$ rpki-client -vvf repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft File: 5561020450CCF35D395065D493AABB1C3F275482.mft (raw, json) Hash identifier: Z0YT/h2gB2F1Oae8Rj4FGGntyBTJ4conXyC0oiGS73Q= Subject key identifier: 3C:C3:37:8A:DE:CD:76:70:06:BC:BF:40:38:D3:FF:FC:F9:45:83:12 Authority key identifier: 55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 Certificate issuer: /CN=5561020450CCF35D395065D493AABB1C3F275482 Certificate serial: 2011E5D1A1C538667A44F1790D9B8D7B7CB01B43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject info access: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft Manifest number: 020F Signing time: Fri 22 Aug 2025 14:21:56 +0000 Manifest this update: Fri 22 Aug 2025 14:16:56 +0000 Manifest next update: Tue 26 Aug 2025 01:28:56 +0000 Files and hashes: 1: 5561020450CCF35D395065D493AABB1C3F275482.crl (hash: OmEfpiRPekouWgVRA7F7oC5aE9VdGBxs5yRI6uyTswE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:28:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:11:e5:d1:a1:c5:38:66:7a:44:f1:79:0d:9b:8d:7b:7c:b0:1b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5561020450CCF35D395065D493AABB1C3F275482 Validity Not Before: Aug 22 14:16:56 2025 GMT Not After : Aug 26 01:28:56 2025 GMT Subject: CN=3CC3378ADECD767006BCBF4038D3FFFCF9458312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f7:25:f4:c3:a3:5c:c7:7b:91:db:b8:bd:d0: dc:19:07:ca:72:71:12:9e:75:53:47:d8:9a:e1:43: 99:fc:65:9f:8b:a6:eb:2f:53:af:6a:75:6b:24:76: 40:8e:91:66:20:26:4f:9c:f6:1f:52:12:bb:ea:44: 89:c2:79:34:a0:31:fc:e4:99:a6:d9:8f:26:6b:5d: 6c:3d:53:55:9b:9f:87:e7:eb:df:4a:42:e7:ae:b8: 0b:0a:13:58:fc:aa:82:17:cb:90:06:b4:e1:f4:3d: 07:92:cb:38:55:8d:1a:00:9a:ce:98:c1:9a:f5:8b: 10:18:a7:70:67:93:15:99:3e:0c:56:09:f9:18:1f: 42:13:e3:7a:3b:73:68:37:90:36:da:e5:77:76:e1: 6f:f6:58:5b:17:db:d7:67:f9:66:0d:2c:a4:15:bf: 6d:d9:06:5d:69:22:b6:b2:cd:2e:52:44:24:10:69: 4e:1e:7b:a3:b4:87:c7:e3:db:70:f0:d5:51:b3:c9: 2f:16:fe:56:22:bf:5c:dc:6d:53:0e:e5:82:e0:b5: 8c:a3:d0:eb:c1:d4:b2:13:46:0b:4e:21:62:a1:03: ac:48:71:d0:58:23:b4:ea:ee:c2:d5:bd:a6:eb:56: 71:02:40:54:e6:6c:90:5b:b6:89:cc:3d:0f:37:69: 96:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C3:37:8A:DE:CD:76:70:06:BC:BF:40:38:D3:FF:FC:F9:45:83:12 X509v3 Authority Key Identifier: keyid:55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:b1:75:ba:35:99:d3:39:28:eb:11:1d:da:21:1d:27:56:f8: 0e:79:b3:b5:0b:54:ff:b5:d8:cc:68:69:9c:a6:13:38:ef:16: 05:5e:e1:9a:3e:c3:d8:a2:7c:d7:97:64:46:13:e3:be:50:e1: 91:24:09:b9:77:dc:3a:c9:cf:e4:65:f3:65:db:a9:bc:81:ec: 9d:88:c5:55:56:e5:56:96:9b:fe:ff:d6:11:21:d3:52:23:72: ff:91:a9:43:b8:1a:c8:d3:1b:11:26:60:5d:e0:26:58:6a:23: 9e:3d:c0:08:60:1e:b8:86:3e:69:7e:1e:1d:65:28:3a:c1:6f: 9f:c6:60:b6:f1:ce:d3:26:0d:41:f4:a9:fc:3c:f2:58:45:61: 3c:43:76:05:0d:af:8e:69:83:18:7d:55:d8:ac:80:ef:0d:59: 01:7c:3d:6d:8e:c9:7f:08:16:c3:1c:f7:40:36:b2:d7:9c:2a: 75:11:58:5c:8c:6c:28:d2:78:af:6a:11:98:c8:97:85:61:38: 2a:3c:7c:5d:09:87:9f:b9:75:80:d0:29:a3:55:e3:91:c0:e7: 4e:b9:41:ae:f3:71:98:e3:56:e1:78:f9:d6:40:82:dd:e6:ba: 78:ed:92:cf:21:7b:53:6a:bd:15:07:a4:7a:58:e1:57:2e:d4: f1:92:e8:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIBHl0aHFOGZ6RPF5DZuNe3ywG0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMz RjI3NTQ4MjAeFw0yNTA4MjIxNDE2NTZaFw0yNTA4MjYwMTI4NTZaMDMxMTAvBgNV BAMTKDNDQzMzNzhBREVDRDc2NzAwNkJDQkY0MDM4RDNGRkZDRjk0NTgzMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk9yX0w6Ncx3uR27i90NwZB8py cRKedVNH2JrhQ5n8ZZ+LpusvU69qdWskdkCOkWYgJk+c9h9SErvqRInCeTSgMfzk mabZjyZrXWw9U1Wbn4fn699KQueuuAsKE1j8qoIXy5AGtOH0PQeSyzhVjRoAms6Y wZr1ixAYp3BnkxWZPgxWCfkYH0IT43o7c2g3kDba5Xd24W/2WFsX29dn+WYNLKQV v23ZBl1pIrayzS5SRCQQaU4ee6O0h8fj23Dw1VGzyS8W/lYiv1zcbVMO5YLgtYyj 0OvB1LITRgtOIWKhA6xIcdBYI7Tq7sLVvabrVnECQFTmbJBbtonMPQ83aZaFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPMM3it7NdnAGvL9AONP//PlFgxIwHwYDVR0j BBgwFoAUVWECBFDM8105UGXUk6q7HD8nVIIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDdkNWJiNi05ZGEwLTRjM2MtOTM5NS0wNjQ1OTZhNGY3ODkvMC81NTYxMDIwNDUw Q0NGMzVEMzk1MDY1RDQ5M0FBQkIxQzNGMjc1NDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMzRjI3 NTQ4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA3ZDViYjYtOWRhMC00YzNjLTkz OTUtMDY0NTk2YTRmNzg5LzAvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJC MUMzRjI3NTQ4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSxdbo1mdM5KOsRHdohHSdW+A55s7ULVP+1 2MxoaZymEzjvFgVe4Zo+w9iifNeXZEYT475Q4ZEkCbl33DrJz+Rl82XbqbyB7J2I xVVW5VaWm/7/1hEh01Ijcv+RqUO4GsjTGxEmYF3gJlhqI549wAhgHriGPml+Hh1l KDrBb5/GYLbxztMmDUH0qfw88lhFYTxDdgUNr45pgxh9VdisgO8NWQF8PW2OyX8I FsMc90A2stecKnURWFyMbCjSeK9qEZjIl4VhOCo8fF0Jh5+5dYDQKaNV45HA5065 Qa7zcZjjVuF4+dZAgt3munjtks8he1NqvRUHpHpY4Vcu1PGS6Po= -----END CERTIFICATE-----Generated at Sat Aug 23 17:18:14 2025 by rpki-client