$ rpki-client -vvf repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft File: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft (raw, json) Hash identifier: C6MvY/ZXHax2H0A7DOFWdeAmPZGrS/KYFsUAwOtWpzU= Subject key identifier: 36:47:AB:FF:66:64:BB:24:15:0F:F1:88:2E:ED:B1:42:FD:B2:0F:A6 Authority key identifier: C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF Certificate issuer: /CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Certificate serial: 2CCD759AF3693E6BD4A07EB285A2C0CDB01E0C82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft Manifest number: 03E3 Signing time: Fri 22 Aug 2025 21:12:05 +0000 Manifest this update: Fri 22 Aug 2025 21:07:05 +0000 Manifest next update: Tue 26 Aug 2025 03:26:05 +0000 Files and hashes: 1: 3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa (hash: M93Ni1T1Tbr7xBYmfCDNgdw5xr36AB/YVcpH7A2lVoA=) 2: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl (hash: dNIwCyDbwB0kByI79us5jBH71edKKDOUc/540oPr1rw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:cd:75:9a:f3:69:3e:6b:d4:a0:7e:b2:85:a2:c0:cd:b0:1e:0c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Validity Not Before: Aug 22 21:07:05 2025 GMT Not After : Aug 26 03:26:05 2025 GMT Subject: CN=3647ABFF6664BB24150FF1882EEDB142FDB20FA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7e:90:aa:db:f4:35:37:f6:b2:dd:9b:61:83: 1f:20:b8:9a:d6:a7:42:89:86:70:12:81:86:77:4e: 85:fe:f6:b7:3b:aa:35:fa:03:00:5c:6b:c4:8f:24: 84:76:39:94:59:47:d8:81:36:7b:65:83:c5:b9:45: a3:03:81:31:c8:cd:1f:b8:1b:95:25:c5:32:6f:a4: f7:5c:14:4c:1f:a4:5b:6d:8a:3d:f6:fc:32:d8:a4: ad:40:4d:8a:ae:b0:38:4c:40:29:9f:43:e4:d4:c9: 86:fb:0a:ba:8e:b4:f3:a8:96:68:b5:e0:9c:ee:1a: a4:99:85:1d:d4:ec:c0:72:66:e5:35:04:68:76:a1: 90:af:98:a7:42:29:61:b4:8b:9e:b3:2e:4d:8b:c9: c8:0d:77:12:5f:dc:9f:6a:8d:b5:bf:71:16:b2:7d: 2c:3b:68:35:7a:12:49:93:37:85:84:6e:43:0c:59: 9b:b9:b9:ff:a8:26:49:51:eb:af:4e:a4:f1:1b:af: d8:ae:11:51:13:68:90:ef:f3:8d:ac:5d:97:c5:6b: ae:37:76:a9:2d:8b:e4:61:f1:5d:35:c8:65:5d:83: e9:4c:ad:86:bb:86:c7:58:3a:af:23:94:86:ad:79: a0:03:78:88:f7:f9:67:1b:6a:28:82:69:83:d5:ea: 15:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:47:AB:FF:66:64:BB:24:15:0F:F1:88:2E:ED:B1:42:FD:B2:0F:A6 X509v3 Authority Key Identifier: keyid:C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:dc:47:c5:e0:c2:86:27:09:49:52:54:a7:83:b5:06:5d:6b: da:f3:37:1e:b9:4d:69:f6:98:dd:05:70:34:14:b1:28:88:53: f5:5e:7f:ab:3b:f1:da:b2:66:e0:3c:d6:4d:35:f1:cf:7c:de: 34:1c:2e:03:2b:12:22:43:c1:74:6d:db:7e:8d:8d:3b:ed:e7: a8:5b:d4:b9:4b:4b:b7:f3:bb:32:92:ea:10:6e:b3:d5:f2:f5: 94:80:31:a4:0c:71:dd:5e:21:3b:bd:f3:5b:cc:58:db:3f:25: d5:45:a0:87:59:5f:7c:7c:01:45:a8:f0:84:89:ef:0d:e8:3b: e4:fc:f5:b1:3b:2c:59:44:98:12:1d:5e:d1:91:60:f6:52:15: b7:fd:df:5f:03:77:04:ea:fa:9d:01:c7:fc:0d:bb:34:45:d1: 8e:f4:0d:a3:b4:70:07:9b:37:13:f6:14:02:da:48:f9:8d:f7: 3a:39:8b:2d:8d:3d:c3:b9:dc:97:23:b0:8a:3c:7e:3f:22:35: 22:9a:83:a2:a4:d1:44:c3:59:88:9a:2a:f9:6c:04:41:3d:f8: 31:30:37:2c:4a:b8:5e:2d:a0:38:9a:90:11:8a:88:b4:52:bd: d0:8f:3f:93:d9:60:08:b7:0c:f0:dd:24:b5:ac:9d:c8:c5:c6: e2:85:a3:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULM11mvNpPmvUoH6yhaLAzbAeDIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYz MEJGRjVERjAeFw0yNTA4MjIyMTA3MDVaFw0yNTA4MjYwMzI2MDVaMDMxMTAvBgNV BAMTKDM2NDdBQkZGNjY2NEJCMjQxNTBGRjE4ODJFRURCMTQyRkRCMjBGQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXfpCq2/Q1N/ay3Zthgx8guJrW p0KJhnASgYZ3ToX+9rc7qjX6AwBca8SPJIR2OZRZR9iBNntlg8W5RaMDgTHIzR+4 G5UlxTJvpPdcFEwfpFttij32/DLYpK1ATYqusDhMQCmfQ+TUyYb7CrqOtPOolmi1 4JzuGqSZhR3U7MByZuU1BGh2oZCvmKdCKWG0i56zLk2LycgNdxJf3J9qjbW/cRay fSw7aDV6EkmTN4WEbkMMWZu5uf+oJklR669OpPEbr9iuEVETaJDv842sXZfFa643 dqkti+Rh8V01yGVdg+lMrYa7hsdYOq8jlIateaADeIj3+WcbaiiCaYPV6hWpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNker/2ZkuyQVD/GILu2xQv2yD6YwHwYDVR0j BBgwFoAUxVTokcWDziq/LbXe6CH2tjC/9d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZDdjN2FjMi01YTliLTQ5MmEtYTRjNS0xZjEzNTkwZGFlMDYvMC9DNTU0RTg5MUM1 ODNDRTJBQkYyREI1REVFODIxRjZCNjMwQkZGNURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYzMEJG RjVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Q3YzdhYzItNWE5Yi00OTJhLWE0 YzUtMWYxMzU5MGRhZTA2LzAvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2 QjYzMEJGRjVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvcR8XgwoYnCUlSVKeDtQZda9rzNx65TWn2 mN0FcDQUsSiIU/Vef6s78dqyZuA81k018c983jQcLgMrEiJDwXRt236NjTvt56hb 1LlLS7fzuzKS6hBus9Xy9ZSAMaQMcd1eITu981vMWNs/JdVFoIdZX3x8AUWo8ISJ 7w3oO+T89bE7LFlEmBIdXtGRYPZSFbf9318DdwTq+p0Bx/wNuzRF0Y70DaO0cAeb NxP2FALaSPmN9zo5iy2NPcO53JcjsIo8fj8iNSKag6Kk0UTDWYiaKvlsBEE9+DEw NyxKuF4toDiakBGKiLRSvdCPP5PZYAi3DPDdJLWsncjFxuKFo6c= -----END CERTIFICATE-----Generated at Sat Aug 23 11:58:41 2025 by rpki-client