$ rpki-client -vvf repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft File: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft (raw, json) Hash identifier: hXoRagdutHzxZ6Ie5u6NY4AR0yiu5MG/ePgmh220KHQ= Subject key identifier: 53:80:F8:DD:09:B8:AE:B5:D2:4A:8C:C6:8C:DA:89:C1:A8:D5:FF:03 Authority key identifier: C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF Certificate issuer: /CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Certificate serial: 69F64F461AB96E7D5C51932FD04F08D30051B8E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft Manifest number: 03B2 Signing time: Sat 03 May 2025 19:51:57 +0000 Manifest this update: Sat 03 May 2025 19:46:57 +0000 Manifest next update: Wed 07 May 2025 04:59:57 +0000 Files and hashes: 1: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl (hash: T/tQUFr2p70WrCInictq0URlJxoINVLHrtYoQJ6NX6I=) 2: 3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa (hash: M93Ni1T1Tbr7xBYmfCDNgdw5xr36AB/YVcpH7A2lVoA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 04:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:f6:4f:46:1a:b9:6e:7d:5c:51:93:2f:d0:4f:08:d3:00:51:b8:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Validity Not Before: May 3 19:46:57 2025 GMT Not After : May 7 04:59:57 2025 GMT Subject: CN=5380F8DD09B8AEB5D24A8CC68CDA89C1A8D5FF03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:69:b3:68:1b:16:28:e2:1a:7e:f2:9e:ca:d8: 86:a6:7f:c4:96:2a:08:9c:4d:99:71:63:26:18:9c: 3c:aa:97:6f:8f:49:ec:2e:1b:2b:03:c0:c5:f4:7a: 7f:99:59:f3:46:19:af:0e:a4:76:13:78:4f:77:b8: 0e:e8:82:d8:fd:ce:f2:cd:71:52:4d:cd:44:31:9b: 4f:8a:60:1a:60:c1:b4:ea:c2:ed:ec:8f:ec:d4:21: 7a:dc:06:d7:67:49:e4:a8:ea:80:b8:56:24:7e:7f: 83:3d:b1:56:b5:5e:f3:4c:f6:25:c3:a1:1f:61:4f: 37:55:1a:7c:79:42:e1:ef:d3:ee:81:7d:03:f9:8a: e5:52:e6:19:a8:2a:70:78:2b:86:74:c9:6d:95:3e: 70:27:86:3d:26:1e:ae:bc:a6:a4:77:2c:1d:fc:c8: 73:d7:17:e6:08:4b:cb:ba:95:85:1c:46:04:c6:b6: af:91:a3:d3:ef:9e:de:38:c9:e1:6a:42:36:35:98: 04:72:e0:4c:48:79:e5:7c:16:a4:29:64:2a:31:d2: fe:d1:61:3e:69:48:d1:cb:3f:8e:c9:2f:01:e4:c5: a7:fb:b0:21:15:ce:6b:f7:62:27:02:9b:e4:65:d3: f3:ab:4e:64:28:f8:d1:56:5c:4e:d0:03:d8:30:61: 71:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:80:F8:DD:09:B8:AE:B5:D2:4A:8C:C6:8C:DA:89:C1:A8:D5:FF:03 X509v3 Authority Key Identifier: keyid:C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:06:e7:b9:6d:13:08:9f:f4:ae:9e:16:d2:c0:79:3f:35:ae: 49:40:de:f7:54:c2:bf:eb:c9:c9:86:70:0a:7d:11:14:11:af: fd:82:a6:1f:c4:84:25:a2:4d:55:7c:b3:9d:f3:eb:d9:ea:8a: 29:77:23:5e:ea:ac:de:0d:5f:c5:90:a3:80:eb:5f:94:5a:15: 44:ad:b5:c8:f5:ed:85:05:bc:4d:ea:9a:74:8d:44:e1:e2:6a: 04:ed:f0:12:8c:51:8d:47:58:84:5a:59:3b:a7:80:6e:f3:e4: aa:62:61:07:47:0e:ea:5b:e0:82:9f:b8:41:e5:1d:85:b7:51: be:8d:63:66:5b:17:3b:7f:ad:e2:d1:4c:68:cc:63:e4:a9:79: 44:1e:4d:07:e4:6a:db:7b:d1:95:80:8a:04:fc:30:fd:55:cf: b6:1a:2c:82:a0:1c:d8:4e:68:ce:80:ef:36:b0:9b:a9:b9:cc: 43:a9:09:15:b6:e7:21:7e:c1:a0:66:47:67:f4:06:27:f7:6e: 3b:d3:90:ca:56:7e:c4:9c:91:c1:da:f1:e2:48:9c:35:ad:9b: fa:f5:b7:ae:be:47:f9:97:69:d5:65:2e:7b:8c:94:7b:64:26: 71:89:d6:2c:69:24:37:40:9f:2f:65:df:3a:82:30:63:52:b3: 18:aa:da:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUafZPRhq5bn1cUZMv0E8I0wBRuOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYz MEJGRjVERjAeFw0yNTA1MDMxOTQ2NTdaFw0yNTA1MDcwNDU5NTdaMDMxMTAvBgNV BAMTKDUzODBGOEREMDlCOEFFQjVEMjRBOENDNjhDREE4OUMxQThENUZGMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwabNoGxYo4hp+8p7K2Iamf8SW KgicTZlxYyYYnDyql2+PSewuGysDwMX0en+ZWfNGGa8OpHYTeE93uA7ogtj9zvLN cVJNzUQxm0+KYBpgwbTqwu3sj+zUIXrcBtdnSeSo6oC4ViR+f4M9sVa1XvNM9iXD oR9hTzdVGnx5QuHv0+6BfQP5iuVS5hmoKnB4K4Z0yW2VPnAnhj0mHq68pqR3LB38 yHPXF+YIS8u6lYUcRgTGtq+Ro9Pvnt44yeFqQjY1mARy4ExIeeV8FqQpZCox0v7R YT5pSNHLP47JLwHkxaf7sCEVzmv3YicCm+Rl0/OrTmQo+NFWXE7QA9gwYXHtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU4D43Qm4rrXSSozGjNqJwajV/wMwHwYDVR0j BBgwFoAUxVTokcWDziq/LbXe6CH2tjC/9d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZDdjN2FjMi01YTliLTQ5MmEtYTRjNS0xZjEzNTkwZGFlMDYvMC9DNTU0RTg5MUM1 ODNDRTJBQkYyREI1REVFODIxRjZCNjMwQkZGNURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYzMEJG RjVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Q3YzdhYzItNWE5Yi00OTJhLWE0 YzUtMWYxMzU5MGRhZTA2LzAvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2 QjYzMEJGRjVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4G57ltEwif9K6eFtLAeT81rklA3vdUwr/r ycmGcAp9ERQRr/2Cph/EhCWiTVV8s53z69nqiil3I17qrN4NX8WQo4DrX5RaFUSt tcj17YUFvE3qmnSNROHiagTt8BKMUY1HWIRaWTungG7z5KpiYQdHDupb4IKfuEHl HYW3Ub6NY2ZbFzt/reLRTGjMY+SpeUQeTQfkatt70ZWAigT8MP1Vz7YaLIKgHNhO aM6A7zawm6m5zEOpCRW25yF+waBmR2f0Bif3bjvTkMpWfsSckcHa8eJInDWtm/r1 t66+R/mXadVlLnuMlHtkJnGJ1ixpJDdAny9l3zqCMGNSsxiq2ug= -----END CERTIFICATE-----Generated at Tue May 6 06:48:34 2025 by rpki-client