$ rpki-client -vvf repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft File: 054A70F7E364F75AF2F166FE8431E616DE986448.mft (raw, json) Hash identifier: HyCJGEt7HhrjUbcAHLdAWU5eRXTIagrvim4ijEE8mv4= Subject key identifier: DC:72:09:56:AC:25:6B:3B:DC:05:63:6B:36:BB:A5:33:A3:19:09:9C Authority key identifier: 05:4A:70:F7:E3:64:F7:5A:F2:F1:66:FE:84:31:E6:16:DE:98:64:48 Certificate issuer: /CN=054A70F7E364F75AF2F166FE8431E616DE986448 Certificate serial: 347A5F0762E788EDDE63C0462D79298B1A961A5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft Manifest number: 0390 Signing time: Wed 06 Aug 2025 02:32:22 +0000 Manifest this update: Wed 06 Aug 2025 02:27:22 +0000 Manifest next update: Sat 09 Aug 2025 02:43:22 +0000 Files and hashes: 1: 054A70F7E364F75AF2F166FE8431E616DE986448.crl (hash: hfG6zu4rInWrBXzGr5iU/se8dq9pqfUiZtPQh29Rmy8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.crl rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 02:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:7a:5f:07:62:e7:88:ed:de:63:c0:46:2d:79:29:8b:1a:96:1a:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=054A70F7E364F75AF2F166FE8431E616DE986448 Validity Not Before: Aug 6 02:27:22 2025 GMT Not After : Aug 9 02:43:22 2025 GMT Subject: CN=DC720956AC256B3BDC05636B36BBA533A319099C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:10:67:82:f2:ee:8c:db:1a:8b:cc:7a:c5:89: ab:94:16:37:46:bd:9c:52:3b:09:c5:27:dd:9b:4a: 30:a1:f7:d1:29:d1:0d:82:49:b4:fc:5c:65:7a:46: 77:c7:7f:d3:1c:da:a9:44:13:8a:9e:1e:71:c7:24: 6e:7b:b9:2d:ee:24:7c:06:96:8c:a3:66:6b:d2:8e: 55:e5:48:82:a9:71:e2:26:c3:d3:3e:d5:97:73:87: 26:54:93:2c:0a:eb:bb:b7:10:98:4c:07:c6:91:87: 83:18:80:81:c2:48:49:7d:6e:96:91:c2:ce:d7:36: 72:95:fd:31:9b:f1:45:28:f0:fa:a0:92:05:43:1d: 81:d5:2c:e1:a9:cb:4c:8e:fc:d3:00:21:81:8a:25: af:12:0f:01:bf:ff:d1:53:c2:8b:1e:b0:2d:fd:0f: c8:09:59:53:8d:ec:22:3d:33:6a:88:e4:cd:2b:7f: 13:92:7d:62:bc:d3:cb:13:a2:a3:b1:12:36:c7:57: b7:30:37:d5:06:d5:3a:6b:d7:95:63:8f:57:ed:ba: 33:a3:fe:8b:0f:d5:53:b9:99:dc:ec:55:b9:2e:31: 9c:f7:35:04:ba:c9:e3:83:c9:d7:11:78:bc:32:77: af:a5:71:88:17:a4:9c:cb:05:f0:df:15:04:31:7b: 48:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:72:09:56:AC:25:6B:3B:DC:05:63:6B:36:BB:A5:33:A3:19:09:9C X509v3 Authority Key Identifier: keyid:05:4A:70:F7:E3:64:F7:5A:F2:F1:66:FE:84:31:E6:16:DE:98:64:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:a6:c3:60:81:24:14:a9:73:4b:43:7f:f3:fe:77:01:50:9f: 22:02:72:e1:5a:ec:53:12:68:b5:49:0c:c1:11:85:44:17:05: 1a:e1:ad:88:68:97:c0:13:52:7d:eb:0e:10:b9:8c:91:13:20: 73:9e:0b:d1:c2:82:f5:9d:40:9b:8e:47:65:e1:e8:6f:eb:bd: 06:a8:38:82:f4:95:ec:9a:e5:2f:88:0d:2c:72:42:83:41:c5: 84:ed:a8:2d:57:7e:b5:83:61:d0:7c:ca:92:1e:a9:a7:aa:03: e3:c7:43:f4:00:40:64:54:e4:12:d4:a0:ce:89:b6:31:67:ec: fe:c6:42:7f:37:5d:09:2b:e9:8f:0b:10:cc:3e:1a:05:fb:8a: cf:67:aa:17:5b:ae:78:d2:b0:83:1d:7a:0d:7d:88:90:24:8f: b4:10:41:30:c8:69:8a:77:3b:7f:dc:f2:42:da:c1:d8:e2:aa: 1b:f3:71:b9:5a:de:2d:e6:c1:80:00:cf:6f:d7:fe:a5:4e:c4: 70:f9:48:a9:b6:17:a6:09:5b:04:73:60:21:11:ad:86:00:e0: 4f:73:15:e7:88:ba:db:c8:09:b9:94:5b:5a:4f:96:b7:59:e5: 37:d1:5d:d1:fb:e8:fd:6e:52:19:f0:c4:be:fc:ed:c3:f2:82: 5e:26:84:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNHpfB2LniO3eY8BGLXkpixqWGlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2MTZE RTk4NjQ0ODAeFw0yNTA4MDYwMjI3MjJaFw0yNTA4MDkwMjQzMjJaMDMxMTAvBgNV BAMTKERDNzIwOTU2QUMyNTZCM0JEQzA1NjM2QjM2QkJBNTMzQTMxOTA5OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkEGeC8u6M2xqLzHrFiauUFjdG vZxSOwnFJ92bSjCh99Ep0Q2CSbT8XGV6RnfHf9Mc2qlEE4qeHnHHJG57uS3uJHwG loyjZmvSjlXlSIKpceImw9M+1ZdzhyZUkywK67u3EJhMB8aRh4MYgIHCSEl9bpaR ws7XNnKV/TGb8UUo8PqgkgVDHYHVLOGpy0yO/NMAIYGKJa8SDwG//9FTwosesC39 D8gJWVON7CI9M2qI5M0rfxOSfWK808sToqOxEjbHV7cwN9UG1Tpr15Vjj1ftujOj /osP1VO5mdzsVbkuMZz3NQS6yeODydcReLwyd6+lcYgXpJzLBfDfFQQxe0g/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3HIJVqwlazvcBWNrNrulM6MZCZwwHwYDVR0j BBgwFoAUBUpw9+Nk91ry8Wb+hDHmFt6YZEgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MWYxMzRiMS1hNjE3LTRiYWItOTFhYi0xMzgxMDIzNTQwMWIvMC8wNTRBNzBGN0Uz NjRGNzVBRjJGMTY2RkU4NDMxRTYxNkRFOTg2NDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2MTZERTk4 NjQ0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzFmMTM0YjEtYTYxNy00YmFiLTkx YWItMTM4MTAyMzU0MDFiLzAvMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2 MTZERTk4NjQ0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICmw2CBJBSpc0tDf/P+dwFQnyICcuFa7FMS aLVJDMERhUQXBRrhrYhol8ATUn3rDhC5jJETIHOeC9HCgvWdQJuOR2Xh6G/rvQao OIL0leya5S+IDSxyQoNBxYTtqC1XfrWDYdB8ypIeqaeqA+PHQ/QAQGRU5BLUoM6J tjFn7P7GQn83XQkr6Y8LEMw+GgX7is9nqhdbrnjSsIMdeg19iJAkj7QQQTDIaYp3 O3/c8kLawdjiqhvzcbla3i3mwYAAz2/X/qVOxHD5SKm2F6YJWwRzYCERrYYA4E9z FeeIutvICbmUW1pPlrdZ5TfRXdH76P1uUhnwxL787cPygl4mhKw= -----END CERTIFICATE-----Generated at Thu Aug 7 01:20:19 2025 by rpki-client