$ rpki-client -vvf repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft File: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft (raw, json) Hash identifier: PqPCEk+TvKxl99Gr6MhLh1agSWWd7Jlcw6V9P1G8mOI= Subject key identifier: 70:34:C9:E0:5E:EF:67:F8:DA:46:28:1B:33:12:10:47:47:4F:CE:EE Authority key identifier: C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF Certificate issuer: /CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Certificate serial: 69CB3B581792DEA1082DB45D031A63C003291EF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft Manifest number: 0443 Signing time: Wed 25 Mar 2026 21:02:18 +0000 Manifest this update: Wed 25 Mar 2026 20:57:18 +0000 Manifest next update: Sat 28 Mar 2026 21:21:18 +0000 Files and hashes: 1: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl (hash: 0JpVOtfD00az3onGtazzG0TsHJ+ZsdMG3c2QiFMawDo=) 2: 3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa (hash: mHrQdAWzgukpq1uhfthGMPrahr33iPxszxBReLubhDU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:cb:3b:58:17:92:de:a1:08:2d:b4:5d:03:1a:63:c0:03:29:1e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Validity Not Before: Mar 25 20:57:18 2026 GMT Not After : Mar 28 21:21:18 2026 GMT Subject: CN=7034C9E05EEF67F8DA46281B33121047474FCEEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:45:ad:36:10:fb:9f:f7:66:c0:21:c5:61:a4: 8b:ea:8f:84:8c:2f:ca:33:31:92:2a:ab:49:ba:1e: de:f9:00:e3:c2:b4:6d:3c:ba:29:dc:5b:31:79:c3: 05:51:7e:b8:45:61:5e:67:07:9a:c2:0a:19:48:6a: 9e:4e:9d:1f:ba:84:9f:82:4b:5e:c4:6f:1f:58:b2: 84:96:cd:08:98:b3:f7:17:b5:b6:28:23:12:b6:e5: 0c:b8:91:df:84:64:bf:b5:76:4d:0b:39:b5:4f:cb: f3:5b:6f:6e:f3:db:89:d7:a2:2a:d3:4c:33:af:4b: 68:bd:f0:37:00:b5:e7:81:e1:fb:9a:b8:fb:0b:1b: b2:6c:d9:3e:19:b0:c0:5f:4a:b6:e1:9b:e4:fe:e9: 14:fa:b8:07:4d:a8:77:58:e5:28:5e:a0:04:59:b4: df:43:6b:74:ff:28:c4:c3:9a:a6:13:14:47:58:5c: 18:6c:50:48:f3:5a:b0:5d:7e:6a:db:9a:a3:24:16: ff:93:2c:87:c9:1d:ff:30:69:f4:ae:bb:3a:ea:76: 47:2e:c0:d7:b4:12:0d:7b:f3:10:3a:31:7d:72:b3: 2e:bc:6c:74:d8:7c:74:fb:4a:22:1d:7c:9f:a7:aa: 55:0d:c2:18:a3:31:2c:1c:6c:88:34:91:d6:5d:86: 99:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:34:C9:E0:5E:EF:67:F8:DA:46:28:1B:33:12:10:47:47:4F:CE:EE X509v3 Authority Key Identifier: keyid:C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:6a:34:a4:ca:56:f9:29:72:b5:7e:ea:df:68:1b:7c:24:3e: 71:06:83:e3:6c:22:38:4f:e3:36:70:69:c6:7a:42:1d:e2:58: a4:2b:ee:60:f8:67:57:87:86:cf:de:e3:29:55:15:61:dd:4b: 13:cf:08:7d:68:36:45:82:47:b7:b7:8a:e2:02:55:1f:0a:0f: 1d:c9:fb:1f:d6:85:1c:89:77:80:a6:ab:5e:6c:60:64:dc:3f: 68:e1:cf:4e:ae:c2:fe:3f:ad:a9:2c:fc:e1:35:bb:91:08:7e: d7:06:4c:01:c0:55:0e:82:25:e2:1d:58:28:a0:7c:0f:b0:a8: 05:59:9f:f9:f7:f4:fa:ff:06:8f:c5:a0:e4:a8:bd:24:cf:67: 10:8a:e3:bb:6a:98:91:2a:7b:ac:82:9f:66:41:24:e0:e8:89: 51:c4:8d:6d:83:1a:1a:17:a9:2a:21:40:b9:66:b1:57:39:d4: 03:c8:b5:42:3c:7e:9d:57:25:24:f4:3a:f2:1c:d4:18:f7:cb: c7:62:81:b9:19:f2:60:74:26:67:10:7d:38:c3:03:08:04:96: 72:8b:f9:92:1d:5d:67:d3:58:52:f8:56:ad:a7:8d:9d:92:06: 33:3b:26:3e:10:17:c4:d2:54:0a:d3:3f:73:c1:4a:4c:37:42: 0e:a7:49:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUacs7WBeS3qEILbRdAxpjwAMpHvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYz MEJGRjVERjAeFw0yNjAzMjUyMDU3MThaFw0yNjAzMjgyMTIxMThaMDMxMTAvBgNV BAMTKDcwMzRDOUUwNUVFRjY3RjhEQTQ2MjgxQjMzMTIxMDQ3NDc0RkNFRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDORa02EPuf92bAIcVhpIvqj4SM L8ozMZIqq0m6Ht75AOPCtG08uincWzF5wwVRfrhFYV5nB5rCChlIap5OnR+6hJ+C S17Ebx9YsoSWzQiYs/cXtbYoIxK25Qy4kd+EZL+1dk0LObVPy/Nbb27z24nXoirT TDOvS2i98DcAteeB4fuauPsLG7Js2T4ZsMBfSrbhm+T+6RT6uAdNqHdY5SheoARZ tN9Da3T/KMTDmqYTFEdYXBhsUEjzWrBdfmrbmqMkFv+TLIfJHf8wafSuuzrqdkcu wNe0Eg178xA6MX1ysy68bHTYfHT7SiIdfJ+nqlUNwhijMSwcbIg0kdZdhpn3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcDTJ4F7vZ/jaRigbMxIQR0dPzu4wHwYDVR0j BBgwFoAUxVTokcWDziq/LbXe6CH2tjC/9d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZDdjN2FjMi01YTliLTQ5MmEtYTRjNS0xZjEzNTkwZGFlMDYvMC9DNTU0RTg5MUM1 ODNDRTJBQkYyREI1REVFODIxRjZCNjMwQkZGNURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYzMEJG RjVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Q3YzdhYzItNWE5Yi00OTJhLWE0 YzUtMWYxMzU5MGRhZTA2LzAvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2 QjYzMEJGRjVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZqNKTKVvkpcrV+6t9oG3wkPnEGg+NsIjhP 4zZwacZ6Qh3iWKQr7mD4Z1eHhs/e4ylVFWHdSxPPCH1oNkWCR7e3iuICVR8KDx3J +x/WhRyJd4Cmq15sYGTcP2jhz06uwv4/raks/OE1u5EIftcGTAHAVQ6CJeIdWCig fA+wqAVZn/n39Pr/Bo/FoOSovSTPZxCK47tqmJEqe6yCn2ZBJODoiVHEjW2DGhoX qSohQLlmsVc51APItUI8fp1XJST0OvIc1Bj3y8digbkZ8mB0JmcQfTjDAwgElnKL +ZIdXWfTWFL4Vq2njZ2SBjM7Jj4QF8TSVArTP3PBSkw3Qg6nSc4= -----END CERTIFICATE-----Generated at Thu Mar 26 12:57:42 2026 by rpki-client