$ rpki-client -vvf repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft File: 054A70F7E364F75AF2F166FE8431E616DE986448.mft (raw, json) Hash identifier: nmf5BR+HV7VanijIomld3YQ5LbSK9yyCwnKb61Ot4gU= Subject key identifier: F7:69:8E:4A:AF:CF:60:CD:66:A5:EB:B8:E0:75:51:1D:E4:67:06:C8 Authority key identifier: 05:4A:70:F7:E3:64:F7:5A:F2:F1:66:FE:84:31:E6:16:DE:98:64:48 Certificate issuer: /CN=054A70F7E364F75AF2F166FE8431E616DE986448 Certificate serial: 5BD8DA311C133DE4033FF83A948EC0ED956C7FEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft Manifest number: 03B8 Signing time: Mon 03 Nov 2025 09:32:21 +0000 Manifest this update: Mon 03 Nov 2025 09:27:21 +0000 Manifest next update: Thu 06 Nov 2025 16:55:21 +0000 Files and hashes: 1: 054A70F7E364F75AF2F166FE8431E616DE986448.crl (hash: Bp6iL2uwRQ8avmP+nSyBgOPB5Pa8Xid9oeTDcKv51qQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.crl rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 16:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:d8:da:31:1c:13:3d:e4:03:3f:f8:3a:94:8e:c0:ed:95:6c:7f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=054A70F7E364F75AF2F166FE8431E616DE986448 Validity Not Before: Nov 3 09:27:21 2025 GMT Not After : Nov 6 16:55:21 2025 GMT Subject: CN=F7698E4AAFCF60CD66A5EBB8E075511DE46706C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:51:2a:9d:d4:b5:10:bf:af:0c:b0:63:54: a0:6f:3c:19:f3:b1:87:14:4d:f9:c3:de:20:d5:e4: 7e:5f:66:36:ba:36:18:70:13:d7:d6:a5:40:e1:16: e3:8e:31:fb:7e:8f:9d:cc:0b:2d:91:ad:71:1e:d5: 69:93:54:24:e2:c9:5d:57:b4:a2:a8:3d:84:48:8f: 0c:63:95:df:8d:4d:55:ad:41:f9:96:bb:bb:96:58: d2:fe:95:6f:48:af:43:4c:d0:02:9c:cf:23:9c:c6: 83:13:78:c0:2d:a1:14:2d:39:69:9f:1b:cd:70:58: 03:9f:fa:45:ab:91:c0:f6:35:bf:6d:3c:ae:9d:ac: 5a:1d:a7:28:dc:81:12:2d:10:ac:a8:08:b9:61:3c: d3:d0:6e:40:69:31:e7:ed:b1:f2:7e:79:28:d2:e4: bb:25:a0:da:33:8c:4a:f5:3b:cc:5c:11:7f:98:bd: 20:3d:80:0a:dd:28:41:43:ba:da:3f:e3:35:07:09: f7:7e:49:6d:7a:21:97:54:57:fc:d9:bf:6e:44:a0: 6a:51:9d:8e:d2:8f:56:30:8b:ec:b4:b7:d0:98:5a: 90:49:3e:ba:72:d6:17:f9:18:53:8a:74:cf:4e:76: 95:a0:ac:0d:1d:89:ae:82:80:ec:8b:45:b0:87:dc: 6e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:69:8E:4A:AF:CF:60:CD:66:A5:EB:B8:E0:75:51:1D:E4:67:06:C8 X509v3 Authority Key Identifier: keyid:05:4A:70:F7:E3:64:F7:5A:F2:F1:66:FE:84:31:E6:16:DE:98:64:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:05:41:4a:fc:84:0b:43:53:0b:15:1a:67:f8:1f:38:c6:e7: b1:41:b3:57:91:94:02:4a:3e:63:ad:7a:f8:d0:f5:da:95:5e: 90:24:84:50:f6:dc:30:42:10:c1:18:65:a5:71:f8:f8:f4:0f: 6a:9f:00:a7:31:a4:c2:2e:1e:10:83:75:19:e8:87:29:0f:10: 96:99:f7:93:d2:ae:90:ed:d7:42:96:53:15:57:0c:f1:55:c0: 7b:c5:c9:68:f9:bf:1a:a1:69:b0:d5:55:66:60:87:e0:36:0c: a6:a8:7e:6f:41:b7:5b:52:a7:12:31:d1:68:37:72:fd:99:76: 1c:c4:36:65:c4:15:f3:32:77:69:bb:58:d4:ba:5d:93:9f:b2: d4:55:27:41:0d:77:a6:0d:83:bc:80:8c:f2:45:4d:3d:c8:c8: d6:df:16:d5:54:ac:94:7c:f7:a4:be:c8:14:dd:f8:b1:a6:17: 7e:d5:6f:7d:6c:98:99:59:f3:0d:65:e7:4e:64:8a:6b:cb:f4: 6d:a8:7c:90:5b:11:31:25:89:98:e8:2b:0c:6d:d8:b5:51:be: 56:a1:32:b4:c1:2d:99:35:21:b6:9f:12:21:63:81:6d:9f:3a: 37:d8:6f:1d:e0:9a:22:33:ee:ce:09:f8:ee:f1:28:ba:70:97: 15:50:e2:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW9jaMRwTPeQDP/g6lI7A7ZVsf+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2MTZE RTk4NjQ0ODAeFw0yNTExMDMwOTI3MjFaFw0yNTExMDYxNjU1MjFaMDMxMTAvBgNV BAMTKEY3Njk4RTRBQUZDRjYwQ0Q2NkE1RUJCOEUwNzU1MTFERTQ2NzA2QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE51EqndS1EL+vDLBjVKBvPBnz sYcUTfnD3iDV5H5fZja6NhhwE9fWpUDhFuOOMft+j53MCy2RrXEe1WmTVCTiyV1X tKKoPYRIjwxjld+NTVWtQfmWu7uWWNL+lW9Ir0NM0AKczyOcxoMTeMAtoRQtOWmf G81wWAOf+kWrkcD2Nb9tPK6drFodpyjcgRItEKyoCLlhPNPQbkBpMeftsfJ+eSjS 5LsloNozjEr1O8xcEX+YvSA9gArdKEFDuto/4zUHCfd+SW16IZdUV/zZv25EoGpR nY7Sj1Ywi+y0t9CYWpBJPrpy1hf5GFOKdM9OdpWgrA0dia6CgOyLRbCH3G6hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU92mOSq/PYM1mpeu44HVRHeRnBsgwHwYDVR0j BBgwFoAUBUpw9+Nk91ry8Wb+hDHmFt6YZEgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MWYxMzRiMS1hNjE3LTRiYWItOTFhYi0xMzgxMDIzNTQwMWIvMC8wNTRBNzBGN0Uz NjRGNzVBRjJGMTY2RkU4NDMxRTYxNkRFOTg2NDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2MTZERTk4 NjQ0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzFmMTM0YjEtYTYxNy00YmFiLTkx YWItMTM4MTAyMzU0MDFiLzAvMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2 MTZERTk4NjQ0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUFQUr8hAtDUwsVGmf4HzjG57FBs1eRlAJK PmOtevjQ9dqVXpAkhFD23DBCEMEYZaVx+Pj0D2qfAKcxpMIuHhCDdRnohykPEJaZ 95PSrpDt10KWUxVXDPFVwHvFyWj5vxqhabDVVWZgh+A2DKaofm9Bt1tSpxIx0Wg3 cv2ZdhzENmXEFfMyd2m7WNS6XZOfstRVJ0ENd6YNg7yAjPJFTT3IyNbfFtVUrJR8 96S+yBTd+LGmF37Vb31smJlZ8w1l505kimvL9G2ofJBbETEliZjoKwxt2LVRvlah MrTBLZk1IbafEiFjgW2fOjfYbx3gmiIz7s4J+O7xKLpwlxVQ4j8= -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:50 2025 by rpki-client