$ rpki-client -vvf repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft File: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft (raw, json) Hash identifier: 6aFvjrfPi6SOozHR0VSWKL+dRGxftdupDNxFvJM7IlE= Subject key identifier: 4D:ED:5D:B9:85:72:69:05:59:55:C0:83:B6:E7:AF:88:AC:F7:0E:32 Authority key identifier: C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF Certificate issuer: /CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Certificate serial: 73BA3C4BBCF881006100AE2CA75CCD1370DA6ED6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft Manifest number: 03D4 Signing time: Sat 19 Jul 2025 17:52:00 +0000 Manifest this update: Sat 19 Jul 2025 17:47:00 +0000 Manifest next update: Wed 23 Jul 2025 00:42:00 +0000 Files and hashes: 1: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl (hash: jg24b1Wrp3yT6icvWEKqgBevGcOEwYzPixzYHxJBA8o=) 2: 3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa (hash: M93Ni1T1Tbr7xBYmfCDNgdw5xr36AB/YVcpH7A2lVoA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 00:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ba:3c:4b:bc:f8:81:00:61:00:ae:2c:a7:5c:cd:13:70:da:6e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Validity Not Before: Jul 19 17:47:00 2025 GMT Not After : Jul 23 00:42:00 2025 GMT Subject: CN=4DED5DB9857269055955C083B6E7AF88ACF70E32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9c:a4:5a:eb:fc:84:c1:e8:05:15:0b:8d:32: 8e:f3:0a:44:07:36:3f:9f:2b:13:ce:d8:f9:45:7d: 00:69:12:41:0b:94:6a:56:70:e1:b1:ea:66:fc:ad: ee:3c:6e:e4:d6:69:20:41:39:ee:bf:05:16:ad:89: 26:19:bb:19:6e:ab:6a:4a:a8:32:f7:a0:11:c6:15: 9c:c1:e1:bb:60:ef:d3:85:86:7e:05:2b:ec:fc:41: 25:75:26:41:73:19:fd:3c:30:39:04:49:61:a9:4e: 9b:11:de:9b:d7:4d:d3:ac:93:df:22:5b:4b:ba:8c: f4:31:3e:f0:aa:cc:cd:d6:3d:96:c9:c9:18:cc:c5: 8e:9b:0d:b6:4c:55:0c:8b:fc:fd:e6:4c:8c:13:8a: ee:e1:a5:ac:2f:42:63:61:b8:07:da:5b:65:f2:98: c9:a3:01:49:e2:aa:6e:ff:64:ec:50:07:e5:57:41: c7:03:53:bd:0a:cd:7b:64:71:11:1f:e4:43:8f:0a: 38:df:f7:87:60:5b:da:e5:84:61:96:22:11:db:bc: 03:1a:33:e9:c2:53:ef:79:32:56:6f:e3:3e:e1:19: 88:40:41:79:b9:74:82:07:0c:63:83:2d:33:41:b4: 2d:74:60:89:a8:8d:b7:98:8e:69:cc:a8:72:c1:25: c2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:ED:5D:B9:85:72:69:05:59:55:C0:83:B6:E7:AF:88:AC:F7:0E:32 X509v3 Authority Key Identifier: keyid:C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:32:67:24:47:41:df:c3:b9:47:a8:96:73:25:a0:e5:16:88: 81:8e:87:03:77:cc:03:2e:89:70:d0:c7:9d:84:a9:ae:58:34: 58:de:64:48:df:2e:bb:c6:3c:dc:c7:c2:4d:74:c7:20:81:a1: 35:64:b9:61:88:f1:ad:a2:65:d4:c6:4d:a0:93:94:35:4a:3c: 67:e2:98:8c:9e:09:7b:62:93:55:24:1e:92:f8:d5:aa:48:4b: c9:ea:3f:b1:2d:c8:e6:87:3a:82:5f:19:93:28:ea:ae:9d:b7: db:fc:d7:85:c0:a9:2e:27:2b:75:03:a8:a8:88:0d:b0:2f:95: f2:b4:08:41:4e:ee:5d:3a:1a:4b:0a:f5:4a:74:b0:ca:0e:23: 4d:11:38:c6:ca:0a:57:3e:a7:30:31:28:fd:ea:81:3d:4c:62: 5f:31:00:e5:af:90:33:ed:08:6f:9f:e6:a0:50:86:4e:9b:80: b2:ee:f4:cd:3f:a1:ff:94:5a:d4:d2:e0:ef:ba:9f:e2:00:c8: 62:ac:69:6f:97:d3:dc:e9:49:8d:d4:b5:83:72:f8:07:44:a7: 0e:1d:a0:29:ec:e3:64:02:0b:03:9e:75:0a:f6:e3:95:aa:f8: 75:57:40:1f:e4:26:04:92:2b:7f:ea:c1:3c:9b:17:08:d6:44: f3:52:71:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc7o8S7z4gQBhAK4sp1zNE3DabtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYz MEJGRjVERjAeFw0yNTA3MTkxNzQ3MDBaFw0yNTA3MjMwMDQyMDBaMDMxMTAvBgNV BAMTKDRERUQ1REI5ODU3MjY5MDU1OTU1QzA4M0I2RTdBRjg4QUNGNzBFMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/nKRa6/yEwegFFQuNMo7zCkQH Nj+fKxPO2PlFfQBpEkELlGpWcOGx6mb8re48buTWaSBBOe6/BRatiSYZuxluq2pK qDL3oBHGFZzB4btg79OFhn4FK+z8QSV1JkFzGf08MDkESWGpTpsR3pvXTdOsk98i W0u6jPQxPvCqzM3WPZbJyRjMxY6bDbZMVQyL/P3mTIwTiu7hpawvQmNhuAfaW2Xy mMmjAUniqm7/ZOxQB+VXQccDU70KzXtkcREf5EOPCjjf94dgW9rlhGGWIhHbvAMa M+nCU+95MlZv4z7hGYhAQXm5dIIHDGODLTNBtC10YImojbeYjmnMqHLBJcKhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTe1duYVyaQVZVcCDtueviKz3DjIwHwYDVR0j BBgwFoAUxVTokcWDziq/LbXe6CH2tjC/9d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZDdjN2FjMi01YTliLTQ5MmEtYTRjNS0xZjEzNTkwZGFlMDYvMC9DNTU0RTg5MUM1 ODNDRTJBQkYyREI1REVFODIxRjZCNjMwQkZGNURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYzMEJG RjVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Q3YzdhYzItNWE5Yi00OTJhLWE0 YzUtMWYxMzU5MGRhZTA2LzAvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2 QjYzMEJGRjVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0yZyRHQd/DuUeolnMloOUWiIGOhwN3zAMu iXDQx52Eqa5YNFjeZEjfLrvGPNzHwk10xyCBoTVkuWGI8a2iZdTGTaCTlDVKPGfi mIyeCXtik1UkHpL41apIS8nqP7EtyOaHOoJfGZMo6q6dt9v814XAqS4nK3UDqKiI DbAvlfK0CEFO7l06GksK9Up0sMoOI00ROMbKClc+pzAxKP3qgT1MYl8xAOWvkDPt CG+f5qBQhk6bgLLu9M0/of+UWtTS4O+6n+IAyGKsaW+X09zpSY3UtYNy+AdEpw4d oCns42QCCwOedQr245Wq+HVXQB/kJgSSK3/qwTybFwjWRPNScXY= -----END CERTIFICATE-----Generated at Mon Jul 21 09:00:44 2025 by rpki-client