$ rpki-client -vvf repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft File: 754AE571E3432B20E78045BE7B2C99E39E0F1873.mft (raw, json) Hash identifier: F/TSk2lAuXq37vJlyPTpxvm3DDthM30DFttqWhHhPk0= Subject key identifier: AB:60:33:B4:79:4F:E2:A5:60:45:60:64:F7:D3:3C:EB:6B:BD:C4:81 Authority key identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 Certificate issuer: /CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Certificate serial: 3A73F61839CEC422145BEDA3BA85F7698AE5659C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft Manifest number: 01F2 Signing time: Mon 16 Jun 2025 20:02:14 +0000 Manifest this update: Mon 16 Jun 2025 19:57:14 +0000 Manifest next update: Thu 19 Jun 2025 23:53:14 +0000 Files and hashes: 1: 3130332e372e3232362e302f32342d3234203d3e203539313335.roa (hash: ULIbSqFPc52R9R1cvdi/vhMuEMKYuHRy3ZrMm+omXuQ=) 2: 754AE571E3432B20E78045BE7B2C99E39E0F1873.crl (hash: L8294Er+jhlRNc11Hh7iZ1Dm5hu8s5VolLYo5gmak1w=) 3: 3130332e372e3232372e302f32342d3234203d3e203539313335.roa (hash: hKOsZmZYjU+WD+18E9UM9iWVv7em54RfKZekQBf+kf4=) 4: 3130332e372e3232362e302f32332d3233203d3e203539313335.roa (hash: /qz+/FrTyvqN+lKfQMLM9vGRBCrWv6ZRIa9kSi7cy5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:73:f6:18:39:ce:c4:22:14:5b:ed:a3:ba:85:f7:69:8a:e5:65:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Validity Not Before: Jun 16 19:57:14 2025 GMT Not After : Jun 19 23:53:14 2025 GMT Subject: CN=AB6033B4794FE2A560456064F7D33CEB6BBDC481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4e:7a:d3:7f:89:3f:84:5d:2c:72:06:fb:44: ae:e9:72:89:89:21:06:b1:9c:82:8b:42:45:b5:37: 5d:78:03:84:10:89:b7:fc:d9:08:8e:0f:71:ec:d1: 26:f1:7c:19:5f:e5:cc:39:71:36:0f:9d:33:4a:30: 12:be:3b:e1:8e:db:58:c6:23:63:99:9e:3d:6d:e1: 4d:77:7e:49:0b:24:88:46:3c:e4:d4:85:13:dc:18: 0e:29:95:87:41:84:7a:ec:e0:e9:be:8e:7e:f5:fd: 66:59:62:6d:fa:3a:4f:69:0f:4a:22:e8:86:85:6a: 41:72:25:99:3a:70:30:92:09:c5:97:3e:e8:7d:da: b3:be:11:87:a0:0b:16:7b:49:e1:8b:c5:da:bd:8d: 3d:18:1f:9e:78:7a:ec:30:54:dc:ef:44:fa:db:98: 3c:8d:58:cd:8d:15:5d:59:a0:68:a6:6d:52:2e:09: 46:e9:4e:cd:55:d2:1e:56:c5:4e:44:be:64:47:a3: 41:b9:da:c8:1b:16:de:cc:86:a2:02:56:0b:f5:79: 28:48:6f:e5:e2:3b:48:17:31:be:be:d2:36:d7:02: 91:43:35:ec:a9:37:8b:31:9d:b8:91:05:3f:b7:8c: ce:55:d2:80:e6:57:2a:57:1e:38:fa:68:49:cc:80: b2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:60:33:B4:79:4F:E2:A5:60:45:60:64:F7:D3:3C:EB:6B:BD:C4:81 X509v3 Authority Key Identifier: keyid:75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:59:d7:88:2b:5f:5b:3b:7f:65:a0:86:93:4c:34:7b:10:7d: 16:dc:6d:4a:57:23:3a:4c:ff:3c:9b:44:05:73:ca:05:df:8e: 1b:25:13:b7:3f:2e:d7:20:08:16:01:55:c6:67:56:7d:d2:e8: 9f:9e:b6:fd:b6:46:4c:85:f2:49:57:25:6c:43:29:5d:36:d3: 57:cc:d6:a0:f2:50:4a:e2:07:b9:a0:4c:b4:42:46:d6:09:e5: ba:e0:6c:a9:05:4b:ff:6c:d4:d7:cf:5c:8d:b6:b7:5e:e8:c6: f2:31:f3:ec:f9:86:b8:65:60:f3:b7:29:6f:52:4c:37:3f:2d: 57:04:0c:45:73:d6:62:40:2a:a3:8d:0a:57:d5:51:5a:0b:38: 70:86:7d:3f:cd:cd:3d:e2:b5:a8:00:0f:59:62:f2:43:12:30: 8f:99:91:3f:d9:c1:2d:2e:a5:37:61:bd:a2:3e:2b:bd:a5:68: 5f:52:c9:7a:cd:fa:1f:0d:e9:65:f2:67:40:b9:38:54:f5:21: be:ee:a0:23:f5:b3:92:1f:ba:d6:8e:c8:c0:b0:32:21:a6:6a: e8:40:80:38:c0:79:08:7f:61:e2:85:21:92:84:52:68:7d:af: d9:65:9b:3b:37:ad:44:24:23:b7:a2:85:9a:11:e8:15:0b:ba: e9:4a:70:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOnP2GDnOxCIUW+2juoX3aYrlZZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5 RTBGMTg3MzAeFw0yNTA2MTYxOTU3MTRaFw0yNTA2MTkyMzUzMTRaMDMxMTAvBgNV BAMTKEFCNjAzM0I0Nzk0RkUyQTU2MDQ1NjA2NEY3RDMzQ0VCNkJCREM0ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClTnrTf4k/hF0scgb7RK7pcomJ IQaxnIKLQkW1N114A4QQibf82QiOD3Hs0SbxfBlf5cw5cTYPnTNKMBK+O+GO21jG I2OZnj1t4U13fkkLJIhGPOTUhRPcGA4plYdBhHrs4Om+jn71/WZZYm36Ok9pD0oi 6IaFakFyJZk6cDCSCcWXPuh92rO+EYegCxZ7SeGLxdq9jT0YH554euwwVNzvRPrb mDyNWM2NFV1ZoGimbVIuCUbpTs1V0h5WxU5EvmRHo0G52sgbFt7MhqICVgv1eShI b+XiO0gXMb6+0jbXApFDNeypN4sxnbiRBT+3jM5V0oDmVypXHjj6aEnMgLLHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq2AztHlP4qVgRWBk99M862u9xIEwHwYDVR0j BBgwFoAUdUrlceNDKyDngEW+eyyZ454PGHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM1OGRkYS0wZmYxLTRmNmEtYmI2Ni02MGY0Y2EwNGM0OTAvMC83NTRBRTU3MUUz NDMyQjIwRTc4MDQ1QkU3QjJDOTlFMzlFMEYxODczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5RTBG MTg3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNThkZGEtMGZmMS00ZjZhLWJi NjYtNjBmNGNhMDRjNDkwLzAvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5 RTM5RTBGMTg3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdZ14grX1s7f2WghpNMNHsQfRbcbUpXIzpM /zybRAVzygXfjhslE7c/LtcgCBYBVcZnVn3S6J+etv22RkyF8klXJWxDKV0201fM 1qDyUEriB7mgTLRCRtYJ5brgbKkFS/9s1NfPXI22t17oxvIx8+z5hrhlYPO3KW9S TDc/LVcEDEVz1mJAKqONClfVUVoLOHCGfT/NzT3itagAD1li8kMSMI+ZkT/ZwS0u pTdhvaI+K72laF9SyXrN+h8N6WXyZ0C5OFT1Ib7uoCP1s5IfutaOyMCwMiGmauhA gDjAeQh/YeKFIZKEUmh9r9llmzs3rUQkI7eihZoR6BULuulKcHI= -----END CERTIFICATE-----Generated at Tue Jun 17 10:35:04 2025 by rpki-client