$ rpki-client -vvf repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft File: 5561020450CCF35D395065D493AABB1C3F275482.mft (raw, json) Hash identifier: MyqXLUeI4CRaaQfs+OE5sgvlpxckxRdCLP0W1FAFLp4= Subject key identifier: 73:11:58:3B:F8:DA:C2:E9:AD:82:F9:3E:21:7C:D1:5E:AF:99:FA:52 Authority key identifier: 55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 Certificate issuer: /CN=5561020450CCF35D395065D493AABB1C3F275482 Certificate serial: 3EE6708B957A6C072BC0F989A859E1332A3BCF4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject info access: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft Manifest number: 01ED Signing time: Sun 08 Jun 2025 00:51:56 +0000 Manifest this update: Sun 08 Jun 2025 00:46:56 +0000 Manifest next update: Wed 11 Jun 2025 02:55:56 +0000 Files and hashes: 1: 5561020450CCF35D395065D493AABB1C3F275482.crl (hash: 0GesXFnMQtw5wBynU50CQfHyjo1JrEv6XyRQxDpOyyA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e6:70:8b:95:7a:6c:07:2b:c0:f9:89:a8:59:e1:33:2a:3b:cf:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5561020450CCF35D395065D493AABB1C3F275482 Validity Not Before: Jun 8 00:46:56 2025 GMT Not After : Jun 11 02:55:56 2025 GMT Subject: CN=7311583BF8DAC2E9AD82F93E217CD15EAF99FA52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fb:c6:7c:ca:eb:0a:c8:17:e7:aa:92:c2:1e: f8:bf:e9:b7:45:d9:33:25:17:c9:03:27:d8:68:2c: f4:8e:2d:2e:33:80:e8:bf:af:d0:40:c1:86:ab:e5: 52:05:44:9d:88:04:b8:2f:21:b3:11:c9:e7:c5:31: a1:c1:31:88:af:02:8e:af:7f:07:92:fd:19:67:41: 57:26:ab:de:67:39:3a:9e:38:dc:bd:81:e5:34:f6: 64:31:e7:da:91:7b:d0:81:04:f0:25:27:ca:97:d4: 6b:84:71:f9:a8:75:40:b3:5f:58:34:92:05:8f:23: de:75:6d:b3:a2:c1:a8:95:35:f3:3d:85:4a:e5:b7: ec:5a:cf:1f:46:d2:5b:20:6d:63:d9:08:bd:41:63: 7a:ed:15:10:88:40:d3:ed:22:17:0f:c4:91:4d:ee: 85:9a:41:55:44:d8:e3:09:d9:ff:19:6c:88:4e:75: 64:0e:23:2b:ac:11:16:11:be:8f:da:43:18:fc:6c: 64:2d:7d:25:62:47:52:65:38:d8:2f:a6:9e:8b:4e: 2c:f6:f0:9f:9a:d6:de:57:6b:d9:bc:f0:e1:8b:90: 4c:ef:0d:52:7d:c7:de:bf:84:0b:8e:27:e9:97:fd: 58:dc:3b:f6:78:a7:dc:ab:ef:3e:1f:d7:8a:b3:99: 9f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:11:58:3B:F8:DA:C2:E9:AD:82:F9:3E:21:7C:D1:5E:AF:99:FA:52 X509v3 Authority Key Identifier: keyid:55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:79:27:0f:5c:76:5a:fa:72:b8:24:29:11:95:1d:dc:6e:91: 3b:71:49:ce:d6:06:b0:3e:bd:a0:d4:67:8a:cd:d8:76:99:6a: bd:ea:1f:71:d8:78:d5:c0:64:ed:83:b5:ba:57:42:ef:ed:21: 1c:09:94:4e:70:5b:4c:d8:14:7a:8e:6c:78:4e:9c:aa:35:10: 93:fc:04:97:00:ea:7f:6b:f9:4b:a6:88:62:27:4f:c2:cc:f0: 3f:5c:04:6a:58:73:dd:42:b5:f6:2b:41:72:0d:e3:f3:c4:b5: dd:14:f3:c5:75:e1:1f:4f:88:87:48:f4:0b:88:03:dc:df:a3: f3:5a:19:8f:5c:80:fe:b8:49:3f:11:0e:a4:18:a9:76:6b:21: 83:8f:40:2d:4c:86:e2:b5:c0:d4:74:4a:63:35:f4:7a:f0:71: f8:05:f0:f3:82:6c:4d:32:59:1c:8e:e3:2f:5c:31:74:38:b0: c5:7d:84:dd:2c:57:96:5b:8c:9b:e5:2f:9d:3d:85:f2:b0:9e: 40:35:15:3f:82:b3:bf:e5:90:f6:ca:2f:ca:a5:ab:dd:7b:e0: 8b:63:79:8e:3d:72:a8:38:da:32:b3:83:00:7d:b3:25:1d:84: f9:6a:cf:a6:ad:ff:63:c5:e1:79:31:38:4d:96:a1:83:7e:e5: 75:8e:e3:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPuZwi5V6bAcrwPmJqFnhMyo7z0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMz RjI3NTQ4MjAeFw0yNTA2MDgwMDQ2NTZaFw0yNTA2MTEwMjU1NTZaMDMxMTAvBgNV BAMTKDczMTE1ODNCRjhEQUMyRTlBRDgyRjkzRTIxN0NEMTVFQUY5OUZBNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf+8Z8yusKyBfnqpLCHvi/6bdF 2TMlF8kDJ9hoLPSOLS4zgOi/r9BAwYar5VIFRJ2IBLgvIbMRyefFMaHBMYivAo6v fweS/RlnQVcmq95nOTqeONy9geU09mQx59qRe9CBBPAlJ8qX1GuEcfmodUCzX1g0 kgWPI951bbOiwaiVNfM9hUrlt+xazx9G0lsgbWPZCL1BY3rtFRCIQNPtIhcPxJFN 7oWaQVVE2OMJ2f8ZbIhOdWQOIyusERYRvo/aQxj8bGQtfSViR1JlONgvpp6LTiz2 8J+a1t5Xa9m88OGLkEzvDVJ9x96/hAuOJ+mX/VjcO/Z4p9yr7z4f14qzmZ8bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcxFYO/jawumtgvk+IXzRXq+Z+lIwHwYDVR0j BBgwFoAUVWECBFDM8105UGXUk6q7HD8nVIIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDdkNWJiNi05ZGEwLTRjM2MtOTM5NS0wNjQ1OTZhNGY3ODkvMC81NTYxMDIwNDUw Q0NGMzVEMzk1MDY1RDQ5M0FBQkIxQzNGMjc1NDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMzRjI3 NTQ4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA3ZDViYjYtOWRhMC00YzNjLTkz OTUtMDY0NTk2YTRmNzg5LzAvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJC MUMzRjI3NTQ4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFN5Jw9cdlr6crgkKRGVHdxukTtxSc7WBrA+ vaDUZ4rN2HaZar3qH3HYeNXAZO2DtbpXQu/tIRwJlE5wW0zYFHqObHhOnKo1EJP8 BJcA6n9r+UumiGInT8LM8D9cBGpYc91CtfYrQXIN4/PEtd0U88V14R9PiIdI9AuI A9zfo/NaGY9cgP64ST8RDqQYqXZrIYOPQC1MhuK1wNR0SmM19HrwcfgF8POCbE0y WRyO4y9cMXQ4sMV9hN0sV5ZbjJvlL509hfKwnkA1FT+Cs7/lkPbKL8qlq9174Itj eY49cqg42jKzgwB9syUdhPlqz6at/2PF4XkxOE2WoYN+5XWO4yE= -----END CERTIFICATE-----Generated at Mon Jun 9 03:27:48 2025 by rpki-client