$ rpki-client -vvf repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft File: 54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft (raw, json) Hash identifier: cXRyhssSH1bkNgEVngg5h9IOhHW1G9C3O6p/h0HBlyg= Subject key identifier: 6D:50:83:6D:7D:56:B3:34:0A:3D:F6:B4:0F:D7:CF:9E:A6:71:E8:20 Authority key identifier: 54:FF:14:1B:E9:60:13:FE:6B:C0:81:6D:99:1B:CF:B4:F6:61:8C:BE Certificate issuer: /CN=54FF141BE96013FE6BC0816D991BCFB4F6618CBE Certificate serial: 0FD863C4F42AA928A451D35ABCDD67A442C7E5F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft Manifest number: 04FE Signing time: Thu 21 Aug 2025 23:01:30 +0000 Manifest this update: Thu 21 Aug 2025 22:56:30 +0000 Manifest next update: Mon 25 Aug 2025 07:13:30 +0000 Files and hashes: 1: 3130332e32312e3232382e302f32342d3234203d3e20313332363433.roa (hash: HoilO9KAsNDvqhA1QW+xRWbMVFCIXL/5ZP3Wb1KxcsY=) 2: 54FF141BE96013FE6BC0816D991BCFB4F6618CBE.crl (hash: xXxgMj0xS73ZWO8Z8ZwO7btBZ1sJzK11opM7WJQQhUY=) 3: 3130332e3132332e3135382e302f32342d3234203d3e20313332363433.roa (hash: 4Y2+me1T7YOW0mP4kEwSrY0/8rA8cOe6GeK5fECPb4g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.crl rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:13:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d8:63:c4:f4:2a:a9:28:a4:51:d3:5a:bc:dd:67:a4:42:c7:e5:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54FF141BE96013FE6BC0816D991BCFB4F6618CBE Validity Not Before: Aug 21 22:56:30 2025 GMT Not After : Aug 25 07:13:30 2025 GMT Subject: CN=6D50836D7D56B3340A3DF6B40FD7CF9EA671E820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6f:0e:33:97:4f:1a:99:1b:bd:29:40:46:f0: 17:4a:ca:32:3c:5a:d5:24:d1:96:48:1b:6a:ce:c0: 44:b8:4c:b0:f2:b6:61:6e:07:3d:b5:f6:2b:1a:7f: 38:c3:18:36:05:bb:d9:12:6b:c2:78:24:7f:35:b6: cb:a5:e5:5c:83:77:ae:70:87:ea:2f:ae:82:db:84: 92:5b:ac:02:a6:67:1a:c1:75:4f:8f:85:90:b7:b9: 96:10:4b:86:79:97:f7:0e:85:05:16:b4:51:d5:35: 38:9c:f4:ee:45:3d:1f:0e:d4:ae:75:bd:0d:28:4a: c5:1b:4e:4d:59:bb:d6:df:50:c9:d5:64:44:92:9a: 1c:89:d4:9b:bf:6b:16:3c:1f:59:8a:28:c3:b6:5d: 48:5c:fe:20:61:90:ae:d5:8f:78:50:be:31:0b:20: 36:4c:d4:96:0d:e1:7e:a5:d4:c6:87:83:5e:32:52: 9c:71:b6:e2:2b:1a:92:bf:18:f3:3c:67:da:c9:9c: 38:44:2b:36:eb:fa:50:f4:ba:e3:10:8a:53:19:22: b2:34:0d:01:b8:b3:55:03:cf:b8:38:57:7f:e6:91: 77:54:07:72:95:b7:d0:38:ed:e5:67:f1:5e:07:0f: fc:fa:ad:ee:8a:1a:47:5e:c8:12:0a:4e:f5:10:3b: 72:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:50:83:6D:7D:56:B3:34:0A:3D:F6:B4:0F:D7:CF:9E:A6:71:E8:20 X509v3 Authority Key Identifier: keyid:54:FF:14:1B:E9:60:13:FE:6B:C0:81:6D:99:1B:CF:B4:F6:61:8C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e1:8c:e3:c9:46:2a:15:e9:fd:3b:88:9d:ad:51:ad:5c:38: f3:74:e3:f9:95:68:b8:23:8b:eb:5f:86:3a:2f:3a:d1:78:7d: 20:3a:eb:14:8d:56:22:5a:bf:d1:3f:20:e8:5f:ea:5d:b6:22: 30:f0:3f:54:e7:46:54:ee:73:7c:44:76:44:1c:7f:96:5b:8f: 90:93:f2:60:87:1b:5f:be:ce:70:cd:06:fd:fe:9a:71:5b:79: f3:59:81:9a:d7:c2:b7:8c:51:83:6b:69:bc:42:0b:25:3c:6c: 55:2a:57:d0:0c:3c:5d:e3:85:54:52:fe:99:ea:8a:b4:71:ff: 41:f6:31:97:aa:d5:74:3f:d3:b4:e1:3a:6e:de:26:f5:8c:0f: 1d:2e:2d:ce:97:da:25:80:8e:82:c9:d8:76:62:4f:83:39:f2: 4c:54:aa:a6:95:c5:22:45:f9:d0:c3:ff:c0:3e:fc:38:be:72: 39:f0:15:ab:71:93:14:61:3a:bf:10:94:ab:5e:05:bd:d2:6a: f8:15:8b:c6:d0:2e:9e:a1:16:bb:71:36:a2:42:ce:df:56:9b: c6:ea:31:f0:dd:ee:a3:45:6f:6c:d6:8e:e5:37:1d:3e:64:d7: 88:74:ad:04:c2:16:f4:64:c5:a4:82:2a:b4:1e:30:26:cb:97: 80:2d:a0:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9hjxPQqqSikUdNavN1npELH5fcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRGRjE0MUJFOTYwMTNGRTZCQzA4MTZEOTkxQkNGQjRG NjYxOENCRTAeFw0yNTA4MjEyMjU2MzBaFw0yNTA4MjUwNzEzMzBaMDMxMTAvBgNV BAMTKDZENTA4MzZEN0Q1NkIzMzQwQTNERjZCNDBGRDdDRjlFQTY3MUU4MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfbw4zl08amRu9KUBG8BdKyjI8 WtUk0ZZIG2rOwES4TLDytmFuBz219isafzjDGDYFu9kSa8J4JH81tsul5VyDd65w h+ovroLbhJJbrAKmZxrBdU+PhZC3uZYQS4Z5l/cOhQUWtFHVNTic9O5FPR8O1K51 vQ0oSsUbTk1Zu9bfUMnVZESSmhyJ1Ju/axY8H1mKKMO2XUhc/iBhkK7Vj3hQvjEL IDZM1JYN4X6l1MaHg14yUpxxtuIrGpK/GPM8Z9rJnDhEKzbr+lD0uuMQilMZIrI0 DQG4s1UDz7g4V3/mkXdUB3KVt9A47eVn8V4HD/z6re6KGkdeyBIKTvUQO3K5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbVCDbX1WszQKPfa0D9fPnqZx6CAwHwYDVR0j BBgwFoAUVP8UG+lgE/5rwIFtmRvPtPZhjL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2FmMjcxZi1jODNkLTQ0MWUtYmVhOS0xOGEyNDRkMGUwMGUvMC81NEZGMTQxQkU5 NjAxM0ZFNkJDMDgxNkQ5OTFCQ0ZCNEY2NjE4Q0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTRGRjE0MUJFOTYwMTNGRTZCQzA4MTZEOTkxQkNGQjRGNjYx OENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNhZjI3MWYtYzgzZC00NDFlLWJl YTktMThhMjQ0ZDBlMDBlLzAvNTRGRjE0MUJFOTYwMTNGRTZCQzA4MTZEOTkxQkNG QjRGNjYxOENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3hjOPJRioV6f07iJ2tUa1cOPN04/mVaLgj i+tfhjovOtF4fSA66xSNViJav9E/IOhf6l22IjDwP1TnRlTuc3xEdkQcf5Zbj5CT 8mCHG1++znDNBv3+mnFbefNZgZrXwreMUYNrabxCCyU8bFUqV9AMPF3jhVRS/pnq irRx/0H2MZeq1XQ/07ThOm7eJvWMDx0uLc6X2iWAjoLJ2HZiT4M58kxUqqaVxSJF +dDD/8A+/Di+cjnwFatxkxRhOr8QlKteBb3SavgVi8bQLp6hFrtxNqJCzt9Wm8bq MfDd7qNFb2zWjuU3HT5k14h0rQTCFvRkxaSCKrQeMCbLl4AtoEU= -----END CERTIFICATE-----Generated at Sat Aug 23 18:31:05 2025 by rpki-client