$ rpki-client -vvf repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft File: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft (raw, json) Hash identifier: uJE6GbQgKeKxM3zWCkdtI7JEzCuYAilQYCd61thSyVc= Subject key identifier: 69:D9:2C:21:76:71:74:E2:AA:E5:EE:95:E4:60:43:62:9E:B6:E2:90 Authority key identifier: 19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E Certificate issuer: /CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Certificate serial: 03C58AE5158012922274969458843E31C5D1429E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft Manifest number: 01FC Signing time: Tue 03 Jun 2025 13:33:44 +0000 Manifest this update: Tue 03 Jun 2025 13:28:44 +0000 Manifest next update: Fri 06 Jun 2025 18:54:44 +0000 Files and hashes: 1: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl (hash: yU+31MMVBBxqbZQG0VKyYix4GrRHJ1fSyUOVQZEcldk=) 2: 3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa (hash: dddpXAXd6NN4T55cPDxa5oEHzFYeojSlOpK24ou6O1o=) 3: 3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa (hash: 1jAZDRG2bBRpFXXfdfwzy9SEYQeFjRv7T68Dlx8L+iE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c5:8a:e5:15:80:12:92:22:74:96:94:58:84:3e:31:c5:d1:42:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Validity Not Before: Jun 3 13:28:44 2025 GMT Not After : Jun 6 18:54:44 2025 GMT Subject: CN=69D92C21767174E2AAE5EE95E46043629EB6E290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4f:23:68:12:3d:86:20:85:aa:d8:b6:eb:ba: 69:f1:7b:13:90:4d:8f:4a:b3:0e:fb:94:17:28:9f: 24:4e:44:a9:6c:a9:f8:77:30:0c:6f:38:cb:d0:68: fa:3a:37:8b:a0:dc:73:ca:49:4c:0e:c2:56:c8:d4: f4:39:fa:14:a5:14:a6:31:52:6c:ab:46:94:47:c0: b3:8d:fb:86:f8:aa:24:e3:5b:27:f0:07:1f:af:98: d3:38:f0:df:c2:fb:f6:0a:70:df:33:a5:f6:a6:e3: e8:dc:33:9f:7f:2f:66:91:93:2a:1f:13:83:7d:4b: e6:6b:5b:de:cc:9a:55:a8:44:15:8c:91:f0:4a:cd: ff:20:cc:9d:6c:72:39:bb:e3:fc:58:88:62:64:b1: 1b:a1:e2:75:b7:27:a7:86:8d:26:77:8c:83:e1:64: 30:31:b2:6b:ae:21:77:57:46:fe:c1:61:83:c7:74: 66:e6:ca:59:3b:d0:9d:6b:ee:67:8d:97:0d:3c:cc: 80:2c:cb:20:9e:25:af:c9:8a:05:fa:24:57:36:04: 59:51:7e:e0:bc:e5:0c:84:80:a5:d1:e9:32:6d:d4: 2a:4c:3f:e9:33:dd:e3:8a:a3:45:3a:00:04:57:f6: e3:3e:46:8d:77:06:f7:b5:55:c3:4e:44:b7:a5:87: 47:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D9:2C:21:76:71:74:E2:AA:E5:EE:95:E4:60:43:62:9E:B6:E2:90 X509v3 Authority Key Identifier: keyid:19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:cf:c7:f7:c2:68:e6:77:23:23:ba:0c:df:ab:7d:ea:25:10: 46:45:c7:87:cf:8a:03:e8:09:0c:cc:ed:60:eb:b2:e1:b2:00: ee:06:3e:7a:d2:75:fa:ff:08:bb:7c:be:5c:62:4f:2e:9a:2c: f1:03:94:ed:3b:fd:98:da:47:0f:63:b3:d8:08:6c:98:2e:37: a5:c2:44:43:87:c3:ed:e3:87:49:d1:3c:96:60:fb:26:f4:40: 41:60:f0:fd:15:67:03:99:f5:56:65:93:5a:00:29:ef:60:a9: f0:7a:4a:28:88:08:10:46:d8:a2:b9:36:7b:b5:ec:d3:87:a5: a0:eb:b4:e8:89:d9:6e:0e:04:fa:3a:1a:51:d6:48:10:f3:e2: 21:b6:e2:08:bb:30:4c:a3:14:32:48:11:fc:2b:3a:c7:67:97: 79:e4:c3:7a:d5:77:c4:b2:ba:2d:47:b1:5a:00:5a:ea:31:ee: b8:cc:ce:cc:8f:2f:b2:2c:47:56:37:0c:7d:2a:d0:6c:88:6d: 34:21:6c:80:11:82:f7:f6:c6:1b:e4:9b:d1:bd:c9:65:71:c7: 2f:d6:9b:1f:73:b7:21:94:4e:4f:b9:2b:04:28:4e:be:54:93: 0e:8a:86:20:0b:ae:f5:87:34:01:4a:c3:2d:21:10:d6:47:a1: 2b:b4:7b:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA8WK5RWAEpIidJaUWIQ+McXRQp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNE MTJCRkQyRTAeFw0yNTA2MDMxMzI4NDRaFw0yNTA2MDYxODU0NDRaMDMxMTAvBgNV BAMTKDY5RDkyQzIxNzY3MTc0RTJBQUU1RUU5NUU0NjA0MzYyOUVCNkUyOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPTyNoEj2GIIWq2LbrumnxexOQ TY9Ksw77lBconyRORKlsqfh3MAxvOMvQaPo6N4ug3HPKSUwOwlbI1PQ5+hSlFKYx UmyrRpRHwLON+4b4qiTjWyfwBx+vmNM48N/C+/YKcN8zpfam4+jcM59/L2aRkyof E4N9S+ZrW97MmlWoRBWMkfBKzf8gzJ1scjm74/xYiGJksRuh4nW3J6eGjSZ3jIPh ZDAxsmuuIXdXRv7BYYPHdGbmylk70J1r7meNlw08zIAsyyCeJa/JigX6JFc2BFlR fuC85QyEgKXR6TJt1CpMP+kz3eOKo0U6AARX9uM+Ro13Bve1VcNORLelh0dxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUadksIXZxdOKq5e6V5GBDYp624pAwHwYDVR0j BBgwFoAUGVTDPPuvigcro7kLPoONY9Er/S4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDE5NmQ2NS0yMWE4LTRiMDQtYTlkZS03MjgzZmJlM2MxY2IvMC8xOTU0QzMzQ0ZC QUY4QTA3MkJBM0I5MEIzRTgzOEQ2M0QxMkJGRDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNEMTJC RkQyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQxOTZkNjUtMjFhOC00YjA0LWE5 ZGUtNzI4M2ZiZTNjMWNiLzAvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhE NjNEMTJCRkQyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjPx/fCaOZ3IyO6DN+rfeolEEZFx4fPigPo CQzM7WDrsuGyAO4GPnrSdfr/CLt8vlxiTy6aLPEDlO07/ZjaRw9js9gIbJguN6XC REOHw+3jh0nRPJZg+yb0QEFg8P0VZwOZ9VZlk1oAKe9gqfB6SiiICBBG2KK5Nnu1 7NOHpaDrtOiJ2W4OBPo6GlHWSBDz4iG24gi7MEyjFDJIEfwrOsdnl3nkw3rVd8Sy ui1HsVoAWuox7rjMzsyPL7IsR1Y3DH0q0GyIbTQhbIARgvf2xhvkm9G9yWVxxy/W mx9ztyGUTk+5KwQoTr5Ukw6KhiALrvWHNAFKwy0hENZHoSu0eyY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:11:20 2025 by rpki-client