$ rpki-client -vvf repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft File: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft (raw, json) Hash identifier: GnbR1UCYqdpOSEga8cgX3VG24/Qo7xIuqLwLBp0cA2o= Subject key identifier: 3A:3E:34:A9:44:20:61:CB:D4:9B:C9:DB:57:95:CF:29:FD:DB:E9:7E Authority key identifier: 55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 Certificate issuer: /CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Certificate serial: 1DEDA041A952E8CFECCB6496207A98F5FC953FD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft Manifest number: 0219 Signing time: Mon 20 Oct 2025 09:41:45 +0000 Manifest this update: Mon 20 Oct 2025 09:36:45 +0000 Manifest next update: Thu 23 Oct 2025 10:42:45 +0000 Files and hashes: 1: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl (hash: 6SfFKCPqXTXF7gF+nz/1v662trnYkXSefaEkEYgYqVM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ed:a0:41:a9:52:e8:cf:ec:cb:64:96:20:7a:98:f5:fc:95:3f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Validity Not Before: Oct 20 09:36:45 2025 GMT Not After : Oct 23 10:42:45 2025 GMT Subject: CN=3A3E34A9442061CBD49BC9DB5795CF29FDDBE97E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d0:b0:3c:92:20:8e:50:75:ef:99:8c:f6:4a: 3d:46:4d:a7:a2:c1:3c:c7:22:94:21:49:0b:4c:7e: 17:60:24:13:bb:2d:b9:c1:79:56:23:e3:4c:b9:c4: 23:24:3c:7e:73:ef:f7:db:88:e5:55:97:93:b3:0a: f2:96:d8:88:40:9d:21:9e:75:be:82:ae:99:a1:52: 5a:b9:3f:95:dd:f5:f3:75:d9:cd:07:a7:c8:cf:d5: 71:7b:86:ed:da:2d:7f:16:96:b2:3c:72:7c:80:d3: 53:22:4f:6e:b2:99:ea:b7:1a:5b:f4:5b:ed:17:5a: c8:3d:96:a9:00:7e:4b:b1:a5:53:38:e6:b2:3f:6f: b3:e0:b1:0e:42:89:93:8e:11:cb:3d:e6:0f:41:dc: f3:2e:af:3a:ed:70:e8:45:a5:21:c7:70:d9:8f:85: 90:74:87:20:41:d3:f5:74:8a:e2:2a:ef:07:c7:1a: 20:a1:f1:43:f5:61:75:12:cd:79:82:4e:d6:17:e7: cd:04:09:d6:bc:49:e4:17:84:40:01:08:0f:62:42: 9a:ea:b3:ad:c5:39:25:51:bc:b7:96:d8:48:20:0b: 40:be:56:53:19:42:52:97:ab:9d:bd:66:f5:e0:b8: 94:05:f5:c5:a3:14:eb:d5:46:88:2e:47:39:07:c1: c0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3E:34:A9:44:20:61:CB:D4:9B:C9:DB:57:95:CF:29:FD:DB:E9:7E X509v3 Authority Key Identifier: keyid:55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d6:ec:bb:a4:28:e6:aa:52:26:72:f9:8c:1e:49:6f:95:d0: 0a:cd:79:69:03:24:83:0e:53:07:78:ce:a3:8a:42:4d:9a:87: 7e:ea:19:ed:6d:90:e8:05:b5:97:e1:69:8c:a4:df:c4:23:42: 80:f8:0a:14:16:1f:10:03:53:1b:66:e8:89:58:7c:1a:9f:11: 6d:02:59:5a:f5:de:1a:c2:39:7d:1b:06:f8:59:0b:03:33:20: 29:73:f5:0c:72:10:19:e5:06:20:26:57:f9:63:ed:b7:fe:a8: d8:23:fb:43:40:11:38:60:77:69:be:91:eb:3e:7e:23:bc:47: 1a:ec:b5:27:03:cf:0c:c2:3b:03:e3:59:30:13:c5:2e:50:17: d6:b0:52:a6:fd:b7:3a:fa:c3:94:b0:f1:bc:bc:ae:53:5c:6b: a7:13:04:8e:83:7d:cf:f0:53:f1:26:01:c2:dc:4b:a8:99:d7: b9:eb:4f:d4:9c:f4:5e:0d:c5:8d:c8:7e:51:a3:79:ce:71:fe: d2:45:70:2b:ae:89:0a:28:76:e5:80:20:bb:b1:28:b8:cd:d0: 30:3f:10:4f:34:5f:4c:0a:ab:c0:8d:36:61:91:86:47:ff:ff: 75:8e:8e:3b:31:09:cf:b5:0b:42:9c:1a:56:79:3d:06:9b:9d: 0d:19:3f:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHe2gQalS6M/sy2SWIHqY9fyVP9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQx QkVDRUYwNDAeFw0yNTEwMjAwOTM2NDVaFw0yNTEwMjMxMDQyNDVaMDMxMTAvBgNV BAMTKDNBM0UzNEE5NDQyMDYxQ0JENDlCQzlEQjU3OTVDRjI5RkREQkU5N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC80LA8kiCOUHXvmYz2Sj1GTaei wTzHIpQhSQtMfhdgJBO7LbnBeVYj40y5xCMkPH5z7/fbiOVVl5OzCvKW2IhAnSGe db6CrpmhUlq5P5Xd9fN12c0Hp8jP1XF7hu3aLX8WlrI8cnyA01MiT26ymeq3Glv0 W+0XWsg9lqkAfkuxpVM45rI/b7PgsQ5CiZOOEcs95g9B3PMurzrtcOhFpSHHcNmP hZB0hyBB0/V0iuIq7wfHGiCh8UP1YXUSzXmCTtYX580ECda8SeQXhEABCA9iQprq s63FOSVRvLeW2EggC0C+VlMZQlKXq529ZvXguJQF9cWjFOvVRoguRzkHwcC7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOj40qUQgYcvUm8nbV5XPKf3b6X4wHwYDVR0j BBgwFoAUVUbp8c8s9YJ4xb21MOke/Rvs7wQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTQ4NmNjZC0wYzk1LTQ5MWEtYjllNi02NjdjZWU0NDU5NGYvMC81NTQ2RTlGMUNG MkNGNTgyNzhDNUJEQjUzMEU5MUVGRDFCRUNFRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQxQkVD RUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE0ODZjY2QtMGM5NS00OTFhLWI5 ZTYtNjY3Y2VlNDQ1OTRmLzAvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFF RkQxQkVDRUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3W7LukKOaqUiZy+YweSW+V0ArNeWkDJIMO Uwd4zqOKQk2ah37qGe1tkOgFtZfhaYyk38QjQoD4ChQWHxADUxtm6IlYfBqfEW0C WVr13hrCOX0bBvhZCwMzIClz9QxyEBnlBiAmV/lj7bf+qNgj+0NAEThgd2m+kes+ fiO8RxrstScDzwzCOwPjWTATxS5QF9awUqb9tzr6w5Sw8by8rlNca6cTBI6Dfc/w U/EmAcLcS6iZ17nrT9Sc9F4NxY3IflGjec5x/tJFcCuuiQooduWAILuxKLjN0DA/ EE80X0wKq8CNNmGRhkf//3WOjjsxCc+1C0KcGlZ5PQabnQ0ZPw4= -----END CERTIFICATE-----Generated at Mon Oct 20 20:18:34 2025 by rpki-client