$ rpki-client -vvf repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft File: 754AE571E3432B20E78045BE7B2C99E39E0F1873.mft (raw, json) Hash identifier: LIEUoQ2/ljdE7THA+FRi+/T/ITzztNN+mljHe2HsoaQ= Subject key identifier: EE:60:25:45:99:EC:45:28:2D:CA:5A:E1:E5:9B:D6:4F:F7:4C:E9:85 Authority key identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 Certificate issuer: /CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Certificate serial: 7E3954E1FD91878A8923F44C815A3F7D230A5E8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft Manifest number: 020C Signing time: Tue 12 Aug 2025 09:12:06 +0000 Manifest this update: Tue 12 Aug 2025 09:07:06 +0000 Manifest next update: Fri 15 Aug 2025 10:40:06 +0000 Files and hashes: 1: 3130332e372e3232362e302f32332d3233203d3e203539313335.roa (hash: /qz+/FrTyvqN+lKfQMLM9vGRBCrWv6ZRIa9kSi7cy5M=) 2: 754AE571E3432B20E78045BE7B2C99E39E0F1873.crl (hash: dQKuibd99Fqb1JKIsiVD7vHb0u7aMECDcH5Fr8OkKMY=) 3: 3130332e372e3232362e302f32342d3234203d3e203539313335.roa (hash: d1VqPlCHSAGRA/UEI5pUZ6WXcTK62ba2i6gugZCVB1Y=) 4: 3130332e372e3232372e302f32342d3234203d3e203539313335.roa (hash: Fle5qLzNk23ZNkYRzf8mlYQ/OLfLBGZjvUjXRT80jgM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 Aug 2025 10:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:39:54:e1:fd:91:87:8a:89:23:f4:4c:81:5a:3f:7d:23:0a:5e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Validity Not Before: Aug 12 09:07:06 2025 GMT Not After : Aug 15 10:40:06 2025 GMT Subject: CN=EE60254599EC45282DCA5AE1E59BD64FF74CE985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:08:73:e2:ec:1d:06:ee:6a:e8:6a:a6:48:9c: 45:57:a5:32:30:49:bb:88:fc:83:35:2c:81:f0:b9: eb:70:31:78:b6:7c:f9:14:57:87:7c:9e:8a:6a:db: 9c:62:4b:a2:3c:72:a5:74:c9:b4:c3:f1:30:e6:e3: 8d:46:d2:e7:68:63:cc:13:f9:54:51:f9:56:66:e0: ed:69:28:84:d1:bb:e6:ad:43:11:46:fa:d9:23:e3: a4:cb:b3:4c:93:a9:87:f1:65:e0:f7:82:68:46:ec: 0c:8c:27:6d:84:d9:f1:1a:e3:bd:df:ca:b5:76:e0: 36:df:e1:d9:b4:6a:fb:08:eb:ac:32:02:22:14:5c: 10:7b:b8:e1:74:d7:e4:2d:d7:aa:0f:e7:b9:84:93: 15:89:cb:4c:94:96:ec:f0:07:7a:10:a5:ed:0c:cc: 06:69:db:88:68:90:14:e1:16:78:70:e7:b8:79:d8: 63:1c:97:cd:98:70:26:ac:d3:a4:b1:45:02:d7:d0: f7:2a:d8:fb:57:1d:36:9d:fd:4e:0a:35:fc:fa:f0: 4c:f8:13:b8:c5:71:04:ab:2d:79:0b:d5:23:ea:3e: f7:b6:fb:ca:0f:98:da:8a:9e:89:62:08:dc:45:05: 8d:a2:1c:de:32:da:f8:58:22:b5:c1:6e:66:97:d2: 73:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:60:25:45:99:EC:45:28:2D:CA:5A:E1:E5:9B:D6:4F:F7:4C:E9:85 X509v3 Authority Key Identifier: keyid:75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:cc:65:a2:a7:65:20:9b:15:33:45:07:57:3d:9a:8a:2d:39: 72:c0:d1:04:95:4f:ac:a2:48:4c:f2:00:64:83:4a:79:8c:d2: 9e:24:2c:63:1f:27:ca:93:34:ec:63:7b:4c:b6:6f:45:b1:61: 5d:64:c5:7c:c4:12:ac:4a:64:f3:86:93:3f:13:c4:91:a1:2f: 81:61:a7:74:69:53:60:60:a6:4e:c9:85:28:a7:f3:2c:fb:b5: 12:80:2a:7f:7a:3a:21:af:4a:c1:c4:97:b6:9d:4e:ec:17:24: a5:16:60:36:86:10:44:22:79:94:ca:70:ed:16:48:a7:31:d0: 32:cf:e6:07:6e:34:22:21:1a:a2:95:69:24:85:e1:b8:e2:ef: b7:d3:6f:56:d9:f8:fe:4a:bd:e0:1c:5a:5a:6b:f7:6b:e0:72: 8d:f9:e2:f4:d7:db:81:4e:44:cd:73:98:7d:f2:df:50:c5:e9: bb:b7:a2:f1:3b:ff:cc:82:66:4e:8a:26:7e:ce:62:9d:c8:0f: a3:b6:65:6d:2a:5f:22:65:bb:78:f1:a1:4c:e5:e5:e5:ae:1b: 55:88:b7:d3:ab:e4:c1:bd:6b:ec:31:07:a4:46:03:fe:9c:12: 2a:f1:52:60:2e:00:62:e6:2a:c6:36:e2:e5:56:b4:69:d9:6f: 95:7a:7a:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfjlU4f2Rh4qJI/RMgVo/fSMKXowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5 RTBGMTg3MzAeFw0yNTA4MTIwOTA3MDZaFw0yNTA4MTUxMDQwMDZaMDMxMTAvBgNV BAMTKEVFNjAyNTQ1OTlFQzQ1MjgyRENBNUFFMUU1OUJENjRGRjc0Q0U5ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0CHPi7B0G7mroaqZInEVXpTIw SbuI/IM1LIHwuetwMXi2fPkUV4d8nopq25xiS6I8cqV0ybTD8TDm441G0udoY8wT +VRR+VZm4O1pKITRu+atQxFG+tkj46TLs0yTqYfxZeD3gmhG7AyMJ22E2fEa473f yrV24Dbf4dm0avsI66wyAiIUXBB7uOF01+Qt16oP57mEkxWJy0yUluzwB3oQpe0M zAZp24hokBThFnhw57h52GMcl82YcCas06SxRQLX0Pcq2PtXHTad/U4KNfz68Ez4 E7jFcQSrLXkL1SPqPve2+8oPmNqKnoliCNxFBY2iHN4y2vhYIrXBbmaX0nMlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7mAlRZnsRSgtylrh5ZvWT/dM6YUwHwYDVR0j BBgwFoAUdUrlceNDKyDngEW+eyyZ454PGHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM1OGRkYS0wZmYxLTRmNmEtYmI2Ni02MGY0Y2EwNGM0OTAvMC83NTRBRTU3MUUz NDMyQjIwRTc4MDQ1QkU3QjJDOTlFMzlFMEYxODczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5RTBG MTg3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNThkZGEtMGZmMS00ZjZhLWJi NjYtNjBmNGNhMDRjNDkwLzAvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5 RTM5RTBGMTg3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbMZaKnZSCbFTNFB1c9mootOXLA0QSVT6yi SEzyAGSDSnmM0p4kLGMfJ8qTNOxje0y2b0WxYV1kxXzEEqxKZPOGkz8TxJGhL4Fh p3RpU2Bgpk7JhSin8yz7tRKAKn96OiGvSsHEl7adTuwXJKUWYDaGEEQieZTKcO0W SKcx0DLP5gduNCIhGqKVaSSF4bji77fTb1bZ+P5KveAcWlpr92vgco354vTX24FO RM1zmH3y31DF6bu3ovE7/8yCZk6KJn7OYp3ID6O2ZW0qXyJlu3jxoUzl5eWuG1WI t9Or5MG9a+wxB6RGA/6cEirxUmAuAGLmKsY24uVWtGnZb5V6ekE= -----END CERTIFICATE-----Generated at Wed Aug 13 05:52:44 2025 by rpki-client