$ rpki-client -vvf repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft File: 054A70F7E364F75AF2F166FE8431E616DE986448.mft (raw, json) Hash identifier: cbrkOZtrp7QbFqjAA8fIYmhQFKbshyWtYQ4ZRRXb290= Subject key identifier: E3:BB:5E:B5:EC:C4:EE:29:BC:33:52:16:1C:EF:55:7D:CB:89:B4:E3 Authority key identifier: 05:4A:70:F7:E3:64:F7:5A:F2:F1:66:FE:84:31:E6:16:DE:98:64:48 Certificate issuer: /CN=054A70F7E364F75AF2F166FE8431E616DE986448 Certificate serial: 52A7C44FCA39A0849F12303AB7D9B08DE779000F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft Manifest number: 0398 Signing time: Sat 23 Aug 2025 10:42:20 +0000 Manifest this update: Sat 23 Aug 2025 10:37:20 +0000 Manifest next update: Tue 26 Aug 2025 17:40:20 +0000 Files and hashes: 1: 054A70F7E364F75AF2F166FE8431E616DE986448.crl (hash: zA6gf66FJEiCXsVvvOOzRzPoJ45C1EMNFNqUlWrfc88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.crl rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 17:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a7:c4:4f:ca:39:a0:84:9f:12:30:3a:b7:d9:b0:8d:e7:79:00:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=054A70F7E364F75AF2F166FE8431E616DE986448 Validity Not Before: Aug 23 10:37:20 2025 GMT Not After : Aug 26 17:40:20 2025 GMT Subject: CN=E3BB5EB5ECC4EE29BC3352161CEF557DCB89B4E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:13:72:23:3c:1e:87:f4:33:bf:75:64:7b:4f: d3:e4:d5:b4:a1:68:7f:03:90:8e:35:64:42:e6:1e: 4a:6e:26:ab:ac:8d:60:f7:e0:bc:dc:92:69:6a:fd: db:5c:38:c0:87:16:95:73:b7:c6:93:60:e7:67:1d: b6:47:97:6d:34:ed:d2:8e:ea:5d:39:d6:3f:f5:56: aa:11:a4:97:c3:df:85:f9:1a:0e:2b:12:87:53:f9: ce:02:23:ad:72:26:13:d0:75:1a:30:45:d6:d6:02: 4e:74:79:58:70:15:b4:4f:20:24:ed:9d:0b:c0:cd: 3f:93:38:28:f5:66:e3:22:1b:e0:e5:f7:1d:22:29: e1:70:20:f3:d2:dd:00:82:7c:df:a3:4b:72:80:7b: 33:ca:16:95:a7:c2:4d:3e:e8:5c:7a:bf:34:22:07: 16:c7:5b:46:6e:cd:ad:fb:86:2c:c7:08:75:16:a4: c2:f4:8a:72:fa:b8:73:7b:9a:74:96:e9:18:0d:3b: 8e:e5:63:80:ea:16:c2:1e:65:b7:d6:d1:da:e9:40: 1d:02:f0:36:90:21:f7:ef:b6:6e:ac:4a:1d:53:db: 1e:36:6b:67:c9:7b:83:0b:24:66:c4:8b:64:9a:b3: 66:80:fc:ec:03:8f:f2:35:71:81:93:42:01:ac:f0: 9e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BB:5E:B5:EC:C4:EE:29:BC:33:52:16:1C:EF:55:7D:CB:89:B4:E3 X509v3 Authority Key Identifier: keyid:05:4A:70:F7:E3:64:F7:5A:F2:F1:66:FE:84:31:E6:16:DE:98:64:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:94:5a:71:e5:9a:8b:04:0b:9a:67:87:93:b7:23:f6:0c:fc: e4:86:0f:e1:6c:e0:57:1c:8a:ad:1f:51:a6:d4:c7:ef:78:95: 78:4d:c3:86:9c:8f:d8:bd:5d:5e:ee:01:29:64:a5:2d:94:01: e0:18:90:87:31:89:f2:b0:c3:a7:0e:de:e0:f8:7e:3c:b1:ad: 96:8f:4b:28:1b:db:3d:10:da:00:4e:3e:32:de:1b:c0:33:23: 52:b1:85:ae:b1:90:04:e7:7e:0d:33:91:47:17:a7:15:8f:c7: f2:d3:b3:95:3a:5f:c9:54:bb:a6:1c:0a:f7:15:9e:41:94:97: c0:a9:79:06:6c:66:43:75:ff:b3:c6:1e:df:10:02:f2:7d:9f: 40:37:e3:37:5b:73:33:0a:27:e8:6e:5a:3a:ca:62:2f:01:de: b0:ca:f5:55:c7:a1:8e:0a:c5:14:f5:2d:f9:61:43:38:4f:f6: 0d:a0:bc:9f:ce:a3:f4:5f:bd:ac:70:51:bb:29:78:69:d5:c9: 68:b5:82:74:cb:59:b5:5e:a3:05:d8:44:6f:f6:8c:24:75:bd: 94:c4:2c:87:07:71:49:98:5e:94:0b:c3:71:db:d3:99:15:1a: 67:12:e8:7d:32:b0:f3:17:73:ac:28:b8:da:94:48:24:f6:fc: 87:22:ed:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUqfET8o5oISfEjA6t9mwjed5AA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2MTZE RTk4NjQ0ODAeFw0yNTA4MjMxMDM3MjBaFw0yNTA4MjYxNzQwMjBaMDMxMTAvBgNV BAMTKEUzQkI1RUI1RUNDNEVFMjlCQzMzNTIxNjFDRUY1NTdEQ0I4OUI0RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdE3IjPB6H9DO/dWR7T9Pk1bSh aH8DkI41ZELmHkpuJqusjWD34Lzckmlq/dtcOMCHFpVzt8aTYOdnHbZHl2007dKO 6l051j/1VqoRpJfD34X5Gg4rEodT+c4CI61yJhPQdRowRdbWAk50eVhwFbRPICTt nQvAzT+TOCj1ZuMiG+Dl9x0iKeFwIPPS3QCCfN+jS3KAezPKFpWnwk0+6Fx6vzQi BxbHW0Zuza37hizHCHUWpML0inL6uHN7mnSW6RgNO47lY4DqFsIeZbfW0drpQB0C 8DaQIffvtm6sSh1T2x42a2fJe4MLJGbEi2Sas2aA/OwDj/I1cYGTQgGs8J4BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU47tetezE7im8M1IWHO9VfcuJtOMwHwYDVR0j BBgwFoAUBUpw9+Nk91ry8Wb+hDHmFt6YZEgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MWYxMzRiMS1hNjE3LTRiYWItOTFhYi0xMzgxMDIzNTQwMWIvMC8wNTRBNzBGN0Uz NjRGNzVBRjJGMTY2RkU4NDMxRTYxNkRFOTg2NDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2MTZERTk4 NjQ0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzFmMTM0YjEtYTYxNy00YmFiLTkx YWItMTM4MTAyMzU0MDFiLzAvMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2 MTZERTk4NjQ0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHiUWnHlmosEC5pnh5O3I/YM/OSGD+Fs4Fcc iq0fUabUx+94lXhNw4acj9i9XV7uASlkpS2UAeAYkIcxifKww6cO3uD4fjyxrZaP Sygb2z0Q2gBOPjLeG8AzI1Kxha6xkATnfg0zkUcXpxWPx/LTs5U6X8lUu6YcCvcV nkGUl8CpeQZsZkN1/7PGHt8QAvJ9n0A34zdbczMKJ+huWjrKYi8B3rDK9VXHoY4K xRT1LflhQzhP9g2gvJ/Oo/RfvaxwUbspeGnVyWi1gnTLWbVeowXYRG/2jCR1vZTE LIcHcUmYXpQLw3Hb05kVGmcS6H0ysPMXc6wouNqUSCT2/Ici7V4= -----END CERTIFICATE-----Generated at Sat Aug 23 17:34:44 2025 by rpki-client