$ rpki-client -vvf repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft File: 1154D920B6A4209131871530AEE1F8B8A3D303D6.mft (raw, json) Hash identifier: v0NX6vcxK6gqYQpSIe+fhKXZusRZ+1xPFVfX8S39aFE= Subject key identifier: 15:5B:71:96:7E:04:4A:07:23:70:E9:96:31:E6:03:7A:6A:67:A8:E6 Authority key identifier: 11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 Certificate issuer: /CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Certificate serial: 2BAD34D1C73AD7137CBD44AFEFB1D25AEDC58AEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft Manifest number: 021D Signing time: Mon 03 Nov 2025 20:11:10 +0000 Manifest this update: Mon 03 Nov 2025 20:06:10 +0000 Manifest next update: Fri 07 Nov 2025 00:17:10 +0000 Files and hashes: 1: 1154D920B6A4209131871530AEE1F8B8A3D303D6.crl (hash: UR5D73U30DLxHEJuqjHfDmqtRcF5JqHA7ykP5ifaTCg=) 2: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: Pil6JjAZAhk6oGR6yVNwjzUnJBqxVVzN/QVFAe7clnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ad:34:d1:c7:3a:d7:13:7c:bd:44:af:ef:b1:d2:5a:ed:c5:8a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Validity Not Before: Nov 3 20:06:10 2025 GMT Not After : Nov 7 00:17:10 2025 GMT Subject: CN=155B71967E044A072370E99631E6037A6A67A8E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b7:8a:e7:16:57:2b:93:6e:3a:69:39:4a:ac: 81:5c:6e:1b:08:0a:ea:0e:bc:d2:17:45:30:0c:72: 11:01:d2:55:1b:9f:87:3d:bc:76:95:59:0d:42:23: c9:84:ac:30:ba:a8:40:2c:26:c1:c7:d5:08:60:67: 8a:bf:f7:dd:4d:ca:07:5d:f8:67:4d:7e:03:4d:25: 89:00:54:59:de:7a:3b:27:3d:8e:95:b6:aa:7d:3c: ba:5b:bd:c7:dd:f7:3e:90:8f:b5:aa:d1:78:15:6d: dc:9d:70:ac:6e:61:44:db:3a:2b:29:ce:20:0e:49: 6f:b4:5e:cf:34:9c:55:fe:c2:cd:7c:ae:b3:46:03: 7f:87:d5:62:cc:09:c9:9b:4a:58:3d:fb:e5:f8:63: ac:f4:38:36:9f:40:74:88:61:1c:b4:e0:8f:1f:dd: 85:d8:1f:e8:fa:9d:2e:13:7c:0b:7c:00:c7:54:e9: d8:5d:c1:cf:79:8a:65:7d:fc:37:b1:e7:25:5e:7f: 0f:20:25:e3:9c:be:bd:11:49:19:7a:fb:03:73:59: 68:b5:e6:60:5b:84:38:f9:62:65:d2:f8:d3:4a:9f: a0:80:f8:fc:f2:08:36:23:d3:d9:9e:23:68:cb:e9: 4b:ec:f3:59:d0:d8:9c:d8:56:c4:af:de:a4:84:10: 9f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5B:71:96:7E:04:4A:07:23:70:E9:96:31:E6:03:7A:6A:67:A8:E6 X509v3 Authority Key Identifier: keyid:11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:3d:2c:4d:7b:09:65:00:8d:a5:52:dd:2c:10:4e:16:72:ca: fe:d0:c4:5f:fe:a5:69:c0:f6:ad:96:38:08:e4:be:5a:2c:a1: 9a:b9:85:b9:b5:5d:bc:c0:00:ee:b7:dc:ea:bc:d2:a9:57:d5: de:c2:7e:17:fc:de:9e:16:ac:7a:bd:ef:e0:0f:d4:17:60:7a: 09:a0:0a:a7:54:a3:3e:c0:6b:49:3d:68:92:cb:ae:bb:f9:4f: 7c:76:b4:77:52:4c:4f:bc:72:29:d8:89:9e:71:13:95:4d:ae: 41:9e:86:73:36:9a:90:b7:2e:99:fa:70:7c:8a:0c:ec:2e:9f: 34:77:08:44:09:9d:53:f9:0d:c8:8d:c6:a4:b5:84:3c:35:59: 2f:fa:88:fc:4f:e0:47:12:e3:0c:df:28:30:20:61:fa:2e:df: b7:d2:ea:8b:39:29:77:46:fe:a0:18:64:50:48:29:71:6c:95: 7b:94:80:03:71:90:36:1c:dc:2d:4a:7d:55:86:91:3d:9d:8d: a1:69:d9:df:48:05:5d:19:9c:be:09:43:ef:92:19:63:a4:3b: 04:7d:a6:4a:1e:12:80:7d:b2:36:70:87:1e:87:4b:99:1d:d9: 26:f1:f3:e4:5f:cd:17:70:b4:4a:10:f3:56:e9:8d:b3:f5:06: 67:78:9f:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK6000cc61xN8vUSv77HSWu3FiuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhB M0QzMDNENjAeFw0yNTExMDMyMDA2MTBaFw0yNTExMDcwMDE3MTBaMDMxMTAvBgNV BAMTKDE1NUI3MTk2N0UwNDRBMDcyMzcwRTk5NjMxRTYwMzdBNkE2N0E4RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDht4rnFlcrk246aTlKrIFcbhsI CuoOvNIXRTAMchEB0lUbn4c9vHaVWQ1CI8mErDC6qEAsJsHH1QhgZ4q/991Nygdd +GdNfgNNJYkAVFneejsnPY6Vtqp9PLpbvcfd9z6Qj7Wq0XgVbdydcKxuYUTbOisp ziAOSW+0Xs80nFX+ws18rrNGA3+H1WLMCcmbSlg9++X4Y6z0ODafQHSIYRy04I8f 3YXYH+j6nS4TfAt8AMdU6dhdwc95imV9/Dex5yVefw8gJeOcvr0RSRl6+wNzWWi1 5mBbhDj5YmXS+NNKn6CA+PzyCDYj09meI2jL6Uvs81nQ2JzYVsSv3qSEEJ9XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFVtxln4ESgcjcOmWMeYDempnqOYwHwYDVR0j BBgwFoAUEVTZILakIJExhxUwruH4uKPTA9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY3ZWMzMy01YTcyLTRjNjUtOWZkMy02NmVmODQ3OTM5NGQvMC8xMTU0RDkyMEI2 QTQyMDkxMzE4NzE1MzBBRUUxRjhCOEEzRDMwM0Q2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhBM0Qz MDNENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2N2VjMzMtNWE3Mi00YzY1LTlm ZDMtNjZlZjg0NzkzOTRkLzAvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4 QjhBM0QzMDNENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFc9LE17CWUAjaVS3SwQThZyyv7QxF/+pWnA 9q2WOAjkvlosoZq5hbm1XbzAAO633Oq80qlX1d7Cfhf83p4WrHq97+AP1Bdgegmg CqdUoz7Aa0k9aJLLrrv5T3x2tHdSTE+8cinYiZ5xE5VNrkGehnM2mpC3Lpn6cHyK DOwunzR3CEQJnVP5DciNxqS1hDw1WS/6iPxP4EcS4wzfKDAgYfou37fS6os5KXdG /qAYZFBIKXFslXuUgANxkDYc3C1KfVWGkT2djaFp2d9IBV0ZnL4JQ++SGWOkOwR9 pkoeEoB9sjZwhx6HS5kd2Sbx8+RfzRdwtEoQ81bpjbP1Bmd4n8s= -----END CERTIFICATE-----Generated at Wed Nov 5 05:15:57 2025 by rpki-client