$ rpki-client -vvf repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft File: D454E26475969CECE78A97B9152AFC76DB922AA3.mft (raw, json) Hash identifier: vAQaPC+anh5Z2UheP+uvK3lUs7jNZM8Sme5dutq04H4= Subject key identifier: EA:4A:B0:9B:84:94:9C:D5:58:47:F4:DF:6A:62:0C:17:2E:8F:94:66 Authority key identifier: D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3 Certificate issuer: /CN=D454E26475969CECE78A97B9152AFC76DB922AA3 Certificate serial: 1A1040A04F05BF4F448F12FE8C421EED8D75A920 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft Manifest number: 0186 Signing time: Sun 15 Jun 2025 16:02:19 +0000 Manifest this update: Sun 15 Jun 2025 15:57:19 +0000 Manifest next update: Wed 18 Jun 2025 19:06:19 +0000 Files and hashes: 1: D454E26475969CECE78A97B9152AFC76DB922AA3.crl (hash: WUzJqu22JLmFbGYujO/x840hSlP1/3YI7drZhM/lPQs=) 2: 3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa (hash: jkJd+M5rwtfeJj5Wy3BROoY6ivNRSiwWeiLPr6W2/x8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.crl rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 19:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:10:40:a0:4f:05:bf:4f:44:8f:12:fe:8c:42:1e:ed:8d:75:a9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D454E26475969CECE78A97B9152AFC76DB922AA3 Validity Not Before: Jun 15 15:57:19 2025 GMT Not After : Jun 18 19:06:19 2025 GMT Subject: CN=EA4AB09B84949CD55847F4DF6A620C172E8F9466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3a:3f:19:61:81:c6:ab:d0:8d:97:75:4d:31: 24:4c:64:b2:a7:3b:6d:cd:0d:06:36:06:11:38:c6: 88:12:fe:f5:2e:bf:11:9a:e5:45:2e:51:f2:aa:d7: cd:34:ab:00:8b:d1:88:04:c5:a1:56:cf:2a:1f:c3: 38:b6:a2:b0:ba:b1:cf:e9:bf:99:ae:b6:ea:86:5f: 6c:3d:65:83:ae:f7:33:dc:de:a2:97:3d:fb:08:a4: 90:29:d8:46:0c:a9:ec:38:8b:d1:6d:e9:5f:6b:5a: bc:d2:49:cc:44:f7:f4:cd:39:db:53:f8:3a:e5:ae: 1a:77:51:e3:8c:22:bf:2a:2d:a1:1d:21:24:6e:70: 61:c8:b4:82:2f:ab:bf:94:65:42:fa:ca:5f:d3:02: a1:19:40:27:96:f6:fd:44:58:12:ae:aa:69:d1:6b: 1a:83:e1:44:51:40:43:33:dd:03:5c:dc:92:98:ac: ef:08:45:13:17:db:69:05:93:10:73:e1:fc:69:47: df:4e:38:23:ab:5a:16:fe:00:74:c2:c6:81:e3:77: c4:36:7d:11:9b:7b:a5:27:f3:6c:c5:9c:44:7d:17: 64:e5:d0:9a:60:95:70:7f:2a:51:3a:1f:03:37:b8: 25:d8:83:c0:34:f4:9a:02:a7:cc:8a:17:b1:d7:0a: e2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4A:B0:9B:84:94:9C:D5:58:47:F4:DF:6A:62:0C:17:2E:8F:94:66 X509v3 Authority Key Identifier: keyid:D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:b5:cc:6a:64:d2:c8:5a:bb:cb:a0:38:6d:b0:74:b7:92:7d: a1:49:bd:dc:40:fc:53:36:f8:28:cf:ac:8b:32:e9:3c:df:10: 44:c1:69:b3:a8:aa:a1:6f:70:77:f6:2a:d4:0f:75:41:4b:e2: 7b:17:01:a0:ff:11:ed:2e:7a:3c:3a:7d:15:d0:d8:c7:d6:ec: a7:d6:d2:08:c5:46:69:ea:b7:e4:8f:3b:8a:a5:ce:00:f6:43: ec:f2:73:ef:2c:77:19:4a:63:f8:69:e0:3b:41:8b:41:bf:a1: 28:7d:0f:22:c0:8b:d2:09:05:c6:77:e3:c1:9f:60:62:34:83: d9:98:72:5f:f2:9e:40:cc:7d:78:30:40:5b:49:d7:95:7f:4a: 83:6d:b4:ec:36:40:0f:75:05:b4:4a:41:77:9e:aa:13:24:5e: 71:6a:9d:96:24:a9:38:4b:e9:da:63:51:f5:d7:b2:1a:75:e3: 07:2d:9b:ed:42:5e:ce:0f:43:52:19:3d:06:dc:88:6c:8e:2f: a1:4a:df:41:f6:bd:8c:18:16:96:51:78:ff:1f:1a:44:a6:eb: 4e:bb:c3:0f:a0:f4:c9:a6:6a:83:54:a2:8e:ea:88:a5:51:cc: f7:57:e3:37:67:3d:03:9d:1b:42:12:b3:45:b8:25:52:e6:72: 07:ad:40:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGhBAoE8Fv09EjxL+jEIe7Y11qSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZDNzZE QjkyMkFBMzAeFw0yNTA2MTUxNTU3MTlaFw0yNTA2MTgxOTA2MTlaMDMxMTAvBgNV BAMTKEVBNEFCMDlCODQ5NDlDRDU1ODQ3RjRERjZBNjIwQzE3MkU4Rjk0NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Oj8ZYYHGq9CNl3VNMSRMZLKn O23NDQY2BhE4xogS/vUuvxGa5UUuUfKq1800qwCL0YgExaFWzyofwzi2orC6sc/p v5mutuqGX2w9ZYOu9zPc3qKXPfsIpJAp2EYMqew4i9Ft6V9rWrzSScxE9/TNOdtT +Drlrhp3UeOMIr8qLaEdISRucGHItIIvq7+UZUL6yl/TAqEZQCeW9v1EWBKuqmnR axqD4URRQEMz3QNc3JKYrO8IRRMX22kFkxBz4fxpR99OOCOrWhb+AHTCxoHjd8Q2 fRGbe6Un82zFnER9F2Tl0JpglXB/KlE6HwM3uCXYg8A09JoCp8yKF7HXCuIJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6kqwm4SUnNVYR/TfamIMFy6PlGYwHwYDVR0j BBgwFoAU1FTiZHWWnOznipe5FSr8dtuSKqMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjE3YzIwNi05YjYzLTRjNTYtOTQzNi00NzVkODIxNDFhNjYvMC9ENDU0RTI2NDc1 OTY5Q0VDRTc4QTk3QjkxNTJBRkM3NkRCOTIyQUEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZDNzZEQjky MkFBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIxN2MyMDYtOWI2My00YzU2LTk0 MzYtNDc1ZDgyMTQxYTY2LzAvRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZD NzZEQjkyMkFBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACK1zGpk0shau8ugOG2wdLeSfaFJvdxA/FM2 +CjPrIsy6TzfEETBabOoqqFvcHf2KtQPdUFL4nsXAaD/Ee0uejw6fRXQ2MfW7KfW 0gjFRmnqt+SPO4qlzgD2Q+zyc+8sdxlKY/hp4DtBi0G/oSh9DyLAi9IJBcZ348Gf YGI0g9mYcl/ynkDMfXgwQFtJ15V/SoNttOw2QA91BbRKQXeeqhMkXnFqnZYkqThL 6dpjUfXXshp14wctm+1CXs4PQ1IZPQbciGyOL6FK30H2vYwYFpZReP8fGkSm6067 ww+g9MmmaoNUoo7qiKVRzPdX4zdnPQOdG0ISs0W4JVLmcgetQE0= -----END CERTIFICATE-----Generated at Mon Jun 16 13:24:32 2025 by rpki-client