$ rpki-client -vvf repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft File: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft (raw, json) Hash identifier: ukF5iI2trN+nfbp5ilfyNU7ccTdU6zpXWuDTKtcmHz0= Subject key identifier: 8D:B4:02:73:D0:FB:2A:EF:9E:48:7D:97:7F:35:79:E7:BA:A3:60:CB Authority key identifier: 19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E Certificate issuer: /CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Certificate serial: 08A41E76A2E6369E20D5A1E837DC3E5D7A61303B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft Manifest number: 0226 Signing time: Wed 03 Sep 2025 05:01:28 +0000 Manifest this update: Wed 03 Sep 2025 04:56:28 +0000 Manifest next update: Sat 06 Sep 2025 12:56:28 +0000 Files and hashes: 1: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl (hash: BLBFkZzJPrSxuNQ5nlTukWylAE0aqTGJ4IbHsEBPyqE=) 2: 3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa (hash: 1jAZDRG2bBRpFXXfdfwzy9SEYQeFjRv7T68Dlx8L+iE=) 3: 3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa (hash: dddpXAXd6NN4T55cPDxa5oEHzFYeojSlOpK24ou6O1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 12:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a4:1e:76:a2:e6:36:9e:20:d5:a1:e8:37:dc:3e:5d:7a:61:30:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Validity Not Before: Sep 3 04:56:28 2025 GMT Not After : Sep 6 12:56:28 2025 GMT Subject: CN=8DB40273D0FB2AEF9E487D977F3579E7BAA360CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:39:17:82:68:47:2e:1e:a6:f9:89:8b:bd:b0: 13:0f:e7:b3:11:d2:64:b2:ea:fd:10:bc:c0:4d:6e: 88:7e:32:8f:b9:ce:da:06:0a:73:1c:c8:a9:27:31: b7:19:b8:b7:6e:19:a8:4d:77:00:f8:03:61:d3:07: 69:45:30:6d:b8:34:a7:a2:3c:03:0b:8a:7d:89:a0: b5:19:31:48:73:6d:cd:4b:6a:1a:aa:c8:9a:b7:e6: cd:1c:bc:5b:e2:5b:5d:58:bf:b4:fc:79:6f:56:ec: c4:40:8b:68:b5:58:91:ec:9c:af:73:46:5c:f4:14: dc:dc:dd:4d:fb:b1:ca:11:82:7e:f0:1a:4a:b5:95: 51:31:83:b7:7a:3b:94:87:f6:2d:68:b4:30:9a:4e: 56:f4:8b:91:10:72:15:62:4e:4c:38:f8:e9:ea:96: a6:98:1a:4e:40:70:75:04:76:99:ca:1b:c8:5c:93: b2:41:f7:08:0b:74:61:4a:39:ad:ca:49:74:a5:ff: 20:5a:14:b7:4b:61:78:2d:22:0c:2d:0c:28:e4:26: e4:46:79:ea:17:10:99:60:2c:d4:4a:e7:ec:41:e1: 08:ab:bd:ea:f7:49:f5:d8:40:e6:c8:c7:a4:34:08: 6d:a8:e1:44:91:57:76:9a:ec:7b:cf:bb:74:3f:ab: 3f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B4:02:73:D0:FB:2A:EF:9E:48:7D:97:7F:35:79:E7:BA:A3:60:CB X509v3 Authority Key Identifier: keyid:19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:b6:d4:ff:c0:03:9b:0e:78:7b:ca:4b:61:dd:6f:17:67:3a: 4d:c7:d8:41:b5:fb:b1:4f:c9:b6:94:96:a4:8f:bc:20:07:70: 2c:93:2a:0b:91:cb:c8:74:19:bb:f5:39:06:f1:84:90:de:06: ef:b9:e7:94:88:b8:7a:41:da:76:04:dd:3d:fb:10:6d:40:9c: a0:17:f8:48:01:00:88:d2:85:2a:56:bd:e1:da:98:6e:8a:9c: 4f:a0:73:2f:32:1b:df:9b:8b:07:a1:50:32:55:2c:20:21:a0: 9d:71:e7:e7:15:47:6d:69:a6:40:4d:17:b1:eb:99:c3:30:28: bb:7b:b0:a8:38:1b:43:e1:0c:7b:90:aa:04:64:22:82:40:3f: 3a:5a:14:a3:6a:11:6a:1c:73:a0:21:2b:02:ec:9f:06:f0:3f: a9:c2:9e:4e:ff:47:9f:8f:de:e4:55:15:9a:f6:c0:37:bd:1c: e4:a5:f4:f2:83:75:18:b3:95:26:32:ef:b1:13:bb:ca:0a:53: 3b:0f:5a:6f:f7:c0:c3:53:7f:3c:76:0a:da:6e:02:50:80:12: 4c:e8:6d:23:9c:ab:6a:03:cf:48:12:13:ff:e7:20:89:68:c4: 25:4d:b8:00:61:2d:96:5f:e1:3a:23:3f:bf:0e:5a:a9:3a:ee: 67:eb:6b:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCKQedqLmNp4g1aHoN9w+XXphMDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNE MTJCRkQyRTAeFw0yNTA5MDMwNDU2MjhaFw0yNTA5MDYxMjU2MjhaMDMxMTAvBgNV BAMTKDhEQjQwMjczRDBGQjJBRUY5RTQ4N0Q5NzdGMzU3OUU3QkFBMzYwQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+OReCaEcuHqb5iYu9sBMP57MR 0mSy6v0QvMBNboh+Mo+5ztoGCnMcyKknMbcZuLduGahNdwD4A2HTB2lFMG24NKei PAMLin2JoLUZMUhzbc1LahqqyJq35s0cvFviW11Yv7T8eW9W7MRAi2i1WJHsnK9z Rlz0FNzc3U37scoRgn7wGkq1lVExg7d6O5SH9i1otDCaTlb0i5EQchViTkw4+Onq lqaYGk5AcHUEdpnKG8hck7JB9wgLdGFKOa3KSXSl/yBaFLdLYXgtIgwtDCjkJuRG eeoXEJlgLNRK5+xB4Qirver3SfXYQObIx6Q0CG2o4USRV3aa7HvPu3Q/qz/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjbQCc9D7Ku+eSH2XfzV557qjYMswHwYDVR0j BBgwFoAUGVTDPPuvigcro7kLPoONY9Er/S4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDE5NmQ2NS0yMWE4LTRiMDQtYTlkZS03MjgzZmJlM2MxY2IvMC8xOTU0QzMzQ0ZC QUY4QTA3MkJBM0I5MEIzRTgzOEQ2M0QxMkJGRDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNEMTJC RkQyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQxOTZkNjUtMjFhOC00YjA0LWE5 ZGUtNzI4M2ZiZTNjMWNiLzAvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhE NjNEMTJCRkQyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGS21P/AA5sOeHvKS2HdbxdnOk3H2EG1+7FP ybaUlqSPvCAHcCyTKguRy8h0Gbv1OQbxhJDeBu+555SIuHpB2nYE3T37EG1AnKAX +EgBAIjShSpWveHamG6KnE+gcy8yG9+biwehUDJVLCAhoJ1x5+cVR21ppkBNF7Hr mcMwKLt7sKg4G0PhDHuQqgRkIoJAPzpaFKNqEWocc6AhKwLsnwbwP6nCnk7/R5+P 3uRVFZr2wDe9HOSl9PKDdRizlSYy77ETu8oKUzsPWm/3wMNTfzx2CtpuAlCAEkzo bSOcq2oDz0gSE//nIIloxCVNuABhLZZf4TojP78OWqk67mfra+M= -----END CERTIFICATE-----Generated at Fri Sep 5 12:14:08 2025 by rpki-client