$ rpki-client -vvf repo-rpki.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/54A1848904113F647F5C294B41B7D143112C7137.mft File: 54A1848904113F647F5C294B41B7D143112C7137.mft (raw, json) Hash identifier: BMSEyzGVEFd/D/x5V7dTc/UvoXAY+rr2JKHjzl86Ohs= Subject key identifier: D8:F6:66:5D:F5:7B:AB:51:F6:40:43:B5:27:33:4D:0C:3B:49:91:B6 Authority key identifier: 54:A1:84:89:04:11:3F:64:7F:5C:29:4B:41:B7:D1:43:11:2C:71:37 Certificate issuer: /CN=54A1848904113F647F5C294B41B7D143112C7137 Certificate serial: 75F7B1102067D48352FA8AC50FF9BA9155633726 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54A1848904113F647F5C294B41B7D143112C7137.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/54A1848904113F647F5C294B41B7D143112C7137.mft Manifest number: 024D Signing time: Fri 22 Aug 2025 15:21:07 +0000 Manifest this update: Fri 22 Aug 2025 15:16:07 +0000 Manifest next update: Mon 25 Aug 2025 21:27:07 +0000 Files and hashes: 1: 3130332e3132372e3136382e302f32332d3234203d3e203435323837.roa (hash: aJkCz6OvVygSjsMXUUO55BfJUqOup99n1od7UgT1lBY=) 2: 54A1848904113F647F5C294B41B7D143112C7137.crl (hash: XWmL9u12S42VVsbAErn5Ij9W9irRghgKJSOoOCyQm/E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/54A1848904113F647F5C294B41B7D143112C7137.crl rsync://repo-rpki.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/54A1848904113F647F5C294B41B7D143112C7137.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54A1848904113F647F5C294B41B7D143112C7137.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f7:b1:10:20:67:d4:83:52:fa:8a:c5:0f:f9:ba:91:55:63:37:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54A1848904113F647F5C294B41B7D143112C7137 Validity Not Before: Aug 22 15:16:07 2025 GMT Not After : Aug 25 21:27:07 2025 GMT Subject: CN=D8F6665DF57BAB51F64043B527334D0C3B4991B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:86:b4:bc:05:9f:93:5d:7a:15:f0:ce:21:e2: 77:1e:eb:bc:4d:d4:4f:c1:66:5f:09:a2:22:74:f6: 20:16:20:38:d5:de:2d:a0:96:4c:42:54:9d:29:45: 47:d7:13:54:2f:b3:1e:bb:ba:32:54:49:81:87:06: d5:e4:e9:9c:60:63:72:7c:0a:c4:a0:a3:cd:c9:62: f9:3d:50:6e:f8:19:76:73:9c:51:4b:47:0f:29:c3: 60:8b:11:89:41:0e:14:bb:5a:6d:36:b6:0a:16:2b: a9:f4:85:dd:22:a7:9d:30:0d:60:dd:99:7e:6b:9b: 69:95:bd:c2:dd:bb:38:1f:b7:56:f0:9c:4c:2d:1b: 1b:8c:4c:bb:17:f8:4c:be:f4:89:7b:99:98:39:00: c3:91:ad:9c:9a:06:06:fc:c9:f6:af:63:38:6f:85: 99:66:ed:aa:ba:8f:b4:69:91:2a:54:f0:cb:04:cc: 2d:35:26:3f:dd:40:fa:70:65:c4:7e:b6:86:05:ec: 04:4c:f8:48:23:99:43:0d:dd:0a:57:e7:3a:de:98: eb:9b:e8:13:f4:97:87:0b:e9:66:00:85:6e:89:33: df:82:37:b1:9f:59:a7:a8:ad:33:ae:b8:76:5b:40: 56:6a:89:7a:1d:ef:e5:98:d0:01:13:a1:93:99:21: 41:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F6:66:5D:F5:7B:AB:51:F6:40:43:B5:27:33:4D:0C:3B:49:91:B6 X509v3 Authority Key Identifier: keyid:54:A1:84:89:04:11:3F:64:7F:5C:29:4B:41:B7:D1:43:11:2C:71:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/54A1848904113F647F5C294B41B7D143112C7137.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54A1848904113F647F5C294B41B7D143112C7137.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/54A1848904113F647F5C294B41B7D143112C7137.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:44:1f:99:95:9d:7d:bc:55:35:95:01:8f:2c:43:a2:23:f8: bc:8f:d2:00:d9:3c:71:ff:69:c5:66:fb:86:0d:25:da:ae:62: c8:68:d2:11:28:9c:7b:15:b0:d9:65:f8:f8:65:35:0d:95:5a: e1:33:7e:51:c3:26:bd:8d:80:11:81:e8:52:27:fb:15:bd:e2: fb:70:5f:2a:d9:50:a0:a6:29:8b:9a:8d:46:1b:f0:ee:97:84: 39:25:aa:d4:fd:71:68:a6:e8:a1:bd:c9:16:10:16:f2:b9:95: 94:14:10:62:7a:a9:87:5e:41:1c:aa:3e:67:5f:ba:d3:e7:b5: b8:8d:3f:b8:34:b4:1e:c2:b0:0c:36:08:c7:d9:2a:a1:2c:2a: 94:5a:46:b6:5e:70:ce:72:04:df:cd:25:0d:fa:25:6f:4d:fb: d9:27:c7:1d:e1:80:70:9a:e6:1f:4a:0e:c6:29:5e:4b:c7:53: 3e:17:a9:f0:53:07:80:25:4c:e7:a3:5e:08:df:9a:eb:65:23: 5c:95:67:a4:1b:34:4e:7d:e2:06:e8:7d:4e:6d:39:b6:8e:b0: 33:0e:b4:e1:53:e3:90:a3:98:4c:fc:98:0b:7b:be:ae:b1:ea: 5b:4e:0c:e4:66:a2:f2:cf:93:e1:85:31:16:a1:4e:cc:f7:f0: 1a:0d:45:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdfexECBn1INS+orFD/m6kVVjNyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRBMTg0ODkwNDExM0Y2NDdGNUMyOTRCNDFCN0QxNDMx MTJDNzEzNzAeFw0yNTA4MjIxNTE2MDdaFw0yNTA4MjUyMTI3MDdaMDMxMTAvBgNV BAMTKEQ4RjY2NjVERjU3QkFCNTFGNjQwNDNCNTI3MzM0RDBDM0I0OTkxQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbhrS8BZ+TXXoV8M4h4nce67xN 1E/BZl8JoiJ09iAWIDjV3i2glkxCVJ0pRUfXE1Qvsx67ujJUSYGHBtXk6ZxgY3J8 CsSgo83JYvk9UG74GXZznFFLRw8pw2CLEYlBDhS7Wm02tgoWK6n0hd0ip50wDWDd mX5rm2mVvcLduzgft1bwnEwtGxuMTLsX+Ey+9Il7mZg5AMORrZyaBgb8yfavYzhv hZlm7aq6j7RpkSpU8MsEzC01Jj/dQPpwZcR+toYF7ARM+EgjmUMN3QpX5zremOub 6BP0l4cL6WYAhW6JM9+CN7GfWaeorTOuuHZbQFZqiXod7+WY0AEToZOZIUH9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2PZmXfV7q1H2QEO1JzNNDDtJkbYwHwYDVR0j BBgwFoAUVKGEiQQRP2R/XClLQbfRQxEscTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTdjYzk3Ni02OWY2LTRkYjgtYTdhYi04NTZhMmJiOGVhZmUvMC81NEExODQ4OTA0 MTEzRjY0N0Y1QzI5NEI0MUI3RDE0MzExMkM3MTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTRBMTg0ODkwNDExM0Y2NDdGNUMyOTRCNDFCN0QxNDMxMTJD NzEzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU3Y2M5NzYtNjlmNi00ZGI4LWE3 YWItODU2YTJiYjhlYWZlLzAvNTRBMTg0ODkwNDExM0Y2NDdGNUMyOTRCNDFCN0Qx NDMxMTJDNzEzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZEH5mVnX28VTWVAY8sQ6Ij+LyP0gDZPHH/ acVm+4YNJdquYsho0hEonHsVsNll+PhlNQ2VWuEzflHDJr2NgBGB6FIn+xW94vtw XyrZUKCmKYuajUYb8O6XhDklqtT9cWim6KG9yRYQFvK5lZQUEGJ6qYdeQRyqPmdf utPntbiNP7g0tB7CsAw2CMfZKqEsKpRaRrZecM5yBN/NJQ36JW9N+9knxx3hgHCa 5h9KDsYpXkvHUz4XqfBTB4AlTOejXgjfmutlI1yVZ6QbNE594gbofU5tObaOsDMO tOFT45CjmEz8mAt7vq6x6ltODORmovLPk+GFMRahTsz38BoNRSM= -----END CERTIFICATE-----Generated at Sat Aug 23 17:46:07 2025 by rpki-client