$ rpki-client -vvf repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft File: 54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft (raw, json) Hash identifier: wX3em1Z8SVj2f1MuYngnTyDkBlWNm2j8T/ibmZJIz3I= Subject key identifier: 47:7C:D0:7E:5B:65:07:21:32:6F:D5:7B:51:1F:68:EC:DD:91:08:7C Authority key identifier: 54:FF:14:1B:E9:60:13:FE:6B:C0:81:6D:99:1B:CF:B4:F6:61:8C:BE Certificate issuer: /CN=54FF141BE96013FE6BC0816D991BCFB4F6618CBE Certificate serial: 1A26BA7D42E814FB8F0C01168C29E4537EFBC831 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft Manifest number: 04C0 Signing time: Sat 05 Apr 2025 07:11:28 +0000 Manifest this update: Sat 05 Apr 2025 07:06:28 +0000 Manifest next update: Tue 08 Apr 2025 13:48:28 +0000 Files and hashes: 1: 3130332e32312e3232382e302f32342d3234203d3e20313332363433.roa (hash: ey0RnIx9BHEX807Crk0Cq6R921ovlZ3dd8rpdjqgBeQ=) 2: 54FF141BE96013FE6BC0816D991BCFB4F6618CBE.crl (hash: NOev9WoKZipCnqn45E8/GwyvGSIJ6v1o8sourhCVgPE=) 3: 3130332e3132332e3135382e302f32342d3234203d3e20313332363433.roa (hash: OtO7trEv+mIXnYZ9PighxNjftlOq2BJEStDsCjt/cj4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.crl rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 13:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:26:ba:7d:42:e8:14:fb:8f:0c:01:16:8c:29:e4:53:7e:fb:c8:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54FF141BE96013FE6BC0816D991BCFB4F6618CBE Validity Not Before: Apr 5 07:06:28 2025 GMT Not After : Apr 8 13:48:28 2025 GMT Subject: CN=477CD07E5B650721326FD57B511F68ECDD91087C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:34:61:c3:13:4a:3c:82:ed:ad:af:2e:4b:2b: cc:b0:2d:54:38:9a:22:a2:d7:24:55:e0:77:d9:30: e7:aa:67:1b:3a:13:f0:08:24:72:47:8d:c1:8c:ab: de:a2:78:89:d7:10:99:4d:2e:78:b1:e0:52:3a:75: c9:b9:86:76:0c:65:3a:1b:b4:46:91:a6:0c:3d:47: 47:59:f7:b5:ca:5b:e5:df:07:d3:0e:05:a8:02:18: 75:59:b9:de:fb:a8:db:22:60:9a:55:3c:83:76:75: 98:29:75:95:ad:af:e5:62:67:4c:26:dd:d2:42:bb: 94:aa:d4:29:cf:4a:e6:19:de:df:27:b2:e8:59:8e: d9:ab:b7:6b:19:e9:8c:b2:ee:16:a9:f1:98:2d:37: 5a:2e:cb:82:67:50:ab:a5:29:4f:7b:7c:c9:44:64: 26:44:de:73:8c:ab:f2:e4:55:4d:64:87:3e:81:d2: 58:0e:71:7d:ab:4e:54:9a:5e:93:36:1f:8a:b5:07: a5:15:de:67:bc:e4:f2:6f:e6:2b:c7:d6:f4:a2:24: 3f:89:dc:31:2a:7f:43:ba:38:d0:16:ae:fc:9a:99: 04:38:f2:2e:28:94:db:02:46:f1:ef:57:e5:28:ba: 00:9e:eb:96:79:f5:31:00:11:8e:63:c5:b7:4f:06: ad:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:7C:D0:7E:5B:65:07:21:32:6F:D5:7B:51:1F:68:EC:DD:91:08:7C X509v3 Authority Key Identifier: keyid:54:FF:14:1B:E9:60:13:FE:6B:C0:81:6D:99:1B:CF:B4:F6:61:8C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c3:95:fb:47:2b:66:da:ff:ad:6c:67:a8:af:79:79:7f:13: 5b:f2:63:62:39:e5:72:d4:71:6e:b4:92:5f:ee:7b:36:5f:39: a5:7c:fa:33:f4:2b:97:10:b2:b4:7b:07:e1:f3:15:3f:0c:11: ea:81:87:40:2c:5b:db:c0:ed:8c:40:3a:ee:ad:5c:60:e5:8a: fc:0f:c3:cb:61:5b:3f:a3:91:df:6a:5a:77:fa:56:7c:ab:59: 3e:a1:ef:f1:48:0a:35:cb:69:8c:00:9a:f1:1e:20:32:a5:83: 25:ba:81:bd:74:b3:c7:96:c3:b3:66:42:6b:51:56:8e:a3:e5: 7b:7a:2a:a9:86:ee:3b:15:f5:86:2b:ab:74:b0:e0:8f:5f:c1: a7:52:bd:0a:5c:a0:fc:78:24:dc:3e:27:d3:3e:66:09:5e:6d: 18:ae:b4:3d:7c:30:f5:d9:d7:3f:b6:6c:ac:38:d0:89:ba:d1: bc:2c:fb:f8:64:e6:c8:e4:67:c8:8f:75:37:09:33:45:d9:c9: 52:28:d4:df:aa:61:b9:5e:af:c6:fe:99:f3:eb:6d:37:30:a1: 19:22:0b:c6:e8:9f:fe:65:7d:cb:6a:6e:18:44:60:36:f7:c3: b5:34:1c:2c:fc:c7:a8:56:87:06:f2:15:b7:99:af:7c:05:72: 1c:3f:cc:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGia6fULoFPuPDAEWjCnkU377yDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRGRjE0MUJFOTYwMTNGRTZCQzA4MTZEOTkxQkNGQjRG NjYxOENCRTAeFw0yNTA0MDUwNzA2MjhaFw0yNTA0MDgxMzQ4MjhaMDMxMTAvBgNV BAMTKDQ3N0NEMDdFNUI2NTA3MjEzMjZGRDU3QjUxMUY2OEVDREQ5MTA4N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcNGHDE0o8gu2try5LK8ywLVQ4 miKi1yRV4HfZMOeqZxs6E/AIJHJHjcGMq96ieInXEJlNLnix4FI6dcm5hnYMZTob tEaRpgw9R0dZ97XKW+XfB9MOBagCGHVZud77qNsiYJpVPIN2dZgpdZWtr+ViZ0wm 3dJCu5Sq1CnPSuYZ3t8nsuhZjtmrt2sZ6Yyy7hap8ZgtN1ouy4JnUKulKU97fMlE ZCZE3nOMq/LkVU1khz6B0lgOcX2rTlSaXpM2H4q1B6UV3me85PJv5ivH1vSiJD+J 3DEqf0O6ONAWrvyamQQ48i4olNsCRvHvV+UougCe65Z59TEAEY5jxbdPBq2jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR3zQfltlByEyb9V7UR9o7N2RCHwwHwYDVR0j BBgwFoAUVP8UG+lgE/5rwIFtmRvPtPZhjL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2FmMjcxZi1jODNkLTQ0MWUtYmVhOS0xOGEyNDRkMGUwMGUvMC81NEZGMTQxQkU5 NjAxM0ZFNkJDMDgxNkQ5OTFCQ0ZCNEY2NjE4Q0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTRGRjE0MUJFOTYwMTNGRTZCQzA4MTZEOTkxQkNGQjRGNjYx OENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNhZjI3MWYtYzgzZC00NDFlLWJl YTktMThhMjQ0ZDBlMDBlLzAvNTRGRjE0MUJFOTYwMTNGRTZCQzA4MTZEOTkxQkNG QjRGNjYxOENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrDlftHK2ba/61sZ6iveXl/E1vyY2I55XLU cW60kl/uezZfOaV8+jP0K5cQsrR7B+HzFT8MEeqBh0AsW9vA7YxAOu6tXGDlivwP w8thWz+jkd9qWnf6VnyrWT6h7/FICjXLaYwAmvEeIDKlgyW6gb10s8eWw7NmQmtR Vo6j5Xt6KqmG7jsV9YYrq3Sw4I9fwadSvQpcoPx4JNw+J9M+ZglebRiutD18MPXZ 1z+2bKw40Im60bws+/hk5sjkZ8iPdTcJM0XZyVIo1N+qYbler8b+mfPrbTcwoRki C8bon/5lfctqbhhEYDb3w7U0HCz8x6hWhwbyFbeZr3wFchw/zPk= -----END CERTIFICATE-----Generated at Mon Apr 7 13:02:53 2025 by rpki-client