$ rpki-client -vvf repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft File: 5561020450CCF35D395065D493AABB1C3F275482.mft (raw, json) Hash identifier: WiPauAC2PpLikjS6x9mksOAE1tErYYx71s6VaW9BDbQ= Subject key identifier: 49:9A:DD:2F:80:01:FD:57:76:4B:6E:60:99:4A:30:35:A4:CC:27:6F Authority key identifier: 55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 Certificate issuer: /CN=5561020450CCF35D395065D493AABB1C3F275482 Certificate serial: 4475889166E77180E15B0DCA0D7A37E7F43E2525 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject info access: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft Manifest number: 01E2 Signing time: Wed 14 May 2025 06:31:56 +0000 Manifest this update: Wed 14 May 2025 06:26:56 +0000 Manifest next update: Sat 17 May 2025 11:23:56 +0000 Files and hashes: 1: 5561020450CCF35D395065D493AABB1C3F275482.crl (hash: ZS3ZMQcfswJ+cQPP+lfUFm75pXNI59hbcqJP1edU0do=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 11:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:75:88:91:66:e7:71:80:e1:5b:0d:ca:0d:7a:37:e7:f4:3e:25:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5561020450CCF35D395065D493AABB1C3F275482 Validity Not Before: May 14 06:26:56 2025 GMT Not After : May 17 11:23:56 2025 GMT Subject: CN=499ADD2F8001FD57764B6E60994A3035A4CC276F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3e:15:2d:6a:7d:6f:f6:e5:91:2e:58:26:89: 73:3f:fb:34:82:69:ee:c1:a7:45:d9:4b:45:ee:78: 91:98:80:ec:ec:e5:c0:35:25:8d:f7:6d:4b:c8:01: 09:e4:1a:f1:b2:e2:3b:e8:8c:7e:c1:c6:72:9a:f7: 44:de:b9:0a:44:62:14:04:c4:7d:2f:1e:32:d9:e2: 22:24:45:8a:69:b3:c0:c7:37:9d:54:3c:7b:16:a1: 70:51:2d:f8:a8:02:d6:b5:5d:fb:a8:19:e5:ce:d9: 5d:d7:af:e6:a6:ab:54:04:7a:41:43:40:60:1b:82: b9:6a:21:d6:06:29:31:4c:ed:d8:ca:91:4c:97:86: fa:59:55:68:ec:d7:5b:ce:02:89:13:50:20:95:c6: b7:12:e3:8f:eb:98:1c:4a:89:26:49:3e:d1:48:fd: f4:01:8e:db:57:e2:9d:3b:5a:9b:2a:ce:2a:c2:01: 3d:68:2a:9d:5f:76:d8:02:bf:4d:00:43:2b:ed:a8: b2:8a:d9:6d:07:09:25:99:16:e6:e3:cd:28:9f:15: 45:aa:92:f9:04:59:25:b5:2d:6f:48:a7:ef:fa:7c: 27:2b:a4:15:e1:46:70:12:5a:ef:ef:e5:db:da:d9: 9d:46:f3:f7:88:fa:47:b7:60:4d:1f:b5:38:64:db: 04:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9A:DD:2F:80:01:FD:57:76:4B:6E:60:99:4A:30:35:A4:CC:27:6F X509v3 Authority Key Identifier: keyid:55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:06:68:93:d8:a8:2e:34:9b:d7:6d:b0:8c:d0:28:76:3c:09: 0f:54:90:f3:5d:2e:f2:72:ae:b1:19:00:af:cf:cf:d2:a2:40: 91:7c:12:94:9e:f1:f5:51:a1:9a:0f:2b:f5:88:28:70:d6:af: 7e:75:1a:85:bb:64:ca:6e:19:50:82:ed:89:dc:45:ca:5d:e9: 95:0f:09:c4:e0:c1:d8:a7:cf:3f:ca:80:0a:09:9f:86:7b:28: 8f:04:6a:f8:ae:ea:9a:63:96:03:96:98:51:cc:e6:91:51:08: 49:5e:b7:12:6a:96:2d:7a:c4:88:7a:0e:03:e9:43:a7:ef:d8: c4:99:e8:45:76:68:94:c6:e7:f9:2b:66:d5:df:dd:62:1c:eb: e9:19:a0:0f:a4:27:e2:50:01:99:f5:f2:ef:b6:ef:6d:c8:69: 72:25:b2:a0:43:e9:4a:0e:1e:91:f3:d5:4d:2c:e6:12:7d:b0: e4:4b:4b:12:2a:c5:cd:13:72:59:46:72:b5:09:53:79:ed:bb: f6:c4:ab:39:64:76:be:45:24:45:43:e3:2b:72:01:3f:67:84: e7:d9:b5:f7:09:53:e2:c5:75:ea:ad:34:3c:0c:c0:3b:b5:b2: 56:20:37:56:42:fa:5b:1a:d5:0a:8b:04:f8:49:fa:c5:a2:01: 0c:93:68:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURHWIkWbncYDhWw3KDXo35/Q+JSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMz RjI3NTQ4MjAeFw0yNTA1MTQwNjI2NTZaFw0yNTA1MTcxMTIzNTZaMDMxMTAvBgNV BAMTKDQ5OUFERDJGODAwMUZENTc3NjRCNkU2MDk5NEEzMDM1QTRDQzI3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsPhUtan1v9uWRLlgmiXM/+zSC ae7Bp0XZS0XueJGYgOzs5cA1JY33bUvIAQnkGvGy4jvojH7BxnKa90TeuQpEYhQE xH0vHjLZ4iIkRYpps8DHN51UPHsWoXBRLfioAta1XfuoGeXO2V3Xr+amq1QEekFD QGAbgrlqIdYGKTFM7djKkUyXhvpZVWjs11vOAokTUCCVxrcS44/rmBxKiSZJPtFI /fQBjttX4p07WpsqzirCAT1oKp1fdtgCv00AQyvtqLKK2W0HCSWZFubjzSifFUWq kvkEWSW1LW9Ip+/6fCcrpBXhRnASWu/v5dva2Z1G8/eI+ke3YE0ftThk2wTzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSZrdL4AB/Vd2S25gmUowNaTMJ28wHwYDVR0j BBgwFoAUVWECBFDM8105UGXUk6q7HD8nVIIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDdkNWJiNi05ZGEwLTRjM2MtOTM5NS0wNjQ1OTZhNGY3ODkvMC81NTYxMDIwNDUw Q0NGMzVEMzk1MDY1RDQ5M0FBQkIxQzNGMjc1NDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMzRjI3 NTQ4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA3ZDViYjYtOWRhMC00YzNjLTkz OTUtMDY0NTk2YTRmNzg5LzAvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJC MUMzRjI3NTQ4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYGaJPYqC40m9dtsIzQKHY8CQ9UkPNdLvJy rrEZAK/Pz9KiQJF8EpSe8fVRoZoPK/WIKHDWr351GoW7ZMpuGVCC7YncRcpd6ZUP CcTgwdinzz/KgAoJn4Z7KI8Eaviu6ppjlgOWmFHM5pFRCEletxJqli16xIh6DgPp Q6fv2MSZ6EV2aJTG5/krZtXf3WIc6+kZoA+kJ+JQAZn18u+2723IaXIlsqBD6UoO HpHz1U0s5hJ9sORLSxIqxc0TcllGcrUJU3ntu/bEqzlkdr5FJEVD4ytyAT9nhOfZ tfcJU+LFdeqtNDwMwDu1slYgN1ZC+lsa1QqLBPhJ+sWiAQyTaCs= -----END CERTIFICATE-----Generated at Wed May 14 22:33:29 2025 by rpki-client