$ rpki-client -vvf repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft File: 054A70F7E364F75AF2F166FE8431E616DE986448.mft (raw, json) Hash identifier: 2QBlFQhJFqsoR2yTOPgw+RWBTRZQOL+4YTrapftphEU= Subject key identifier: B4:62:F8:37:D3:56:27:20:F6:79:2A:27:57:50:81:32:6A:AE:59:D3 Authority key identifier: 05:4A:70:F7:E3:64:F7:5A:F2:F1:66:FE:84:31:E6:16:DE:98:64:48 Certificate issuer: /CN=054A70F7E364F75AF2F166FE8431E616DE986448 Certificate serial: 5C264CC54E4D4A30BF9296CD7D4B48D5F20BF421 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft Manifest number: 0365 Signing time: Tue 29 Apr 2025 19:12:26 +0000 Manifest this update: Tue 29 Apr 2025 19:07:26 +0000 Manifest next update: Sat 03 May 2025 05:21:26 +0000 Files and hashes: 1: 054A70F7E364F75AF2F166FE8431E616DE986448.crl (hash: YhPPEo+LzcaIAxc+LyqA8HuSLRaNGmafABgivAgE7pI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.crl rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 05:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:26:4c:c5:4e:4d:4a:30:bf:92:96:cd:7d:4b:48:d5:f2:0b:f4:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=054A70F7E364F75AF2F166FE8431E616DE986448 Validity Not Before: Apr 29 19:07:26 2025 GMT Not After : May 3 05:21:26 2025 GMT Subject: CN=B462F837D3562720F6792A27575081326AAE59D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a3:36:38:9f:30:a9:e7:f7:dc:67:53:b3:7e: 3d:d6:a0:d6:84:ab:f6:b4:83:28:31:5b:2c:79:a6: 4a:7b:1c:ae:da:6a:dd:95:29:92:b8:d5:8d:ea:d1: 8d:74:a4:67:21:06:2f:07:3a:b3:5f:88:c6:06:13: 38:ed:2a:0c:38:d3:b4:d3:2e:74:d5:40:35:6c:3f: 1c:64:4c:65:67:9e:47:17:e1:01:fc:4a:fe:72:fe: 61:7a:e1:db:fe:57:84:3d:5e:7f:b1:0f:ff:fe:23: 98:3d:9a:86:87:74:42:52:65:ab:95:67:96:35:88: b3:57:31:27:f0:93:3e:91:90:70:60:45:31:08:d7: ed:12:77:69:a5:c2:d4:bb:10:3e:b2:04:2a:8e:06: 9b:f6:ba:28:dd:31:1b:3c:8a:a6:bd:d5:56:aa:29: a4:55:d6:99:f5:d3:29:7a:cc:87:b1:32:81:d8:8b: d3:4d:9d:1a:50:23:ae:4c:de:30:f9:23:6d:9b:0f: 81:1a:6d:36:76:43:26:69:64:73:05:c0:9b:35:dd: 48:d2:51:77:03:6d:8e:27:b5:df:06:81:81:c7:9a: b6:0b:27:ea:0e:58:05:bc:1f:9e:f9:31:9e:e6:d9: 02:4f:7a:25:e9:5e:cf:a8:3a:77:54:c0:6a:7f:89: 67:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:62:F8:37:D3:56:27:20:F6:79:2A:27:57:50:81:32:6A:AE:59:D3 X509v3 Authority Key Identifier: keyid:05:4A:70:F7:E3:64:F7:5A:F2:F1:66:FE:84:31:E6:16:DE:98:64:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:76:dd:26:96:97:58:de:ad:9c:e3:84:3c:96:11:29:19:bc: 95:87:9c:55:aa:f4:bc:49:9c:f6:91:37:6a:0e:12:35:d4:3f: b2:47:f9:fd:3c:38:ff:3d:97:88:00:60:f9:1a:1f:42:a6:35: 41:30:82:22:bf:04:a4:5a:28:c2:f0:8f:ec:a0:c4:ed:a5:8f: ae:37:68:b8:18:31:fb:5b:ee:a1:77:3c:45:f9:c9:db:04:f4: 25:9f:77:4a:6d:86:e7:56:96:ce:db:cc:ea:22:91:ad:d8:e8: 78:8b:c7:f8:b6:3b:b7:16:16:a3:e2:a2:42:77:a5:2d:3b:e7: d8:2f:75:95:58:80:a9:40:a5:d8:fb:a1:77:f7:6c:eb:e3:85: d4:ae:53:97:d2:b0:6e:f4:93:8a:78:6b:24:e9:e7:97:62:30: ea:21:c7:00:0c:5c:83:c2:f0:4e:51:f7:33:fe:27:e4:90:5a: 10:20:36:63:76:67:56:f4:70:96:73:20:ea:50:b1:44:e2:55: d1:de:f0:ab:6c:96:17:ce:41:42:9c:7e:05:94:97:f8:7a:fc: eb:6c:63:c1:44:06:ed:f5:17:7f:96:f0:c4:95:5a:9b:26:9f: 5b:87:0f:41:95:ea:95:be:85:e2:5e:68:ce:43:c9:ff:91:72: e1:69:e7:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXCZMxU5NSjC/kpbNfUtI1fIL9CEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2MTZE RTk4NjQ0ODAeFw0yNTA0MjkxOTA3MjZaFw0yNTA1MDMwNTIxMjZaMDMxMTAvBgNV BAMTKEI0NjJGODM3RDM1NjI3MjBGNjc5MkEyNzU3NTA4MTMyNkFBRTU5RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtozY4nzCp5/fcZ1Ozfj3WoNaE q/a0gygxWyx5pkp7HK7aat2VKZK41Y3q0Y10pGchBi8HOrNfiMYGEzjtKgw407TT LnTVQDVsPxxkTGVnnkcX4QH8Sv5y/mF64dv+V4Q9Xn+xD//+I5g9moaHdEJSZauV Z5Y1iLNXMSfwkz6RkHBgRTEI1+0Sd2mlwtS7ED6yBCqOBpv2uijdMRs8iqa91Vaq KaRV1pn10yl6zIexMoHYi9NNnRpQI65M3jD5I22bD4EabTZ2QyZpZHMFwJs13UjS UXcDbY4ntd8GgYHHmrYLJ+oOWAW8H575MZ7m2QJPeiXpXs+oOndUwGp/iWfdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtGL4N9NWJyD2eSonV1CBMmquWdMwHwYDVR0j BBgwFoAUBUpw9+Nk91ry8Wb+hDHmFt6YZEgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MWYxMzRiMS1hNjE3LTRiYWItOTFhYi0xMzgxMDIzNTQwMWIvMC8wNTRBNzBGN0Uz NjRGNzVBRjJGMTY2RkU4NDMxRTYxNkRFOTg2NDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2MTZERTk4 NjQ0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzFmMTM0YjEtYTYxNy00YmFiLTkx YWItMTM4MTAyMzU0MDFiLzAvMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2 MTZERTk4NjQ0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABh23SaWl1jerZzjhDyWESkZvJWHnFWq9LxJ nPaRN2oOEjXUP7JH+f08OP89l4gAYPkaH0KmNUEwgiK/BKRaKMLwj+ygxO2lj643 aLgYMftb7qF3PEX5ydsE9CWfd0pthudWls7bzOoika3Y6HiLx/i2O7cWFqPiokJ3 pS0759gvdZVYgKlApdj7oXf3bOvjhdSuU5fSsG70k4p4ayTp55diMOohxwAMXIPC 8E5R9zP+J+SQWhAgNmN2Z1b0cJZzIOpQsUTiVdHe8KtslhfOQUKcfgWUl/h6/Ots Y8FEBu31F3+W8MSVWpsmn1uHD0GV6pW+heJeaM5Dyf+RcuFp52c= -----END CERTIFICATE-----Generated at Wed Apr 30 07:33:17 2025 by rpki-client