$ rpki-client -vvf repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft File: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft (raw, json) Hash identifier: YWKCu3HGyAQfo2cZO9/YwrGIm+7X7RFGbmkD4lSQvbI= Subject key identifier: 44:F0:6A:77:0A:F6:E2:1F:D6:D7:1F:3F:9E:6B:F2:9C:C3:6A:29:EF Authority key identifier: C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF Certificate issuer: /CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Certificate serial: 719F6821F9690B490C5D7B68BDCB291321516550 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft Manifest number: 03FC Signing time: Sat 18 Oct 2025 06:32:04 +0000 Manifest this update: Sat 18 Oct 2025 06:27:04 +0000 Manifest next update: Tue 21 Oct 2025 14:06:04 +0000 Files and hashes: 1: 3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa (hash: M93Ni1T1Tbr7xBYmfCDNgdw5xr36AB/YVcpH7A2lVoA=) 2: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl (hash: qPTCCoHFXgfUq7zikYYDewXRaaeFEx6IytRSB7mzZtw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 14:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:9f:68:21:f9:69:0b:49:0c:5d:7b:68:bd:cb:29:13:21:51:65:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Validity Not Before: Oct 18 06:27:04 2025 GMT Not After : Oct 21 14:06:04 2025 GMT Subject: CN=44F06A770AF6E21FD6D71F3F9E6BF29CC36A29EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:96:df:9c:83:e1:65:cd:aa:3e:1e:7c:d0:20: 16:3c:60:65:d7:4b:ab:e8:b2:75:df:e9:aa:ff:3a: 2e:6c:96:b0:d4:69:81:c5:b1:95:a9:c2:2b:0f:a5: c5:32:85:55:f7:f6:dc:4b:51:e8:cf:73:15:f9:6f: 6c:74:d3:59:27:e3:15:49:7a:db:44:4f:0c:73:be: 90:e0:9c:a4:1b:e2:f8:0a:85:a8:77:49:98:dc:e5: ed:9b:83:84:18:aa:7d:a9:c9:b2:13:d2:1f:aa:4d: 19:87:45:93:7a:4b:bc:8a:07:c9:41:66:d1:ce:5e: 3f:8f:f7:1a:d1:11:cb:97:44:b9:bf:2b:38:48:1f: 1f:b5:e8:5c:b6:96:73:67:ea:1d:23:fa:21:0f:a1: 09:2e:1e:b2:a5:2d:53:27:dc:b6:6f:d9:b4:d6:9d: ca:23:d9:01:da:29:0a:68:cc:f9:92:0f:81:12:aa: a7:27:bc:43:cc:1c:9c:58:a8:e3:84:1a:ff:89:c0: d3:ba:55:77:79:bd:0d:fa:ee:e7:be:f7:84:c1:f3: 5a:28:41:5e:92:0b:74:6a:dc:7e:1f:63:12:e5:2c: 4b:98:22:77:8c:14:bc:01:11:97:e7:f4:20:94:2f: f7:b7:19:45:c3:e3:c4:5c:42:14:6b:9f:62:b9:d7: c9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F0:6A:77:0A:F6:E2:1F:D6:D7:1F:3F:9E:6B:F2:9C:C3:6A:29:EF X509v3 Authority Key Identifier: keyid:C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:0f:5d:ea:a1:c6:a0:98:45:f6:71:26:10:ce:18:fa:1f:2b: 68:46:30:8b:cd:52:79:1c:f8:43:33:6a:82:09:57:20:79:f5: 2c:5d:c3:14:c4:62:24:02:70:51:d3:a8:c3:50:4d:a2:01:44: 62:d7:e4:5e:d2:a5:2b:f0:03:e0:60:96:b9:e0:ce:3d:70:1a: 03:77:4c:90:d5:ac:d2:f8:f4:07:4e:3e:d4:78:11:56:a7:cc: 58:91:8d:93:6d:6b:52:84:88:ce:62:67:1a:b2:c5:96:b4:49: 87:d3:4e:a8:18:51:d0:dd:9f:b3:c0:c7:38:63:50:69:17:63: ee:ef:bb:67:bd:1d:b5:8d:a4:ff:a4:75:04:c9:2a:a5:c8:d9: ff:fb:9c:87:17:ce:88:42:79:ab:62:d3:69:8c:8d:d8:3a:c7: e3:06:0a:de:63:d6:01:e3:87:6f:89:91:72:67:8f:8e:b0:81: 3d:1d:a5:66:7a:16:47:04:78:04:c9:f3:b0:e0:ef:8d:70:42: 45:f5:68:ba:d1:1a:5e:48:37:1b:50:5c:22:0b:6b:9f:9e:4c: 9f:03:1e:10:15:a2:78:9c:28:ae:29:74:03:3a:5f:a1:78:37: 35:75:54:9c:21:dd:a0:37:09:36:49:59:8f:36:26:6a:df:54: 31:4d:b6:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcZ9oIflpC0kMXXtovcspEyFRZVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYz MEJGRjVERjAeFw0yNTEwMTgwNjI3MDRaFw0yNTEwMjExNDA2MDRaMDMxMTAvBgNV BAMTKDQ0RjA2QTc3MEFGNkUyMUZENkQ3MUYzRjlFNkJGMjlDQzM2QTI5RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwlt+cg+Flzao+HnzQIBY8YGXX S6vosnXf6ar/Oi5slrDUaYHFsZWpwisPpcUyhVX39txLUejPcxX5b2x001kn4xVJ ettETwxzvpDgnKQb4vgKhah3SZjc5e2bg4QYqn2pybIT0h+qTRmHRZN6S7yKB8lB ZtHOXj+P9xrREcuXRLm/KzhIHx+16Fy2lnNn6h0j+iEPoQkuHrKlLVMn3LZv2bTW ncoj2QHaKQpozPmSD4ESqqcnvEPMHJxYqOOEGv+JwNO6VXd5vQ367ue+94TB81oo QV6SC3Rq3H4fYxLlLEuYIneMFLwBEZfn9CCUL/e3GUXD48RcQhRrn2K518nLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURPBqdwr24h/W1x8/nmvynMNqKe8wHwYDVR0j BBgwFoAUxVTokcWDziq/LbXe6CH2tjC/9d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZDdjN2FjMi01YTliLTQ5MmEtYTRjNS0xZjEzNTkwZGFlMDYvMC9DNTU0RTg5MUM1 ODNDRTJBQkYyREI1REVFODIxRjZCNjMwQkZGNURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYzMEJG RjVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Q3YzdhYzItNWE5Yi00OTJhLWE0 YzUtMWYxMzU5MGRhZTA2LzAvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2 QjYzMEJGRjVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQPXeqhxqCYRfZxJhDOGPofK2hGMIvNUnkc +EMzaoIJVyB59SxdwxTEYiQCcFHTqMNQTaIBRGLX5F7SpSvwA+Bglrngzj1wGgN3 TJDVrNL49AdOPtR4EVanzFiRjZNta1KEiM5iZxqyxZa0SYfTTqgYUdDdn7PAxzhj UGkXY+7vu2e9HbWNpP+kdQTJKqXI2f/7nIcXzohCeati02mMjdg6x+MGCt5j1gHj h2+JkXJnj46wgT0dpWZ6FkcEeATJ87Dg741wQkX1aLrRGl5INxtQXCILa5+eTJ8D HhAVonicKK4pdAM6X6F4NzV1VJwh3aA3CTZJWY82JmrfVDFNtt4= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:32 2025 by rpki-client