$ rpki-client -vvf repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft File: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft (raw, json) Hash identifier: CA+YKMeLtzGU2oVwI5ONS7exYQ9hbwZBtnpisiH27Qw= Subject key identifier: 3F:7A:DC:7A:C7:95:10:D2:73:3F:8C:3A:67:D5:17:D6:3C:47:F9:AD Authority key identifier: 55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 Certificate issuer: /CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Certificate serial: 0381DA47B32D28CD5FD7163C67FA2ECC5F9E011C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft Manifest number: 01FF Signing time: Sat 23 Aug 2025 04:41:45 +0000 Manifest this update: Sat 23 Aug 2025 04:36:45 +0000 Manifest next update: Tue 26 Aug 2025 08:55:45 +0000 Files and hashes: 1: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl (hash: lULUXJEjDRoo9Bt2pxz8GzUyYd8Q0iXPcqfIxdC7GE4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:81:da:47:b3:2d:28:cd:5f:d7:16:3c:67:fa:2e:cc:5f:9e:01:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Validity Not Before: Aug 23 04:36:45 2025 GMT Not After : Aug 26 08:55:45 2025 GMT Subject: CN=3F7ADC7AC79510D2733F8C3A67D517D63C47F9AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:74:2a:d1:c5:54:c0:c8:88:90:3e:71:b7:f0: af:86:89:d8:23:4e:43:fc:f6:a7:64:a8:92:fa:55: de:3d:c2:73:0b:ba:03:79:26:ea:a0:d8:d1:bb:70: 91:12:0b:13:44:44:cd:c5:91:5e:d1:6b:0c:84:6d: b4:42:76:af:4a:85:d5:9e:3b:bc:f7:c8:1e:0f:29: e8:1b:5f:98:19:97:ed:02:99:0f:e4:e2:d1:09:a9: 49:5a:7f:54:57:7e:d3:20:b0:a1:b6:c2:45:28:08: dc:83:1c:13:d0:ab:fb:7b:f3:b4:57:de:b8:bb:df: 38:d8:3b:ff:c3:d6:6a:79:f2:be:9f:a7:93:a5:7d: 89:cb:d2:ea:18:fd:50:83:b3:1e:ea:f9:18:74:10: f9:2c:4e:9a:8b:f5:83:0c:7b:23:bd:3f:ef:d0:1f: a1:b9:e7:f4:03:c1:7d:07:63:53:f1:53:7f:ab:e4: fb:47:1f:f4:07:d0:91:21:6b:23:58:0f:e7:0e:48: 1c:35:a9:4f:37:ea:e4:c0:16:50:ee:67:19:d6:a5: 85:06:19:90:ba:42:52:22:8d:33:d1:44:cd:fd:80: 8b:81:75:ba:7c:9c:eb:6d:1e:86:c5:49:6f:d0:ac: 02:1a:3a:f0:43:e9:ad:5e:68:e6:45:37:34:64:5f: 1a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7A:DC:7A:C7:95:10:D2:73:3F:8C:3A:67:D5:17:D6:3C:47:F9:AD X509v3 Authority Key Identifier: keyid:55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:a0:60:ed:d2:e2:c1:48:51:d3:9c:e1:dd:44:70:be:51:60: b3:2d:41:83:3f:1d:29:fb:33:9a:e2:0a:59:77:6a:11:37:73: a4:04:a4:e6:fc:94:38:99:33:d0:f2:5c:e5:5a:72:57:9c:36: 92:e8:01:92:55:28:28:12:bf:35:d2:0a:18:ad:45:eb:98:ab: 6a:ea:f2:46:21:24:78:22:c7:f3:d7:8a:ec:7d:4e:90:f5:0d: 73:00:ad:62:d1:e5:8b:a2:20:af:7e:e3:13:a5:c4:ae:9d:fe: 15:8e:20:be:c6:53:26:6c:c0:58:33:c9:3b:9d:56:1b:ac:6a: 2d:4b:3e:b8:ad:bd:87:0d:4d:cd:46:a0:26:88:e8:85:ab:f5: 0d:55:3a:87:35:36:a6:73:97:13:36:c8:69:29:1b:8c:63:7c: 69:1e:0b:96:5b:e4:f2:29:0f:45:01:63:61:ef:a8:6c:78:2a: 79:82:2b:27:07:59:36:c0:d1:fa:73:90:08:32:21:a8:04:db: 62:5b:a8:42:fc:4a:87:7a:83:93:89:f3:dc:91:c1:24:e0:e1: 61:bd:71:34:22:d8:0a:03:c8:73:1d:12:83:2b:6f:ad:44:95: 08:f6:35:e2:33:74:00:60:36:50:67:7b:5d:b4:5f:52:f3:53: 2f:00:8f:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA4HaR7MtKM1f1xY8Z/ouzF+eARwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQx QkVDRUYwNDAeFw0yNTA4MjMwNDM2NDVaFw0yNTA4MjYwODU1NDVaMDMxMTAvBgNV BAMTKDNGN0FEQzdBQzc5NTEwRDI3MzNGOEMzQTY3RDUxN0Q2M0M0N0Y5QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjdCrRxVTAyIiQPnG38K+Gidgj TkP89qdkqJL6Vd49wnMLugN5Juqg2NG7cJESCxNERM3FkV7RawyEbbRCdq9KhdWe O7z3yB4PKegbX5gZl+0CmQ/k4tEJqUlaf1RXftMgsKG2wkUoCNyDHBPQq/t787RX 3ri73zjYO//D1mp58r6fp5OlfYnL0uoY/VCDsx7q+Rh0EPksTpqL9YMMeyO9P+/Q H6G55/QDwX0HY1PxU3+r5PtHH/QH0JEhayNYD+cOSBw1qU836uTAFlDuZxnWpYUG GZC6QlIijTPRRM39gIuBdbp8nOttHobFSW/QrAIaOvBD6a1eaOZFNzRkXxrHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP3rceseVENJzP4w6Z9UX1jxH+a0wHwYDVR0j BBgwFoAUVUbp8c8s9YJ4xb21MOke/Rvs7wQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTQ4NmNjZC0wYzk1LTQ5MWEtYjllNi02NjdjZWU0NDU5NGYvMC81NTQ2RTlGMUNG MkNGNTgyNzhDNUJEQjUzMEU5MUVGRDFCRUNFRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQxQkVD RUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE0ODZjY2QtMGM5NS00OTFhLWI5 ZTYtNjY3Y2VlNDQ1OTRmLzAvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFF RkQxQkVDRUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKgYO3S4sFIUdOc4d1EcL5RYLMtQYM/HSn7 M5riCll3ahE3c6QEpOb8lDiZM9DyXOVaclecNpLoAZJVKCgSvzXSChitReuYq2rq 8kYhJHgix/PXiux9TpD1DXMArWLR5YuiIK9+4xOlxK6d/hWOIL7GUyZswFgzyTud Vhusai1LPritvYcNTc1GoCaI6IWr9Q1VOoc1NqZzlxM2yGkpG4xjfGkeC5Zb5PIp D0UBY2HvqGx4KnmCKycHWTbA0fpzkAgyIagE22JbqEL8Sod6g5OJ89yRwSTg4WG9 cTQi2AoDyHMdEoMrb61ElQj2NeIzdABgNlBne120X1LzUy8Aj4U= -----END CERTIFICATE-----Generated at Sat Aug 23 21:55:58 2025 by rpki-client