$ rpki-client -vvf repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft File: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft (raw, json) Hash identifier: X8qLb2OC0isEVPEjcpYidLOS+QWMdPKoidpWH2070Sg= Subject key identifier: DC:AB:E9:F6:2C:E9:A3:53:2C:06:AD:E8:2D:95:86:AA:AC:BE:2A:03 Authority key identifier: 19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E Certificate issuer: /CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Certificate serial: 0BB94DBD59BFC5889D377A85FAD8D0D3F480D1F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft Manifest number: 0202 Signing time: Mon 16 Jun 2025 19:11:38 +0000 Manifest this update: Mon 16 Jun 2025 19:06:38 +0000 Manifest next update: Thu 19 Jun 2025 22:20:38 +0000 Files and hashes: 1: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl (hash: n4lrgUtgbKCni4UBEj/sVHUoRdPPUjn48ZHwqRoL4OY=) 2: 3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa (hash: dddpXAXd6NN4T55cPDxa5oEHzFYeojSlOpK24ou6O1o=) 3: 3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa (hash: 1jAZDRG2bBRpFXXfdfwzy9SEYQeFjRv7T68Dlx8L+iE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b9:4d:bd:59:bf:c5:88:9d:37:7a:85:fa:d8:d0:d3:f4:80:d1:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Validity Not Before: Jun 16 19:06:38 2025 GMT Not After : Jun 19 22:20:38 2025 GMT Subject: CN=DCABE9F62CE9A3532C06ADE82D9586AAACBE2A03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e2:fe:85:48:12:b8:2e:04:e3:d0:89:a0:b0: db:46:d2:52:03:5d:dd:0a:b8:37:38:03:c4:e9:24: 30:88:31:3c:e4:44:a4:e1:f2:09:5e:42:c5:a3:4e: d4:96:71:ce:9f:f8:6a:22:b3:ff:1b:2d:33:1d:21: a6:8b:8c:71:38:71:f3:b5:c6:b5:75:7f:7e:73:46: 56:cf:34:e0:19:5e:ef:c9:df:8c:e7:3d:1a:b9:be: 63:90:27:34:1f:a0:e9:ed:ba:97:e9:21:4e:92:ae: 48:e6:84:62:e2:07:48:04:fb:f2:3d:5e:b0:37:2f: 78:b4:63:94:a0:2d:70:7a:5b:a8:c8:51:88:8d:b6: ec:ec:95:ed:1c:92:2b:02:66:41:88:3f:c6:f9:3e: a4:55:2e:13:d1:a8:bb:3a:0b:17:fe:3e:fa:a7:d9: a1:8b:e4:26:93:15:d9:ea:3e:c6:54:6f:1a:69:b6: 32:c8:79:c5:66:d2:ea:51:98:36:29:1b:01:cb:09: e5:3c:63:22:03:34:19:c1:40:02:f8:34:7e:06:ef: bd:c4:dc:ef:94:ee:64:09:cf:93:40:bc:12:be:fb: 01:90:e7:b1:7c:86:df:d9:7c:d9:cf:07:0b:d0:11: a6:09:fe:6f:ee:50:af:61:70:25:88:69:57:89:06: ce:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AB:E9:F6:2C:E9:A3:53:2C:06:AD:E8:2D:95:86:AA:AC:BE:2A:03 X509v3 Authority Key Identifier: keyid:19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:4d:1a:2b:fe:2f:bf:8c:04:09:f3:76:a7:e7:a0:35:97:30: 73:a9:80:c2:28:aa:73:61:4c:e8:a0:0a:56:47:1a:dd:cc:9c: 43:44:bd:87:61:2c:30:d2:e5:20:aa:5d:6e:0f:65:49:db:ea: 38:32:e0:57:04:45:27:9e:f1:62:a7:65:39:89:05:3f:99:e0: 28:4f:6d:a0:e1:1b:a1:4f:1c:28:b1:2f:d7:af:39:21:10:51: 1e:78:04:3c:3b:59:e1:c7:ba:94:93:99:ba:88:39:a5:ed:ae: 3f:7e:93:b4:1c:bf:96:52:fe:f6:49:f5:73:7d:d6:6a:17:d5: e2:8f:51:35:aa:00:1e:4d:a2:9d:9d:c0:bd:28:2d:c6:2b:d8: 1d:83:6b:84:df:80:f8:d8:c2:14:f2:a8:0b:98:f4:9f:d4:2e: 17:69:9c:fa:f6:ab:55:20:76:4d:05:13:2c:f3:c1:ac:cb:bc: a3:21:ed:8a:2e:36:bc:d1:c8:25:83:89:cd:f6:40:85:7f:c4: de:f2:73:e4:17:d7:fc:72:02:69:9d:e0:91:66:5f:03:d9:97: 2a:5e:07:b0:f2:cd:88:bf:54:f2:04:3a:8e:dd:94:45:72:b9: bb:33:09:45:c2:e0:42:5f:bb:46:ab:81:f0:11:d8:56:4e:7c: e8:80:64:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC7lNvVm/xYidN3qF+tjQ0/SA0fUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNE MTJCRkQyRTAeFw0yNTA2MTYxOTA2MzhaFw0yNTA2MTkyMjIwMzhaMDMxMTAvBgNV BAMTKERDQUJFOUY2MkNFOUEzNTMyQzA2QURFODJEOTU4NkFBQUNCRTJBMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt4v6FSBK4LgTj0ImgsNtG0lID Xd0KuDc4A8TpJDCIMTzkRKTh8gleQsWjTtSWcc6f+Gois/8bLTMdIaaLjHE4cfO1 xrV1f35zRlbPNOAZXu/J34znPRq5vmOQJzQfoOntupfpIU6SrkjmhGLiB0gE+/I9 XrA3L3i0Y5SgLXB6W6jIUYiNtuzsle0ckisCZkGIP8b5PqRVLhPRqLs6Cxf+Pvqn 2aGL5CaTFdnqPsZUbxpptjLIecVm0upRmDYpGwHLCeU8YyIDNBnBQAL4NH4G773E 3O+U7mQJz5NAvBK++wGQ57F8ht/ZfNnPBwvQEaYJ/m/uUK9hcCWIaVeJBs5JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Kvp9izpo1MsBq3oLZWGqqy+KgMwHwYDVR0j BBgwFoAUGVTDPPuvigcro7kLPoONY9Er/S4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDE5NmQ2NS0yMWE4LTRiMDQtYTlkZS03MjgzZmJlM2MxY2IvMC8xOTU0QzMzQ0ZC QUY4QTA3MkJBM0I5MEIzRTgzOEQ2M0QxMkJGRDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNEMTJC RkQyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQxOTZkNjUtMjFhOC00YjA0LWE5 ZGUtNzI4M2ZiZTNjMWNiLzAvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhE NjNEMTJCRkQyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZNGiv+L7+MBAnzdqfnoDWXMHOpgMIoqnNh TOigClZHGt3MnENEvYdhLDDS5SCqXW4PZUnb6jgy4FcERSee8WKnZTmJBT+Z4ChP baDhG6FPHCixL9evOSEQUR54BDw7WeHHupSTmbqIOaXtrj9+k7Qcv5ZS/vZJ9XN9 1moX1eKPUTWqAB5Nop2dwL0oLcYr2B2Da4TfgPjYwhTyqAuY9J/ULhdpnPr2q1Ug dk0FEyzzwazLvKMh7YouNrzRyCWDic32QIV/xN7yc+QX1/xyAmmd4JFmXwPZlype B7DyzYi/VPIEOo7dlEVyubszCUXC4EJfu0argfAR2FZOfOiAZJY= -----END CERTIFICATE-----Generated at Tue Jun 17 12:29:49 2025 by rpki-client