$ rpki-client -vvf repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft File: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft (raw, json) Hash identifier: EoMz4bj1sZZP4Xr5EIelw/a4c0T7hpeYEzLF4Yqvt14= Subject key identifier: 2A:E5:D7:D4:59:67:AA:34:AD:21:45:FA:29:EF:DA:A8:1F:DE:B2:F5 Authority key identifier: C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF Certificate issuer: /CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Certificate serial: 4D7C1D8750D07D258C602084DBA1C5CBFF9C350B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft Manifest number: 03C4 Signing time: Fri 13 Jun 2025 23:21:59 +0000 Manifest this update: Fri 13 Jun 2025 23:16:59 +0000 Manifest next update: Tue 17 Jun 2025 04:19:59 +0000 Files and hashes: 1: 3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa (hash: M93Ni1T1Tbr7xBYmfCDNgdw5xr36AB/YVcpH7A2lVoA=) 2: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl (hash: 8fWeNL/9xGT465vzqYkThN1GT/9YikfoD38jPdyAsFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 04:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:7c:1d:87:50:d0:7d:25:8c:60:20:84:db:a1:c5:cb:ff:9c:35:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Validity Not Before: Jun 13 23:16:59 2025 GMT Not After : Jun 17 04:19:59 2025 GMT Subject: CN=2AE5D7D45967AA34AD2145FA29EFDAA81FDEB2F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5e:e7:90:b4:d9:64:99:b9:78:39:aa:29:56: 79:4c:69:4d:93:49:65:7a:6b:7e:d1:ee:17:d7:b5: 82:91:b1:dd:9f:e6:0e:6c:6d:a9:83:d5:41:eb:e0: 30:ba:10:44:b8:47:1e:a4:7c:0c:d2:f7:a8:cb:66: 1c:36:a5:d4:04:73:3b:0a:17:9e:e2:f3:47:cf:59: 86:55:e5:e8:6b:19:c5:f3:2c:88:77:18:2a:d8:6f: ea:56:22:d4:4b:56:40:8d:d7:f9:d5:12:aa:5a:09: 1c:92:6f:45:0f:bb:0f:b1:ac:4e:12:36:d0:a2:83: 58:f9:ff:8a:a3:64:7c:c7:44:49:96:7c:28:13:71: b6:69:e9:e3:a9:25:93:94:e8:4c:37:15:39:8f:a5: b8:5a:91:db:29:f0:50:7b:f3:51:6a:c0:ad:3f:73: c8:d5:46:c7:58:74:5e:08:92:37:8c:54:62:20:e1: f5:73:98:6d:05:04:d3:6c:bf:43:01:24:3c:f3:e1: df:e5:14:72:46:05:41:f7:da:da:a9:4d:5c:be:06: c1:a8:62:89:18:63:8c:5c:7c:e0:d0:29:8d:27:e1: 18:7b:0f:98:70:53:7b:72:83:69:80:dd:ac:db:44: 07:5d:16:ee:42:52:e4:76:36:3a:1d:5e:59:d2:89: 84:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E5:D7:D4:59:67:AA:34:AD:21:45:FA:29:EF:DA:A8:1F:DE:B2:F5 X509v3 Authority Key Identifier: keyid:C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a8:6f:26:6f:13:11:a0:2e:e4:f6:82:23:78:02:dc:99:60: e3:d2:b5:8f:55:cd:33:d9:aa:f0:8a:67:ba:57:24:cb:5d:26: 73:6e:62:ee:ea:c0:3d:be:25:b0:df:3c:4d:7d:d5:36:90:e0: 6a:4d:2c:fe:18:72:ac:97:80:71:41:f7:17:e1:98:63:14:f3: a5:48:c5:1e:3b:96:2f:8b:54:a5:8b:7e:02:7e:ff:f0:b5:2c: a9:f9:c4:e5:e1:ba:11:69:94:5a:11:3e:cf:c0:77:7f:23:08: 56:f2:ed:1d:54:22:8c:b7:13:dc:5d:a0:18:ff:ce:ee:b6:a4: 39:7f:94:cc:f3:c5:93:b8:a4:4c:c5:64:a2:e5:1b:0d:f0:ba: 74:ca:6d:71:3c:b1:c6:f8:58:d9:d5:aa:11:10:2d:bc:1d:0c: 23:cb:90:0f:a2:ae:37:84:fa:3b:97:82:70:47:dd:51:0a:0d: c9:43:c4:c1:ac:8b:0a:ea:13:3e:f1:ef:62:e7:38:eb:e0:40: 02:6c:d2:df:9d:f9:e6:89:c3:39:4c:3b:06:5c:27:a4:59:b8: d8:a2:63:7e:41:2e:28:41:d0:03:c0:db:3a:a9:86:a0:59:8c: 69:78:9a:2c:8d:44:e3:c7:b9:d0:bf:f5:0d:e5:7c:2e:4d:df: e4:ef:51:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTXwdh1DQfSWMYCCE26HFy/+cNQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYz MEJGRjVERjAeFw0yNTA2MTMyMzE2NTlaFw0yNTA2MTcwNDE5NTlaMDMxMTAvBgNV BAMTKDJBRTVEN0Q0NTk2N0FBMzRBRDIxNDVGQTI5RUZEQUE4MUZERUIyRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+XueQtNlkmbl4OaopVnlMaU2T SWV6a37R7hfXtYKRsd2f5g5sbamD1UHr4DC6EES4Rx6kfAzS96jLZhw2pdQEczsK F57i80fPWYZV5ehrGcXzLIh3GCrYb+pWItRLVkCN1/nVEqpaCRySb0UPuw+xrE4S NtCig1j5/4qjZHzHREmWfCgTcbZp6eOpJZOU6Ew3FTmPpbhakdsp8FB781FqwK0/ c8jVRsdYdF4IkjeMVGIg4fVzmG0FBNNsv0MBJDzz4d/lFHJGBUH32tqpTVy+BsGo YokYY4xcfODQKY0n4Rh7D5hwU3tyg2mA3azbRAddFu5CUuR2NjodXlnSiYQhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKuXX1FlnqjStIUX6Ke/aqB/esvUwHwYDVR0j BBgwFoAUxVTokcWDziq/LbXe6CH2tjC/9d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZDdjN2FjMi01YTliLTQ5MmEtYTRjNS0xZjEzNTkwZGFlMDYvMC9DNTU0RTg5MUM1 ODNDRTJBQkYyREI1REVFODIxRjZCNjMwQkZGNURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYzMEJG RjVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Q3YzdhYzItNWE5Yi00OTJhLWE0 YzUtMWYxMzU5MGRhZTA2LzAvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2 QjYzMEJGRjVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6obyZvExGgLuT2giN4AtyZYOPStY9VzTPZ qvCKZ7pXJMtdJnNuYu7qwD2+JbDfPE191TaQ4GpNLP4YcqyXgHFB9xfhmGMU86VI xR47li+LVKWLfgJ+//C1LKn5xOXhuhFplFoRPs/Ad38jCFby7R1UIoy3E9xdoBj/ zu62pDl/lMzzxZO4pEzFZKLlGw3wunTKbXE8scb4WNnVqhEQLbwdDCPLkA+irjeE +juXgnBH3VEKDclDxMGsiwrqEz7x72LnOOvgQAJs0t+d+eaJwzlMOwZcJ6RZuNii Y35BLihB0APA2zqphqBZjGl4miyNROPHudC/9Q3lfC5N3+TvUSM= -----END CERTIFICATE-----Generated at Mon Jun 16 01:28:32 2025 by rpki-client