$ rpki-client -vvf repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft File: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft (raw, json) Hash identifier: +VPZue0RChcZLGe6qPiibYiHzobtjyD9XK0ndmF2IPs= Subject key identifier: 4D:B5:F7:06:7C:91:CB:46:08:8D:14:DA:0A:4A:CC:8A:7A:F4:47:85 Authority key identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 Certificate issuer: /CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Certificate serial: 52881AA83F7D12D95256F0DC33C5BA33195F0DC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft Manifest number: 0501 Signing time: Fri 05 Sep 2025 02:50:42 +0000 Manifest this update: Fri 05 Sep 2025 02:45:42 +0000 Manifest next update: Mon 08 Sep 2025 06:24:42 +0000 Files and hashes: 1: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl (hash: 55gFpS3ru+1mP+/Datwk6EwJOfUSAmEVeUiYvnPOZpY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 06:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:88:1a:a8:3f:7d:12:d9:52:56:f0:dc:33:c5:ba:33:19:5f:0d:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Validity Not Before: Sep 5 02:45:42 2025 GMT Not After : Sep 8 06:24:42 2025 GMT Subject: CN=4DB5F7067C91CB46088D14DA0A4ACC8A7AF44785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:11:9d:db:0e:52:b1:9d:91:32:a8:ef:cf:f7: 29:bd:5b:20:7e:c7:db:ab:b2:fe:5a:5a:a2:cc:9c: e4:e5:33:c9:7e:f0:13:03:69:04:1c:e3:03:4e:68: 37:f0:90:1d:e9:6f:e1:4c:2f:b1:aa:74:8c:a6:21: 45:19:9a:4f:ae:6d:0c:93:29:22:85:e5:45:cb:b0: d5:5b:31:97:49:84:a4:d4:58:ae:b3:ea:f5:ab:42: f3:7f:b2:69:6a:91:62:23:b1:1e:d5:8d:4e:b2:0c: 5b:82:a1:7b:a8:83:96:d8:ca:96:2a:b9:02:ba:49: c4:56:8b:9c:69:b2:a9:70:61:00:48:d2:e8:20:75: bf:46:57:58:67:8f:65:df:5c:a2:02:f8:de:4c:54: af:9b:48:3b:a9:30:71:b9:75:5f:ff:28:a5:ae:02: 89:0d:c9:44:73:e0:db:8a:2b:d7:37:c9:d4:1e:52: 52:2b:6f:1c:3b:a7:1d:5e:0f:9c:1f:39:01:d5:7b: f2:c7:97:61:da:08:94:7c:16:91:d9:68:40:df:f9: 65:65:f6:cc:56:69:8b:3b:3f:2e:a1:6e:9d:be:de: 5d:e6:53:3a:a5:4b:41:2d:b8:de:3c:77:3e:ca:23: 5e:aa:09:dd:2b:7f:e2:52:9c:a0:2a:cb:be:7b:e3: 6b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B5:F7:06:7C:91:CB:46:08:8D:14:DA:0A:4A:CC:8A:7A:F4:47:85 X509v3 Authority Key Identifier: keyid:5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:38:6f:85:71:7c:b5:b3:30:b0:fc:34:31:e0:be:fa:6c:4a: c2:11:40:82:da:8a:09:06:f1:2b:d2:87:e9:4b:d8:22:3b:17: 67:bd:f2:55:48:ee:77:2b:82:7d:2f:d2:65:d5:48:e5:dc:82: 10:12:1e:04:19:af:e8:23:e8:2e:c0:2f:9e:db:99:84:34:96: 42:55:b6:6f:cc:56:0a:40:e2:72:1e:0c:9b:89:70:95:da:29: 4a:76:33:20:31:e7:19:ef:67:f2:9c:7e:30:26:3a:b8:c6:7b: 99:5b:eb:14:3c:6a:9e:2a:9b:23:c2:b5:51:c4:bd:52:f3:b9: 98:10:59:8b:fc:34:60:05:de:6d:25:11:b7:87:92:0b:a3:d2: be:f0:3e:78:73:06:cf:eb:7c:35:46:ac:3c:9f:ce:9a:ab:70: 2e:c9:f3:83:f0:23:41:81:90:8c:a8:12:27:90:ee:0a:67:f5: 8b:4e:38:2b:4d:ae:91:61:46:ac:92:5e:4c:98:2e:51:6b:c6: 86:dd:09:d1:b0:30:0c:99:63:b3:57:d6:41:23:ca:11:56:fb: e7:ea:69:09:4a:a5:c5:90:77:08:21:38:b9:3f:bd:e3:b7:0b: c7:1c:d0:fd:e3:b1:ac:e5:42:28:f8:ed:02:3d:de:a3:99:3e: e4:dc:45:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUogaqD99EtlSVvDcM8W6MxlfDcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OURE MEM3OTk0ODAeFw0yNTA5MDUwMjQ1NDJaFw0yNTA5MDgwNjI0NDJaMDMxMTAvBgNV BAMTKDREQjVGNzA2N0M5MUNCNDYwODhEMTREQTBBNEFDQzhBN0FGNDQ3ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnEZ3bDlKxnZEyqO/P9ym9WyB+ x9ursv5aWqLMnOTlM8l+8BMDaQQc4wNOaDfwkB3pb+FML7GqdIymIUUZmk+ubQyT KSKF5UXLsNVbMZdJhKTUWK6z6vWrQvN/smlqkWIjsR7VjU6yDFuCoXuog5bYypYq uQK6ScRWi5xpsqlwYQBI0uggdb9GV1hnj2XfXKIC+N5MVK+bSDupMHG5dV//KKWu AokNyURz4NuKK9c3ydQeUlIrbxw7px1eD5wfOQHVe/LHl2HaCJR8FpHZaEDf+WVl 9sxWaYs7Py6hbp2+3l3mUzqlS0EtuN48dz7KI16qCd0rf+JSnKAqy75742vFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTbX3BnyRy0YIjRTaCkrMinr0R4UwHwYDVR0j BBgwFoAUWxIhA9PBxzCuzlmn7SinndDHmUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTcyZWVmOS1lYzZhLTQ1NTgtODE4MS1hMTFmZTY1YjhmZjgvMC81QjEyMjEwM0Qz QzFDNzMwQUVDRTU5QTdFRDI4QTc5REQwQzc5OTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OUREMEM3 OTk0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjE3MmVlZjktZWM2YS00NTU4LTgx ODEtYTExZmU2NWI4ZmY4LzAvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3 OUREMEM3OTk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKE4b4VxfLWzMLD8NDHgvvpsSsIRQILaigkG 8SvSh+lL2CI7F2e98lVI7ncrgn0v0mXVSOXcghASHgQZr+gj6C7AL57bmYQ0lkJV tm/MVgpA4nIeDJuJcJXaKUp2MyAx5xnvZ/KcfjAmOrjGe5lb6xQ8ap4qmyPCtVHE vVLzuZgQWYv8NGAF3m0lEbeHkguj0r7wPnhzBs/rfDVGrDyfzpqrcC7J84PwI0GB kIyoEieQ7gpn9YtOOCtNrpFhRqySXkyYLlFrxobdCdGwMAyZY7NX1kEjyhFW++fq aQlKpcWQdwghOLk/veO3C8cc0P3jsazlQij47QI93qOZPuTcRRc= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:11 2025 by rpki-client