$ rpki-client -vvf repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft File: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft (raw, json) Hash identifier: 49AddwxjMLT7vrLv2zMipYA7kaD5+J4Du+0YQ82mWE4= Subject key identifier: A0:18:52:0E:01:21:B2:EE:B7:06:13:49:AF:C3:31:A4:18:C8:FC:B9 Authority key identifier: C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF Certificate issuer: /CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Certificate serial: 37C7A49DE7AB44B6CE278379D90AF116ED50CA07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft Manifest number: 03CA Signing time: Fri 27 Jun 2025 09:01:58 +0000 Manifest this update: Fri 27 Jun 2025 08:56:58 +0000 Manifest next update: Mon 30 Jun 2025 16:47:58 +0000 Files and hashes: 1: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl (hash: oxcBLaqZbxsCflYoGtF7ulNxt9UT2T7TJRgHrEGAzHw=) 2: 3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa (hash: M93Ni1T1Tbr7xBYmfCDNgdw5xr36AB/YVcpH7A2lVoA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 16:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c7:a4:9d:e7:ab:44:b6:ce:27:83:79:d9:0a:f1:16:ed:50:ca:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Validity Not Before: Jun 27 08:56:58 2025 GMT Not After : Jun 30 16:47:58 2025 GMT Subject: CN=A018520E0121B2EEB7061349AFC331A418C8FCB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7f:8e:12:db:4b:ae:7e:78:2f:ba:48:d8:f7: 7e:81:49:7a:7c:e4:15:bc:4f:27:18:0e:00:b1:45: 6e:7b:2d:89:78:cc:57:5a:46:b2:80:c7:46:f0:35: 27:56:3a:91:0f:6d:04:77:59:91:a6:09:37:8e:be: 99:57:45:6f:f5:a8:b5:a4:e6:b3:bf:aa:b9:5b:c0: 3d:6c:91:75:0d:77:b5:99:ff:c8:06:25:32:55:6a: 3a:19:7f:7d:54:c8:a8:c6:a6:dc:66:76:07:2c:bb: dc:12:29:08:69:da:79:ad:5d:e6:b7:f8:bd:f9:e3: ae:a5:ec:d8:51:21:e1:fb:f8:ed:83:57:0a:75:36: 2f:03:e7:35:1e:12:6b:0e:49:ee:37:ef:e2:5b:c9: 6d:bc:76:d4:5f:8f:b2:58:3a:e5:8d:cc:a7:0c:6d: 57:95:cd:10:4f:6d:2e:e9:7e:7a:e4:da:c8:8b:25: 12:30:ca:c0:46:ef:91:46:db:32:eb:d7:74:1c:af: cb:5f:0c:4e:a9:36:16:32:a4:63:ff:b6:e8:cd:0d: e5:2e:c2:90:c6:ac:d7:fa:d9:cb:5d:5f:bb:5e:55: 2a:87:06:e7:7e:01:58:4b:7b:1a:6a:62:8d:3f:84: cc:e9:89:1c:0c:7b:30:87:81:0c:df:36:92:fd:36: 71:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:18:52:0E:01:21:B2:EE:B7:06:13:49:AF:C3:31:A4:18:C8:FC:B9 X509v3 Authority Key Identifier: keyid:C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:31:4c:e1:7d:c9:58:51:df:c3:9e:73:e6:c9:ea:ad:d4:a1: 0f:28:cd:8e:b5:86:8d:ab:a0:90:a5:47:b9:c5:27:48:25:87: cf:c8:ad:37:dd:b9:ff:4f:a9:4c:69:f4:4c:24:02:ab:7c:64: 5e:bb:ee:7e:5c:62:ce:c0:5c:e1:43:95:62:de:5f:65:c7:29: 68:62:e0:ef:ba:73:12:b6:7a:1b:44:b8:b7:ea:2f:2d:74:81: d1:fe:78:50:1c:5a:79:d6:f8:96:09:29:1c:93:d7:2a:38:b8: 08:50:b3:66:ba:8f:3e:57:1f:bb:82:06:8e:02:b9:f3:65:3f: 9e:78:99:9e:5f:66:8e:f3:cb:59:95:37:6b:87:8b:dd:82:41: 1a:71:3a:15:6f:7e:58:5a:c5:39:33:28:b5:c3:32:9c:22:51: 52:91:1c:d9:82:73:a5:70:46:fe:df:eb:d5:07:02:af:85:e4: 61:96:02:27:55:b1:99:0a:ea:cf:1e:fb:0f:e9:0e:03:1d:2e: c9:0b:fc:df:4a:d9:41:18:7e:da:ed:f0:a5:e2:d1:d4:8c:f5: b7:ca:ab:18:7c:c6:0f:4f:24:5b:88:17:d7:71:56:4c:38:bb: 80:2a:5c:42:a5:41:8d:a7:5a:02:e1:b2:3e:f5:f3:1e:8f:a3: 87:ee:10:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN8ekneerRLbOJ4N52QrxFu1QygcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYz MEJGRjVERjAeFw0yNTA2MjcwODU2NThaFw0yNTA2MzAxNjQ3NThaMDMxMTAvBgNV BAMTKEEwMTg1MjBFMDEyMUIyRUVCNzA2MTM0OUFGQzMzMUE0MThDOEZDQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgf44S20uufngvukjY936BSXp8 5BW8TycYDgCxRW57LYl4zFdaRrKAx0bwNSdWOpEPbQR3WZGmCTeOvplXRW/1qLWk 5rO/qrlbwD1skXUNd7WZ/8gGJTJVajoZf31UyKjGptxmdgcsu9wSKQhp2nmtXea3 +L35466l7NhRIeH7+O2DVwp1Ni8D5zUeEmsOSe437+JbyW28dtRfj7JYOuWNzKcM bVeVzRBPbS7pfnrk2siLJRIwysBG75FG2zLr13Qcr8tfDE6pNhYypGP/tujNDeUu wpDGrNf62ctdX7teVSqHBud+AVhLexpqYo0/hMzpiRwMezCHgQzfNpL9NnGrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoBhSDgEhsu63BhNJr8MxpBjI/LkwHwYDVR0j BBgwFoAUxVTokcWDziq/LbXe6CH2tjC/9d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZDdjN2FjMi01YTliLTQ5MmEtYTRjNS0xZjEzNTkwZGFlMDYvMC9DNTU0RTg5MUM1 ODNDRTJBQkYyREI1REVFODIxRjZCNjMwQkZGNURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYzMEJG RjVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Q3YzdhYzItNWE5Yi00OTJhLWE0 YzUtMWYxMzU5MGRhZTA2LzAvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2 QjYzMEJGRjVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMxTOF9yVhR38Oec+bJ6q3UoQ8ozY61ho2r oJClR7nFJ0glh8/IrTfduf9PqUxp9EwkAqt8ZF677n5cYs7AXOFDlWLeX2XHKWhi 4O+6cxK2ehtEuLfqLy10gdH+eFAcWnnW+JYJKRyT1yo4uAhQs2a6jz5XH7uCBo4C ufNlP554mZ5fZo7zy1mVN2uHi92CQRpxOhVvflhaxTkzKLXDMpwiUVKRHNmCc6Vw Rv7f69UHAq+F5GGWAidVsZkK6s8e+w/pDgMdLskL/N9K2UEYftrt8KXi0dSM9bfK qxh8xg9PJFuIF9dxVkw4u4AqXEKlQY2nWgLhsj718x6Po4fuEEU= -----END CERTIFICATE-----Generated at Sun Jun 29 18:08:45 2025 by rpki-client