$ rpki-client -vvf repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.mft File: 54AB931F513FCC4DCC1FB3D6056474219354E82D.mft (raw, json) Hash identifier: g9A/foCIwtt5WSD7liLEfbh8db+tHzuTpUNoOD6eEHw= Subject key identifier: CD:54:44:1A:65:85:9E:04:EC:4A:C6:02:9A:38:68:60:4F:7F:25:F1 Authority key identifier: 54:AB:93:1F:51:3F:CC:4D:CC:1F:B3:D6:05:64:74:21:93:54:E8:2D Certificate issuer: /CN=54AB931F513FCC4DCC1FB3D6056474219354E82D Certificate serial: 782B8806BA83575875DB6D57D28307B12D3CBD0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.mft Manifest number: 25 Signing time: Mon 20 Oct 2025 01:10:05 +0000 Manifest this update: Mon 20 Oct 2025 01:05:04 +0000 Manifest next update: Thu 23 Oct 2025 04:38:04 +0000 Files and hashes: 1: 54AB931F513FCC4DCC1FB3D6056474219354E82D.crl (hash: F5VUVX6VnFW7oqTryBqZEnkUKmuwywrJdom92CkRM9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.crl rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 04:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:2b:88:06:ba:83:57:58:75:db:6d:57:d2:83:07:b1:2d:3c:bd:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54AB931F513FCC4DCC1FB3D6056474219354E82D Validity Not Before: Oct 20 01:05:04 2025 GMT Not After : Oct 23 04:38:04 2025 GMT Subject: CN=CD54441A65859E04EC4AC6029A3868604F7F25F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0e:fa:f3:21:52:6f:e1:72:b2:b1:65:99:38: c7:6c:84:c3:dc:bf:0f:23:06:59:b6:07:ee:92:14: f4:89:76:35:fb:af:06:9e:f5:fb:81:1a:e4:40:1a: 13:64:82:ef:f8:d0:ca:96:56:a3:c0:77:e4:30:b4: 4e:19:8b:9e:40:ed:0f:24:f2:31:13:91:28:67:51: 55:4d:c4:9c:15:e3:7a:be:09:1a:8b:43:92:a2:03: 6b:5e:e9:05:a6:dd:32:08:50:6d:9b:32:e2:37:20: 86:4d:5c:74:8a:ec:f8:e5:db:0d:b8:b4:c1:a2:b4: b8:f7:3f:7b:18:dc:30:3b:6a:a7:d7:9f:e6:35:96: 26:42:b0:28:70:02:72:fa:f9:bd:b1:33:57:4b:4b: 0f:e4:49:fe:73:eb:c0:04:db:d5:2b:a4:25:2d:7e: 98:65:f2:dd:36:6b:56:83:d3:fe:df:82:7c:76:b3: d0:fc:c2:c2:ef:75:2e:1b:86:13:19:91:b8:b5:f6: 8d:e9:33:5e:ac:bf:65:67:3d:07:d4:31:4a:fc:89: 7d:fe:0f:6a:df:04:e3:d2:9c:76:d0:50:8d:a8:a7: 2c:cf:bd:75:80:67:dd:f5:4e:83:cf:b9:01:65:fb: 6d:1a:91:6e:bf:da:cf:b8:d3:34:fc:4a:c5:68:7d: f4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:54:44:1A:65:85:9E:04:EC:4A:C6:02:9A:38:68:60:4F:7F:25:F1 X509v3 Authority Key Identifier: keyid:54:AB:93:1F:51:3F:CC:4D:CC:1F:B3:D6:05:64:74:21:93:54:E8:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ed:cf:54:d5:2c:5c:cb:96:47:42:40:d6:53:a7:b7:49:75: 82:c8:2e:02:56:d0:8d:01:24:df:5c:1d:15:3b:a5:79:21:d7: 1b:2c:c0:82:05:4f:73:63:ec:a8:29:ce:0f:69:ff:24:da:88: 37:33:15:33:49:47:ba:32:21:d9:80:80:40:c7:83:82:84:89: 26:05:a8:6e:60:85:6f:99:48:69:01:72:81:89:30:04:0b:33: 23:69:8c:f6:44:78:9b:d9:6d:0a:01:b3:1d:30:bb:5d:4e:d8: 4f:04:33:b1:3c:6b:0d:47:ad:ae:63:f7:d5:dd:f4:6f:f0:7d: b3:ea:87:6e:03:de:98:59:ed:e6:69:51:8d:aa:b5:11:06:9d: 5e:a7:65:a3:6c:36:ea:69:80:65:1b:11:bd:3a:fd:ea:a9:77: 24:b7:dd:c5:36:69:5d:fb:ce:99:27:84:08:17:7f:87:37:0f: c3:a9:1c:8f:3c:bb:3a:f0:50:b7:62:a2:81:b4:a5:c5:31:23: ba:b4:0c:9c:87:d8:68:bb:1c:82:57:6b:59:4c:40:8a:ec:dd: 88:d1:b6:a1:13:6a:e3:a2:c8:d3:a4:e2:f8:0b:6d:de:e8:4c: e6:fc:80:7a:9f:41:51:41:e7:9e:db:17:2e:ca:6c:a4:b9:d3: b2:be:e4:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeCuIBrqDV1h1221X0oMHsS08vQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRBQjkzMUY1MTNGQ0M0RENDMUZCM0Q2MDU2NDc0MjE5 MzU0RTgyRDAeFw0yNTEwMjAwMTA1MDRaFw0yNTEwMjMwNDM4MDRaMDMxMTAvBgNV BAMTKENENTQ0NDFBNjU4NTlFMDRFQzRBQzYwMjlBMzg2ODYwNEY3RjI1RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlDvrzIVJv4XKysWWZOMdshMPc vw8jBlm2B+6SFPSJdjX7rwae9fuBGuRAGhNkgu/40MqWVqPAd+QwtE4Zi55A7Q8k 8jETkShnUVVNxJwV43q+CRqLQ5KiA2te6QWm3TIIUG2bMuI3IIZNXHSK7Pjl2w24 tMGitLj3P3sY3DA7aqfXn+Y1liZCsChwAnL6+b2xM1dLSw/kSf5z68AE29UrpCUt fphl8t02a1aD0/7fgnx2s9D8wsLvdS4bhhMZkbi19o3pM16sv2VnPQfUMUr8iX3+ D2rfBOPSnHbQUI2opyzPvXWAZ931ToPPuQFl+20akW6/2s+40zT8SsVoffRxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzVREGmWFngTsSsYCmjhoYE9/JfEwHwYDVR0j BBgwFoAUVKuTH1E/zE3MH7PWBWR0IZNU6C0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTQzNDk4MS0zNmJiLTQ1MzktOWI1NS0wN2I2NzIwOGZkMDYvMC81NEFCOTMxRjUx M0ZDQzREQ0MxRkIzRDYwNTY0NzQyMTkzNTRFODJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTRBQjkzMUY1MTNGQ0M0RENDMUZCM0Q2MDU2NDc0MjE5MzU0 RTgyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmU0MzQ5ODEtMzZiYi00NTM5LTli NTUtMDdiNjcyMDhmZDA2LzAvNTRBQjkzMUY1MTNGQ0M0RENDMUZCM0Q2MDU2NDc0 MjE5MzU0RTgyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvtz1TVLFzLlkdCQNZTp7dJdYLILgJW0I0B JN9cHRU7pXkh1xsswIIFT3Nj7Kgpzg9p/yTaiDczFTNJR7oyIdmAgEDHg4KEiSYF qG5ghW+ZSGkBcoGJMAQLMyNpjPZEeJvZbQoBsx0wu11O2E8EM7E8aw1Hra5j99Xd 9G/wfbPqh24D3phZ7eZpUY2qtREGnV6nZaNsNuppgGUbEb06/eqpdyS33cU2aV37 zpknhAgXf4c3D8OpHI88uzrwULdiooG0pcUxI7q0DJyH2Gi7HIJXa1lMQIrs3YjR tqETauOiyNOk4vgLbd7oTOb8gHqfQVFB557bFy7KbKS507K+5BE= -----END CERTIFICATE-----Generated at Mon Oct 20 06:58:32 2025 by rpki-client