$ rpki-client -vvf repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft File: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft (raw, json) Hash identifier: A9/FQ6HloCgb2mwrN4QB1I3SbUlXkmfngXOYJO0JG1Q= Subject key identifier: 12:1F:2B:FF:A8:7D:DA:F1:93:BA:C1:57:B8:E5:BF:29:DD:1D:4B:90 Authority key identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 Certificate issuer: /CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Certificate serial: 2B0D51B01BDF306373D7A1E2FDB77283A5184DFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft Manifest number: 04EC Signing time: Sat 19 Jul 2025 19:20:43 +0000 Manifest this update: Sat 19 Jul 2025 19:15:43 +0000 Manifest next update: Wed 23 Jul 2025 01:53:43 +0000 Files and hashes: 1: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl (hash: EKaoBpP0LGPS/chST/SlITEyi1zfSCRNZibCynvsjs8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 01:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:0d:51:b0:1b:df:30:63:73:d7:a1:e2:fd:b7:72:83:a5:18:4d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Validity Not Before: Jul 19 19:15:43 2025 GMT Not After : Jul 23 01:53:43 2025 GMT Subject: CN=121F2BFFA87DDAF193BAC157B8E5BF29DD1D4B90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a1:3a:18:e1:a5:83:12:a3:74:c6:d0:ca:e5: d0:95:b5:a6:61:aa:25:fe:f9:08:f8:e2:56:88:56: ac:28:15:ff:5f:01:a3:15:7c:92:af:30:2c:44:c8: bb:88:ad:92:31:b5:9c:f2:53:b9:8f:4c:2d:e6:a2: cb:04:50:5d:df:c3:5d:69:a5:9b:d0:73:61:14:ec: b9:d8:74:66:ed:f8:69:30:fb:42:55:d5:a5:bd:cf: fc:8f:dc:f5:7c:52:c9:c3:32:84:3f:58:75:4f:99: 7d:b1:03:89:6a:05:a9:61:c3:89:1d:30:26:e6:35: 95:be:d4:eb:45:b5:2a:de:5d:a7:cc:73:08:86:ca: 96:3e:5e:5b:33:b3:ec:cf:56:19:b4:fe:53:07:0a: c9:04:c0:e0:9d:55:96:ac:62:e8:47:9f:dc:12:51: 40:82:d5:96:ab:79:ea:9b:d5:17:51:a0:13:14:e6: c9:21:ac:16:ae:b8:1e:01:a4:67:f4:e0:e3:36:b6: 1c:39:f2:33:45:5f:bb:b3:bf:83:ac:4d:99:8d:26: c6:86:08:ec:9d:3d:c9:70:f5:f4:6d:e0:73:f1:7b: 95:0f:f0:fa:71:ea:b5:44:13:6c:94:26:e6:73:9c: 97:6d:71:58:47:94:aa:5b:be:1c:f6:5b:69:30:a0: f3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1F:2B:FF:A8:7D:DA:F1:93:BA:C1:57:B8:E5:BF:29:DD:1D:4B:90 X509v3 Authority Key Identifier: keyid:5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:49:64:3a:c5:37:b8:ac:d5:73:43:d1:e5:eb:54:43:f6:53: ee:a6:15:7a:59:2a:54:a1:b9:85:ea:59:3e:94:d0:b5:aa:e3: 2e:ab:d9:ae:66:69:4d:d2:80:fd:55:b8:b6:dc:eb:3f:70:40: 05:26:b8:41:48:6f:dc:dd:05:d5:0c:ef:35:c5:cd:23:e6:b0: f8:97:61:5f:01:bd:4c:7a:78:42:25:1f:b2:e9:25:a9:44:60: ff:13:0d:84:ea:b7:16:5a:00:68:29:c0:4f:eb:32:00:d7:ab: 64:69:ce:1f:ec:cb:18:a4:d1:dc:26:ae:31:f5:0d:6f:14:55: c2:9a:0c:66:71:3c:70:80:bf:de:d1:4c:dc:5d:a4:47:6f:c5: d1:11:d5:46:4b:9c:6a:b0:5a:5e:57:3f:99:9a:c4:46:3f:d8: 6e:b8:12:80:ba:70:59:8b:22:78:7f:fb:a6:5f:1a:ad:b2:d0: 9d:05:b4:63:12:ac:6c:95:37:4d:07:22:be:a5:56:fe:f7:3c: 37:ac:cf:2f:b8:f1:bc:86:0b:61:cb:da:8b:28:f4:34:7c:cd: 3f:e6:35:93:a2:ea:81:59:1d:d0:cc:6d:2f:db:4e:77:53:32: 92:90:c7:22:7e:95:fb:09:38:da:ea:f1:18:ea:ab:50:c4:f3: 99:35:b3:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKw1RsBvfMGNz16Hi/bdyg6UYTf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OURE MEM3OTk0ODAeFw0yNTA3MTkxOTE1NDNaFw0yNTA3MjMwMTUzNDNaMDMxMTAvBgNV BAMTKDEyMUYyQkZGQTg3RERBRjE5M0JBQzE1N0I4RTVCRjI5REQxRDRCOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMoToY4aWDEqN0xtDK5dCVtaZh qiX++Qj44laIVqwoFf9fAaMVfJKvMCxEyLuIrZIxtZzyU7mPTC3mossEUF3fw11p pZvQc2EU7LnYdGbt+Gkw+0JV1aW9z/yP3PV8UsnDMoQ/WHVPmX2xA4lqBalhw4kd MCbmNZW+1OtFtSreXafMcwiGypY+Xlszs+zPVhm0/lMHCskEwOCdVZasYuhHn9wS UUCC1Zareeqb1RdRoBMU5skhrBauuB4BpGf04OM2thw58jNFX7uzv4OsTZmNJsaG COydPclw9fRt4HPxe5UP8Ppx6rVEE2yUJuZznJdtcVhHlKpbvhz2W2kwoPMPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEh8r/6h92vGTusFXuOW/Kd0dS5AwHwYDVR0j BBgwFoAUWxIhA9PBxzCuzlmn7SinndDHmUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTcyZWVmOS1lYzZhLTQ1NTgtODE4MS1hMTFmZTY1YjhmZjgvMC81QjEyMjEwM0Qz QzFDNzMwQUVDRTU5QTdFRDI4QTc5REQwQzc5OTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OUREMEM3 OTk0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjE3MmVlZjktZWM2YS00NTU4LTgx ODEtYTExZmU2NWI4ZmY4LzAvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3 OUREMEM3OTk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1JZDrFN7is1XND0eXrVEP2U+6mFXpZKlSh uYXqWT6U0LWq4y6r2a5maU3SgP1VuLbc6z9wQAUmuEFIb9zdBdUM7zXFzSPmsPiX YV8BvUx6eEIlH7LpJalEYP8TDYTqtxZaAGgpwE/rMgDXq2Rpzh/syxik0dwmrjH1 DW8UVcKaDGZxPHCAv97RTNxdpEdvxdER1UZLnGqwWl5XP5maxEY/2G64EoC6cFmL Inh/+6ZfGq2y0J0FtGMSrGyVN00HIr6lVv73PDeszy+48byGC2HL2oso9DR8zT/m NZOi6oFZHdDMbS/bTndTMpKQxyJ+lfsJONrq8Rjqq1DE85k1syU= -----END CERTIFICATE-----Generated at Mon Jul 21 08:33:43 2025 by rpki-client