$ rpki-client -vvf repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft File: 054A70F7E364F75AF2F166FE8431E616DE986448.mft (raw, json) Hash identifier: 7Z9MzDGiyk05VOZrZE/f7JE8PnT3hiIgWFkXYqTnAP4= Subject key identifier: F3:9E:C0:D3:12:43:C1:01:36:8D:79:8A:BA:3B:6B:46:09:19:32:E8 Authority key identifier: 05:4A:70:F7:E3:64:F7:5A:F2:F1:66:FE:84:31:E6:16:DE:98:64:48 Certificate issuer: /CN=054A70F7E364F75AF2F166FE8431E616DE986448 Certificate serial: 2BEF324CC325AEF89136ECEE25CAD40CFD271B69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft Manifest number: 037A Signing time: Tue 17 Jun 2025 11:32:18 +0000 Manifest this update: Tue 17 Jun 2025 11:27:18 +0000 Manifest next update: Fri 20 Jun 2025 14:38:18 +0000 Files and hashes: 1: 054A70F7E364F75AF2F166FE8431E616DE986448.crl (hash: +Ugltw3FgBWucj/mjWQOfuayCQXCUc7SNiYAZn66T1Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.crl rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 14:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ef:32:4c:c3:25:ae:f8:91:36:ec:ee:25:ca:d4:0c:fd:27:1b:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=054A70F7E364F75AF2F166FE8431E616DE986448 Validity Not Before: Jun 17 11:27:18 2025 GMT Not After : Jun 20 14:38:18 2025 GMT Subject: CN=F39EC0D31243C101368D798ABA3B6B46091932E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fa:f0:fe:e4:ce:57:f8:53:8e:80:3a:5c:2d: 0f:13:44:44:56:bf:dc:62:31:ae:c5:80:51:7a:42: e8:d3:c6:d9:4e:fa:8d:f8:bc:d9:5f:93:ec:9b:d1: cb:5e:9f:82:fc:7d:61:3d:1d:b0:34:64:ad:9d:88: bd:3e:9c:67:de:da:f8:79:f2:0e:72:a6:a7:54:52: f7:e5:37:49:f2:93:ae:58:08:3a:8b:30:53:f5:88: f2:c2:69:6e:46:e0:87:bd:4b:d2:f6:bc:81:8f:f4: 8c:0d:c3:87:c4:37:d9:53:8c:6c:cc:40:d2:c9:1d: d5:78:c7:e6:b3:a6:b9:92:4f:55:62:6a:f2:6f:e6: 48:f6:f6:37:d3:4b:e5:ce:1b:f4:ab:2a:65:bf:e1: 03:8c:69:77:29:cf:4a:d7:58:3a:c3:b7:11:fc:b9: a8:67:5f:df:7f:ac:e1:e6:95:58:43:bb:bf:0e:1a: a7:fa:76:23:20:61:e0:b9:42:7f:34:e8:98:fb:9a: 71:c0:a8:1f:a8:aa:73:4f:a3:b7:bd:40:76:09:96: 20:63:c9:92:a1:59:39:f3:54:12:70:b5:57:d9:74: 60:86:41:9b:d8:e9:aa:94:eb:c3:e8:30:07:23:4f: 25:ed:c9:7b:82:1a:d5:a7:92:39:5e:2d:76:8b:97: d4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9E:C0:D3:12:43:C1:01:36:8D:79:8A:BA:3B:6B:46:09:19:32:E8 X509v3 Authority Key Identifier: keyid:05:4A:70:F7:E3:64:F7:5A:F2:F1:66:FE:84:31:E6:16:DE:98:64:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:b5:58:3d:69:30:22:9e:67:88:6e:b0:26:21:1f:cd:41:c4: ec:0b:ee:2f:b2:db:85:a1:5a:db:2a:22:3d:f0:1c:69:d9:8f: a5:3d:6a:a5:03:61:84:c4:e9:0b:38:65:f0:8e:04:05:20:cb: 73:2c:fc:55:22:32:86:b0:8d:da:ad:ce:26:64:bc:6a:2b:76: 11:66:aa:6d:11:46:ac:68:ec:c5:ca:c5:60:bd:07:9b:24:74: 05:75:6f:43:74:84:a1:ce:85:93:e4:19:74:70:8c:ec:6a:81: 99:a8:1c:75:46:eb:08:63:e3:0a:90:03:e4:be:74:fe:ac:db: 5f:4b:f3:66:64:ec:99:b8:09:00:de:dd:15:af:84:57:52:81: 66:59:7e:57:68:b9:7b:05:a3:3a:9f:27:28:e3:2d:f3:11:87: fb:a3:41:64:dd:03:74:c8:e6:8d:cf:e4:3c:62:bc:d0:37:b8: 8c:ee:38:eb:b3:0d:7b:59:cd:6d:ff:1f:ac:61:6e:bc:73:5d: 3e:1c:6a:d4:55:49:c7:8a:84:59:04:ce:48:a4:f9:c3:71:3b: 58:f2:6d:a5:cd:d2:66:22:c2:8b:3f:37:93:05:0b:55:a0:b0: eb:64:a4:e9:8f:ac:d0:43:37:6b:d1:17:00:93:c0:8a:8c:a7: e3:96:67:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK+8yTMMlrviRNuzuJcrUDP0nG2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2MTZE RTk4NjQ0ODAeFw0yNTA2MTcxMTI3MThaFw0yNTA2MjAxNDM4MThaMDMxMTAvBgNV BAMTKEYzOUVDMEQzMTI0M0MxMDEzNjhENzk4QUJBM0I2QjQ2MDkxOTMyRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg+vD+5M5X+FOOgDpcLQ8TRERW v9xiMa7FgFF6QujTxtlO+o34vNlfk+yb0cten4L8fWE9HbA0ZK2diL0+nGfe2vh5 8g5ypqdUUvflN0nyk65YCDqLMFP1iPLCaW5G4Ie9S9L2vIGP9IwNw4fEN9lTjGzM QNLJHdV4x+azprmST1ViavJv5kj29jfTS+XOG/SrKmW/4QOMaXcpz0rXWDrDtxH8 uahnX99/rOHmlVhDu78OGqf6diMgYeC5Qn806Jj7mnHAqB+oqnNPo7e9QHYJliBj yZKhWTnzVBJwtVfZdGCGQZvY6aqU68PoMAcjTyXtyXuCGtWnkjleLXaLl9RZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU857A0xJDwQE2jXmKujtrRgkZMugwHwYDVR0j BBgwFoAUBUpw9+Nk91ry8Wb+hDHmFt6YZEgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MWYxMzRiMS1hNjE3LTRiYWItOTFhYi0xMzgxMDIzNTQwMWIvMC8wNTRBNzBGN0Uz NjRGNzVBRjJGMTY2RkU4NDMxRTYxNkRFOTg2NDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2MTZERTk4 NjQ0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzFmMTM0YjEtYTYxNy00YmFiLTkx YWItMTM4MTAyMzU0MDFiLzAvMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2 MTZERTk4NjQ0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGa1WD1pMCKeZ4husCYhH81BxOwL7i+y24Wh WtsqIj3wHGnZj6U9aqUDYYTE6Qs4ZfCOBAUgy3Ms/FUiMoawjdqtziZkvGordhFm qm0RRqxo7MXKxWC9B5skdAV1b0N0hKHOhZPkGXRwjOxqgZmoHHVG6whj4wqQA+S+ dP6s219L82Zk7Jm4CQDe3RWvhFdSgWZZfldouXsFozqfJyjjLfMRh/ujQWTdA3TI 5o3P5DxivNA3uIzuOOuzDXtZzW3/H6xhbrxzXT4catRVSceKhFkEzkik+cNxO1jy baXN0mYiwos/N5MFC1WgsOtkpOmPrNBDN2vRFwCTwIqMp+OWZzM= -----END CERTIFICATE-----Generated at Wed Jun 18 12:28:39 2025 by rpki-client