$ rpki-client -vvf repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft File: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft (raw, json) Hash identifier: eI8qGv/hrpS+Vbr0twr943Ug9b95t7KbCEljJc4d/KQ= Subject key identifier: AB:9D:A1:3E:A3:16:3E:E0:67:4E:F9:FD:5E:8A:6B:B5:07:06:EE:85 Authority key identifier: 55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 Certificate issuer: /CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Certificate serial: 36CA2369B379954465CC191673CE3F0263264F56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft Manifest number: 01DD Signing time: Sat 07 Jun 2025 04:01:43 +0000 Manifest this update: Sat 07 Jun 2025 03:56:43 +0000 Manifest next update: Tue 10 Jun 2025 07:57:43 +0000 Files and hashes: 1: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl (hash: v+YCiWkNXrocenYfcBDSVmYXI3weteRZktVRtYnHTBg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ca:23:69:b3:79:95:44:65:cc:19:16:73:ce:3f:02:63:26:4f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Validity Not Before: Jun 7 03:56:43 2025 GMT Not After : Jun 10 07:57:43 2025 GMT Subject: CN=AB9DA13EA3163EE0674EF9FD5E8A6BB50706EE85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a3:19:57:ae:7a:2d:1b:a6:02:da:0e:db:59: ee:f2:e5:92:2e:86:20:11:5d:43:7a:ef:17:db:58: de:00:fb:ef:b8:de:9b:06:2e:63:a1:7b:e5:b6:fd: 08:e9:23:72:7b:ec:76:c8:85:c3:e1:ba:f4:97:2a: 05:54:b7:57:fe:95:a1:02:59:43:fe:7a:7b:74:0c: 68:3f:36:79:5b:dd:b0:41:17:3f:d6:92:f6:c6:cf: 94:db:9c:d9:ef:4e:3f:81:41:22:33:b4:fd:69:37: a4:61:54:9d:7e:c2:0c:89:56:72:8d:c2:4e:e8:65: b2:e7:3a:86:31:ec:1d:b5:f2:b3:8c:e7:8d:b3:cc: d7:99:cb:84:97:1c:89:01:25:c1:b4:3d:af:ea:08: 99:22:e8:5d:89:7e:7e:4a:75:18:1d:bf:10:3b:54: 32:4b:0a:95:ce:58:cb:4a:c7:c9:cd:a9:6d:38:19: 9c:13:5c:c5:a0:f9:a2:d0:2f:1b:9b:bb:64:f6:a5: b6:79:db:2b:64:50:ff:9e:cc:1c:74:93:ad:63:b5: 50:16:fa:86:3c:81:5b:b0:98:9a:03:5c:07:5b:90: 54:48:05:33:19:9a:e5:53:33:54:24:e1:cb:5a:56: 1c:df:9a:52:1d:5f:eb:5a:7d:07:ce:36:17:e6:2e: c3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9D:A1:3E:A3:16:3E:E0:67:4E:F9:FD:5E:8A:6B:B5:07:06:EE:85 X509v3 Authority Key Identifier: keyid:55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:74:47:31:b1:f9:66:00:df:c1:cb:22:cb:0e:7b:b6:c1:f3: 94:8d:16:96:c5:e0:43:50:2b:0c:09:d3:62:8a:ad:4e:1a:47: 9d:87:fc:f0:09:ca:e0:98:83:12:23:f4:23:0e:a3:96:a6:3c: 09:8a:23:b4:ff:36:52:96:96:2f:47:69:c7:8d:de:84:ab:05: 6a:03:fb:a7:ca:6a:fa:30:c5:30:c6:99:28:fa:83:34:91:42: 90:93:5e:81:ea:9e:22:73:c4:0b:09:4f:9a:e5:d1:31:87:7c: 65:17:04:42:62:65:62:90:49:a4:50:b0:76:f9:e7:4c:1b:1b: 05:10:33:3e:fe:3b:20:9b:f9:62:e8:a9:db:93:f3:1c:5e:26: 42:1f:9d:78:57:02:1d:81:c7:50:b9:29:5f:b9:3b:47:8d:d0: ee:e4:d9:57:a9:85:37:8d:30:98:c4:ab:82:f0:df:4c:b1:da: 30:28:d5:fa:1a:17:6c:03:c9:1d:85:80:ab:a1:f8:fc:71:ab: d9:51:e7:1f:a9:b3:1a:40:14:89:5a:81:d6:58:fa:ba:d5:23: dd:9b:88:1d:89:8f:dd:96:91:03:77:6e:07:de:3e:4c:fa:c4: ee:ff:18:0e:3b:b3:6d:c3:0d:98:9d:23:bd:41:b9:cf:03:5a: a7:db:71:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNsojabN5lURlzBkWc84/AmMmT1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQx QkVDRUYwNDAeFw0yNTA2MDcwMzU2NDNaFw0yNTA2MTAwNzU3NDNaMDMxMTAvBgNV BAMTKEFCOURBMTNFQTMxNjNFRTA2NzRFRjlGRDVFOEE2QkI1MDcwNkVFODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIoxlXrnotG6YC2g7bWe7y5ZIu hiARXUN67xfbWN4A+++43psGLmOhe+W2/QjpI3J77HbIhcPhuvSXKgVUt1f+laEC WUP+ent0DGg/Nnlb3bBBFz/WkvbGz5TbnNnvTj+BQSIztP1pN6RhVJ1+wgyJVnKN wk7oZbLnOoYx7B218rOM542zzNeZy4SXHIkBJcG0Pa/qCJki6F2Jfn5KdRgdvxA7 VDJLCpXOWMtKx8nNqW04GZwTXMWg+aLQLxubu2T2pbZ52ytkUP+ezBx0k61jtVAW +oY8gVuwmJoDXAdbkFRIBTMZmuVTM1Qk4ctaVhzfmlIdX+tafQfONhfmLsMfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq52hPqMWPuBnTvn9XoprtQcG7oUwHwYDVR0j BBgwFoAUVUbp8c8s9YJ4xb21MOke/Rvs7wQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTQ4NmNjZC0wYzk1LTQ5MWEtYjllNi02NjdjZWU0NDU5NGYvMC81NTQ2RTlGMUNG MkNGNTgyNzhDNUJEQjUzMEU5MUVGRDFCRUNFRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQxQkVD RUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE0ODZjY2QtMGM5NS00OTFhLWI5 ZTYtNjY3Y2VlNDQ1OTRmLzAvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFF RkQxQkVDRUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGF0RzGx+WYA38HLIssOe7bB85SNFpbF4ENQ KwwJ02KKrU4aR52H/PAJyuCYgxIj9CMOo5amPAmKI7T/NlKWli9HaceN3oSrBWoD +6fKavowxTDGmSj6gzSRQpCTXoHqniJzxAsJT5rl0TGHfGUXBEJiZWKQSaRQsHb5 50wbGwUQMz7+OyCb+WLoqduT8xxeJkIfnXhXAh2Bx1C5KV+5O0eN0O7k2VephTeN MJjEq4Lw30yx2jAo1foaF2wDyR2FgKuh+Pxxq9lR5x+psxpAFIlagdZY+rrVI92b iB2Jj92WkQN3bgfePkz6xO7/GA47s23DDZidI71Buc8DWqfbcfs= -----END CERTIFICATE-----Generated at Sun Jun 8 03:53:39 2025 by rpki-client