$ rpki-client -vvf repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft File: 054A70F7E364F75AF2F166FE8431E616DE986448.mft (raw, json) Hash identifier: evwidqQ49wlJm+QMRimBZLnBrRSsNNd07wrpT1tRAiI= Subject key identifier: 66:07:5C:1F:A4:E9:8C:DD:0D:B6:DB:F6:7F:B3:10:02:F9:47:92:84 Authority key identifier: 05:4A:70:F7:E3:64:F7:5A:F2:F1:66:FE:84:31:E6:16:DE:98:64:48 Certificate issuer: /CN=054A70F7E364F75AF2F166FE8431E616DE986448 Certificate serial: 308CBB145A5551FFA1D5859CABC710C99C6AA22C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft Manifest number: 03B1 Signing time: Sun 19 Oct 2025 05:52:20 +0000 Manifest this update: Sun 19 Oct 2025 05:47:20 +0000 Manifest next update: Wed 22 Oct 2025 17:50:20 +0000 Files and hashes: 1: 054A70F7E364F75AF2F166FE8431E616DE986448.crl (hash: x6e5Bm7cefbaLGN7oopDLp1wkf+pL6LvIxmW0pbu9rw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.crl rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:8c:bb:14:5a:55:51:ff:a1:d5:85:9c:ab:c7:10:c9:9c:6a:a2:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=054A70F7E364F75AF2F166FE8431E616DE986448 Validity Not Before: Oct 19 05:47:20 2025 GMT Not After : Oct 22 17:50:20 2025 GMT Subject: CN=66075C1FA4E98CDD0DB6DBF67FB31002F9479284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:db:9b:7a:be:4e:4a:65:01:ef:15:50:9a:bd: 97:03:9a:0d:6f:87:54:95:0d:ac:56:fb:cf:5d:6d: 9e:16:b4:1d:8a:55:0c:2d:99:3d:a8:d3:ad:fc:01: df:1b:1e:43:18:20:62:51:ed:83:15:d5:e0:9f:34: 48:b0:cd:f7:08:8b:04:0a:09:87:f0:68:82:a4:34: 58:cf:7d:9d:d5:8d:b4:3b:e0:ed:e1:a9:c6:b4:e2: 88:7c:b5:04:7d:f6:cd:cc:cc:f6:06:fb:5f:52:aa: c7:bc:50:15:5d:f1:3b:9c:00:24:b3:82:ec:34:8a: ee:e2:1e:62:64:62:3e:16:06:e6:96:2f:1c:73:0b: 97:f7:d6:e2:7d:47:21:3e:92:07:17:ab:d6:00:33: f3:b9:47:7a:e7:bf:23:50:8d:dc:72:80:8f:d7:16: be:10:89:70:95:3f:8f:c2:2b:36:e2:b4:e9:81:2f: be:94:76:f3:e9:4c:b3:8c:c6:95:f3:44:b3:a0:46: 48:42:5d:b0:be:e7:3c:66:a4:0e:c3:5a:54:bf:62: 25:50:21:88:7e:0f:6f:6b:fa:3e:f0:c0:92:7b:ea: 16:84:6f:0e:a7:68:60:4c:dd:65:e8:d7:ee:89:30: 4e:80:c2:e4:50:f3:5d:bd:02:0c:e3:32:f8:e3:72: b5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:07:5C:1F:A4:E9:8C:DD:0D:B6:DB:F6:7F:B3:10:02:F9:47:92:84 X509v3 Authority Key Identifier: keyid:05:4A:70:F7:E3:64:F7:5A:F2:F1:66:FE:84:31:E6:16:DE:98:64:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:6b:26:4a:32:ed:4c:69:df:a8:06:b0:e3:bc:d3:e6:7e:46: 4c:44:64:3d:1b:53:d9:34:57:b9:9d:c4:91:f7:e2:c1:c0:e0: 6a:29:fe:a5:ff:d7:0a:3c:56:d1:ac:a3:51:8b:d4:70:9c:5f: a2:d8:b5:13:5f:03:51:cc:19:af:26:bf:6a:6a:15:8e:7d:38: 84:8a:2d:d7:a9:af:8c:78:51:a6:5c:5b:14:34:87:dc:95:4e: 21:f8:c2:98:69:22:5e:cf:8d:2a:12:59:64:10:e2:d6:45:ee: 8e:6a:b1:ac:eb:5b:3b:c7:45:6e:4d:7e:80:1d:25:8d:49:8c: 4a:40:c1:53:c6:62:bf:2f:41:98:88:5b:ef:42:4f:b6:f2:e9: 06:1a:46:10:1a:44:9c:9d:c4:77:32:4d:f8:c8:5e:61:0d:59: 32:79:1c:27:d6:13:be:7e:fc:8a:49:d4:51:7b:23:10:cb:ab: b2:2d:2c:26:65:6b:0e:5b:fc:bf:27:9b:0e:8f:8c:bd:46:cf: 3b:6f:74:62:68:a1:13:c6:11:3f:49:dc:01:4d:fe:fe:63:a5: c8:56:da:e6:8f:0d:21:bc:55:71:db:b4:81:96:d2:30:21:0b: fc:41:47:2d:88:0e:b4:7d:28:74:41:16:88:ce:d4:53:e0:6c: b8:a8:47:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMIy7FFpVUf+h1YWcq8cQyZxqoiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2MTZE RTk4NjQ0ODAeFw0yNTEwMTkwNTQ3MjBaFw0yNTEwMjIxNzUwMjBaMDMxMTAvBgNV BAMTKDY2MDc1QzFGQTRFOThDREQwREI2REJGNjdGQjMxMDAyRjk0NzkyODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC825t6vk5KZQHvFVCavZcDmg1v h1SVDaxW+89dbZ4WtB2KVQwtmT2o0638Ad8bHkMYIGJR7YMV1eCfNEiwzfcIiwQK CYfwaIKkNFjPfZ3VjbQ74O3hqca04oh8tQR99s3MzPYG+19Sqse8UBVd8TucACSz guw0iu7iHmJkYj4WBuaWLxxzC5f31uJ9RyE+kgcXq9YAM/O5R3rnvyNQjdxygI/X Fr4QiXCVP4/CKzbitOmBL76UdvPpTLOMxpXzRLOgRkhCXbC+5zxmpA7DWlS/YiVQ IYh+D29r+j7wwJJ76haEbw6naGBM3WXo1+6JME6AwuRQ8129AgzjMvjjcrVjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZgdcH6TpjN0Nttv2f7MQAvlHkoQwHwYDVR0j BBgwFoAUBUpw9+Nk91ry8Wb+hDHmFt6YZEgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MWYxMzRiMS1hNjE3LTRiYWItOTFhYi0xMzgxMDIzNTQwMWIvMC8wNTRBNzBGN0Uz NjRGNzVBRjJGMTY2RkU4NDMxRTYxNkRFOTg2NDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2MTZERTk4 NjQ0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzFmMTM0YjEtYTYxNy00YmFiLTkx YWItMTM4MTAyMzU0MDFiLzAvMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2 MTZERTk4NjQ0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBrJkoy7Uxp36gGsOO80+Z+RkxEZD0bU9k0 V7mdxJH34sHA4Gop/qX/1wo8VtGso1GL1HCcX6LYtRNfA1HMGa8mv2pqFY59OISK Ldepr4x4UaZcWxQ0h9yVTiH4wphpIl7PjSoSWWQQ4tZF7o5qsazrWzvHRW5NfoAd JY1JjEpAwVPGYr8vQZiIW+9CT7by6QYaRhAaRJydxHcyTfjIXmENWTJ5HCfWE75+ /IpJ1FF7IxDLq7ItLCZlaw5b/L8nmw6PjL1GzztvdGJooRPGET9J3AFN/v5jpchW 2uaPDSG8VXHbtIGW0jAhC/xBRy2IDrR9KHRBFojO1FPgbLioR4A= -----END CERTIFICATE-----Generated at Mon Oct 20 09:41:37 2025 by rpki-client