest number: 0217 Signing time: Fri 05 Sep 2025 00:42:06 +0000 Manifest this update: Fri 05 Sep 2025 00:37:06 +0000 Manifest next update: Mon 08 Sep 2025 07:34:06 +0000 Files and hashes: 1: 3130332e372e3232362e302f32342d3234203d3e203539313335.roa (hash: d1VqPlCHSAGRA/UEI5pUZ6WXcTK62ba2i6gugZCVB1Y=) 2: 3130332e372e3232362e302f32332d3233203d3e203539313335.roa (hash: /qz+/FrTyvqN+lKfQMLM9vGRBCrWv6ZRIa9kSi7cy5M=) 3: 754AE571E3432B20E78045BE7B2C99E39E0F1873.crl (hash: L6aHv/Hgl8kXWACs3FLRqD+9CDt2vGoXxKuzM4IGlrI=) 4: 3130332e372e3232372e302f32342d3234203d3e203539313335.roa (hash: Fle5qLzNk23ZNkYRzf8mlYQ/OLfLBGZjvUjXRT80jgM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:38:eb:23:f3:e9:f3:8c:ce:54:70:6c:56:94:35:9e:c7:8a:f0:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Validity Not Before: Sep 5 00:37:06 2025 GMT Not After : Sep 8 07:34:06 2025 GMT Subject: CN=4463F5ED9BE7F32D912AE7A96F8D4AA3D184D0FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:65:17:ff:96:c7:03:60:dc:5a:83:ae:7e:e2: 28:bc:9b:d0:87:1a:e9:d2:d9:77:f4:b1:64:e1:a8: f8:fb:e9:db:22:4a:d0:af:5d:28:b6:79:42:32:8a: 53:78:fa:65:6b:fb:34:de:2c:97:79:43:0f:b0:e7: c1:7b:69:b8:87:27:cc:b7:01:c8:b6:10:20:ca:67: 14:a1:f7:a7:94:9e:5c:7c:f2:bb:bf:c3:a1:6c:eb: 53:6d:6d:f4:d0:a9:22:c7:5e:94:93:bc:ab:34:25: 69:14:a3:0d:54:9f:3d:fb:01:d6:13:0e:5a:94:26: f9:13:1e:14:48:97:42:b5:8d:b0:f9:be:bd:fc:73: 25:2d:11:3d:f8:60:db:8b:73:1d:c6:ec:c8:be:02: fa:6a:87:be:e7:6e:ee:ee:d3:a5:84:71:33:1d:e6: 10:03:51:d1:68:02:65:56:78:95:56:3f:17:03:37: 41:a2:6e:61:b3:2c:11:70:bc:45:fb:52:93:63:04: 6f:f5:46:be:02:a6:3b:c6:e6:ef:d0:0e:37:39:4c: 7c:d7:f1:fe:99:5f:e3:b8:be:fb:55:22:3b:a7:21: 83:f4:ac:8b:9a:50:f7:93:ed:3f:82:e0:c9:0d:5d: f9:fe:f5:a4:c3:b6:39:24:5d:32:67:a1:d9:f0:f1: 60:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:63:F5:ED:9B:E7:F3:2D:91:2A:E7:A9:6F:8D:4A:A3:D1:84:D0:FD X509v3 Authority Key Identifier: keyid:75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:95:0b:9f:8a:05:e5:1c:2b:61:2b:09:6a:43:79:2b:a8:15: 52:c2:ed:ef:8f:bf:3f:5b:27:09:43:19:3b:90:46:6d:5a:8d: c4:7d:fa:90:8c:95:72:95:b5:a4:63:68:3a:32:e7:5d:cf:8a: 8d:9e:b2:64:ce:19:30:10:81:d7:20:97:88:ca:32:22:53:12: 5c:44:c8:ef:d1:fc:e0:18:4e:01:3f:7a:87:dd:d3:f4:16:02: 84:13:0a:19:ca:e6:2d:fc:a5:8d:d0:73:48:43:cc:18:af:d9: c2:7a:cb:91:48:65:d5:e6:e3:5b:bf:4b:4a:0a:db:87:17:c0: a7:46:2a:01:94:17:c5:c2:55:ad:aa:72:a9:00:cd:5c:4d:5a: ad:c8:44:bb:99:c7:5c:fd:85:e7:28:71:34:49:09:44:d2:ce: f8:b3:f6:aa:c0:ba:b1:8d:99:bd:23:1b:32:47:bd:01:3d:93: 81:93:7f:ac:3c:db:94:94:ed:47:77:b3:77:0f:6c:23:81:f6: 6e:03:6b:93:97:0e:01:c8:b4:ec:32:1d:ce:66:03:a0:11:30: ac:87:e3:29:4d:56:49:5f:3f:ce:e7:81:61:73:05:ce:2e:5b: 87:19:52:9c:c7:58:95:b9:41:eb:ab:46:27:d2:63:ee:63:0f: 71:8f:dc:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVTjrI/Pp84zOVHBsVpQ1nseK8AwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5 RTBGMTg3MzAeFw0yNTA5MDUwMDM3MDZaFw0yNTA5MDgwNzM0MDZaMDMxMTAvBgNV BAMTKDQ0NjNGNUVEOUJFN0YzMkQ5MTJBRTdBOTZGOEQ0QUEzRDE4NEQwRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSZRf/lscDYNxag65+4ii8m9CH GunS2Xf0sWThqPj76dsiStCvXSi2eUIyilN4+mVr+zTeLJd5Qw+w58F7abiHJ8y3 Aci2ECDKZxSh96eUnlx88ru/w6Fs61NtbfTQqSLHXpSTvKs0JWkUow1Unz37AdYT DlqUJvkTHhRIl0K1jbD5vr38cyUtET34YNuLcx3G7Mi+Avpqh77nbu7u06WEcTMd 5hADUdFoAmVWeJVWPxcDN0GibmGzLBFwvEX7UpNjBG/1Rr4CpjvG5u/QDjc5THzX 8f6ZX+O4vvtVIjunIYP0rIuaUPeT7T+C4MkNXfn+9aTDtjkkXTJnodnw8WDjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURGP17Zvn8y2RKuepb41Ko9GE0P0wHwYDVR0j BBgwFoAUdUrlceNDKyDngEW+eyyZ454PGHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM1OGRkYS0wZmYxLTRmNmEtYmI2Ni02MGY0Y2EwNGM0OTAvMC83NTRBRTU3MUUz NDMyQjIwRTc4MDQ1QkU3QjJDOTlFMzlFMEYxODczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5RTBG MTg3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNThkZGEtMGZmMS00ZjZhLWJi NjYtNjBmNGNhMDRjNDkwLzAvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5 RTM5RTBGMTg3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIuVC5+KBeUcK2ErCWpDeSuoFVLC7e+Pvz9b JwlDGTuQRm1ajcR9+pCMlXKVtaRjaDoy513Pio2esmTOGTAQgdcgl4jKMiJTElxE yO/R/OAYTgE/eofd0/QWAoQTChnK5i38pY3Qc0hDzBiv2cJ6y5FIZdXm41u/S0oK 24cXwKdGKgGUF8XCVa2qcqkAzVxNWq3IRLuZx1z9hecocTRJCUTSzviz9qrAurGN mb0jGzJHvQE9k4GTf6w825SU7Ud3s3cPbCOB9m4Da5OXDgHItOwyHc5mA6ARMKyH 4ylNVklfP87ngWFzBc4uW4cZUpzHWJW5QeurRifSY+5jD3GP3Bg= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:19 2025 by rpki-client