$ rpki-client -vvf repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft File: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft (raw, json) Hash identifier: DICS6qWIydUl8Nq9JPuLMxQaENCaneeherh4DqwOowg= Subject key identifier: 1D:AA:54:53:4F:57:FA:7E:8E:C2:6F:2D:2B:F1:56:9E:CF:B1:A4:E5 Authority key identifier: 55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 Certificate issuer: /CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Certificate serial: 25D248D2738CE4BE9B351C1F158F533D2E834F8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft Manifest number: 01C0 Signing time: Thu 03 Apr 2025 05:01:43 +0000 Manifest this update: Thu 03 Apr 2025 04:56:42 +0000 Manifest next update: Sun 06 Apr 2025 16:45:42 +0000 Files and hashes: 1: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl (hash: Spa3it1s8yE/C/lYgCMkkSfBK+I7YXenIyj1JgBjBDM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 16:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d2:48:d2:73:8c:e4:be:9b:35:1c:1f:15:8f:53:3d:2e:83:4f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Validity Not Before: Apr 3 04:56:42 2025 GMT Not After : Apr 6 16:45:42 2025 GMT Subject: CN=1DAA54534F57FA7E8EC26F2D2BF1569ECFB1A4E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4c:91:63:7f:04:ff:ce:90:c4:02:66:e5:09: 4a:5c:98:ef:fb:3f:7a:85:f0:82:80:f9:be:25:dc: 95:d0:4f:b8:f1:99:51:6c:bf:5f:c0:91:e9:34:55: 85:57:9b:89:7b:04:39:7f:d8:37:c8:1e:2e:dc:cb: a1:05:49:9f:bd:fe:3f:f3:5f:e1:74:6c:c5:fd:82: 38:68:3f:d5:41:8c:cf:12:5d:82:77:2e:c8:ef:ab: 7c:cc:72:1a:a4:40:ee:e0:f5:17:2e:19:a8:dd:a3: db:4b:f3:e2:ff:d8:37:61:17:59:27:96:0c:c4:ad: 04:f6:e6:8b:00:35:3a:16:b4:c8:1a:ce:f3:bb:15: 1f:c0:fe:0e:cd:a2:5d:ce:cc:2b:bb:7c:65:61:b3: 89:3c:39:91:e7:e5:c7:b2:e2:12:1d:ad:28:81:ed: 8a:64:f2:e2:f8:ed:38:d2:27:c5:94:9f:e8:5a:3a: 99:85:a7:28:d1:31:db:4f:b0:62:c1:f1:f6:1b:b4: 5a:2b:82:1a:79:e6:e0:90:cd:f0:8e:6e:41:e0:b4: 4f:4b:a1:03:97:7f:02:94:79:18:71:83:7d:cf:8c: 0e:c6:13:5d:08:e5:da:cf:34:fd:64:31:65:9a:9d: f2:b1:e0:65:c1:82:40:ba:8e:e9:06:d9:0a:54:4d: 74:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AA:54:53:4F:57:FA:7E:8E:C2:6F:2D:2B:F1:56:9E:CF:B1:A4:E5 X509v3 Authority Key Identifier: keyid:55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:90:01:2f:7a:d9:4b:a4:95:9c:0d:06:11:26:f1:ac:0a:46: 48:67:e8:3f:cd:bf:89:87:6f:c3:50:0c:0f:cf:d3:d1:a6:a3: 95:50:16:1f:f1:b6:d6:29:dc:7c:94:36:f6:2e:54:ac:77:0a: 57:99:34:04:c2:6a:ec:72:d1:17:4e:2e:38:11:82:83:f2:20: c2:c4:a4:4f:2c:60:20:48:dd:f8:44:9e:6d:d7:c4:99:53:bf: 94:03:69:12:3b:46:3e:d8:cb:53:9d:28:80:ef:3e:c7:91:4e: 3b:18:cb:1c:04:07:38:9a:f7:89:10:68:14:10:23:0f:2e:03: 7e:56:38:33:cb:61:96:77:c4:06:f8:74:3b:ea:39:97:9a:d4: 73:ef:90:78:0f:c3:9b:05:64:0c:28:ef:82:2b:dd:ef:a5:47: 01:25:92:b7:3a:4c:a3:c0:59:4e:6d:72:c0:7b:a6:c3:15:58: fe:47:3b:80:bf:b3:3b:96:a7:73:3c:25:fd:85:cf:3f:77:87: 3c:6c:5b:5b:19:ee:69:40:53:80:01:d9:fe:8e:e5:8c:ea:1d: 6b:f6:bc:d8:79:2a:1c:56:c9:8c:c3:f1:63:aa:b8:a7:87:1b: 9f:c0:b3:c4:e4:55:cd:67:47:d8:e6:be:e9:8d:57:7b:32:41: d6:cd:7d:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJdJI0nOM5L6bNRwfFY9TPS6DT44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQx QkVDRUYwNDAeFw0yNTA0MDMwNDU2NDJaFw0yNTA0MDYxNjQ1NDJaMDMxMTAvBgNV BAMTKDFEQUE1NDUzNEY1N0ZBN0U4RUMyNkYyRDJCRjE1NjlFQ0ZCMUE0RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJTJFjfwT/zpDEAmblCUpcmO/7 P3qF8IKA+b4l3JXQT7jxmVFsv1/Akek0VYVXm4l7BDl/2DfIHi7cy6EFSZ+9/j/z X+F0bMX9gjhoP9VBjM8SXYJ3Lsjvq3zMchqkQO7g9RcuGajdo9tL8+L/2DdhF1kn lgzErQT25osANToWtMgazvO7FR/A/g7Nol3OzCu7fGVhs4k8OZHn5cey4hIdrSiB 7Ypk8uL47TjSJ8WUn+haOpmFpyjRMdtPsGLB8fYbtForghp55uCQzfCObkHgtE9L oQOXfwKUeRhxg33PjA7GE10I5drPNP1kMWWanfKx4GXBgkC6jukG2QpUTXRhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHapUU09X+n6Owm8tK/FWns+xpOUwHwYDVR0j BBgwFoAUVUbp8c8s9YJ4xb21MOke/Rvs7wQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTQ4NmNjZC0wYzk1LTQ5MWEtYjllNi02NjdjZWU0NDU5NGYvMC81NTQ2RTlGMUNG MkNGNTgyNzhDNUJEQjUzMEU5MUVGRDFCRUNFRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQxQkVD RUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE0ODZjY2QtMGM5NS00OTFhLWI5 ZTYtNjY3Y2VlNDQ1OTRmLzAvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFF RkQxQkVDRUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGQAS962UuklZwNBhEm8awKRkhn6D/Nv4mH b8NQDA/P09Gmo5VQFh/xttYp3HyUNvYuVKx3CleZNATCauxy0RdOLjgRgoPyIMLE pE8sYCBI3fhEnm3XxJlTv5QDaRI7Rj7Yy1OdKIDvPseRTjsYyxwEBzia94kQaBQQ Iw8uA35WODPLYZZ3xAb4dDvqOZea1HPvkHgPw5sFZAwo74Ir3e+lRwElkrc6TKPA WU5tcsB7psMVWP5HO4C/szuWp3M8Jf2Fzz93hzxsW1sZ7mlAU4AB2f6O5YzqHWv2 vNh5KhxWyYzD8WOquKeHG5/As8TkVc1nR9jmvumNV3syQdbNfYU= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:54 2025 by rpki-client