$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft File: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft (raw, json) Hash identifier: fnTh2UfxKG+TUSLeIeUWyFdjromfRw2cYb0cGnSHTrw= Subject key identifier: FE:2E:6A:97:C1:9D:4C:7D:9F:FC:CB:EA:E2:85:09:AA:57:38:AC:01 Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A Certificate issuer: /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Certificate serial: 70EBDDE1E94CDC48E61188D31785C61C0C656F50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft Manifest number: 7F Signing time: Wed 06 Aug 2025 19:43:20 +0000 Manifest this update: Wed 06 Aug 2025 19:38:20 +0000 Manifest next update: Sat 09 Aug 2025 19:56:20 +0000 Files and hashes: 1: 3130332e37352e35322e302f32332d3234203d3e203436303233.roa (hash: LliQsaEGmOxiFYn7eU4CgTQQMhXBR9mQg+Ga47dX8vc=) 2: 3130332e37352e35342e302f32342d3234203d3e203436303233.roa (hash: BSqOBaWfJQqz33lACDAWl5BBUo8xhKyti0YdsIQS7aQ=) 3: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (hash: eYux8MlazvFG7evneWwa6f79HrtIQhEs6bQRxE8BgeE=) 4: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (hash: 6WbVS+v7HN+Kets1foBaT2kDE0v8xmm7+65g6YMRGEk=) 5: 3130332e37352e35352e302f32342d3234203d3e203436303233.roa (hash: Wy3XFvvxWlmSMqptgoEgqs9HlG+jenjszHddJNByUP8=) 6: 3130332e37352e35322e302f32322d3234203d3e203436303233.roa (hash: reynj2rdnK/jisos3BLgNO3WmPAN7XuUU4JIx1owC9M=) 7: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl (hash: 1YldKF869Ixp1pi6dHgoHPwJCHNOD2DzzmP6slm5jnE=) 8: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (hash: YpIBjqK/gGPSCbvsDHOwTz44pQAN0MQfXErjudoCzGo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 19:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:eb:dd:e1:e9:4c:dc:48:e6:11:88:d3:17:85:c6:1c:0c:65:6f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Validity Not Before: Aug 6 19:38:20 2025 GMT Not After : Aug 9 19:56:20 2025 GMT Subject: CN=FE2E6A97C19D4C7D9FFCCBEAE28509AA5738AC01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:59:40:df:e7:ce:9f:ae:dc:61:3f:9a:24:4b: af:aa:e5:ac:c7:f4:56:92:47:21:58:65:2e:6b:bf: bc:ce:39:f4:99:cf:0f:b9:69:fc:41:42:a4:b7:80: 51:c7:14:9d:73:5a:f8:3a:e1:25:10:61:81:9a:a6: 89:df:0e:d0:5c:99:6d:e4:aa:8a:19:a3:39:c7:55: 18:68:1b:4d:10:fc:11:b7:17:33:c2:aa:eb:d0:71: 51:c9:86:9b:84:8c:d8:6e:fb:d8:38:89:6b:36:5f: 42:a3:75:c6:fc:1b:34:e7:bd:e7:45:23:a2:4e:19: 47:9b:87:f6:73:99:d2:89:e6:1d:d2:20:50:ab:59: 24:a2:31:b5:40:b4:51:77:ac:23:cf:0e:da:d0:0e: 20:24:94:fb:4b:f2:84:90:d9:3c:59:a8:c4:0f:9f: d1:2b:39:5d:13:15:b6:84:a7:7c:16:db:f8:cb:c4: eb:f8:c5:5d:8a:1e:3f:91:48:50:4f:ec:19:52:cd: 3b:ac:56:35:98:50:e7:94:90:1f:3f:26:27:9f:a9: c7:9e:13:e1:9d:2b:ef:f8:49:a3:d3:8f:6e:c6:c2: d7:f5:de:5f:90:82:59:6a:af:97:af:69:60:a8:2d: 94:0e:35:8a:43:1c:3e:42:60:3c:66:55:28:14:0f: 13:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2E:6A:97:C1:9D:4C:7D:9F:FC:CB:EA:E2:85:09:AA:57:38:AC:01 X509v3 Authority Key Identifier: keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b3:0f:8b:88:22:71:7a:0f:e6:d3:df:eb:4e:46:5c:4d:c0: f6:d7:52:49:4e:7f:7a:39:02:9a:7c:48:f0:f2:36:b3:56:ed: cb:aa:13:ca:d8:55:8a:d6:b2:bf:fc:c6:18:64:e8:f1:12:e5: cd:9a:fa:44:b1:e2:f7:42:6e:8f:84:7b:bc:c9:64:33:7b:a9: 3f:ec:b4:3f:43:9e:26:6e:68:08:94:e9:05:ea:30:d2:d1:c2: 38:b9:74:27:36:49:a9:1d:b5:6c:60:59:26:1a:df:72:55:ee: 89:15:d2:6f:7b:3e:48:79:4d:f5:7f:0a:f0:96:d7:b9:9b:24: 04:6a:1f:5f:e7:a7:2a:eb:9a:00:21:bd:f7:ba:d3:cd:f9:a3: d1:55:5c:26:15:13:1f:f6:86:d1:79:89:c9:f8:d0:f6:88:50: d3:49:cc:cb:ec:e0:83:2f:03:2f:27:ea:68:78:ef:c7:a6:21: 21:c0:51:0e:64:b1:6b:30:ea:99:d0:a9:85:bf:6e:5f:e9:81: af:92:18:4c:af:74:ca:4a:e9:c6:54:cd:ee:f0:63:2a:9e:fb: 22:d3:29:0d:c5:c6:23:34:f3:68:d6:7c:62:ce:88:33:04:30: b0:7d:a0:c3:88:d4:d4:e4:d2:a9:9a:0a:5d:22:3c:16:43:9e: aa:9d:5e:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcOvd4elM3EjmEYjTF4XGHAxlb1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlD MDNCNEQyQTAeFw0yNTA4MDYxOTM4MjBaFw0yNTA4MDkxOTU2MjBaMDMxMTAvBgNV BAMTKEZFMkU2QTk3QzE5RDRDN0Q5RkZDQ0JFQUUyODUwOUFBNTczOEFDMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIWUDf586frtxhP5okS6+q5azH 9FaSRyFYZS5rv7zOOfSZzw+5afxBQqS3gFHHFJ1zWvg64SUQYYGaponfDtBcmW3k qooZoznHVRhoG00Q/BG3FzPCquvQcVHJhpuEjNhu+9g4iWs2X0Kjdcb8GzTnvedF I6JOGUebh/ZzmdKJ5h3SIFCrWSSiMbVAtFF3rCPPDtrQDiAklPtL8oSQ2TxZqMQP n9ErOV0TFbaEp3wW2/jLxOv4xV2KHj+RSFBP7BlSzTusVjWYUOeUkB8/Jiefqcee E+GdK+/4SaPTj27Gwtf13l+Qgllqr5evaWCoLZQONYpDHD5CYDxmVSgUDxPDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/i5ql8GdTH2f/Mvq4oUJqlc4rAEwHwYDVR0j BBgwFoAUFUyvlGtP75wu4P+iRbukKcA7TSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmU1MDRjNS1kN2JhLTRmZTktOWU1Ni03OTJkYzAxYTk3Y2IvMC8xNTRDQUY5NDZC NEZFRjlDMkVFMEZGQTI0NUJCQTQyOUMwM0I0RDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlDMDNC NEQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlNTA0YzUtZDdiYS00ZmU5LTll NTYtNzkyZGMwMWE5N2NiLzAvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0 MjlDMDNCNEQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmzD4uIInF6D+bT3+tORlxNwPbXUklOf3o5 App8SPDyNrNW7cuqE8rYVYrWsr/8xhhk6PES5c2a+kSx4vdCbo+Ee7zJZDN7qT/s tD9DniZuaAiU6QXqMNLRwji5dCc2SakdtWxgWSYa33JV7okV0m97Pkh5TfV/CvCW 17mbJARqH1/npyrrmgAhvfe60835o9FVXCYVEx/2htF5icn40PaIUNNJzMvs4IMv Ay8n6mh478emISHAUQ5ksWsw6pnQqYW/bl/pga+SGEyvdMpK6cZUze7wYyqe+yLT KQ3FxiM082jWfGLOiDMEMLB9oMOI1NTk0qmaCl0iPBZDnqqdXsk= -----END CERTIFICATE-----Generated at Thu Aug 7 00:25:56 2025 by rpki-client