$ rpki-client -vvf repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft File: 5561020450CCF35D395065D493AABB1C3F275482.mft (raw, json) Hash identifier: SgpUXYkk7THaH/zNqboop0mpqjCtEO4o2DOmAHwCpvY= Subject key identifier: 6A:62:59:12:60:B5:FF:9B:ED:64:97:4F:27:80:2B:24:F9:EB:A8:9A Authority key identifier: 55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 Certificate issuer: /CN=5561020450CCF35D395065D493AABB1C3F275482 Certificate serial: 2A629EE083E23BC716527B7266B2E043A80BD0D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject info access: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft Manifest number: 0228 Signing time: Sat 18 Oct 2025 12:41:57 +0000 Manifest this update: Sat 18 Oct 2025 12:36:57 +0000 Manifest next update: Tue 21 Oct 2025 13:22:57 +0000 Files and hashes: 1: 5561020450CCF35D395065D493AABB1C3F275482.crl (hash: ABMerQdKeXh6cwmK4Bb/U4hJ4GTFTIvhPFJXsPl/ta8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:62:9e:e0:83:e2:3b:c7:16:52:7b:72:66:b2:e0:43:a8:0b:d0:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5561020450CCF35D395065D493AABB1C3F275482 Validity Not Before: Oct 18 12:36:57 2025 GMT Not After : Oct 21 13:22:57 2025 GMT Subject: CN=6A62591260B5FF9BED64974F27802B24F9EBA89A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f6:c9:41:31:43:e3:1f:88:7f:40:ff:43:84: 35:26:a7:aa:05:01:4b:ce:2b:c8:52:bf:fc:70:19: 46:59:53:fe:ee:8b:d8:d3:b3:3c:c2:53:e2:c3:80: dd:c9:1b:51:b7:9c:03:3e:42:45:0f:fd:aa:54:18: a8:ff:c6:97:41:fb:be:6b:4a:76:02:3d:27:42:db: d5:95:43:4a:49:41:00:a1:8a:81:6b:af:10:0c:5f: fc:f4:71:ce:77:20:58:2d:20:28:40:44:19:47:4d: 2d:87:8f:09:f0:62:c0:13:2d:b3:fc:30:8b:37:4d: 60:dc:a5:b1:c9:ad:40:77:34:95:20:ea:8b:44:b1: 5b:a1:30:d0:ba:0d:ae:f6:5e:35:a4:83:da:b9:51: b7:63:3a:07:96:c8:ca:34:f6:2c:5e:b5:9c:b9:d7: 55:e1:86:27:94:23:c1:f1:62:ae:2a:c6:ee:1d:69: a0:ee:fc:31:8c:7f:e1:19:70:8e:3c:e5:55:00:e2: 45:33:d3:71:df:fb:b9:99:29:10:24:b1:64:00:e4: ac:04:16:e7:1e:02:67:83:4f:4e:0e:98:99:ba:a2: 86:67:ed:e1:23:35:d5:fb:c1:30:0e:83:a1:4b:3d: 92:b4:d4:b4:2e:f3:cf:55:c8:90:5e:cc:4c:42:3d: 35:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:62:59:12:60:B5:FF:9B:ED:64:97:4F:27:80:2B:24:F9:EB:A8:9A X509v3 Authority Key Identifier: keyid:55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a7:0d:24:69:68:d9:91:0a:6f:3a:77:ec:26:ee:dc:26:7a: 39:be:07:6a:e5:9c:9d:fd:43:6a:be:28:83:e3:9b:a3:20:86: b3:95:1a:78:08:fc:d1:8d:8c:88:63:99:17:f1:2d:1b:af:67: 80:bc:2f:a2:3a:92:68:0e:c9:16:9d:ed:1e:9b:c8:16:de:1d: 96:9b:99:a5:6d:54:56:0a:6e:2a:bb:17:94:32:90:e5:44:fb: f3:dc:3c:be:d7:ae:20:74:b8:d3:ee:64:3f:bc:5e:13:46:01: 2e:6c:ea:b2:29:41:36:2a:de:1f:ef:00:78:7f:f6:48:90:5b: 29:2c:73:b8:1c:59:60:18:48:e4:e1:e4:35:a2:c4:95:65:44: 67:4b:09:1e:7c:8f:62:bd:ff:6b:ed:2b:1a:fe:58:6c:cb:e6: 74:f7:e5:4a:74:09:c3:c9:ca:17:f7:03:71:7b:5a:06:10:db: 16:6b:a2:13:06:56:33:a6:bc:d7:41:2c:25:f2:76:e3:6f:30: 1d:93:d5:98:44:d3:dd:63:41:6d:d2:c7:95:3a:65:a6:3d:ea: 8a:3a:21:96:fa:a8:6d:6d:ab:1e:cd:5b:85:9a:18:f2:1d:af: 4b:03:11:bf:54:a1:78:93:8c:a6:53:32:8b:f9:52:24:ff:b0: 14:97:8a:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKmKe4IPiO8cWUntyZrLgQ6gL0NIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMz RjI3NTQ4MjAeFw0yNTEwMTgxMjM2NTdaFw0yNTEwMjExMzIyNTdaMDMxMTAvBgNV BAMTKDZBNjI1OTEyNjBCNUZGOUJFRDY0OTc0RjI3ODAyQjI0RjlFQkE4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd9slBMUPjH4h/QP9DhDUmp6oF AUvOK8hSv/xwGUZZU/7ui9jTszzCU+LDgN3JG1G3nAM+QkUP/apUGKj/xpdB+75r SnYCPSdC29WVQ0pJQQChioFrrxAMX/z0cc53IFgtIChARBlHTS2HjwnwYsATLbP8 MIs3TWDcpbHJrUB3NJUg6otEsVuhMNC6Da72XjWkg9q5UbdjOgeWyMo09ixetZy5 11XhhieUI8HxYq4qxu4daaDu/DGMf+EZcI485VUA4kUz03Hf+7mZKRAksWQA5KwE FuceAmeDT04OmJm6ooZn7eEjNdX7wTAOg6FLPZK01LQu889VyJBezExCPTWbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUamJZEmC1/5vtZJdPJ4ArJPnrqJowHwYDVR0j BBgwFoAUVWECBFDM8105UGXUk6q7HD8nVIIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDdkNWJiNi05ZGEwLTRjM2MtOTM5NS0wNjQ1OTZhNGY3ODkvMC81NTYxMDIwNDUw Q0NGMzVEMzk1MDY1RDQ5M0FBQkIxQzNGMjc1NDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMzRjI3 NTQ4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA3ZDViYjYtOWRhMC00YzNjLTkz OTUtMDY0NTk2YTRmNzg5LzAvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJC MUMzRjI3NTQ4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABynDSRpaNmRCm86d+wm7twmejm+B2rlnJ39 Q2q+KIPjm6MghrOVGngI/NGNjIhjmRfxLRuvZ4C8L6I6kmgOyRad7R6byBbeHZab maVtVFYKbiq7F5QykOVE+/PcPL7XriB0uNPuZD+8XhNGAS5s6rIpQTYq3h/vAHh/ 9kiQWyksc7gcWWAYSOTh5DWixJVlRGdLCR58j2K9/2vtKxr+WGzL5nT35Up0CcPJ yhf3A3F7WgYQ2xZrohMGVjOmvNdBLCXyduNvMB2T1ZhE091jQW3Sx5U6ZaY96oo6 IZb6qG1tqx7NW4WaGPIdr0sDEb9UoXiTjKZTMov5UiT/sBSXimY= -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:19 2025 by rpki-client