$ rpki-client -vvf repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft File: 5561020450CCF35D395065D493AABB1C3F275482.mft (raw, json) Hash identifier: EcMtlSuLEow1ga0dyG1a9X7OMOy/H29cvWXX4xQVIsQ= Subject key identifier: 0E:12:2B:6C:33:12:3F:46:8B:CF:91:98:3D:A0:F1:21:47:02:FE:F6 Authority key identifier: 55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 Certificate issuer: /CN=5561020450CCF35D395065D493AABB1C3F275482 Certificate serial: 02634D55F31C0567FA9DC765ACE697824D61ECE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject info access: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft Manifest number: 01F8 Signing time: Thu 03 Jul 2025 00:31:55 +0000 Manifest this update: Thu 03 Jul 2025 00:26:55 +0000 Manifest next update: Sun 06 Jul 2025 06:13:55 +0000 Files and hashes: 1: 5561020450CCF35D395065D493AABB1C3F275482.crl (hash: 7QVT3KfpYGrGqaXlyVHWDVXB6y8bZyxBLGWEw8vjvH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:63:4d:55:f3:1c:05:67:fa:9d:c7:65:ac:e6:97:82:4d:61:ec:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5561020450CCF35D395065D493AABB1C3F275482 Validity Not Before: Jul 3 00:26:55 2025 GMT Not After : Jul 6 06:13:55 2025 GMT Subject: CN=0E122B6C33123F468BCF91983DA0F1214702FEF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:75:c0:31:38:68:3d:dd:89:29:7c:ea:92:6d: 7f:c6:c3:4c:53:80:a4:66:a6:f5:a9:04:36:0b:d3: 93:4f:d8:aa:7e:2f:67:b6:f9:f4:cf:08:ae:93:3c: 96:f6:df:72:83:5b:4b:97:82:c1:9f:5a:82:42:4a: e6:7e:37:13:7e:02:a7:56:77:5c:97:19:30:97:ce: 2c:56:a7:3d:30:b1:5b:ea:13:68:30:67:78:81:73: c9:bd:6f:f8:9a:4d:ce:7b:30:ff:b3:42:25:ca:c2: bc:e3:d2:7a:63:e6:c9:ad:41:e0:af:de:81:9d:47: 7e:dd:f0:7b:14:9e:a6:35:dd:ac:3e:10:3a:22:96: 17:c5:f1:24:f4:08:0a:fc:ed:fc:74:f5:ac:40:86: eb:33:0d:fd:9e:35:0a:ec:a0:fa:f6:92:62:36:59: 5e:21:0e:6c:de:df:bf:e0:8b:5b:7a:22:b3:a1:24: ca:f0:6d:77:f0:22:ad:86:00:fd:ef:77:64:9f:c7: 1b:2a:e1:4f:f4:3e:99:a6:94:cc:8c:fc:86:26:94: b8:4a:a2:74:09:67:17:29:58:47:d2:64:e5:b1:27: d7:43:68:b2:0b:af:a5:2c:d1:e8:90:6e:3e:d8:5d: 44:8a:bb:eb:66:10:f2:24:68:04:f5:86:7e:ec:9a: ef:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:12:2B:6C:33:12:3F:46:8B:CF:91:98:3D:A0:F1:21:47:02:FE:F6 X509v3 Authority Key Identifier: keyid:55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f1:91:b0:fe:e6:20:43:45:62:a5:33:2d:0f:b7:06:cd:07: 78:a3:fb:02:78:7e:1e:17:6a:f7:77:8c:45:b6:51:ef:fa:f7: 3b:41:e3:8b:a3:5b:89:3d:f2:26:6d:a3:5a:05:70:fa:d8:2e: 48:f3:81:74:66:1c:57:11:c0:f8:d5:32:d7:1d:d3:6f:4f:37: 33:66:50:a5:f8:9d:bc:10:76:8e:36:9f:6c:db:00:2b:bc:9b: 39:a9:6a:70:26:26:c2:26:60:9f:42:3a:aa:8d:f5:2e:19:99: e8:2e:8a:33:50:37:20:a2:6d:ee:e3:a7:d4:51:f2:ab:04:34: 27:c6:13:bd:4c:82:b8:05:54:2d:e2:c6:f1:c2:e6:7e:0f:17: 1d:02:7c:6a:32:c3:e6:0a:3e:17:c0:09:96:9b:2d:bc:38:7d: d0:86:a7:e8:cd:b4:35:75:74:36:78:0e:19:71:42:98:8f:ee: 35:1a:68:44:92:7d:00:4c:80:67:11:42:44:d8:42:77:f0:7b: 53:31:54:b7:d4:4b:a3:78:6e:3c:de:db:2a:88:bf:24:05:0d: 0f:db:61:42:13:b9:b3:e0:7f:ed:59:b0:19:7f:02:4a:38:9b: 27:3c:ea:5a:58:9f:83:77:17:40:1f:00:9f:6d:a2:1d:e9:29: 52:36:1e:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAmNNVfMcBWf6ncdlrOaXgk1h7OQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMz RjI3NTQ4MjAeFw0yNTA3MDMwMDI2NTVaFw0yNTA3MDYwNjEzNTVaMDMxMTAvBgNV BAMTKDBFMTIyQjZDMzMxMjNGNDY4QkNGOTE5ODNEQTBGMTIxNDcwMkZFRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcdcAxOGg93YkpfOqSbX/Gw0xT gKRmpvWpBDYL05NP2Kp+L2e2+fTPCK6TPJb233KDW0uXgsGfWoJCSuZ+NxN+AqdW d1yXGTCXzixWpz0wsVvqE2gwZ3iBc8m9b/iaTc57MP+zQiXKwrzj0npj5smtQeCv 3oGdR37d8HsUnqY13aw+EDoilhfF8ST0CAr87fx09axAhuszDf2eNQrsoPr2kmI2 WV4hDmze37/gi1t6IrOhJMrwbXfwIq2GAP3vd2Sfxxsq4U/0PpmmlMyM/IYmlLhK onQJZxcpWEfSZOWxJ9dDaLILr6Us0eiQbj7YXUSKu+tmEPIkaAT1hn7smu/NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDhIrbDMSP0aLz5GYPaDxIUcC/vYwHwYDVR0j BBgwFoAUVWECBFDM8105UGXUk6q7HD8nVIIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDdkNWJiNi05ZGEwLTRjM2MtOTM5NS0wNjQ1OTZhNGY3ODkvMC81NTYxMDIwNDUw Q0NGMzVEMzk1MDY1RDQ5M0FBQkIxQzNGMjc1NDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMzRjI3 NTQ4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA3ZDViYjYtOWRhMC00YzNjLTkz OTUtMDY0NTk2YTRmNzg5LzAvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJC MUMzRjI3NTQ4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvxkbD+5iBDRWKlMy0PtwbNB3ij+wJ4fh4X avd3jEW2Ue/69ztB44ujW4k98iZto1oFcPrYLkjzgXRmHFcRwPjVMtcd029PNzNm UKX4nbwQdo42n2zbACu8mzmpanAmJsImYJ9COqqN9S4ZmeguijNQNyCibe7jp9RR 8qsENCfGE71MgrgFVC3ixvHC5n4PFx0CfGoyw+YKPhfACZabLbw4fdCGp+jNtDV1 dDZ4DhlxQpiP7jUaaESSfQBMgGcRQkTYQnfwe1MxVLfUS6N4bjze2yqIvyQFDQ/b YUITubPgf+1ZsBl/Ako4myc86lpYn4N3F0AfAJ9toh3pKVI2HpA= -----END CERTIFICATE-----Generated at Thu Jul 3 07:08:56 2025 by rpki-client