$ rpki-client -vvf repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft File: 5561020450CCF35D395065D493AABB1C3F275482.mft (raw, json) Hash identifier: h++nYco5RkmHO2OeQybtkoREi4ONxKKNfvaUs9hwyHg= Subject key identifier: 90:F5:EE:58:C6:BE:14:14:C8:B2:0F:62:7F:0A:16:8C:D6:FA:F9:93 Authority key identifier: 55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 Certificate issuer: /CN=5561020450CCF35D395065D493AABB1C3F275482 Certificate serial: 45A665EE0938B819F1C0870266906177DC815DF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject info access: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft Manifest number: 01D3 Signing time: Wed 09 Apr 2025 12:31:55 +0000 Manifest this update: Wed 09 Apr 2025 12:26:55 +0000 Manifest next update: Sat 12 Apr 2025 19:43:55 +0000 Files and hashes: 1: 5561020450CCF35D395065D493AABB1C3F275482.crl (hash: 2hxA1evqNsrNq8yv7qDhoUUqu3LmVVARJHExhe0ZTrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 19:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:a6:65:ee:09:38:b8:19:f1:c0:87:02:66:90:61:77:dc:81:5d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5561020450CCF35D395065D493AABB1C3F275482 Validity Not Before: Apr 9 12:26:55 2025 GMT Not After : Apr 12 19:43:55 2025 GMT Subject: CN=90F5EE58C6BE1414C8B20F627F0A168CD6FAF993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8f:a2:a0:37:c4:de:0f:d2:2a:dc:a1:74:0d: 80:c3:ab:86:0a:73:ae:7b:08:51:a2:a4:8d:3e:2e: da:fb:a1:ce:a7:70:44:2d:62:57:03:54:98:65:12: bd:62:32:57:8b:ec:a3:89:8b:4d:dc:39:63:4d:79: 47:8f:20:10:40:ec:f2:3e:ab:15:d7:15:5a:0a:de: 65:b7:02:cb:71:2c:f9:7d:aa:96:6b:7a:49:8a:c3: c0:07:e3:47:33:34:ab:8c:51:f3:cb:c1:97:1d:5d: 22:b6:79:77:a2:11:58:cd:c8:97:a0:a5:94:6c:f5: ea:39:ad:72:a2:58:03:18:4b:67:d6:cf:d9:77:f3: 07:34:4c:4d:d5:07:e5:3c:64:33:de:63:c1:92:99: 9c:ea:00:5a:97:b3:1d:0f:07:52:a9:d9:e1:2e:24: d7:d8:1a:79:56:4a:6e:8e:1a:f7:1d:55:98:b3:ea: 69:83:3d:50:6b:04:c0:70:1e:aa:07:00:cc:01:c9: dc:ea:c9:91:e8:8e:20:93:35:37:f3:fb:26:f6:dd: bf:b9:c9:b1:8e:d6:c5:08:13:49:f0:cb:ec:17:9e: ef:9e:5e:2d:81:f6:6b:4a:63:3c:2d:de:b1:5e:2b: 11:ec:ed:7a:52:ff:57:b8:46:23:62:d5:8f:03:b1: 78:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F5:EE:58:C6:BE:14:14:C8:B2:0F:62:7F:0A:16:8C:D6:FA:F9:93 X509v3 Authority Key Identifier: keyid:55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:fe:a1:58:03:68:eb:6a:db:52:75:f7:b3:bb:4c:28:59:15: fd:9e:84:fa:2a:11:77:cc:bf:73:df:e8:33:47:f9:a1:cf:81: 99:2d:18:02:93:fb:47:83:30:fe:df:ab:ec:4d:58:2c:74:83: a7:6d:c3:c4:69:de:bf:26:e5:95:40:24:b3:f2:60:e5:a9:68: d4:e9:1b:76:1f:a3:76:64:7c:2e:e4:59:1a:a6:3e:17:e1:79: 93:6c:fe:e8:31:96:10:fc:d4:01:f6:a5:96:c2:9e:89:31:2a: 02:2b:3a:89:8a:07:be:85:09:b7:10:e6:ce:bd:4b:49:50:94: 31:a0:36:9f:9f:09:e3:70:77:0b:35:cc:aa:f0:fe:97:38:4f: 7b:f7:69:78:d3:a6:90:99:9d:8f:6e:df:94:60:22:35:2a:07: 1f:70:ac:e7:3a:35:a3:65:92:2e:93:3f:36:59:49:54:c6:27: 35:e9:34:7f:dd:53:f3:de:ee:43:cb:e4:4e:77:33:21:55:7c: 8a:46:12:7b:bb:08:bf:38:d3:95:51:32:be:68:20:c7:48:74: 9e:20:8e:e1:24:c3:9c:dc:5f:77:54:90:a8:cb:ea:2c:a6:09: 67:72:99:41:b8:7f:db:d9:b6:74:6a:7e:25:74:a9:06:6a:f0: 28:bf:3a:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURaZl7gk4uBnxwIcCZpBhd9yBXfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMz RjI3NTQ4MjAeFw0yNTA0MDkxMjI2NTVaFw0yNTA0MTIxOTQzNTVaMDMxMTAvBgNV BAMTKDkwRjVFRTU4QzZCRTE0MTRDOEIyMEY2MjdGMEExNjhDRDZGQUY5OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9j6KgN8TeD9Iq3KF0DYDDq4YK c657CFGipI0+Ltr7oc6ncEQtYlcDVJhlEr1iMleL7KOJi03cOWNNeUePIBBA7PI+ qxXXFVoK3mW3AstxLPl9qpZrekmKw8AH40czNKuMUfPLwZcdXSK2eXeiEVjNyJeg pZRs9eo5rXKiWAMYS2fWz9l38wc0TE3VB+U8ZDPeY8GSmZzqAFqXsx0PB1Kp2eEu JNfYGnlWSm6OGvcdVZiz6mmDPVBrBMBwHqoHAMwBydzqyZHojiCTNTfz+yb23b+5 ybGO1sUIE0nwy+wXnu+eXi2B9mtKYzwt3rFeKxHs7XpS/1e4RiNi1Y8DsXiLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkPXuWMa+FBTIsg9ifwoWjNb6+ZMwHwYDVR0j BBgwFoAUVWECBFDM8105UGXUk6q7HD8nVIIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDdkNWJiNi05ZGEwLTRjM2MtOTM5NS0wNjQ1OTZhNGY3ODkvMC81NTYxMDIwNDUw Q0NGMzVEMzk1MDY1RDQ5M0FBQkIxQzNGMjc1NDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMzRjI3 NTQ4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA3ZDViYjYtOWRhMC00YzNjLTkz OTUtMDY0NTk2YTRmNzg5LzAvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJC MUMzRjI3NTQ4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7+oVgDaOtq21J197O7TChZFf2ehPoqEXfM v3Pf6DNH+aHPgZktGAKT+0eDMP7fq+xNWCx0g6dtw8Rp3r8m5ZVAJLPyYOWpaNTp G3Yfo3ZkfC7kWRqmPhfheZNs/ugxlhD81AH2pZbCnokxKgIrOomKB76FCbcQ5s69 S0lQlDGgNp+fCeNwdws1zKrw/pc4T3v3aXjTppCZnY9u35RgIjUqBx9wrOc6NaNl ki6TPzZZSVTGJzXpNH/dU/Pe7kPL5E53MyFVfIpGEnu7CL8405VRMr5oIMdIdJ4g juEkw5zcX3dUkKjL6iymCWdymUG4f9vZtnRqfiV0qQZq8Ci/Ouk= -----END CERTIFICATE-----Generated at Fri Apr 11 06:56:58 2025 by rpki-client