$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft File: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft (raw, json) Hash identifier: y586D87QSR1zqcAvCmpTGoETdJd9WkEzDBYUGhWXy8M= Subject key identifier: E6:21:7C:A9:6C:5B:60:2E:5C:4A:86:AE:89:00:1B:37:7A:54:E9:E0 Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A Certificate issuer: /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Certificate serial: 65A444B924A1089429F39442B6C1F8CF75B62307 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft Manifest number: 3D Signing time: Tue 11 Mar 2025 14:21:24 +0000 Manifest this update: Tue 11 Mar 2025 14:16:24 +0000 Manifest next update: Fri 14 Mar 2025 22:04:24 +0000 Files and hashes: 1: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl (hash: omOEPogEiJA2mctdiqHMgy+X9tB4+KhTai5K909Mkdw=) 2: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (hash: YpIBjqK/gGPSCbvsDHOwTz44pQAN0MQfXErjudoCzGo=) 3: 3130332e37352e35322e302f32332d3234203d3e203436303233.roa (hash: LliQsaEGmOxiFYn7eU4CgTQQMhXBR9mQg+Ga47dX8vc=) 4: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (hash: eYux8MlazvFG7evneWwa6f79HrtIQhEs6bQRxE8BgeE=) 5: 3130332e37352e35322e302f32322d3234203d3e203436303233.roa (hash: reynj2rdnK/jisos3BLgNO3WmPAN7XuUU4JIx1owC9M=) 6: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (hash: 6WbVS+v7HN+Kets1foBaT2kDE0v8xmm7+65g6YMRGEk=) 7: 3130332e37352e35352e302f32342d3234203d3e203436303233.roa (hash: Wy3XFvvxWlmSMqptgoEgqs9HlG+jenjszHddJNByUP8=) 8: 3130332e37352e35342e302f32342d3234203d3e203436303233.roa (hash: BSqOBaWfJQqz33lACDAWl5BBUo8xhKyti0YdsIQS7aQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Mar 2025 22:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:a4:44:b9:24:a1:08:94:29:f3:94:42:b6:c1:f8:cf:75:b6:23:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Validity Not Before: Mar 11 14:16:24 2025 GMT Not After : Mar 14 22:04:24 2025 GMT Subject: CN=E6217CA96C5B602E5C4A86AE89001B377A54E9E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9c:e4:8d:93:43:66:25:9b:cd:52:93:88:f0: 12:d7:4d:98:50:54:c5:3e:38:2d:72:23:56:b5:5c: 88:68:73:1b:f4:86:11:b4:6e:6f:0d:f2:dc:ca:5e: 76:ce:93:cb:32:ab:6d:6d:8b:76:ac:77:ae:e4:4e: 9d:f9:df:fe:12:14:05:7d:7e:1e:c5:4d:7d:85:11: 91:b1:48:36:49:94:f1:17:24:7f:af:cc:dd:b7:13: 14:c7:9b:e7:91:72:4a:a6:7d:bf:32:eb:c6:06:5c: 05:39:6a:95:4f:90:7b:00:aa:bb:20:8d:92:22:f7: 0b:4e:30:c0:bc:f6:1c:d2:c1:86:75:76:2e:90:b4: 3c:6e:74:4f:6f:8a:37:be:3a:f7:82:1c:ae:f3:34: 1d:8d:f6:ab:1d:93:fb:e3:e3:31:eb:33:bd:e7:ca: 55:1d:61:af:aa:c6:e3:47:97:42:84:8b:b2:8b:2f: 1d:6c:aa:a3:11:b6:88:28:bd:74:3c:66:d1:ac:0d: 82:a4:c4:27:ab:fb:9d:ce:12:df:a2:63:ee:e2:86: 44:64:ca:44:c1:8e:3c:f6:b6:e1:17:24:73:c7:41: 39:e7:c6:c4:10:7b:16:03:41:ad:77:86:53:9b:01: e8:97:d3:34:c8:eb:95:07:f4:98:4f:33:40:85:df: 83:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:21:7C:A9:6C:5B:60:2E:5C:4A:86:AE:89:00:1B:37:7A:54:E9:E0 X509v3 Authority Key Identifier: keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:82:b6:f1:6e:95:9e:65:59:02:4b:aa:f5:ab:b1:5e:26:06: 40:88:d3:78:a3:6b:53:4f:9c:3e:99:cc:0a:41:f4:09:0f:14: bc:4a:a9:34:c1:72:33:f7:83:70:25:4c:c6:ff:16:47:b8:ef: 96:b8:41:f3:e0:0e:9f:38:74:13:13:34:86:f7:bd:d5:26:11: d9:21:d6:ee:6c:3e:25:c1:31:81:58:8b:45:18:cd:2a:82:6a: 5b:7c:db:71:34:d8:3a:7b:c5:74:e4:57:70:ab:5c:8e:c6:96: 3a:c1:ae:ff:b5:2d:fa:9a:53:17:1b:30:7f:f3:5c:72:3b:48: 60:a7:00:0a:2c:c5:aa:0e:83:44:db:fe:d0:cd:ce:6a:52:ba: 75:6f:cc:9a:7f:5b:51:45:60:90:c6:0e:2e:a1:62:bf:10:2e: 89:5d:0e:0e:9c:cb:7a:c9:ce:e8:a4:51:cd:d4:c3:df:ff:a8: 5f:a8:74:6c:f3:bc:4b:e1:04:1d:96:fd:c4:ad:09:6c:67:3a: 64:41:99:7e:fd:0e:63:b8:b7:80:0c:9d:a2:9b:30:5a:cb:59: 38:25:67:eb:c7:33:46:87:67:24:5f:99:49:75:f1:a7:3f:68: 24:85:74:e7:f8:35:aa:90:cc:90:fb:71:7c:e3:9c:ae:28:56: 0d:ff:49:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZaREuSShCJQp85RCtsH4z3W2IwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlD MDNCNEQyQTAeFw0yNTAzMTExNDE2MjRaFw0yNTAzMTQyMjA0MjRaMDMxMTAvBgNV BAMTKEU2MjE3Q0E5NkM1QjYwMkU1QzRBODZBRTg5MDAxQjM3N0E1NEU5RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/nOSNk0NmJZvNUpOI8BLXTZhQ VMU+OC1yI1a1XIhocxv0hhG0bm8N8tzKXnbOk8syq21ti3asd67kTp353/4SFAV9 fh7FTX2FEZGxSDZJlPEXJH+vzN23ExTHm+eRckqmfb8y68YGXAU5apVPkHsAqrsg jZIi9wtOMMC89hzSwYZ1di6QtDxudE9vije+OveCHK7zNB2N9qsdk/vj4zHrM73n ylUdYa+qxuNHl0KEi7KLLx1sqqMRtogovXQ8ZtGsDYKkxCer+53OEt+iY+7ihkRk ykTBjjz2tuEXJHPHQTnnxsQQexYDQa13hlObAeiX0zTI65UH9JhPM0CF34NhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5iF8qWxbYC5cSoauiQAbN3pU6eAwHwYDVR0j BBgwFoAUFUyvlGtP75wu4P+iRbukKcA7TSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmU1MDRjNS1kN2JhLTRmZTktOWU1Ni03OTJkYzAxYTk3Y2IvMC8xNTRDQUY5NDZC NEZFRjlDMkVFMEZGQTI0NUJCQTQyOUMwM0I0RDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlDMDNC NEQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlNTA0YzUtZDdiYS00ZmU5LTll NTYtNzkyZGMwMWE5N2NiLzAvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0 MjlDMDNCNEQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOCtvFulZ5lWQJLqvWrsV4mBkCI03ija1NP nD6ZzApB9AkPFLxKqTTBcjP3g3AlTMb/Fke475a4QfPgDp84dBMTNIb3vdUmEdkh 1u5sPiXBMYFYi0UYzSqCalt823E02Dp7xXTkV3CrXI7GljrBrv+1LfqaUxcbMH/z XHI7SGCnAAosxaoOg0Tb/tDNzmpSunVvzJp/W1FFYJDGDi6hYr8QLoldDg6cy3rJ zuikUc3Uw9//qF+odGzzvEvhBB2W/cStCWxnOmRBmX79DmO4t4AMnaKbMFrLWTgl Z+vHM0aHZyRfmUl18ac/aCSFdOf4NaqQzJD7cXzjnK4oVg3/SdQ= -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:38 2025 by rpki-client