$ rpki-client -vvf repo-rpki.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/55E6BB135AC9BBBAE2176BD965557D56603814B9.mft File: 55E6BB135AC9BBBAE2176BD965557D56603814B9.mft (raw, json) Hash identifier: 2IrEfmpHGaZL1Lo2ABxo58CtaSIDK3YXRr1NL/Yio1s= Subject key identifier: F9:F9:3B:FB:93:DD:38:B0:81:C1:00:B0:F4:31:D7:6F:C3:40:9D:E1 Authority key identifier: 55:E6:BB:13:5A:C9:BB:BA:E2:17:6B:D9:65:55:7D:56:60:38:14:B9 Certificate issuer: /CN=55E6BB135AC9BBBAE2176BD965557D56603814B9 Certificate serial: 11CB68E5002AC9E362C4BBC508B9AF3A7D1F7629 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55E6BB135AC9BBBAE2176BD965557D56603814B9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/55E6BB135AC9BBBAE2176BD965557D56603814B9.mft Manifest number: 0201 Signing time: Sat 05 Apr 2025 19:11:28 +0000 Manifest this update: Sat 05 Apr 2025 19:06:28 +0000 Manifest next update: Tue 08 Apr 2025 20:32:28 +0000 Files and hashes: 1: 55E6BB135AC9BBBAE2176BD965557D56603814B9.crl (hash: eTYhaoNnId6Jz1/f9OLQK64rakSpag2vzHAGqegrNUo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/55E6BB135AC9BBBAE2176BD965557D56603814B9.crl rsync://repo-rpki.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/55E6BB135AC9BBBAE2176BD965557D56603814B9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55E6BB135AC9BBBAE2176BD965557D56603814B9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 20:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:cb:68:e5:00:2a:c9:e3:62:c4:bb:c5:08:b9:af:3a:7d:1f:76:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55E6BB135AC9BBBAE2176BD965557D56603814B9 Validity Not Before: Apr 5 19:06:28 2025 GMT Not After : Apr 8 20:32:28 2025 GMT Subject: CN=F9F93BFB93DD38B081C100B0F431D76FC3409DE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f6:3a:54:26:c8:81:1c:49:e7:1e:12:e2:75: 1d:ab:8a:20:05:d9:54:51:97:d0:0c:e2:6a:e9:2f: 4f:ac:5e:56:11:8d:e3:12:68:13:cb:45:9e:9a:c2: 5b:ef:b2:06:0d:16:ac:12:e9:b6:07:02:f7:fd:0b: d5:ce:71:88:1e:3f:f6:1a:8c:1c:67:ee:d1:09:a6: fd:f9:89:90:cf:c3:68:d3:be:5d:a0:cf:a3:64:b1: 26:1e:da:62:ec:b0:98:42:1f:d1:84:bc:16:57:49: f6:5d:e2:2d:f2:d9:51:bd:cd:9e:37:9b:b1:c5:9d: 2a:6d:1a:6d:7b:35:e8:63:2b:90:70:fb:67:7f:dc: bc:ee:8d:d3:32:23:54:e7:99:a6:7b:82:63:dc:17: 77:60:32:dc:99:ac:ac:2f:fe:c6:57:48:97:a9:8b: af:e7:65:d5:c3:ee:06:9e:0c:8f:e3:dd:36:2a:01: 8a:7c:4f:25:18:3d:59:04:36:95:8d:aa:92:8b:0a: b0:93:49:90:f0:f3:5a:1d:ca:f5:37:82:61:af:59: 05:cd:da:a6:c7:b0:14:a1:39:0c:ea:dc:50:7b:ff: ad:2f:04:ad:45:93:74:04:72:34:c3:6f:74:63:3e: b5:98:56:95:11:4d:60:ee:cd:fe:ac:d4:b9:e7:d0: 61:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F9:3B:FB:93:DD:38:B0:81:C1:00:B0:F4:31:D7:6F:C3:40:9D:E1 X509v3 Authority Key Identifier: keyid:55:E6:BB:13:5A:C9:BB:BA:E2:17:6B:D9:65:55:7D:56:60:38:14:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/55E6BB135AC9BBBAE2176BD965557D56603814B9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55E6BB135AC9BBBAE2176BD965557D56603814B9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/55E6BB135AC9BBBAE2176BD965557D56603814B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:f3:84:7b:1e:aa:78:1c:7c:06:85:cd:46:e4:33:81:f0:32: 49:3d:c6:5d:b4:df:89:bd:d4:61:9c:8f:9e:0d:d0:83:ee:f6: a3:bf:c3:fd:9d:44:d7:e5:59:1a:67:b1:d2:77:35:f2:a4:c2: b5:23:32:6a:da:f3:f0:8b:bc:de:05:2b:0b:a3:d4:2c:a7:11: 78:61:39:77:3f:79:ca:59:b1:c9:7d:1a:74:55:d9:d4:c8:a6: 83:73:f3:60:55:43:df:e5:d7:1f:3a:9c:9c:e2:8b:fd:a9:04: b9:d6:db:c0:cd:0f:c3:b4:7f:d5:ef:03:ad:67:a2:4d:4a:55: 82:1f:91:b7:ae:dd:51:e2:85:9e:4a:74:d6:6b:5f:97:9e:d5: 1b:06:ab:4a:ce:34:1d:3b:a1:cb:c8:c0:46:a1:7e:48:ad:81: 86:7d:66:f9:9b:f6:c9:fd:e3:91:4a:d4:df:74:a9:18:94:92: 36:b6:3b:5f:6b:34:de:a3:af:b3:30:53:ee:c3:42:5d:ec:a1: 58:d8:e8:4b:50:64:a1:81:53:c5:ee:8d:e7:4a:5b:83:e3:f2: fa:bf:4e:d3:43:7c:42:8e:5f:3d:ef:91:cb:fe:b2:d4:09:1c: 29:63:4a:96:46:91:30:62:85:f5:49:79:dd:18:a9:7e:fa:69: 44:ca:10:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEcto5QAqyeNixLvFCLmvOn0fdikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVFNkJCMTM1QUM5QkJCQUUyMTc2QkQ5NjU1NTdENTY2 MDM4MTRCOTAeFw0yNTA0MDUxOTA2MjhaFw0yNTA0MDgyMDMyMjhaMDMxMTAvBgNV BAMTKEY5RjkzQkZCOTNERDM4QjA4MUMxMDBCMEY0MzFENzZGQzM0MDlERTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq9jpUJsiBHEnnHhLidR2riiAF 2VRRl9AM4mrpL0+sXlYRjeMSaBPLRZ6awlvvsgYNFqwS6bYHAvf9C9XOcYgeP/Ya jBxn7tEJpv35iZDPw2jTvl2gz6NksSYe2mLssJhCH9GEvBZXSfZd4i3y2VG9zZ43 m7HFnSptGm17NehjK5Bw+2d/3LzujdMyI1TnmaZ7gmPcF3dgMtyZrKwv/sZXSJep i6/nZdXD7gaeDI/j3TYqAYp8TyUYPVkENpWNqpKLCrCTSZDw81odyvU3gmGvWQXN 2qbHsBShOQzq3FB7/60vBK1Fk3QEcjTDb3RjPrWYVpURTWDuzf6s1Lnn0GFJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+fk7+5PdOLCBwQCw9DHXb8NAneEwHwYDVR0j BBgwFoAUVea7E1rJu7riF2vZZVV9VmA4FLkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTQ0YTcyNi03MDdjLTQ5ZTItYmZjZS05YjVlZWYxZWVkNGUvMC81NUU2QkIxMzVB QzlCQkJBRTIxNzZCRDk2NTU1N0Q1NjYwMzgxNEI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTVFNkJCMTM1QUM5QkJCQUUyMTc2QkQ5NjU1NTdENTY2MDM4 MTRCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU0NGE3MjYtNzA3Yy00OWUyLWJm Y2UtOWI1ZWVmMWVlZDRlLzAvNTVFNkJCMTM1QUM5QkJCQUUyMTc2QkQ5NjU1NTdE NTY2MDM4MTRCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjzhHseqngcfAaFzUbkM4HwMkk9xl2034m9 1GGcj54N0IPu9qO/w/2dRNflWRpnsdJ3NfKkwrUjMmra8/CLvN4FKwuj1CynEXhh OXc/ecpZscl9GnRV2dTIpoNz82BVQ9/l1x86nJzii/2pBLnW28DND8O0f9XvA61n ok1KVYIfkbeu3VHihZ5KdNZrX5ee1RsGq0rONB07ocvIwEahfkitgYZ9Zvmb9sn9 45FK1N90qRiUkja2O19rNN6jr7MwU+7DQl3soVjY6EtQZKGBU8XujedKW4Pj8vq/ TtNDfEKOXz3vkcv+stQJHCljSpZGkTBihfVJed0YqX76aUTKEGw= -----END CERTIFICATE-----Generated at Sun Apr 6 04:48:15 2025 by rpki-client