$ rpki-client -vvf repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft File: 53576544C2D7C29DEC5245A4A81C19686D1160AA.mft (raw, json) Hash identifier: z1hlzzKIPTGEJJzIvTO9MoGj4l/9SNpU8O45b8IxdOM= Subject key identifier: 47:69:07:99:DC:01:60:29:F4:93:53:21:41:2F:1A:60:6D:FF:C6:A4 Authority key identifier: 53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA Certificate issuer: /CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Certificate serial: 5E9997684861F44DDEAD835F50E896EB73A12910 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft Manifest number: 011B Signing time: Fri 06 Jun 2025 16:10:40 +0000 Manifest this update: Fri 06 Jun 2025 16:05:40 +0000 Manifest next update: Mon 09 Jun 2025 20:47:40 +0000 Files and hashes: 1: 53576544C2D7C29DEC5245A4A81C19686D1160AA.crl (hash: RQYT3+eIkrqkhRjAQGIO252Qi9uCyAqBsUHP0T13yqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:99:97:68:48:61:f4:4d:de:ad:83:5f:50:e8:96:eb:73:a1:29:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Validity Not Before: Jun 6 16:05:40 2025 GMT Not After : Jun 9 20:47:40 2025 GMT Subject: CN=47690799DC016029F4935321412F1A606DFFC6A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5c:68:8c:d6:08:0c:0d:dc:8c:8b:d0:14:02: 6d:c6:45:71:7a:a8:73:9b:c8:f9:36:6f:1a:da:32: d3:d4:4d:f8:ab:50:be:a0:74:0d:db:3e:48:ab:26: 74:5e:be:61:0f:d7:c0:a3:0f:58:3c:ec:e3:2d:17: b6:da:71:df:91:13:f5:d4:b5:17:d1:1b:0b:64:7f: 78:29:5b:f1:f3:b8:36:a8:33:b0:aa:23:5e:fa:90: f6:53:eb:f1:c2:a0:0d:2c:cb:60:32:43:a4:00:16: 91:d8:28:d3:a8:67:05:39:a7:38:44:cd:84:1d:de: b3:16:bb:ea:1d:86:c4:19:27:82:09:14:f3:d8:ec: 0f:7f:c5:43:4b:5c:a8:c1:6e:75:2b:2d:ff:fe:7d: 7b:7e:0f:44:4c:f5:7e:01:c1:1e:a3:31:1a:f5:7a: b7:89:ec:04:9f:f0:cf:80:38:1d:42:d0:be:cb:28: 21:02:40:31:82:7a:79:62:2e:2d:0b:39:02:8b:99: 14:cf:79:50:01:73:93:79:7a:06:18:26:76:be:73: 0d:4e:9c:74:42:41:64:b7:ca:93:4e:8e:73:a8:2a: b4:af:03:2a:df:32:5d:ab:b0:21:a6:6d:91:76:78: fc:ab:94:3e:df:dc:65:f3:18:f3:f8:84:37:b2:5a: 02:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:69:07:99:DC:01:60:29:F4:93:53:21:41:2F:1A:60:6D:FF:C6:A4 X509v3 Authority Key Identifier: keyid:53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:5f:24:c7:34:b6:42:a8:63:e7:71:24:c2:11:79:9c:f1:64: 35:5e:af:62:de:c8:45:7b:f4:b2:4e:8f:ce:59:c2:f3:8e:5e: 69:96:6a:4f:14:82:86:4e:80:c2:4b:d9:6e:4b:3c:f7:65:61: f2:e6:1b:c6:02:17:ae:04:53:e8:0d:09:17:e9:f4:da:e8:e8: 0c:41:06:a7:eb:2d:b6:aa:ae:b4:13:d9:eb:17:e0:36:b1:30: d3:a0:f4:cc:db:54:7d:ce:98:62:4c:78:05:a9:9d:a8:7d:98: 55:b4:72:b2:a5:1a:c1:c2:85:02:7a:31:52:6b:51:89:62:2f: b1:e3:4a:6d:19:75:ed:a3:b7:9c:2e:73:cd:ea:99:98:1f:7c: a1:0a:53:92:61:ea:4f:e4:cb:16:1e:d0:a0:d4:fc:20:db:fd: 2f:99:cf:42:19:d1:07:2c:be:1b:e1:e5:3d:36:19:19:7e:8d: 5f:28:5f:4e:af:b4:a7:f7:63:2a:0a:3d:02:cd:23:2c:7b:bb: da:5b:92:3e:51:30:69:61:e3:28:e7:a9:cc:86:a3:74:5d:8d: 8f:bc:e9:e5:37:85:8b:74:9f:77:11:07:5c:d6:f9:d8:9a:7a: eb:b4:91:c6:6e:66:30:5d:7a:48:4e:e4:c0:f3:66:d9:1c:11: 3d:80:54:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXpmXaEhh9E3erYNfUOiW63OhKRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2 RDExNjBBQTAeFw0yNTA2MDYxNjA1NDBaFw0yNTA2MDkyMDQ3NDBaMDMxMTAvBgNV BAMTKDQ3NjkwNzk5REMwMTYwMjlGNDkzNTMyMTQxMkYxQTYwNkRGRkM2QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4XGiM1ggMDdyMi9AUAm3GRXF6 qHObyPk2bxraMtPUTfirUL6gdA3bPkirJnRevmEP18CjD1g87OMtF7bacd+RE/XU tRfRGwtkf3gpW/HzuDaoM7CqI176kPZT6/HCoA0sy2AyQ6QAFpHYKNOoZwU5pzhE zYQd3rMWu+odhsQZJ4IJFPPY7A9/xUNLXKjBbnUrLf/+fXt+D0RM9X4BwR6jMRr1 ereJ7ASf8M+AOB1C0L7LKCECQDGCenliLi0LOQKLmRTPeVABc5N5egYYJna+cw1O nHRCQWS3ypNOjnOoKrSvAyrfMl2rsCGmbZF2ePyrlD7f3GXzGPP4hDeyWgLRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR2kHmdwBYCn0k1MhQS8aYG3/xqQwHwYDVR0j BBgwFoAUU1dlRMLXwp3sUkWkqBwZaG0RYKowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTdlYTBlNi00M2VhLTQzMWUtYTAxMy0wYjIwMWIyYzBkOWUvMC81MzU3NjU0NEMy RDdDMjlERUM1MjQ1QTRBODFDMTk2ODZEMTE2MEFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2RDEx NjBBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3ZWEwZTYtNDNlYS00MzFlLWEw MTMtMGIyMDFiMmMwZDllLzAvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5 Njg2RDExNjBBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZfJMc0tkKoY+dxJMIReZzxZDVer2LeyEV7 9LJOj85ZwvOOXmmWak8UgoZOgMJL2W5LPPdlYfLmG8YCF64EU+gNCRfp9Nro6AxB BqfrLbaqrrQT2esX4DaxMNOg9MzbVH3OmGJMeAWpnah9mFW0crKlGsHChQJ6MVJr UYliL7HjSm0Zde2jt5wuc83qmZgffKEKU5Jh6k/kyxYe0KDU/CDb/S+Zz0IZ0Qcs vhvh5T02GRl+jV8oX06vtKf3YyoKPQLNIyx7u9pbkj5RMGlh4yjnqcyGo3RdjY+8 6eU3hYt0n3cRB1zW+diaeuu0kcZuZjBdekhO5MDzZtkcET2AVEg= -----END CERTIFICATE-----Generated at Sun Jun 8 07:21:18 2025 by rpki-client