$ rpki-client -vvf repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft File: 1154D920B6A4209131871530AEE1F8B8A3D303D6.mft (raw, json) Hash identifier: r+XkjXLewy0yEgZBmHpaaSD+e2XMd6MsOxZ3sMqjeoQ= Subject key identifier: 2A:8F:B1:28:ED:D1:52:9A:CE:9C:9C:6B:2E:1C:A1:3D:7D:F0:3A:97 Authority key identifier: 11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 Certificate issuer: /CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Certificate serial: 654FF7BEB639EEB090002AE55CEC50C8FA571188 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft Manifest number: 01DF Signing time: Wed 18 Jun 2025 11:21:07 +0000 Manifest this update: Wed 18 Jun 2025 11:16:07 +0000 Manifest next update: Sat 21 Jun 2025 16:15:07 +0000 Files and hashes: 1: 1154D920B6A4209131871530AEE1F8B8A3D303D6.crl (hash: Mp3c6hHK2N/GmfVBQG4rGR3iqDuy+rIYcO+HmLWmvF8=) 2: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: Pil6JjAZAhk6oGR6yVNwjzUnJBqxVVzN/QVFAe7clnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:4f:f7:be:b6:39:ee:b0:90:00:2a:e5:5c:ec:50:c8:fa:57:11:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Validity Not Before: Jun 18 11:16:07 2025 GMT Not After : Jun 21 16:15:07 2025 GMT Subject: CN=2A8FB128EDD1529ACE9C9C6B2E1CA13D7DF03A97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:77:4f:1c:0a:50:8f:e2:99:77:ce:43:6e:62: 78:fc:13:0a:5b:00:a6:33:49:d8:ca:d6:1e:ff:b7: 8a:2e:ca:bb:90:9c:05:7c:3d:33:e6:6b:ba:89:ef: d8:27:b5:5f:da:a3:2d:a3:86:f8:dd:03:82:ed:62: 20:61:e9:d1:55:4a:f0:9e:3a:53:14:46:3f:c6:a0: 5e:eb:5d:8f:31:b1:14:f6:17:9f:ab:ae:1f:75:3b: 88:d2:81:12:f2:0c:e5:fa:76:af:8f:e5:f0:fa:2e: 41:26:5c:4e:a4:43:9c:c8:17:9f:4d:18:59:5e:b2: be:7b:19:ee:70:fb:b3:b5:c9:5a:dc:0f:b1:65:93: 79:19:77:5f:64:bb:4a:4a:e5:ed:6c:0c:4e:91:91: 5e:f8:9e:8d:0d:7c:62:e5:2b:4f:9c:cc:06:15:8e: 7d:dd:16:97:d4:a0:1d:43:c3:ae:8e:e1:e8:0d:40: 11:ba:e5:d4:20:11:6e:ff:17:90:9e:bf:15:d7:9c: 7d:80:f5:13:f8:ae:c2:05:5f:1f:35:bf:eb:c3:8e: 9f:73:12:37:67:2a:ba:8a:0c:da:9b:9b:bc:63:07: 93:61:a1:f8:55:45:c4:dc:7d:3c:b3:71:09:8e:fb: a4:69:1c:66:d9:b4:41:0f:8d:70:ef:fe:d6:8e:a7: ac:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8F:B1:28:ED:D1:52:9A:CE:9C:9C:6B:2E:1C:A1:3D:7D:F0:3A:97 X509v3 Authority Key Identifier: keyid:11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:7f:59:b5:bb:df:49:62:cd:a1:7a:47:01:fb:75:aa:aa:26: 88:35:5b:b9:1d:31:77:40:0a:73:10:81:83:1d:72:b4:d8:e3: 17:e7:5f:65:e9:7d:74:f3:b4:de:28:e4:36:ec:12:bb:2c:2e: 66:d5:4c:54:35:df:ed:21:82:6e:ab:29:66:6a:05:7b:ab:0d: 44:b0:8d:ff:de:31:59:eb:ba:9d:9f:4f:17:95:b3:f8:48:13: b9:99:83:c0:40:7b:22:34:c9:70:98:6d:8b:b9:c3:e7:ab:ac: 30:75:97:94:ca:9d:6a:04:21:b3:d4:e9:f4:06:b6:c9:e0:96: 06:63:f5:5f:64:ac:f2:03:b6:38:7e:59:ed:99:af:be:45:91: 70:3a:63:46:d6:31:3e:7c:de:1d:36:95:82:31:5e:b7:64:72: 3f:d0:3e:62:dd:83:ec:26:04:c8:5d:ce:5e:c8:36:17:3b:49: aa:c8:cc:e1:9f:5e:1e:94:32:c1:a3:9d:ec:7f:56:78:28:27: cb:4e:97:d2:44:e3:b4:e0:71:de:36:09:f4:96:33:98:07:bf: 04:a2:c0:33:e0:02:37:34:57:30:9c:0e:b7:35:79:9b:f6:2c: 7f:3d:1f:2d:b5:c3:e3:b4:a9:63:c3:2a:22:ab:09:77:05:95: cc:49:19:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZU/3vrY57rCQACrlXOxQyPpXEYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhB M0QzMDNENjAeFw0yNTA2MTgxMTE2MDdaFw0yNTA2MjExNjE1MDdaMDMxMTAvBgNV BAMTKDJBOEZCMTI4RUREMTUyOUFDRTlDOUM2QjJFMUNBMTNEN0RGMDNBOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjd08cClCP4pl3zkNuYnj8Ewpb AKYzSdjK1h7/t4ouyruQnAV8PTPma7qJ79gntV/aoy2jhvjdA4LtYiBh6dFVSvCe OlMURj/GoF7rXY8xsRT2F5+rrh91O4jSgRLyDOX6dq+P5fD6LkEmXE6kQ5zIF59N GFlesr57Ge5w+7O1yVrcD7Flk3kZd19ku0pK5e1sDE6RkV74no0NfGLlK0+czAYV jn3dFpfUoB1Dw66O4egNQBG65dQgEW7/F5CevxXXnH2A9RP4rsIFXx81v+vDjp9z EjdnKrqKDNqbm7xjB5NhofhVRcTcfTyzcQmO+6RpHGbZtEEPjXDv/taOp6xXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKo+xKO3RUprOnJxrLhyhPX3wOpcwHwYDVR0j BBgwFoAUEVTZILakIJExhxUwruH4uKPTA9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY3ZWMzMy01YTcyLTRjNjUtOWZkMy02NmVmODQ3OTM5NGQvMC8xMTU0RDkyMEI2 QTQyMDkxMzE4NzE1MzBBRUUxRjhCOEEzRDMwM0Q2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhBM0Qz MDNENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2N2VjMzMtNWE3Mi00YzY1LTlm ZDMtNjZlZjg0NzkzOTRkLzAvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4 QjhBM0QzMDNENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAER/WbW730lizaF6RwH7daqqJog1W7kdMXdA CnMQgYMdcrTY4xfnX2XpfXTztN4o5DbsErssLmbVTFQ13+0hgm6rKWZqBXurDUSw jf/eMVnrup2fTxeVs/hIE7mZg8BAeyI0yXCYbYu5w+errDB1l5TKnWoEIbPU6fQG tsnglgZj9V9krPIDtjh+We2Zr75FkXA6Y0bWMT583h02lYIxXrdkcj/QPmLdg+wm BMhdzl7INhc7SarIzOGfXh6UMsGjnex/VngoJ8tOl9JE47Tgcd42CfSWM5gHvwSi wDPgAjc0VzCcDrc1eZv2LH89Hy21w+O0qWPDKiKrCXcFlcxJGWs= -----END CERTIFICATE-----Generated at Fri Jun 20 06:52:45 2025 by rpki-client