$ rpki-client -vvf repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft File: 054A70F7E364F75AF2F166FE8431E616DE986448.mft (raw, json) Hash identifier: qQjyOb5jiY7ZU4HluIEvHlApCXdRmJ+t0WMce9k7eGk= Subject key identifier: 2B:0A:D0:1D:C2:89:28:8E:39:2F:DF:5F:7F:B7:4B:A7:24:BB:99:C8 Authority key identifier: 05:4A:70:F7:E3:64:F7:5A:F2:F1:66:FE:84:31:E6:16:DE:98:64:48 Certificate issuer: /CN=054A70F7E364F75AF2F166FE8431E616DE986448 Certificate serial: 50B085EAA69F758CE41EA2515C4C7DAD5DF0C615 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft Manifest number: 037F Signing time: Sat 28 Jun 2025 22:42:17 +0000 Manifest this update: Sat 28 Jun 2025 22:37:17 +0000 Manifest next update: Wed 02 Jul 2025 06:32:17 +0000 Files and hashes: 1: 054A70F7E364F75AF2F166FE8431E616DE986448.crl (hash: JeRgGWXWE6B6J70QQFRxCtkmiHaHzBXgepE5upi0nmA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.crl rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 06:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:b0:85:ea:a6:9f:75:8c:e4:1e:a2:51:5c:4c:7d:ad:5d:f0:c6:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=054A70F7E364F75AF2F166FE8431E616DE986448 Validity Not Before: Jun 28 22:37:17 2025 GMT Not After : Jul 2 06:32:17 2025 GMT Subject: CN=2B0AD01DC289288E392FDF5F7FB74BA724BB99C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:95:cb:45:1c:11:13:56:12:dc:35:12:57:37: 6f:de:1f:47:54:80:4d:c4:03:43:8d:42:5e:b5:6a: ca:55:83:2a:b6:9a:bf:d9:dc:3c:c6:eb:43:44:e5: 61:15:3c:9e:c5:2a:f7:67:c9:b3:aa:0f:11:9b:df: 9c:f5:82:51:63:f0:ab:f2:3e:fb:c4:e5:53:09:ec: 8d:38:68:15:c8:30:11:0e:0e:e7:e4:d2:b0:77:c3: 43:c7:75:d4:9b:a7:ba:56:45:93:b6:df:7e:d0:f8: ab:20:ac:cd:d2:03:d3:84:69:28:e6:79:e5:ed:e2: 5b:a7:35:0a:9f:cc:a3:bc:da:41:16:5a:c4:33:6d: c3:7f:ae:8a:a2:f7:6a:1e:c9:f6:81:31:10:98:f6: 9b:d8:25:ef:67:4b:fd:59:e3:51:6c:e5:d1:8d:67: f6:40:35:3f:7f:7c:40:9c:0a:93:a4:ff:60:b8:e3: cb:42:1e:54:1e:46:75:bb:3a:07:b7:f4:d8:2e:ad: c2:0f:9a:78:89:bf:ea:02:2a:1f:5b:fe:5d:db:9d: 39:97:64:8d:28:03:36:28:5e:6f:b3:44:9d:55:26: 39:07:b6:8f:01:14:b1:d8:e5:9f:0f:69:b0:a8:d3: 62:b6:bf:29:7c:48:96:79:ef:f7:c8:1f:e0:15:8d: 8c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0A:D0:1D:C2:89:28:8E:39:2F:DF:5F:7F:B7:4B:A7:24:BB:99:C8 X509v3 Authority Key Identifier: keyid:05:4A:70:F7:E3:64:F7:5A:F2:F1:66:FE:84:31:E6:16:DE:98:64:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:1e:66:1a:c8:77:7f:e1:90:86:7b:ad:81:4d:1e:ec:17:fb: f7:02:c9:19:7a:75:3d:51:26:50:b4:4c:5a:2f:17:f2:36:76: b7:a3:bf:dc:0f:e6:2c:c0:aa:6f:2a:7b:cd:8f:38:c4:be:d2: 55:d6:e2:0e:01:6a:31:59:7f:09:53:fb:73:17:93:e0:bc:48: 16:9b:7c:aa:c9:33:30:a5:29:ef:79:9f:70:71:c2:14:28:9a: c2:7b:de:67:8c:1a:db:78:a7:f8:b9:96:2d:3f:bc:09:af:1d: 27:9f:99:9f:1c:83:8b:43:a0:ca:d0:02:71:a4:e1:1c:7f:c5: 18:f1:f9:11:d2:30:c1:77:ef:21:09:53:d8:89:c6:77:cd:d0: 45:93:79:19:9f:41:1f:89:79:17:39:ec:70:e2:72:eb:c5:c1: 87:f6:2a:ad:40:0c:a0:34:82:b4:50:e6:f4:75:69:78:f6:64: 25:d9:44:9f:2b:4d:71:24:90:63:4e:dc:69:2e:78:e2:fd:e8: c4:e3:c5:48:55:39:99:fe:35:69:0b:c4:5b:12:0b:c9:5a:25: 37:f1:cc:18:73:d1:d1:a6:3c:75:9a:7f:cc:8e:b8:b1:53:71: 44:5c:ef:65:7b:bf:bd:bb:90:f4:31:cb:81:83:d0:2f:ae:00: 02:a8:98:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUULCF6qafdYzkHqJRXEx9rV3wxhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2MTZE RTk4NjQ0ODAeFw0yNTA2MjgyMjM3MTdaFw0yNTA3MDIwNjMyMTdaMDMxMTAvBgNV BAMTKDJCMEFEMDFEQzI4OTI4OEUzOTJGREY1RjdGQjc0QkE3MjRCQjk5QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCclctFHBETVhLcNRJXN2/eH0dU gE3EA0ONQl61aspVgyq2mr/Z3DzG60NE5WEVPJ7FKvdnybOqDxGb35z1glFj8Kvy PvvE5VMJ7I04aBXIMBEODufk0rB3w0PHddSbp7pWRZO2337Q+KsgrM3SA9OEaSjm eeXt4lunNQqfzKO82kEWWsQzbcN/roqi92oeyfaBMRCY9pvYJe9nS/1Z41Fs5dGN Z/ZANT9/fECcCpOk/2C448tCHlQeRnW7Oge39NgurcIPmniJv+oCKh9b/l3bnTmX ZI0oAzYoXm+zRJ1VJjkHto8BFLHY5Z8PabCo02K2vyl8SJZ57/fIH+AVjYzJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKwrQHcKJKI45L99ff7dLpyS7mcgwHwYDVR0j BBgwFoAUBUpw9+Nk91ry8Wb+hDHmFt6YZEgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MWYxMzRiMS1hNjE3LTRiYWItOTFhYi0xMzgxMDIzNTQwMWIvMC8wNTRBNzBGN0Uz NjRGNzVBRjJGMTY2RkU4NDMxRTYxNkRFOTg2NDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2MTZERTk4 NjQ0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzFmMTM0YjEtYTYxNy00YmFiLTkx YWItMTM4MTAyMzU0MDFiLzAvMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2 MTZERTk4NjQ0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGceZhrId3/hkIZ7rYFNHuwX+/cCyRl6dT1R JlC0TFovF/I2drejv9wP5izAqm8qe82POMS+0lXW4g4BajFZfwlT+3MXk+C8SBab fKrJMzClKe95n3BxwhQomsJ73meMGtt4p/i5li0/vAmvHSefmZ8cg4tDoMrQAnGk 4Rx/xRjx+RHSMMF37yEJU9iJxnfN0EWTeRmfQR+JeRc57HDicuvFwYf2Kq1ADKA0 grRQ5vR1aXj2ZCXZRJ8rTXEkkGNO3GkueOL96MTjxUhVOZn+NWkLxFsSC8laJTfx zBhz0dGmPHWaf8yOuLFTcURc72V7v727kPQxy4GD0C+uAAKomDc= -----END CERTIFICATE-----Generated at Sun Jun 29 20:09:46 2025 by rpki-client