$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft File: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft (raw, json) Hash identifier: yam/BpVNbpu/C/0JaxuHqyNC7NXswoY52B7/pEEbKEY= Subject key identifier: 1F:4B:3F:11:01:19:E8:DE:A6:7C:3D:30:88:08:40:FD:84:5D:F8:73 Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A Certificate issuer: /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Certificate serial: 6FEEC9D4FE112F4482B87110FB3C897CAE259F31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft Manifest number: A8 Signing time: Tue 04 Nov 2025 18:41:25 +0000 Manifest this update: Tue 04 Nov 2025 18:36:25 +0000 Manifest next update: Fri 07 Nov 2025 19:35:25 +0000 Files and hashes: 1: 3130332e37352e35322e302f32332d3234203d3e203436303233.roa (hash: T0MXrhbK6xjnBNdXhOMqxz1Yf/0TdUbbbVSQf9Bnwwk=) 2: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (hash: jrvWdDxnPwyaZeoT4XE3YhrJWOxok241/P+m4LKDews=) 3: 3130332e37352e35342e302f32342d3234203d3e203436303233.roa (hash: itzoTElJfDBgRSPccVv4bZDERMP8o0I1zPcdqucno78=) 4: 3130332e37352e35322e302f32322d3234203d3e203436303233.roa (hash: qyDdwv5epobK+GRznDOnZgdcRlyuSTrE0I2ZxAmsKz4=) 5: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (hash: u/Rqg/DBL28ST9LkFtb756oaQy6poB4UdD9nfAM75kQ=) 6: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl (hash: uuYOessiIK0OeoLyXuJLES7DLngAWZtRx3SLemyAgn0=) 7: 3130332e37352e35352e302f32342d3234203d3e203436303233.roa (hash: BOb9anLJdpDwlKD+KK0kxGNWqYzi/fXunRvflhVgFzc=) 8: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (hash: W72scnHA7zHvPLJz5BxsoijLHmQFgwe9kKm/vIV1T+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 19:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ee:c9:d4:fe:11:2f:44:82:b8:71:10:fb:3c:89:7c:ae:25:9f:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Validity Not Before: Nov 4 18:36:25 2025 GMT Not After : Nov 7 19:35:25 2025 GMT Subject: CN=1F4B3F110119E8DEA67C3D30880840FD845DF873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fe:92:ab:de:fa:ed:3c:de:c1:c8:62:64:52: 12:c1:ec:f2:d1:28:66:93:31:0a:ee:28:d8:29:04: df:0c:cd:1e:b7:7d:57:f6:e3:23:f3:e2:f2:a3:a0: 8b:9f:cb:31:87:6e:32:6f:99:bf:1a:2b:40:2c:7b: 91:4f:f8:2a:01:1c:80:d5:3b:d0:0e:3a:e1:c7:8b: c7:db:23:bd:c4:99:7c:14:0f:ae:84:fb:e9:33:eb: d7:f7:9f:d8:54:7c:f5:2a:69:c3:23:83:28:78:51: aa:71:e4:9e:e3:af:c1:77:dd:ec:d5:db:b5:39:0d: 99:59:7f:e3:cd:15:f4:16:81:44:e0:3a:cc:c3:e3: ae:a4:56:a8:eb:da:b4:04:b0:8c:e6:5a:2e:4d:3c: a9:82:0a:0a:0b:f4:cf:e9:70:a5:69:10:56:8a:1f: 0d:3d:1e:39:a0:fb:5a:1c:34:12:e3:19:fb:f2:5a: 67:bd:1d:64:68:18:06:03:2e:89:19:2f:23:f9:fa: 8c:90:09:8a:e7:d9:ec:1b:4f:53:a7:cd:fa:f7:c1: b7:8a:e5:40:19:ad:dd:71:6e:b4:ae:d1:fe:2a:bb: b4:c0:ab:e3:04:3f:63:a8:85:43:9f:3a:b6:66:fb: db:1f:b5:be:a1:97:9b:9a:20:52:18:dd:ff:f6:7e: e0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4B:3F:11:01:19:E8:DE:A6:7C:3D:30:88:08:40:FD:84:5D:F8:73 X509v3 Authority Key Identifier: keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:09:72:9c:7c:4e:cb:c6:84:3d:47:c3:0c:b7:3c:79:a7:ff: 28:76:2b:bc:53:b5:e5:eb:f7:6b:2f:69:d7:ce:4e:e0:2a:84: f2:fc:91:d8:bb:2d:d0:47:ba:b0:e6:8d:aa:1d:71:6c:28:72: 4a:93:d9:80:13:44:07:bc:d9:10:0f:8c:90:8e:5b:19:34:6c: a2:34:47:b5:c4:60:93:ea:14:46:53:36:2b:72:29:43:7c:71: 45:b4:db:a5:8b:be:a6:89:20:63:c0:6f:85:2b:0f:0f:24:84: 9a:02:f8:56:56:bc:66:31:0b:48:98:92:f5:31:82:52:d7:4d: da:c3:5a:bc:3c:37:8e:31:65:bc:f0:dc:d8:98:ae:c0:f9:1b: 50:f6:7c:4e:34:a3:c4:3c:a6:9b:bb:21:da:e9:f3:be:09:d9: 99:89:26:e6:10:5a:f4:f7:f6:a1:6e:04:55:32:57:37:72:0f: 6c:d1:ad:10:66:7d:d1:50:be:73:ad:4b:b2:d1:fd:41:95:2c: ff:92:16:e6:89:50:8b:fa:89:35:51:77:bb:68:26:b0:a6:f5: 07:22:a2:4c:e9:fe:f1:a1:f7:ec:d5:84:47:1f:11:69:0c:92: 5f:d7:99:a9:30:85:17:50:d8:d0:43:65:c6:8e:d9:da:10:c1: 8b:ea:25:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb+7J1P4RL0SCuHEQ+zyJfK4lnzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlD MDNCNEQyQTAeFw0yNTExMDQxODM2MjVaFw0yNTExMDcxOTM1MjVaMDMxMTAvBgNV BAMTKDFGNEIzRjExMDExOUU4REVBNjdDM0QzMDg4MDg0MEZEODQ1REY4NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa/pKr3vrtPN7ByGJkUhLB7PLR KGaTMQruKNgpBN8MzR63fVf24yPz4vKjoIufyzGHbjJvmb8aK0Ase5FP+CoBHIDV O9AOOuHHi8fbI73EmXwUD66E++kz69f3n9hUfPUqacMjgyh4Uapx5J7jr8F33ezV 27U5DZlZf+PNFfQWgUTgOszD466kVqjr2rQEsIzmWi5NPKmCCgoL9M/pcKVpEFaK Hw09Hjmg+1ocNBLjGfvyWme9HWRoGAYDLokZLyP5+oyQCYrn2ewbT1Onzfr3wbeK 5UAZrd1xbrSu0f4qu7TAq+MEP2OohUOfOrZm+9sftb6hl5uaIFIY3f/2fuCpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH0s/EQEZ6N6mfD0wiAhA/YRd+HMwHwYDVR0j BBgwFoAUFUyvlGtP75wu4P+iRbukKcA7TSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmU1MDRjNS1kN2JhLTRmZTktOWU1Ni03OTJkYzAxYTk3Y2IvMC8xNTRDQUY5NDZC NEZFRjlDMkVFMEZGQTI0NUJCQTQyOUMwM0I0RDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlDMDNC NEQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlNTA0YzUtZDdiYS00ZmU5LTll NTYtNzkyZGMwMWE5N2NiLzAvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0 MjlDMDNCNEQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsJcpx8TsvGhD1Hwwy3PHmn/yh2K7xTteXr 92svadfOTuAqhPL8kdi7LdBHurDmjaodcWwockqT2YATRAe82RAPjJCOWxk0bKI0 R7XEYJPqFEZTNityKUN8cUW026WLvqaJIGPAb4UrDw8khJoC+FZWvGYxC0iYkvUx glLXTdrDWrw8N44xZbzw3NiYrsD5G1D2fE40o8Q8ppu7Idrp874J2ZmJJuYQWvT3 9qFuBFUyVzdyD2zRrRBmfdFQvnOtS7LR/UGVLP+SFuaJUIv6iTVRd7toJrCm9Qci okzp/vGh9+zVhEcfEWkMkl/XmakwhRdQ2NBDZcaO2doQwYvqJSE= -----END CERTIFICATE-----Generated at Thu Nov 6 01:50:23 2025 by rpki-client