$ rpki-client -vvf repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft File: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft (raw, json) Hash identifier: 1kBkUtOIkBsVH7MLKoRC0x+NHX9Mn8+NxDwbJDa6GzY= Subject key identifier: F3:C0:CC:84:C6:12:BC:82:FF:EA:9A:31:D6:3E:6E:DA:AA:A3:9D:39 Authority key identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 Certificate issuer: /CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Certificate serial: 483BC166D8252D7BF9AF9C7C246C924E2FEE09DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft Manifest number: 04BD Signing time: Fri 04 Apr 2025 09:00:41 +0000 Manifest this update: Fri 04 Apr 2025 08:55:41 +0000 Manifest next update: Mon 07 Apr 2025 14:20:41 +0000 Files and hashes: 1: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl (hash: bSkH1bmS9M2HkBGptkkSdIN1h+jG298OxksW8AJ6xz0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 14:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:3b:c1:66:d8:25:2d:7b:f9:af:9c:7c:24:6c:92:4e:2f:ee:09:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Validity Not Before: Apr 4 08:55:41 2025 GMT Not After : Apr 7 14:20:41 2025 GMT Subject: CN=F3C0CC84C612BC82FFEA9A31D63E6EDAAAA39D39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:3a:62:5a:7d:16:7e:32:46:2b:2d:db:52: b2:ad:35:29:05:85:64:32:0e:7e:dc:0c:db:99:0b: b9:bb:12:1e:02:92:38:26:f1:90:d1:50:f5:80:22: ca:5e:9e:68:72:30:8f:8d:f0:9d:3b:bb:d6:da:17: 11:9d:19:b4:b6:d2:1d:ad:bf:8c:92:44:5f:d8:94: ca:ad:12:b1:4e:42:8b:80:ea:97:c6:a4:10:72:59: f2:22:3f:df:84:ae:35:79:6f:b6:a2:2d:05:e4:20: 34:dd:ab:a8:ad:86:3b:36:9f:58:84:a3:24:58:a9: 7e:84:de:ea:46:29:15:5c:00:dc:b8:b8:4a:20:e2: 14:ef:1d:93:2b:a1:a4:76:4d:e7:fe:1f:d4:72:97: 19:d5:b8:6e:ba:02:89:f8:2a:9c:4f:1c:95:f7:09: 87:5c:79:d2:58:68:51:d8:b8:b0:db:8c:1b:44:4a: 97:70:2a:af:16:94:0a:dd:84:4c:fd:88:11:d3:40: 34:6e:60:a9:6b:75:7b:58:1d:28:89:cf:cc:79:00: 50:6d:ec:09:a1:e4:b6:69:f0:83:25:03:67:a9:f3: 71:49:1a:cc:5b:57:3c:3d:a7:ef:26:10:c6:58:50: f7:5b:93:69:8d:4f:71:1e:43:68:9e:55:83:18:bc: bb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C0:CC:84:C6:12:BC:82:FF:EA:9A:31:D6:3E:6E:DA:AA:A3:9D:39 X509v3 Authority Key Identifier: keyid:5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:aa:25:07:24:be:3e:54:48:3f:2d:82:bd:9c:27:74:93:9e: 30:fb:e4:cc:66:2a:42:5b:dc:39:8c:86:c5:7b:52:59:3b:a3: f4:9d:7c:21:28:cc:79:2d:c2:8a:76:48:51:cb:86:ed:12:56: 71:8f:00:db:37:c0:0b:9a:33:0b:a7:ff:6a:37:6a:72:48:5a: c8:b4:a8:5d:d2:20:9e:8b:55:f4:d4:bf:ff:8b:0b:6d:92:8b: 9f:25:40:44:00:c7:e2:72:b8:5b:bd:e8:d4:60:a7:c7:8c:f9: 04:fa:ac:5a:bf:de:b9:9b:39:e2:d2:07:00:9c:6f:d7:c6:59: 83:38:53:d9:5f:f4:98:57:cc:a6:b5:9b:e6:ef:43:de:8d:6e: b1:1b:78:77:73:4e:f7:84:22:90:4a:50:34:ec:47:db:0d:18: 3d:60:74:c6:81:99:31:f6:18:64:d4:d6:2b:1f:51:ac:e2:28: e3:1d:2c:3e:eb:ec:16:58:a4:25:3b:40:b6:a5:ff:9f:16:3d: 59:a5:cc:a4:56:77:a0:2b:ac:bd:da:d8:70:25:3b:b7:16:ad: d6:f2:d7:0e:77:93:26:cd:d9:bc:c8:0b:86:7c:d0:c9:b8:d1: 5c:6c:0b:00:3c:83:c5:e6:36:93:ed:f6:6b:8c:fd:e7:e2:21: fc:6e:af:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSDvBZtglLXv5r5x8JGySTi/uCdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OURE MEM3OTk0ODAeFw0yNTA0MDQwODU1NDFaFw0yNTA0MDcxNDIwNDFaMDMxMTAvBgNV BAMTKEYzQzBDQzg0QzYxMkJDODJGRkVBOUEzMUQ2M0U2RURBQUFBMzlEMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo6DpiWn0WfjJGKy3bUrKtNSkF hWQyDn7cDNuZC7m7Eh4Ckjgm8ZDRUPWAIspenmhyMI+N8J07u9baFxGdGbS20h2t v4ySRF/YlMqtErFOQouA6pfGpBByWfIiP9+ErjV5b7aiLQXkIDTdq6ithjs2n1iE oyRYqX6E3upGKRVcANy4uEog4hTvHZMroaR2Tef+H9RylxnVuG66Aon4KpxPHJX3 CYdcedJYaFHYuLDbjBtESpdwKq8WlArdhEz9iBHTQDRuYKlrdXtYHSiJz8x5AFBt 7Amh5LZp8IMlA2ep83FJGsxbVzw9p+8mEMZYUPdbk2mNT3EeQ2ieVYMYvLtLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU88DMhMYSvIL/6pox1j5u2qqjnTkwHwYDVR0j BBgwFoAUWxIhA9PBxzCuzlmn7SinndDHmUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTcyZWVmOS1lYzZhLTQ1NTgtODE4MS1hMTFmZTY1YjhmZjgvMC81QjEyMjEwM0Qz QzFDNzMwQUVDRTU5QTdFRDI4QTc5REQwQzc5OTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OUREMEM3 OTk0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjE3MmVlZjktZWM2YS00NTU4LTgx ODEtYTExZmU2NWI4ZmY4LzAvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3 OUREMEM3OTk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6qJQckvj5USD8tgr2cJ3STnjD75MxmKkJb 3DmMhsV7Ulk7o/SdfCEozHktwop2SFHLhu0SVnGPANs3wAuaMwun/2o3anJIWsi0 qF3SIJ6LVfTUv/+LC22Si58lQEQAx+JyuFu96NRgp8eM+QT6rFq/3rmbOeLSBwCc b9fGWYM4U9lf9JhXzKa1m+bvQ96NbrEbeHdzTveEIpBKUDTsR9sNGD1gdMaBmTH2 GGTU1isfUaziKOMdLD7r7BZYpCU7QLal/58WPVmlzKRWd6ArrL3a2HAlO7cWrdby 1w53kybN2bzIC4Z80Mm40VxsCwA8g8XmNpPt9muM/efiIfxur7U= -----END CERTIFICATE-----Generated at Sun Apr 6 07:10:11 2025 by rpki-client