$ rpki-client -vvf repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft File: 1154D920B6A4209131871530AEE1F8B8A3D303D6.mft (raw, json) Hash identifier: vsdq6PZqosfPWAp01Xt6ZPsi/GNJZkZZMcC1Azmuu+E= Subject key identifier: 15:EB:BF:6C:23:E5:CB:60:10:51:E5:E1:86:27:51:85:01:77:CB:12 Authority key identifier: 11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 Certificate issuer: /CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Certificate serial: 2B9C6950CCF72EFF422D7CC3AD5688CDCABCDCA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft Manifest number: 01F7 Signing time: Sun 10 Aug 2025 08:31:08 +0000 Manifest this update: Sun 10 Aug 2025 08:26:08 +0000 Manifest next update: Wed 13 Aug 2025 18:02:08 +0000 Files and hashes: 1: 1154D920B6A4209131871530AEE1F8B8A3D303D6.crl (hash: 7JdahwV0AdhFgdFCACd1ZqFRccDQeExhs2h/cu/QfEY=) 2: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: Pil6JjAZAhk6oGR6yVNwjzUnJBqxVVzN/QVFAe7clnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 18:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:9c:69:50:cc:f7:2e:ff:42:2d:7c:c3:ad:56:88:cd:ca:bc:dc:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Validity Not Before: Aug 10 08:26:08 2025 GMT Not After : Aug 13 18:02:08 2025 GMT Subject: CN=15EBBF6C23E5CB601051E5E1862751850177CB12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:51:1e:9e:07:b3:a8:2c:b9:b0:de:eb:a5:fb: 7d:ba:39:fd:eb:88:7e:6b:6c:07:7f:1c:77:23:e2: 6f:59:7a:3b:94:d3:08:d0:d9:49:47:90:b0:4b:d0: 05:69:81:94:bb:ad:74:67:27:f4:90:e1:99:d3:f4: 2d:ca:af:02:0c:13:32:90:e6:db:47:d9:a5:18:cc: dd:4b:37:cc:ef:ba:49:a1:d6:f6:c2:a4:f5:e5:5a: c6:d7:89:b1:ac:5f:44:be:7a:d7:ef:ad:10:09:2b: 6a:11:d5:40:ee:af:9d:ae:92:c2:a5:66:6b:74:d6: ff:6d:25:5b:06:d0:55:e3:9a:db:43:7c:ab:66:8e: 1a:43:a4:0f:13:f7:4d:c2:ba:0f:7b:5f:68:47:6b: 29:95:e0:f9:87:e2:4f:6b:a9:9e:46:b9:df:85:52: e5:bf:41:48:9e:f5:e9:65:d5:4c:93:4b:18:d1:a6: d2:f4:24:e4:eb:2b:f3:71:af:6a:a0:cf:07:b0:c2: e4:e8:71:87:0f:3b:d7:cb:5e:29:ad:5a:55:cc:24: 56:c5:a1:79:5a:1b:b8:90:7d:7d:c0:ad:df:e9:b4: 37:da:87:b2:fd:4e:08:1a:e2:65:6f:68:07:d6:db: 41:09:ba:74:0f:61:7a:e5:d4:b3:bb:ab:7d:2e:2f: eb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:EB:BF:6C:23:E5:CB:60:10:51:E5:E1:86:27:51:85:01:77:CB:12 X509v3 Authority Key Identifier: keyid:11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:3f:8f:d8:cd:2f:ac:2d:d3:ef:fa:25:bc:3a:78:aa:3f:0a: b2:38:ac:c9:78:1d:99:21:8a:33:74:06:8f:54:bc:03:ca:a7: fd:47:91:30:0f:63:09:d8:c2:39:42:32:af:25:20:0f:7e:69: 96:a7:21:ac:cb:35:ee:4f:fd:52:6c:06:28:fb:86:ce:d4:27: c0:3b:2a:3b:98:b2:a3:cd:d0:ae:52:66:55:3c:50:db:54:4a: e7:40:83:e5:28:cb:f6:1e:ff:5d:6c:c8:a9:5c:52:18:76:15: cc:d6:bf:81:6b:7b:5b:1b:e3:64:29:68:be:07:7c:c3:b7:ba: 84:5b:c2:c5:c8:3c:11:e0:8e:74:1d:b4:52:18:3d:06:94:4e: 80:76:22:75:47:44:04:0d:e0:a6:0e:a4:ba:e7:d0:92:63:26: f0:4b:0d:da:a4:60:93:52:30:87:53:11:15:6c:bd:f5:04:02: f7:7d:b1:e4:94:8a:3b:5f:ab:d6:35:4d:25:a2:f6:34:4f:03: 47:09:be:c9:e6:05:78:39:15:b7:b6:d8:91:46:9b:37:b5:b4: 33:db:34:c9:9a:60:e5:a2:b7:e2:8d:d3:8d:7b:8e:27:43:19: c1:92:40:ae:2c:90:aa:e1:e0:b4:b0:91:49:c9:68:54:dd:45: 91:be:21:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK5xpUMz3Lv9CLXzDrVaIzcq83KgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhB M0QzMDNENjAeFw0yNTA4MTAwODI2MDhaFw0yNTA4MTMxODAyMDhaMDMxMTAvBgNV BAMTKDE1RUJCRjZDMjNFNUNCNjAxMDUxRTVFMTg2Mjc1MTg1MDE3N0NCMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqUR6eB7OoLLmw3uul+326Of3r iH5rbAd/HHcj4m9ZejuU0wjQ2UlHkLBL0AVpgZS7rXRnJ/SQ4ZnT9C3KrwIMEzKQ 5ttH2aUYzN1LN8zvukmh1vbCpPXlWsbXibGsX0S+etfvrRAJK2oR1UDur52uksKl Zmt01v9tJVsG0FXjmttDfKtmjhpDpA8T903Cug97X2hHaymV4PmH4k9rqZ5Gud+F UuW/QUie9ell1UyTSxjRptL0JOTrK/Nxr2qgzwewwuTocYcPO9fLXimtWlXMJFbF oXlaG7iQfX3Ard/ptDfah7L9Tgga4mVvaAfW20EJunQPYXrl1LO7q30uL+uzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFeu/bCPly2AQUeXhhidRhQF3yxIwHwYDVR0j BBgwFoAUEVTZILakIJExhxUwruH4uKPTA9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY3ZWMzMy01YTcyLTRjNjUtOWZkMy02NmVmODQ3OTM5NGQvMC8xMTU0RDkyMEI2 QTQyMDkxMzE4NzE1MzBBRUUxRjhCOEEzRDMwM0Q2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhBM0Qz MDNENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2N2VjMzMtNWE3Mi00YzY1LTlm ZDMtNjZlZjg0NzkzOTRkLzAvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4 QjhBM0QzMDNENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEA/j9jNL6wt0+/6Jbw6eKo/CrI4rMl4HZkh ijN0Bo9UvAPKp/1HkTAPYwnYwjlCMq8lIA9+aZanIazLNe5P/VJsBij7hs7UJ8A7 KjuYsqPN0K5SZlU8UNtUSudAg+Uoy/Ye/11syKlcUhh2FczWv4Fre1sb42QpaL4H fMO3uoRbwsXIPBHgjnQdtFIYPQaUToB2InVHRAQN4KYOpLrn0JJjJvBLDdqkYJNS MIdTERVsvfUEAvd9seSUijtfq9Y1TSWi9jRPA0cJvsnmBXg5Fbe22JFGmze1tDPb NMmaYOWit+KN0417jidDGcGSQK4skKrh4LSwkUnJaFTdRZG+Id8= -----END CERTIFICATE-----Generated at Mon Aug 11 04:20:25 2025 by rpki-client