$ rpki-client -vvf repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.mft File: 54AB931F513FCC4DCC1FB3D6056474219354E82D.mft (raw, json) Hash identifier: tJewAflWedGJUuWqMbkOn4zTP1y0kCXyZKTbLQlUkHs= Subject key identifier: 5E:52:66:66:2B:23:2E:DC:09:3C:1D:04:87:C5:52:4B:55:A2:F7:A2 Authority key identifier: 54:AB:93:1F:51:3F:CC:4D:CC:1F:B3:D6:05:64:74:21:93:54:E8:2D Certificate issuer: /CN=54AB931F513FCC4DCC1FB3D6056474219354E82D Certificate serial: 378C2AF5A9A081AA4D9764FE5218DB80014AC755 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.mft Manifest number: 0B Signing time: Fri 22 Aug 2025 06:00:04 +0000 Manifest this update: Fri 22 Aug 2025 05:55:04 +0000 Manifest next update: Mon 25 Aug 2025 14:56:04 +0000 Files and hashes: 1: 54AB931F513FCC4DCC1FB3D6056474219354E82D.crl (hash: pmCsU4M9QRq5QE4faEvSuGuKsHCMIshqZynOhN1d2TE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.crl rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 14:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:8c:2a:f5:a9:a0:81:aa:4d:97:64:fe:52:18:db:80:01:4a:c7:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54AB931F513FCC4DCC1FB3D6056474219354E82D Validity Not Before: Aug 22 05:55:04 2025 GMT Not After : Aug 25 14:56:04 2025 GMT Subject: CN=5E5266662B232EDC093C1D0487C5524B55A2F7A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:53:d2:e4:2f:fd:30:e6:d4:2f:e2:2c:a9:20: 61:0a:57:cc:40:f8:fc:98:cd:ee:2d:9b:85:98:2b: b2:9e:20:2d:8c:56:84:e8:45:d5:74:49:57:5c:5a: 5e:cc:18:a2:84:6e:64:45:41:1e:47:8d:0f:77:cd: 8b:4b:8b:f0:ed:c9:67:bc:08:5f:18:81:f7:08:8e: b6:ef:66:41:0e:10:68:e8:d2:e8:de:aa:4c:6c:54: 2e:41:12:65:a0:84:86:4b:bf:25:24:4b:47:07:1e: a8:de:f6:ea:ed:e1:66:6c:63:04:8b:aa:a4:8f:68: 92:20:28:e8:f9:e8:72:1d:70:8a:b7:06:7b:69:c4: 44:91:7a:95:9e:11:c1:2e:36:34:c0:ea:3d:99:81: 02:e2:78:3d:c9:6a:6c:4c:2b:59:f4:7c:16:1f:a2: c0:b6:67:4f:24:9c:79:cc:b6:77:f6:49:ce:aa:bb: 16:dd:8e:3e:04:94:e6:42:39:88:37:8b:c0:83:1d: fd:53:60:5c:96:ed:49:89:bf:9e:69:9d:52:8a:5f: 19:8a:d5:5a:8a:88:84:1a:ae:70:7f:60:89:09:a4: b8:fa:df:46:cf:35:34:0f:e6:c3:6c:fa:57:99:d6: a9:d5:f1:74:5f:b5:f1:da:a6:48:1c:95:1d:23:1d: fa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:52:66:66:2B:23:2E:DC:09:3C:1D:04:87:C5:52:4B:55:A2:F7:A2 X509v3 Authority Key Identifier: keyid:54:AB:93:1F:51:3F:CC:4D:CC:1F:B3:D6:05:64:74:21:93:54:E8:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:64:7c:0e:69:27:71:9e:b8:bc:25:1a:43:7d:63:ff:f7:28: 7e:03:9e:b2:0d:cb:78:30:03:ee:c8:ea:3a:10:81:fa:5e:15: 82:92:4d:78:33:0b:8b:58:ee:6e:d6:fc:63:2a:e3:2b:4f:cb: cf:6f:66:a5:32:8b:9e:f9:91:b5:12:c5:23:e6:33:0d:ca:d7: 76:88:fd:71:54:e2:c0:34:85:f4:2a:af:09:59:ab:11:fa:00: 2a:d8:20:49:e8:92:19:71:74:70:81:46:b8:fc:5d:9e:a4:de: b2:56:1d:26:27:f1:7c:03:d2:bc:04:1e:99:03:15:8b:9d:5e: 9c:4e:c8:02:9d:f9:4e:41:cc:fd:13:d5:29:3d:33:3e:86:0d: 90:60:79:d0:3a:17:d9:45:7f:15:ac:15:1e:bb:5f:03:a5:d3: c0:59:e1:47:98:2a:ab:12:db:bd:7b:57:0b:bb:2f:56:14:63: 9e:4b:c1:90:e2:bc:98:94:26:af:d4:1e:c6:bd:7a:6c:17:d9: c2:5f:5f:0f:de:4a:7b:10:38:09:b6:33:4f:ff:4e:26:56:5a: 84:80:ec:92:f1:ec:0b:8a:0e:9f:91:94:27:39:18:83:c5:90: 2d:b1:8b:98:ab:20:46:3c:75:95:67:76:59:05:cc:fc:09:bf: 50:6f:33:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN4wq9amggapNl2T+UhjbgAFKx1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRBQjkzMUY1MTNGQ0M0RENDMUZCM0Q2MDU2NDc0MjE5 MzU0RTgyRDAeFw0yNTA4MjIwNTU1MDRaFw0yNTA4MjUxNDU2MDRaMDMxMTAvBgNV BAMTKDVFNTI2NjY2MkIyMzJFREMwOTNDMUQwNDg3QzU1MjRCNTVBMkY3QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwU9LkL/0w5tQv4iypIGEKV8xA +PyYze4tm4WYK7KeIC2MVoToRdV0SVdcWl7MGKKEbmRFQR5HjQ93zYtLi/DtyWe8 CF8YgfcIjrbvZkEOEGjo0ujeqkxsVC5BEmWghIZLvyUkS0cHHqje9urt4WZsYwSL qqSPaJIgKOj56HIdcIq3BntpxESRepWeEcEuNjTA6j2ZgQLieD3JamxMK1n0fBYf osC2Z08knHnMtnf2Sc6quxbdjj4ElOZCOYg3i8CDHf1TYFyW7UmJv55pnVKKXxmK 1VqKiIQarnB/YIkJpLj630bPNTQP5sNs+leZ1qnV8XRftfHapkgclR0jHfqJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXlJmZisjLtwJPB0Eh8VSS1Wi96IwHwYDVR0j BBgwFoAUVKuTH1E/zE3MH7PWBWR0IZNU6C0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTQzNDk4MS0zNmJiLTQ1MzktOWI1NS0wN2I2NzIwOGZkMDYvMC81NEFCOTMxRjUx M0ZDQzREQ0MxRkIzRDYwNTY0NzQyMTkzNTRFODJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTRBQjkzMUY1MTNGQ0M0RENDMUZCM0Q2MDU2NDc0MjE5MzU0 RTgyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmU0MzQ5ODEtMzZiYi00NTM5LTli NTUtMDdiNjcyMDhmZDA2LzAvNTRBQjkzMUY1MTNGQ0M0RENDMUZCM0Q2MDU2NDc0 MjE5MzU0RTgyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJkfA5pJ3GeuLwlGkN9Y//3KH4DnrINy3gw A+7I6joQgfpeFYKSTXgzC4tY7m7W/GMq4ytPy89vZqUyi575kbUSxSPmMw3K13aI /XFU4sA0hfQqrwlZqxH6ACrYIEnokhlxdHCBRrj8XZ6k3rJWHSYn8XwD0rwEHpkD FYudXpxOyAKd+U5BzP0T1Sk9Mz6GDZBgedA6F9lFfxWsFR67XwOl08BZ4UeYKqsS 2717Vwu7L1YUY55LwZDivJiUJq/UHsa9emwX2cJfXw/eSnsQOAm2M0//TiZWWoSA 7JLx7AuKDp+RlCc5GIPFkC2xi5irIEY8dZVndlkFzPwJv1BvM7I= -----END CERTIFICATE-----Generated at Sat Aug 23 14:04:39 2025 by rpki-client