$ rpki-client -vvf repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft File: 054A70F7E364F75AF2F166FE8431E616DE986448.mft (raw, json) Hash identifier: t2/PVp98IdomWkhq/8kKl+rShAueCNHdUx6/SV8Ib7k= Subject key identifier: 55:06:91:70:44:B3:3E:6C:24:0C:AC:8F:DE:B3:57:9D:5E:B2:26:24 Authority key identifier: 05:4A:70:F7:E3:64:F7:5A:F2:F1:66:FE:84:31:E6:16:DE:98:64:48 Certificate issuer: /CN=054A70F7E364F75AF2F166FE8431E616DE986448 Certificate serial: 23E23897F0C7A96CDE2A818B8FEBD7C27289783C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft Manifest number: 03F7 Signing time: Tue 24 Mar 2026 17:42:40 +0000 Manifest this update: Tue 24 Mar 2026 17:37:40 +0000 Manifest next update: Sat 28 Mar 2026 01:35:40 +0000 Files and hashes: 1: 054A70F7E364F75AF2F166FE8431E616DE986448.crl (hash: iStbnfdgbJPuhuol4vBzGhVmo/eJw2OgCVUNbrPj0NQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.crl rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e2:38:97:f0:c7:a9:6c:de:2a:81:8b:8f:eb:d7:c2:72:89:78:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=054A70F7E364F75AF2F166FE8431E616DE986448 Validity Not Before: Mar 24 17:37:40 2026 GMT Not After : Mar 28 01:35:40 2026 GMT Subject: CN=5506917044B33E6C240CAC8FDEB3579D5EB22624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dc:1d:5f:58:3a:32:d5:3e:6a:fa:bf:5d:ff: 7c:77:b2:60:cc:66:f2:b6:63:26:9e:2a:0a:60:a2: 35:e2:6a:7e:56:d2:0a:87:14:a0:47:62:a4:4a:81: bb:8a:8f:1b:3f:e0:3e:a9:8f:5f:03:99:41:c2:10: ac:c4:2b:cb:e4:7b:34:b8:a9:a2:86:38:25:96:e2: d7:43:07:85:9d:40:f3:c3:18:4c:3c:56:a4:ab:e0: 6b:6b:f1:cc:43:21:a7:3f:e1:d3:08:d9:59:f8:be: f8:0c:f5:62:e8:15:ee:fc:cc:34:80:e2:10:44:7b: 5d:1e:8b:5d:de:2c:ee:e6:71:fd:3e:87:e0:50:f3: 96:b1:4d:73:fc:c0:2f:56:00:b7:5f:28:11:27:73: 84:8a:48:26:23:3c:bd:e3:f4:be:8f:fd:ca:06:dc: 49:eb:6d:a1:b9:6a:e7:15:95:2b:1d:2e:8d:d6:c8: 7a:6a:7e:51:a2:9d:a9:e4:e8:3c:f6:eb:4e:e4:bf: bf:8e:41:6d:ff:32:e4:48:67:27:47:5d:79:5a:bc: 71:cb:ac:9b:2c:ea:de:9c:7c:f5:84:6c:85:69:e1: 34:5d:ea:38:50:6a:df:71:f3:3a:c5:48:bf:fd:95: 3a:12:b8:af:bd:f2:1b:25:57:d3:cf:fd:12:f0:e5: 18:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:06:91:70:44:B3:3E:6C:24:0C:AC:8F:DE:B3:57:9D:5E:B2:26:24 X509v3 Authority Key Identifier: keyid:05:4A:70:F7:E3:64:F7:5A:F2:F1:66:FE:84:31:E6:16:DE:98:64:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:23:dd:de:ef:a0:4b:b8:34:46:45:bf:cd:a9:c9:c3:a0:ab: b2:29:51:b7:c3:2b:dd:5e:a1:77:7e:6f:6e:d2:71:02:af:ff: 6c:1a:68:d4:06:5d:68:20:10:3a:91:c1:42:d9:3a:06:7c:23: 8e:d4:e1:90:14:dc:cd:d2:c7:af:c7:d8:f4:80:75:3b:fb:72: f2:cc:75:8c:8c:b1:c7:d8:58:8f:d6:3c:1b:aa:c6:ba:ef:b4: 21:f9:21:bc:98:bb:0a:14:0e:f7:00:7f:a4:ab:af:f1:61:37: 36:39:71:04:92:63:d1:12:d6:34:8b:6d:d3:40:68:1e:c7:71: 50:c2:6d:76:27:a0:87:d5:d3:68:4a:af:a6:b7:1c:10:ae:6b: 85:0e:8f:4b:dc:cf:f2:fb:82:9d:22:95:6e:41:cf:dd:3e:01: 36:7d:13:34:60:29:01:9a:37:53:ae:55:cd:32:1e:ef:df:e9: a9:bb:32:78:21:d7:3a:d5:2e:d6:55:21:6a:83:f7:a1:5a:3a: eb:fb:33:fd:f1:70:81:71:e5:4b:8d:8e:50:d2:cc:c1:42:7f: fa:38:d0:4e:42:6c:15:f8:87:c1:5d:2d:b7:15:29:4b:2f:91: e4:98:f5:d1:74:2d:5d:3e:28:95:0b:d1:88:e6:95:93:47:6e: 0c:80:91:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI+I4l/DHqWzeKoGLj+vXwnKJeDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2MTZE RTk4NjQ0ODAeFw0yNjAzMjQxNzM3NDBaFw0yNjAzMjgwMTM1NDBaMDMxMTAvBgNV BAMTKDU1MDY5MTcwNDRCMzNFNkMyNDBDQUM4RkRFQjM1NzlENUVCMjI2MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb3B1fWDoy1T5q+r9d/3x3smDM ZvK2YyaeKgpgojXian5W0gqHFKBHYqRKgbuKjxs/4D6pj18DmUHCEKzEK8vkezS4 qaKGOCWW4tdDB4WdQPPDGEw8VqSr4Gtr8cxDIac/4dMI2Vn4vvgM9WLoFe78zDSA 4hBEe10ei13eLO7mcf0+h+BQ85axTXP8wC9WALdfKBEnc4SKSCYjPL3j9L6P/coG 3EnrbaG5aucVlSsdLo3WyHpqflGinank6Dz2607kv7+OQW3/MuRIZydHXXlavHHL rJss6t6cfPWEbIVp4TRd6jhQat9x8zrFSL/9lToSuK+98hslV9PP/RLw5RidAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVQaRcESzPmwkDKyP3rNXnV6yJiQwHwYDVR0j BBgwFoAUBUpw9+Nk91ry8Wb+hDHmFt6YZEgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MWYxMzRiMS1hNjE3LTRiYWItOTFhYi0xMzgxMDIzNTQwMWIvMC8wNTRBNzBGN0Uz NjRGNzVBRjJGMTY2RkU4NDMxRTYxNkRFOTg2NDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2MTZERTk4 NjQ0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzFmMTM0YjEtYTYxNy00YmFiLTkx YWItMTM4MTAyMzU0MDFiLzAvMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2 MTZERTk4NjQ0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEj3d7voEu4NEZFv82pycOgq7IpUbfDK91e oXd+b27ScQKv/2waaNQGXWggEDqRwULZOgZ8I47U4ZAU3M3Sx6/H2PSAdTv7cvLM dYyMscfYWI/WPBuqxrrvtCH5IbyYuwoUDvcAf6Srr/FhNzY5cQSSY9ES1jSLbdNA aB7HcVDCbXYnoIfV02hKr6a3HBCua4UOj0vcz/L7gp0ilW5Bz90+ATZ9EzRgKQGa N1OuVc0yHu/f6am7Mngh1zrVLtZVIWqD96FaOuv7M/3xcIFx5UuNjlDSzMFCf/o4 0E5CbBX4h8FdLbcVKUsvkeSY9dF0LV0+KJUL0YjmlZNHbgyAkXw= -----END CERTIFICATE-----Generated at Thu Mar 26 18:58:45 2026 by rpki-client