$ rpki-client -vvf repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft File: 754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft (raw, json) Hash identifier: EF4hDVK1xIE6Nyf217eHJt6fu8jK99tp6/iy45NodTE= Subject key identifier: 9E:CE:CA:BC:C0:37:42:68:D6:C9:19:93:CF:E7:9A:7E:8A:40:54:16 Authority key identifier: 75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB Certificate issuer: /CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB Certificate serial: 180153477727AE749B163C2362D4E0F4AB4C53D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft Manifest number: 0212 Signing time: Wed 18 Jun 2025 06:21:35 +0000 Manifest this update: Wed 18 Jun 2025 06:16:35 +0000 Manifest next update: Sat 21 Jun 2025 07:23:35 +0000 Files and hashes: 1: 754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl (hash: 4xQssPhUvf5zD03k1AX76hz5Wh1EEOKn1MkjAPJ78no=) 2: 3131302e39332e31322e302f32322d3234203d3e203435373037.roa (hash: 7iXx5jGESFjpBjO3AiKnrpyYnQjS82YYkQqBjeaeWk0=) 3: 3230322e34332e3131362e302f32332d3234203d3e203435373037.roa (hash: Sf9PeSZZ7a8NKRrtWUTmVWuqUtTX2GsdEZGDuX14gwU=) 4: 3130332e382e35362e302f32322d3234203d3e203435373037.roa (hash: e0FCZrIOKWaH0btSP4kAUqXaQNeE2QggQ8Gj6R8jPew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 07:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:01:53:47:77:27:ae:74:9b:16:3c:23:62:d4:e0:f4:ab:4c:53:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB Validity Not Before: Jun 18 06:16:35 2025 GMT Not After : Jun 21 07:23:35 2025 GMT Subject: CN=9ECECABCC0374268D6C91993CFE79A7E8A405416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1c:8b:4f:39:cb:64:50:2e:a7:b8:02:59:3d: cd:2a:e3:14:4b:47:f6:32:ed:06:95:bf:c7:56:c6: 87:bb:df:47:52:88:0e:37:25:e9:2a:f5:f9:e7:6a: 9d:97:84:2d:12:95:63:05:52:09:e4:c8:2e:e3:57: 63:70:48:3b:50:0d:52:6c:ae:cf:15:d9:e4:89:f6: ad:29:30:54:4d:a1:4f:a7:e0:89:3e:75:88:36:9c: 46:7d:f5:af:95:f7:1c:11:01:70:12:bf:5b:4b:52: 21:ed:6c:7e:cd:6a:8a:e5:16:5c:31:ad:5a:81:c8: 81:83:94:18:71:26:73:84:5c:f7:1a:b4:fd:73:73: 91:4b:e5:21:4a:ea:57:98:f4:77:e9:a4:ab:17:98: bd:41:19:9c:8c:92:e0:a1:e6:32:1c:4b:11:cc:fc: 7b:f0:32:92:b3:6d:04:cf:3b:5e:27:61:5f:2d:00: e0:98:f9:f6:e9:2c:56:92:14:19:6c:a8:21:39:e6: 19:49:3e:82:fc:e3:88:a4:53:a6:66:6b:16:af:d1: 8d:51:72:8a:3c:be:1c:d7:65:f7:97:7c:11:98:f2: db:1a:f6:03:ff:a1:66:8f:e9:28:d4:d8:d6:81:dc: 39:7b:51:ef:be:bc:e7:63:da:a1:42:b4:ad:e7:ac: 21:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CE:CA:BC:C0:37:42:68:D6:C9:19:93:CF:E7:9A:7E:8A:40:54:16 X509v3 Authority Key Identifier: keyid:75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:f3:9a:f4:5a:6b:60:4f:ec:cd:f8:06:a9:95:c4:7a:3f:06: 82:94:91:e2:c8:71:5c:e0:ea:e6:5f:af:a8:a4:0b:27:04:4d: 8f:0e:d3:e9:22:8b:76:70:a4:31:73:de:c3:25:47:b9:8e:dd: 15:04:b8:23:a8:83:09:fb:47:36:16:d3:59:99:75:08:3d:fe: b1:03:c4:c9:cb:ec:00:0a:8f:eb:af:10:5c:c1:87:fb:88:8e: 38:a2:ff:34:d3:df:a2:72:e4:11:ee:97:b4:b4:d2:53:d9:e9: 10:b7:e1:f2:e2:0b:ca:9a:4f:c8:4c:6b:9f:f7:60:49:cd:16: b2:55:98:d3:8d:c6:1e:6b:08:06:2c:78:3e:80:f4:70:4a:be: 6a:9e:71:f2:a2:40:d7:bc:c1:14:6d:68:01:f8:fc:d7:5a:4e: b8:fc:5a:6f:f2:7f:81:cb:e5:60:e0:98:62:83:ac:fb:76:a2: 9c:fb:c9:3d:9f:73:ff:35:f9:2f:51:71:e5:e4:e8:69:9e:a0: 6a:65:5b:55:ae:ec:fc:97:81:1f:94:a9:99:9f:88:5b:41:11: 70:de:28:66:ef:d3:dd:b4:c0:35:5c:52:d9:c9:b4:a5:4b:c3: b7:0f:d6:c1:f0:e5:6f:49:79:be:0a:24:95:01:d6:59:7a:90: 66:cb:e6:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGAFTR3cnrnSbFjwjYtTg9KtMU9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1QjcxQzU5 QjJBM0NDQjAeFw0yNTA2MTgwNjE2MzVaFw0yNTA2MjEwNzIzMzVaMDMxMTAvBgNV BAMTKDlFQ0VDQUJDQzAzNzQyNjhENkM5MTk5M0NGRTc5QTdFOEE0MDU0MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPHItPOctkUC6nuAJZPc0q4xRL R/Yy7QaVv8dWxoe730dSiA43Jekq9fnnap2XhC0SlWMFUgnkyC7jV2NwSDtQDVJs rs8V2eSJ9q0pMFRNoU+n4Ik+dYg2nEZ99a+V9xwRAXASv1tLUiHtbH7NaorlFlwx rVqByIGDlBhxJnOEXPcatP1zc5FL5SFK6leY9HfppKsXmL1BGZyMkuCh5jIcSxHM /HvwMpKzbQTPO14nYV8tAOCY+fbpLFaSFBlsqCE55hlJPoL844ikU6Zmaxav0Y1R coo8vhzXZfeXfBGY8tsa9gP/oWaP6SjU2NaB3Dl7Ue++vOdj2qFCtK3nrCFPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUns7KvMA3QmjWyRmTz+eafopAVBYwHwYDVR0j BBgwFoAUdUvASJJDBjKoyWWvTFtxxZsqPMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGQyYmRlNC0wNTZiLTQ1YzYtODBiZi1mNWQ0ZDI3NzMzNmIvMC83NTRCQzA0ODky NDMwNjMyQThDOTY1QUY0QzVCNzFDNTlCMkEzQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1QjcxQzU5QjJB M0NDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBkMmJkZTQtMDU2Yi00NWM2LTgw YmYtZjVkNGQyNzczMzZiLzAvNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1Qjcx QzU5QjJBM0NDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDzmvRaa2BP7M34BqmVxHo/BoKUkeLIcVzg 6uZfr6ikCycETY8O0+kii3ZwpDFz3sMlR7mO3RUEuCOogwn7RzYW01mZdQg9/rED xMnL7AAKj+uvEFzBh/uIjjii/zTT36Jy5BHul7S00lPZ6RC34fLiC8qaT8hMa5/3 YEnNFrJVmNONxh5rCAYseD6A9HBKvmqecfKiQNe8wRRtaAH4/NdaTrj8Wm/yf4HL 5WDgmGKDrPt2opz7yT2fc/81+S9RceXk6GmeoGplW1Wu7PyXgR+UqZmfiFtBEXDe KGbv0920wDVcUtnJtKVLw7cP1sHw5W9Jeb4KJJUB1ll6kGbL5ls= -----END CERTIFICATE-----Generated at Wed Jun 18 20:59:20 2025 by rpki-client