$ rpki-client -vvf repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft File: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft (raw, json) Hash identifier: aoEZ5v+UWlHyMvAfwh0lKfxlLD05qjdVP/RnjgURDvQ= Subject key identifier: 04:76:A1:AF:18:A9:35:47:37:92:75:2B:2E:67:77:5C:7F:5F:FB:34 Authority key identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 Certificate issuer: /CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Certificate serial: 4D2D2B9857C7668F3E64815F98775D7894A12AA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft Manifest number: 04D7 Signing time: Sun 01 Jun 2025 15:50:41 +0000 Manifest this update: Sun 01 Jun 2025 15:45:41 +0000 Manifest next update: Wed 04 Jun 2025 21:09:41 +0000 Files and hashes: 1: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl (hash: zoOM8HgRcEOGBlM1BCIM7yaBqMpJfwn+TElYaZKfKoI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 21:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:2d:2b:98:57:c7:66:8f:3e:64:81:5f:98:77:5d:78:94:a1:2a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Validity Not Before: Jun 1 15:45:41 2025 GMT Not After : Jun 4 21:09:41 2025 GMT Subject: CN=0476A1AF18A935473792752B2E67775C7F5FFB34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:1d:be:28:62:df:a3:60:86:62:88:af:75: 7f:85:6a:12:e8:6f:41:6e:99:b9:d3:07:3a:31:73: 42:56:7a:2f:68:ce:38:cb:00:94:6d:b5:f6:db:7e: 27:b9:cd:6d:37:77:d5:0a:1b:23:2d:5d:e9:1b:5a: 62:71:29:a1:67:de:1f:7f:d4:8e:73:36:c0:c3:db: 7f:57:fe:dc:ed:cf:01:15:ab:2a:9d:c4:ed:2f:11: 4b:50:64:2c:40:91:59:42:a2:a9:b0:ba:ba:35:93: d7:9d:c4:82:db:ec:0b:92:0a:79:56:c2:64:54:fd: 6c:b6:ca:89:ec:00:05:ed:78:c7:d9:62:6b:60:98: ff:cf:81:86:42:a0:47:9a:da:0b:5c:cf:f5:d9:4f: 77:55:07:d9:5f:31:dd:77:78:2b:15:f0:98:be:5f: be:75:c6:f8:35:26:0b:93:dc:90:6a:21:9f:40:28: 9f:18:17:09:bf:b0:c1:1b:df:16:51:b3:42:25:63: 5d:2e:3f:f9:0c:6a:30:a2:92:98:d3:29:3f:3f:8e: 20:55:f6:21:27:8e:0d:32:d9:47:86:9b:07:85:c7: 9e:12:06:85:f3:86:f5:aa:4d:16:ea:cf:5b:b5:49: 52:0f:95:18:ec:dc:25:bc:8d:ea:b1:e1:1b:75:ee: 86:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:76:A1:AF:18:A9:35:47:37:92:75:2B:2E:67:77:5C:7F:5F:FB:34 X509v3 Authority Key Identifier: keyid:5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d3:5b:19:a8:8c:b3:64:4a:ec:58:66:76:f0:c8:fb:77:6e: 8e:3f:ed:8d:f2:2f:e8:a4:c1:b9:0a:46:ce:7f:a9:97:66:fd: 7e:b1:0f:76:22:b9:bb:ce:b6:35:5f:c3:7e:32:db:77:1f:18: 3f:7f:20:b6:da:a2:4a:2a:4a:1e:a3:0d:70:b6:53:4a:82:16: ec:7f:8d:fb:f8:fb:d0:29:75:28:4b:db:7d:9d:d6:30:36:a9: 91:70:0c:b0:b1:fd:a9:d1:d5:d0:6f:d0:e1:d6:8c:43:f4:98: 44:f0:39:96:ad:c6:b2:fb:c9:b8:de:eb:da:92:9d:48:37:03: 1c:1d:2c:0f:ea:d5:de:d2:6f:39:de:ed:13:92:1e:6f:cf:dc: 0e:ad:14:93:c3:b6:16:5d:99:56:29:d8:45:9f:a4:12:b7:45: 3d:d8:81:e6:25:ef:11:15:e2:3a:c2:7a:1e:d6:f3:b2:6b:f3: 1a:57:51:a6:c8:88:dc:59:f2:72:83:3d:ab:08:87:4b:89:da: 27:8a:fb:bd:1f:a4:b4:66:51:f5:c9:0b:b5:e4:33:9c:ff:7a: f2:ab:34:6d:8b:9b:5d:25:cf:fd:97:e1:88:a6:9f:ec:7d:94: bb:da:71:a4:cb:9c:38:0c:d5:21:50:01:fc:e8:31:01:54:93: 47:95:cc:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTS0rmFfHZo8+ZIFfmHddeJShKqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OURE MEM3OTk0ODAeFw0yNTA2MDExNTQ1NDFaFw0yNTA2MDQyMTA5NDFaMDMxMTAvBgNV BAMTKDA0NzZBMUFGMThBOTM1NDczNzkyNzUyQjJFNjc3NzVDN0Y1RkZCMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4iB2+KGLfo2CGYoivdX+FahLo b0FumbnTBzoxc0JWei9ozjjLAJRttfbbfie5zW03d9UKGyMtXekbWmJxKaFn3h9/ 1I5zNsDD239X/tztzwEVqyqdxO0vEUtQZCxAkVlCoqmwuro1k9edxILb7AuSCnlW wmRU/Wy2yonsAAXteMfZYmtgmP/PgYZCoEea2gtcz/XZT3dVB9lfMd13eCsV8Ji+ X751xvg1JguT3JBqIZ9AKJ8YFwm/sMEb3xZRs0IlY10uP/kMajCikpjTKT8/jiBV 9iEnjg0y2UeGmweFx54SBoXzhvWqTRbqz1u1SVIPlRjs3CW8jeqx4Rt17oZnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBHahrxipNUc3knUrLmd3XH9f+zQwHwYDVR0j BBgwFoAUWxIhA9PBxzCuzlmn7SinndDHmUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTcyZWVmOS1lYzZhLTQ1NTgtODE4MS1hMTFmZTY1YjhmZjgvMC81QjEyMjEwM0Qz QzFDNzMwQUVDRTU5QTdFRDI4QTc5REQwQzc5OTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OUREMEM3 OTk0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjE3MmVlZjktZWM2YS00NTU4LTgx ODEtYTExZmU2NWI4ZmY4LzAvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3 OUREMEM3OTk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzTWxmojLNkSuxYZnbwyPt3bo4/7Y3yL+ik wbkKRs5/qZdm/X6xD3YiubvOtjVfw34y23cfGD9/ILbaokoqSh6jDXC2U0qCFux/ jfv4+9ApdShL232d1jA2qZFwDLCx/anR1dBv0OHWjEP0mETwOZatxrL7ybje69qS nUg3AxwdLA/q1d7Sbzne7ROSHm/P3A6tFJPDthZdmVYp2EWfpBK3RT3YgeYl7xEV 4jrCeh7W87Jr8xpXUabIiNxZ8nKDPasIh0uJ2ieK+70fpLRmUfXJC7XkM5z/evKr NG2Lm10lz/2X4Yimn+x9lLvacaTLnDgM1SFQAfzoMQFUk0eVzGE= -----END CERTIFICATE-----Generated at Tue Jun 3 23:29:05 2025 by rpki-client