$ rpki-client -vvf repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft File: 54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft (raw, json) Hash identifier: 0SQ2/b3tOdayXXBFQ5XsJEIa3ZtERFDsn1/GFTKco6U= Subject key identifier: 6A:0A:1A:64:B8:21:EC:58:A1:D1:8F:AB:00:5D:FE:BD:8F:41:23:4E Authority key identifier: 54:FF:14:1B:E9:60:13:FE:6B:C0:81:6D:99:1B:CF:B4:F6:61:8C:BE Certificate issuer: /CN=54FF141BE96013FE6BC0816D991BCFB4F6618CBE Certificate serial: 51C99EAFC4A9FBC6A832129915C0384AAC495214 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft Manifest number: 04CE Signing time: Tue 06 May 2025 04:21:29 +0000 Manifest this update: Tue 06 May 2025 04:16:29 +0000 Manifest next update: Fri 09 May 2025 07:19:29 +0000 Files and hashes: 1: 3130332e3132332e3135382e302f32342d3234203d3e20313332363433.roa (hash: OtO7trEv+mIXnYZ9PighxNjftlOq2BJEStDsCjt/cj4=) 2: 3130332e32312e3232382e302f32342d3234203d3e20313332363433.roa (hash: ey0RnIx9BHEX807Crk0Cq6R921ovlZ3dd8rpdjqgBeQ=) 3: 54FF141BE96013FE6BC0816D991BCFB4F6618CBE.crl (hash: 2MU9T/FXa3RFpjWnpNuf01HErlo/EPZ1Ow3YEs05T5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.crl rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 07:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c9:9e:af:c4:a9:fb:c6:a8:32:12:99:15:c0:38:4a:ac:49:52:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54FF141BE96013FE6BC0816D991BCFB4F6618CBE Validity Not Before: May 6 04:16:29 2025 GMT Not After : May 9 07:19:29 2025 GMT Subject: CN=6A0A1A64B821EC58A1D18FAB005DFEBD8F41234E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:89:73:9b:f3:a1:31:28:db:a9:ce:9f:ff:7c: d6:90:33:b5:f7:1f:60:ed:d8:c7:c9:12:5f:f7:28: 18:32:7a:d3:cd:ad:e5:0f:a9:9f:ba:d5:32:9e:4f: 32:0a:c3:06:56:f6:67:56:89:88:ac:c5:c4:4b:da: 08:91:26:80:67:5a:75:f0:87:90:c4:c4:85:54:1b: e6:41:d6:57:99:2b:eb:85:9a:1b:70:00:63:b8:b8: db:f5:68:f0:97:fa:af:32:16:b4:66:f3:22:74:cd: 1c:53:37:4d:c5:d3:af:37:74:12:cb:7f:d4:da:b9: 9a:56:82:f3:01:04:66:54:9f:00:42:1a:5c:11:65: d3:a0:d9:f3:d4:89:d5:cf:52:c7:fc:a6:25:63:bd: d6:b2:3a:33:3a:33:59:62:9c:4b:36:58:26:a2:b9: a7:3e:d9:45:fa:84:af:15:dd:0a:66:1c:7c:e6:63: 88:28:3f:ab:8c:5d:b9:5e:d5:47:a7:2e:6f:b8:31: bf:f7:c4:8e:4e:21:ce:2c:0d:95:c6:5c:77:d3:3a: cb:15:02:03:9f:b9:86:aa:91:c4:86:46:cd:ec:2d: 36:3a:27:55:1c:9b:68:be:b2:0f:da:f8:2e:ea:b3: 08:2c:2c:a2:c9:da:f7:2d:14:cd:55:a8:57:16:20: e6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0A:1A:64:B8:21:EC:58:A1:D1:8F:AB:00:5D:FE:BD:8F:41:23:4E X509v3 Authority Key Identifier: keyid:54:FF:14:1B:E9:60:13:FE:6B:C0:81:6D:99:1B:CF:B4:F6:61:8C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e5:a7:ee:b3:2b:43:84:93:0d:0a:f8:9c:35:95:97:c3:d2: 53:da:d9:87:e0:e0:5c:31:31:21:82:2c:c1:71:c9:44:aa:27: c7:6f:d3:84:9c:e5:7d:db:58:18:96:57:67:85:20:28:64:30: 01:75:4b:87:10:ed:2f:34:eb:ca:87:86:25:c9:6a:e5:e1:16: d1:c1:a5:4d:3a:52:e3:bc:09:cb:2e:b5:da:44:d4:d6:68:93: ba:28:fa:02:eb:3b:1c:b4:a8:f7:b9:e5:d4:fd:f0:3b:82:54: 61:5d:aa:c3:f4:04:71:1f:10:61:13:57:84:99:00:b5:5f:e6: 34:bf:d0:90:8a:05:24:52:8d:91:7b:83:e0:8f:5f:8b:cb:6d: e3:c0:ce:fb:03:54:3a:54:96:08:da:5b:80:61:58:e9:c8:0d: 7f:79:e4:78:00:b7:ee:af:e8:2d:5e:c6:4c:71:e1:25:d6:a8: 82:65:71:1c:6f:26:cf:ec:81:eb:02:56:d0:39:f2:0f:5a:66: 3b:55:08:e2:f4:60:05:51:4f:81:98:95:2a:7a:a2:43:c4:c2: c7:d2:54:06:5a:ab:4a:91:c4:91:59:8c:26:e6:70:37:eb:96: 26:39:fe:bc:f0:ad:1d:14:64:7f:f8:6b:ce:ff:65:fe:9b:82: f0:1a:d3:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUcmer8Sp+8aoMhKZFcA4SqxJUhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRGRjE0MUJFOTYwMTNGRTZCQzA4MTZEOTkxQkNGQjRG NjYxOENCRTAeFw0yNTA1MDYwNDE2MjlaFw0yNTA1MDkwNzE5MjlaMDMxMTAvBgNV BAMTKDZBMEExQTY0QjgyMUVDNThBMUQxOEZBQjAwNURGRUJEOEY0MTIzNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiiXOb86ExKNupzp//fNaQM7X3 H2Dt2MfJEl/3KBgyetPNreUPqZ+61TKeTzIKwwZW9mdWiYisxcRL2giRJoBnWnXw h5DExIVUG+ZB1leZK+uFmhtwAGO4uNv1aPCX+q8yFrRm8yJ0zRxTN03F0683dBLL f9TauZpWgvMBBGZUnwBCGlwRZdOg2fPUidXPUsf8piVjvdayOjM6M1linEs2WCai uac+2UX6hK8V3QpmHHzmY4goP6uMXble1UenLm+4Mb/3xI5OIc4sDZXGXHfTOssV AgOfuYaqkcSGRs3sLTY6J1Ucm2i+sg/a+C7qswgsLKLJ2vctFM1VqFcWIOYhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUagoaZLgh7Fih0Y+rAF3+vY9BI04wHwYDVR0j BBgwFoAUVP8UG+lgE/5rwIFtmRvPtPZhjL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2FmMjcxZi1jODNkLTQ0MWUtYmVhOS0xOGEyNDRkMGUwMGUvMC81NEZGMTQxQkU5 NjAxM0ZFNkJDMDgxNkQ5OTFCQ0ZCNEY2NjE4Q0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTRGRjE0MUJFOTYwMTNGRTZCQzA4MTZEOTkxQkNGQjRGNjYx OENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNhZjI3MWYtYzgzZC00NDFlLWJl YTktMThhMjQ0ZDBlMDBlLzAvNTRGRjE0MUJFOTYwMTNGRTZCQzA4MTZEOTkxQkNG QjRGNjYxOENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGblp+6zK0OEkw0K+Jw1lZfD0lPa2Yfg4Fwx MSGCLMFxyUSqJ8dv04Sc5X3bWBiWV2eFIChkMAF1S4cQ7S8068qHhiXJauXhFtHB pU06UuO8CcsutdpE1NZok7oo+gLrOxy0qPe55dT98DuCVGFdqsP0BHEfEGETV4SZ ALVf5jS/0JCKBSRSjZF7g+CPX4vLbePAzvsDVDpUlgjaW4BhWOnIDX955HgAt+6v 6C1exkxx4SXWqIJlcRxvJs/sgesCVtA58g9aZjtVCOL0YAVRT4GYlSp6okPEwsfS VAZaq0qRxJFZjCbmcDfrliY5/rzwrR0UZH/4a87/Zf6bgvAa004= -----END CERTIFICATE-----Generated at Thu May 8 08:18:55 2025 by rpki-client