$ rpki-client -vvf repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft File: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft (raw, json) Hash identifier: EY6Q9qcLZzET0UtFp/zaDaOnMNxGLUQ7ZrosawwSPCI= Subject key identifier: B1:46:32:A6:3C:FB:AF:AC:78:4B:65:2E:E8:7B:CA:25:A3:01:71:F2 Authority key identifier: C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF Certificate issuer: /CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Certificate serial: 11BB4D6A500EA5A9B67ADB60B238DC70549F63A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft Manifest number: 03E9 Signing time: Fri 05 Sep 2025 20:52:01 +0000 Manifest this update: Fri 05 Sep 2025 20:47:01 +0000 Manifest next update: Mon 08 Sep 2025 21:08:01 +0000 Files and hashes: 1: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl (hash: I+fhqAaAbacFNLkH+UiBkLIk21qXjbCy0wejuOXzACM=) 2: 3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa (hash: M93Ni1T1Tbr7xBYmfCDNgdw5xr36AB/YVcpH7A2lVoA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 21:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:bb:4d:6a:50:0e:a5:a9:b6:7a:db:60:b2:38:dc:70:54:9f:63:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Validity Not Before: Sep 5 20:47:01 2025 GMT Not After : Sep 8 21:08:01 2025 GMT Subject: CN=B14632A63CFBAFAC784B652EE87BCA25A30171F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1f:61:1c:f8:89:e0:ed:26:8f:92:be:5c:16: 24:90:63:59:85:f5:a8:ff:78:d9:1e:93:b8:50:ab: 49:7f:82:4e:3e:ed:85:4b:13:37:e7:ff:4d:a8:bf: 5c:71:97:ba:05:2c:56:fa:e1:2a:d5:3b:09:b3:52: e9:57:d6:59:65:f0:c9:21:22:41:28:48:d7:30:40: a4:94:39:17:be:5f:8c:83:36:a4:86:8c:97:67:81: 9f:5c:ca:b2:ca:ea:19:d8:b0:c0:7a:87:70:5f:6c: aa:f7:79:6c:89:12:32:0e:0d:59:13:29:7b:db:e5: 38:1a:58:81:5a:0b:d9:21:2d:c5:44:3c:39:0c:86: 63:b2:32:35:c3:de:9f:56:09:ae:12:38:12:da:73: 6f:22:b9:05:66:c3:82:3c:8e:a7:6b:1e:07:14:cc: 2f:24:ff:c8:ee:4b:bd:d9:87:ca:26:f4:d3:15:2e: 29:8e:8c:04:f9:e7:c8:0f:18:cc:6a:0d:58:ea:a3: 1c:a8:a6:37:df:78:cd:18:19:8d:42:ce:b4:8a:6e: 9d:6c:3b:70:b1:29:50:99:ed:06:e9:50:5a:9b:e7: 67:4c:65:d1:84:9d:a4:71:29:ff:33:54:72:4a:a2: 9d:0e:ab:49:ea:08:82:25:6c:5e:57:27:ec:90:16: d4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:46:32:A6:3C:FB:AF:AC:78:4B:65:2E:E8:7B:CA:25:A3:01:71:F2 X509v3 Authority Key Identifier: keyid:C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:b6:4f:c3:f7:7d:a2:7b:81:a9:f5:b5:7e:be:df:7a:7b:02: d2:a6:39:98:5d:ae:3b:77:25:01:ac:2f:af:70:99:9c:47:c3: 79:ac:04:a4:a4:67:27:32:b9:12:48:f7:db:48:82:ec:4d:11: bb:a0:c6:b8:78:de:8c:3b:cc:e2:66:b6:55:5a:fe:8d:2a:82: ab:73:cf:e3:a8:24:3e:1f:d2:bd:e6:ee:5a:4d:0c:31:15:f4: e6:25:c0:d1:ad:07:1b:98:49:ac:c7:9d:a5:5e:91:91:3f:4f: 8a:b2:f7:c8:e0:86:61:8c:a0:7f:7b:ed:f8:4b:bc:dd:eb:27: e9:7e:76:b4:73:70:22:39:79:fa:dc:a9:2d:0c:12:c0:b7:db: b5:66:8c:e2:70:58:15:3d:47:b8:6c:b1:36:52:69:72:16:dc: 0b:66:ca:81:79:45:c4:27:c3:89:82:ca:73:f0:25:48:9e:c8: 52:fb:5c:af:9c:07:69:2d:d5:ea:32:f0:ec:b2:75:5b:7e:72: ab:1d:21:9c:fa:ce:52:a6:b3:f6:81:e9:1b:d0:c3:55:eb:27: b1:64:1f:a2:10:70:a3:e3:18:4b:b4:7a:a2:9b:f1:f7:be:03: 76:5d:ba:42:b8:5d:f7:26:ad:ce:55:6b:b6:61:7a:ff:6f:94: e2:c0:61:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEbtNalAOpam2ettgsjjccFSfY6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYz MEJGRjVERjAeFw0yNTA5MDUyMDQ3MDFaFw0yNTA5MDgyMTA4MDFaMDMxMTAvBgNV BAMTKEIxNDYzMkE2M0NGQkFGQUM3ODRCNjUyRUU4N0JDQTI1QTMwMTcxRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdH2Ec+Ing7SaPkr5cFiSQY1mF 9aj/eNkek7hQq0l/gk4+7YVLEzfn/02ov1xxl7oFLFb64SrVOwmzUulX1lll8Mkh IkEoSNcwQKSUORe+X4yDNqSGjJdngZ9cyrLK6hnYsMB6h3BfbKr3eWyJEjIODVkT KXvb5TgaWIFaC9khLcVEPDkMhmOyMjXD3p9WCa4SOBLac28iuQVmw4I8jqdrHgcU zC8k/8juS73Zh8om9NMVLimOjAT558gPGMxqDVjqoxyopjffeM0YGY1CzrSKbp1s O3CxKVCZ7QbpUFqb52dMZdGEnaRxKf8zVHJKop0Oq0nqCIIlbF5XJ+yQFtQlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsUYypjz7r6x4S2Uu6HvKJaMBcfIwHwYDVR0j BBgwFoAUxVTokcWDziq/LbXe6CH2tjC/9d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZDdjN2FjMi01YTliLTQ5MmEtYTRjNS0xZjEzNTkwZGFlMDYvMC9DNTU0RTg5MUM1 ODNDRTJBQkYyREI1REVFODIxRjZCNjMwQkZGNURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYzMEJG RjVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Q3YzdhYzItNWE5Yi00OTJhLWE0 YzUtMWYxMzU5MGRhZTA2LzAvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2 QjYzMEJGRjVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKe2T8P3faJ7gan1tX6+33p7AtKmOZhdrjt3 JQGsL69wmZxHw3msBKSkZycyuRJI99tIguxNEbugxrh43ow7zOJmtlVa/o0qgqtz z+OoJD4f0r3m7lpNDDEV9OYlwNGtBxuYSazHnaVekZE/T4qy98jghmGMoH977fhL vN3rJ+l+drRzcCI5efrcqS0MEsC327VmjOJwWBU9R7hssTZSaXIW3AtmyoF5RcQn w4mCynPwJUieyFL7XK+cB2kt1eoy8OyydVt+cqsdIZz6zlKms/aB6RvQw1XrJ7Fk H6IQcKPjGEu0eqKb8fe+A3ZdukK4Xfcmrc5Va7Zhev9vlOLAYWg= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:27 2025 by rpki-client