$ rpki-client -vvf repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.mft File: 54AB931F513FCC4DCC1FB3D6056474219354E82D.mft (raw, json) Hash identifier: L8hE/oDm0YZluQs29t0iv8g6VgQUGj2O+kua1MnJ0Mo= Subject key identifier: 38:86:7C:21:0A:E0:E1:90:D3:2D:01:66:8A:C6:55:E3:4D:B2:8D:8B Authority key identifier: 54:AB:93:1F:51:3F:CC:4D:CC:1F:B3:D6:05:64:74:21:93:54:E8:2D Certificate issuer: /CN=54AB931F513FCC4DCC1FB3D6056474219354E82D Certificate serial: 64F623E4B1C819BD6F8C10E66D3DB4CABDA270BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.mft Manifest number: 04 Signing time: Wed 06 Aug 2025 07:30:04 +0000 Manifest this update: Wed 06 Aug 2025 07:25:04 +0000 Manifest next update: Sat 09 Aug 2025 09:07:04 +0000 Files and hashes: 1: 54AB931F513FCC4DCC1FB3D6056474219354E82D.crl (hash: 17OqrZFrKRVNlEvbe6M8Q8/YCW4VQqeJkNg+5JwMz+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.crl rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 09:07:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f6:23:e4:b1:c8:19:bd:6f:8c:10:e6:6d:3d:b4:ca:bd:a2:70:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54AB931F513FCC4DCC1FB3D6056474219354E82D Validity Not Before: Aug 6 07:25:04 2025 GMT Not After : Aug 9 09:07:04 2025 GMT Subject: CN=38867C210AE0E190D32D01668AC655E34DB28D8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6c:92:e4:71:54:e1:e3:96:55:41:6e:53:fd: 40:51:9f:04:28:d4:bf:66:21:b0:c7:9c:f2:a6:76: 44:3e:cf:68:74:c4:e4:56:55:83:1f:45:01:0b:f4: 9b:e7:46:3f:d7:1f:b9:b4:30:c1:ae:c3:31:08:ba: 8d:8c:d1:72:23:5e:1c:20:b0:ab:4a:e5:3b:57:a2: ee:ed:50:45:7a:4a:73:a8:46:7c:45:94:f5:f6:06: 7d:aa:eb:72:e8:71:4e:3c:f1:e6:ca:8e:7a:ab:ed: 37:53:0b:5f:f8:9b:64:0a:d7:db:fa:5e:6d:65:67: bc:95:af:04:24:2f:f9:85:cc:e8:25:49:d9:92:e0: 4f:61:4d:07:25:b1:6f:85:8e:f0:47:4d:c2:27:b4: 47:57:7d:aa:a3:0e:77:9d:3c:a6:60:e1:1c:be:d4: 3e:aa:1d:91:32:d7:7b:7c:9f:77:41:cb:49:88:54: 5e:8b:7f:8a:02:91:29:20:77:de:83:bd:53:08:53: 91:74:70:e6:a4:7e:00:9d:01:3e:f1:9c:0e:af:48: 0d:28:5a:5a:ab:bf:ba:d9:29:b6:7b:23:fc:e1:c1: 2f:d2:fe:19:4b:81:5e:c2:65:a0:05:2e:eb:a2:32: 56:13:1a:f5:b9:ad:e2:05:26:01:42:12:7d:b0:4d: 9f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:86:7C:21:0A:E0:E1:90:D3:2D:01:66:8A:C6:55:E3:4D:B2:8D:8B X509v3 Authority Key Identifier: keyid:54:AB:93:1F:51:3F:CC:4D:CC:1F:B3:D6:05:64:74:21:93:54:E8:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:5e:e9:99:82:fd:60:4f:43:bb:0a:3e:c6:3c:69:0b:2f:9c: 03:5a:f7:3f:b3:74:c4:ad:18:2a:42:d1:38:da:92:63:12:a8: 91:56:b4:19:49:80:95:0f:ce:76:39:3b:60:fc:4a:f8:2b:5d: 11:f8:9b:a3:cd:e8:3c:f3:3c:ff:3f:b1:ee:7e:d0:f3:23:67: 0b:25:f8:69:62:5f:7b:a0:a5:52:60:13:c1:4f:f0:13:4c:ec: ee:75:b5:f0:c6:6f:8c:4b:cd:c6:f0:38:aa:05:4e:41:4f:d8: a2:9d:f3:d2:41:8b:23:66:26:00:af:c1:4a:ed:c5:3b:a0:55: f3:7e:28:62:1f:a3:a3:5d:20:f7:ed:30:80:a3:ae:a9:9f:af: 2d:3e:96:2c:8c:6e:40:b5:30:24:d3:0c:e0:f2:73:a4:01:05: 0e:60:49:c3:b8:f6:42:cf:9f:85:a1:ba:26:a4:aa:f3:63:2e: c0:c7:70:51:1d:cc:d4:1b:5f:73:f2:4c:1c:c8:0d:82:34:09: 5d:8c:97:ea:19:8c:2c:f7:ce:4b:ab:65:f2:26:23:de:35:42: 29:27:d6:b5:6c:b9:f5:17:83:ed:6b:5d:21:c6:08:e3:b0:a7: c0:d4:a2:2c:fe:f1:65:6e:f5:61:78:b2:56:3a:64:a0:c9:a7: 3c:8d:28:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZPYj5LHIGb1vjBDmbT20yr2icL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRBQjkzMUY1MTNGQ0M0RENDMUZCM0Q2MDU2NDc0MjE5 MzU0RTgyRDAeFw0yNTA4MDYwNzI1MDRaFw0yNTA4MDkwOTA3MDRaMDMxMTAvBgNV BAMTKDM4ODY3QzIxMEFFMEUxOTBEMzJEMDE2NjhBQzY1NUUzNERCMjhEOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtbJLkcVTh45ZVQW5T/UBRnwQo 1L9mIbDHnPKmdkQ+z2h0xORWVYMfRQEL9JvnRj/XH7m0MMGuwzEIuo2M0XIjXhwg sKtK5TtXou7tUEV6SnOoRnxFlPX2Bn2q63LocU488ebKjnqr7TdTC1/4m2QK19v6 Xm1lZ7yVrwQkL/mFzOglSdmS4E9hTQclsW+FjvBHTcIntEdXfaqjDnedPKZg4Ry+ 1D6qHZEy13t8n3dBy0mIVF6Lf4oCkSkgd96DvVMIU5F0cOakfgCdAT7xnA6vSA0o Wlqrv7rZKbZ7I/zhwS/S/hlLgV7CZaAFLuuiMlYTGvW5reIFJgFCEn2wTZ+nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOIZ8IQrg4ZDTLQFmisZV402yjYswHwYDVR0j BBgwFoAUVKuTH1E/zE3MH7PWBWR0IZNU6C0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTQzNDk4MS0zNmJiLTQ1MzktOWI1NS0wN2I2NzIwOGZkMDYvMC81NEFCOTMxRjUx M0ZDQzREQ0MxRkIzRDYwNTY0NzQyMTkzNTRFODJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTRBQjkzMUY1MTNGQ0M0RENDMUZCM0Q2MDU2NDc0MjE5MzU0 RTgyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmU0MzQ5ODEtMzZiYi00NTM5LTli NTUtMDdiNjcyMDhmZDA2LzAvNTRBQjkzMUY1MTNGQ0M0RENDMUZCM0Q2MDU2NDc0 MjE5MzU0RTgyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFe6ZmC/WBPQ7sKPsY8aQsvnANa9z+zdMSt GCpC0TjakmMSqJFWtBlJgJUPznY5O2D8SvgrXRH4m6PN6DzzPP8/se5+0PMjZwsl +GliX3ugpVJgE8FP8BNM7O51tfDGb4xLzcbwOKoFTkFP2KKd89JBiyNmJgCvwUrt xTugVfN+KGIfo6NdIPftMICjrqmfry0+liyMbkC1MCTTDODyc6QBBQ5gScO49kLP n4WhuiakqvNjLsDHcFEdzNQbX3PyTBzIDYI0CV2Ml+oZjCz3zkurZfImI941Qikn 1rVsufUXg+1rXSHGCOOwp8DUoiz+8WVu9WF4slY6ZKDJpzyNKGU= -----END CERTIFICATE-----Generated at Thu Aug 7 01:12:52 2025 by rpki-client