$ rpki-client -vvf repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft File: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft (raw, json) Hash identifier: CX5/QSn3EGKKo9gxTm6sOmxBo+MJlrNXeN9EI+8ESPE= Subject key identifier: 51:E2:4B:1B:19:0F:54:BC:5D:AB:EC:00:70:40:CE:C7:07:27:34:A3 Authority key identifier: C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF Certificate issuer: /CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Certificate serial: 0F502955DF1DB8560F292B739AF8B3153F9CB670 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft Manifest number: 03DB Signing time: Mon 04 Aug 2025 18:32:04 +0000 Manifest this update: Mon 04 Aug 2025 18:27:04 +0000 Manifest next update: Fri 08 Aug 2025 04:15:04 +0000 Files and hashes: 1: 3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa (hash: M93Ni1T1Tbr7xBYmfCDNgdw5xr36AB/YVcpH7A2lVoA=) 2: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl (hash: EI0ytZnviLnSvwwfNe5NE1cLtWR5bSccHap3tvluZcw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 04:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:50:29:55:df:1d:b8:56:0f:29:2b:73:9a:f8:b3:15:3f:9c:b6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Validity Not Before: Aug 4 18:27:04 2025 GMT Not After : Aug 8 04:15:04 2025 GMT Subject: CN=51E24B1B190F54BC5DABEC007040CEC7072734A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e3:0e:d5:07:5c:45:f2:1d:d6:61:49:81:05: ff:4d:cf:02:24:6b:c7:1a:39:3b:6d:84:ec:56:d7: e1:09:69:d2:76:9d:0a:aa:46:4e:55:74:d4:29:69: 79:ff:ac:f1:68:9b:32:94:49:f4:45:a5:e1:e3:65: 70:8c:9c:28:93:39:fb:69:42:f8:c6:cc:2f:48:22: 4e:eb:bb:a7:99:88:c9:44:38:55:0a:1f:15:41:df: 08:15:9e:ab:6a:1c:a7:dc:6f:25:37:a4:88:cd:ff: 05:e7:33:79:27:98:9b:97:21:e7:fd:3c:e5:2e:10: c0:bf:22:88:5f:86:08:31:e5:9e:f3:f2:8e:5e:56: 41:b3:a3:dc:d8:a1:06:b0:f5:75:ed:eb:d8:35:2a: a9:c5:29:e5:02:3a:f1:dd:18:47:cf:68:f6:b2:eb: 2c:e7:48:f5:d2:83:5e:91:c8:23:fe:07:96:fb:4f: 5e:01:83:27:98:72:ef:34:61:90:f3:0c:9a:6d:88: 86:eb:5d:80:37:2f:09:02:ab:77:66:47:f2:ac:2c: 03:ea:2b:d4:d5:bc:d3:b1:2a:4e:4f:b8:2c:5b:fb: 1e:a5:d4:ac:40:d9:08:2c:8c:c8:5c:2b:34:db:c5: 52:d3:94:d1:f3:ec:88:22:52:d0:9a:b3:ca:b2:97: d8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E2:4B:1B:19:0F:54:BC:5D:AB:EC:00:70:40:CE:C7:07:27:34:A3 X509v3 Authority Key Identifier: keyid:C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:fe:09:1c:91:70:82:4f:d1:7a:b1:ba:bc:b7:f8:fc:fb:ee: 95:51:28:85:9d:a8:f0:f1:bb:01:b0:7a:b4:55:81:2c:a8:3b: 53:15:32:12:28:76:44:e4:1c:5d:cb:f8:3e:94:d0:d5:e0:26: e5:48:38:0c:e0:18:9d:d1:b3:fe:01:f4:24:2d:e8:1d:08:92: 8d:c8:8f:99:98:36:70:3d:73:be:a7:2e:bd:0d:be:68:e0:29: cf:67:16:99:9f:8a:37:ba:75:49:b5:f4:6b:15:fc:3a:56:7c: d0:68:7a:ba:8e:9e:d3:b0:38:de:b2:59:6d:73:e1:f3:32:41: d5:7e:35:33:89:6a:73:a7:d4:6b:34:4d:f7:9e:8d:6c:73:95: a1:86:dd:2b:12:b1:84:44:43:53:d7:f8:a7:b3:20:aa:82:89: df:94:65:05:20:70:67:c2:36:01:cb:a6:ae:6c:87:e8:42:a0: bb:f3:f5:a5:1e:91:d2:d9:e7:f8:6d:8a:22:35:2e:65:40:95: 0b:bd:05:0d:13:c8:f4:7d:69:86:f7:d5:01:2e:b2:ed:1e:6c: d8:0f:71:c4:89:8f:07:27:85:1f:63:fc:71:86:c9:d1:34:12: 86:32:a1:30:75:c6:39:5c:81:c6:a1:57:74:9f:07:63:d0:cd: ef:8f:a5:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD1ApVd8duFYPKStzmvizFT+ctnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYz MEJGRjVERjAeFw0yNTA4MDQxODI3MDRaFw0yNTA4MDgwNDE1MDRaMDMxMTAvBgNV BAMTKDUxRTI0QjFCMTkwRjU0QkM1REFCRUMwMDcwNDBDRUM3MDcyNzM0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC74w7VB1xF8h3WYUmBBf9NzwIk a8caOTtthOxW1+EJadJ2nQqqRk5VdNQpaXn/rPFomzKUSfRFpeHjZXCMnCiTOftp QvjGzC9IIk7ru6eZiMlEOFUKHxVB3wgVnqtqHKfcbyU3pIjN/wXnM3knmJuXIef9 POUuEMC/Iohfhggx5Z7z8o5eVkGzo9zYoQaw9XXt69g1KqnFKeUCOvHdGEfPaPay 6yznSPXSg16RyCP+B5b7T14BgyeYcu80YZDzDJptiIbrXYA3LwkCq3dmR/KsLAPq K9TVvNOxKk5PuCxb+x6l1KxA2QgsjMhcKzTbxVLTlNHz7IgiUtCas8qyl9izAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUeJLGxkPVLxdq+wAcEDOxwcnNKMwHwYDVR0j BBgwFoAUxVTokcWDziq/LbXe6CH2tjC/9d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZDdjN2FjMi01YTliLTQ5MmEtYTRjNS0xZjEzNTkwZGFlMDYvMC9DNTU0RTg5MUM1 ODNDRTJBQkYyREI1REVFODIxRjZCNjMwQkZGNURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYzMEJG RjVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Q3YzdhYzItNWE5Yi00OTJhLWE0 YzUtMWYxMzU5MGRhZTA2LzAvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2 QjYzMEJGRjVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3+CRyRcIJP0Xqxury3+Pz77pVRKIWdqPDx uwGwerRVgSyoO1MVMhIodkTkHF3L+D6U0NXgJuVIOAzgGJ3Rs/4B9CQt6B0Iko3I j5mYNnA9c76nLr0NvmjgKc9nFpmfije6dUm19GsV/DpWfNBoerqOntOwON6yWW1z 4fMyQdV+NTOJanOn1Gs0TfeejWxzlaGG3SsSsYREQ1PX+KezIKqCid+UZQUgcGfC NgHLpq5sh+hCoLvz9aUekdLZ5/htiiI1LmVAlQu9BQ0TyPR9aYb31QEusu0ebNgP ccSJjwcnhR9j/HGGydE0EoYyoTB1xjlcgcahV3SfB2PQze+PpQA= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:07 2025 by rpki-client