$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft File: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft (raw, json) Hash identifier: tooY1ZEGJ5Xol8xbe6yXzJloepPr9yvV7ukbaTCk2C4= Subject key identifier: CD:65:AB:26:A1:9F:B8:BE:34:FD:31:FF:FA:84:0C:84:3B:B7:CF:FA Authority key identifier: D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED Certificate issuer: /CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Certificate serial: 03600717E60744D91383DC76CECDBB7BE83D732D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft Manifest number: 5D Signing time: Wed 04 Jun 2025 13:01:04 +0000 Manifest this update: Wed 04 Jun 2025 12:56:04 +0000 Manifest next update: Sun 08 Jun 2025 00:48:04 +0000 Files and hashes: 1: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl (hash: e/Hj5yNc87maijFJJ2jg5czr5XUcLw9zRoN2FhI1+Os=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 00:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:60:07:17:e6:07:44:d9:13:83:dc:76:ce:cd:bb:7b:e8:3d:73:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Validity Not Before: Jun 4 12:56:04 2025 GMT Not After : Jun 8 00:48:04 2025 GMT Subject: CN=CD65AB26A19FB8BE34FD31FFFA840C843BB7CFFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6f:c6:ab:0f:cc:9c:57:b7:88:3a:21:75:94: 94:28:f4:c2:16:2c:47:45:6b:6d:fb:47:cd:ff:18: 65:8e:f8:5c:f7:ef:6d:d8:c2:fd:39:b6:5c:bb:6c: a2:5b:ce:91:18:f0:1c:ab:ac:60:89:02:4e:2b:93: 13:e3:ee:bd:e7:a3:76:87:4c:79:18:bf:d8:d2:40: 27:ce:c5:bb:d6:82:4f:d1:89:f0:f5:21:11:66:29: 6f:7a:4e:e8:e6:37:21:8f:79:63:b5:ec:16:07:85: ae:76:43:d5:56:ac:fb:82:47:47:b1:88:1c:26:57: d9:59:6c:de:23:db:c6:59:c8:59:92:b4:54:1e:2d: b4:52:d8:6b:94:3e:62:9e:0d:c7:33:d7:fe:a3:1c: 32:84:39:19:64:20:31:a5:82:78:a5:0a:24:8c:76: 16:53:b8:83:2f:aa:84:78:01:62:b2:0a:1d:95:b1: 30:e7:c5:af:94:e0:68:8d:4b:41:2b:d7:1d:1f:9c: 05:a0:30:b8:ed:b1:cb:57:c8:36:8d:09:8d:d9:c8: 41:3d:aa:6e:0b:32:14:76:35:08:7d:2f:12:8c:69: 1e:76:09:36:36:2d:62:7f:5f:c4:4c:4e:5e:c3:a2: ea:2c:1d:f7:c1:67:ad:c5:ee:d4:c0:77:b5:44:83: d5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:65:AB:26:A1:9F:B8:BE:34:FD:31:FF:FA:84:0C:84:3B:B7:CF:FA X509v3 Authority Key Identifier: keyid:D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:6c:2f:93:86:b5:96:0d:58:bd:29:32:93:4a:ca:ff:30:f8: b0:83:8d:0d:b1:3e:b1:04:d8:c7:89:06:b0:41:dd:9b:d5:c0: b0:e9:6c:ca:68:e0:fd:b7:00:1f:65:e8:d8:da:b5:4c:3d:cd: 8f:b2:63:93:77:5f:90:89:f3:a9:21:b4:17:9c:06:5b:0c:fe: 22:72:e8:6d:7f:0f:64:99:e9:42:e0:0e:a3:8e:89:ad:fc:53: ce:5b:17:06:e7:b3:92:2c:b1:af:ca:e7:68:31:f8:10:57:25: e8:5a:3a:de:4b:8f:b2:16:14:a9:2f:61:88:2e:ce:44:3d:5e: 7b:25:04:51:17:5e:3a:29:2e:8d:13:74:16:ab:a6:2e:c8:e8: 96:aa:45:9c:cb:02:3d:29:1d:b5:29:fe:39:2c:ec:d4:07:c5: 2c:f8:35:6a:72:3d:06:01:20:2a:f5:d2:b6:77:71:eb:45:fe: fb:b0:81:a0:27:c9:42:c0:54:b4:37:97:9e:98:3b:34:b0:2e: 61:fb:7b:d2:8e:4b:04:58:a6:b7:1f:b0:36:55:3d:54:76:c9: 34:79:40:7c:18:55:8d:a5:7e:7c:29:25:43:b5:59:26:08:19: bd:5c:24:46:21:36:32:8b:16:79:65:21:f9:ce:f2:52:88:ae: 24:37:01:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA2AHF+YHRNkTg9x2zs27e+g9cy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZG REY2RDBFRDAeFw0yNTA2MDQxMjU2MDRaFw0yNTA2MDgwMDQ4MDRaMDMxMTAvBgNV BAMTKENENjVBQjI2QTE5RkI4QkUzNEZEMzFGRkZBODQwQzg0M0JCN0NGRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhb8arD8ycV7eIOiF1lJQo9MIW LEdFa237R83/GGWO+Fz3723Ywv05tly7bKJbzpEY8ByrrGCJAk4rkxPj7r3no3aH THkYv9jSQCfOxbvWgk/RifD1IRFmKW96TujmNyGPeWO17BYHha52Q9VWrPuCR0ex iBwmV9lZbN4j28ZZyFmStFQeLbRS2GuUPmKeDccz1/6jHDKEORlkIDGlgnilCiSM dhZTuIMvqoR4AWKyCh2VsTDnxa+U4GiNS0Er1x0fnAWgMLjtsctXyDaNCY3ZyEE9 qm4LMhR2NQh9LxKMaR52CTY2LWJ/X8RMTl7DouosHffBZ63F7tTAd7VEg9VBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzWWrJqGfuL40/TH/+oQMhDu3z/owHwYDVR0j BBgwFoAU1VQkyRU948KF2isAhv927/320O0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMS9ENTU0MjRDOTE1 M0RFM0MyODVEQTJCMDA4NkZGNzZFRkZERjZEMEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZGREY2 RDBFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzEvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2 RUZGREY2RDBFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRsL5OGtZYNWL0pMpNKyv8w+LCDjQ2xPrEE 2MeJBrBB3ZvVwLDpbMpo4P23AB9l6NjatUw9zY+yY5N3X5CJ86khtBecBlsM/iJy 6G1/D2SZ6ULgDqOOia38U85bFwbns5Issa/K52gx+BBXJehaOt5Lj7IWFKkvYYgu zkQ9XnslBFEXXjopLo0TdBarpi7I6JaqRZzLAj0pHbUp/jks7NQHxSz4NWpyPQYB ICr10rZ3cetF/vuwgaAnyULAVLQ3l56YOzSwLmH7e9KOSwRYprcfsDZVPVR2yTR5 QHwYVY2lfnwpJUO1WSYIGb1cJEYhNjKLFnllIfnO8lKIriQ3Ae8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:01 2025 by rpki-client