$ rpki-client -vvf repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft File: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft (raw, json) Hash identifier: 8KC+bxf++mIkM9SHvwvHpNH5d6indIlv+bbduJYgq/M= Subject key identifier: 25:CF:E1:89:BE:9D:A3:BC:3D:D8:63:B0:E5:0F:36:18:45:BB:1F:2C Authority key identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 Certificate issuer: /CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Certificate serial: 2D93E1FB78E12799AB606EEB10D15504DA94FDA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft Manifest number: 04FB Signing time: Fri 22 Aug 2025 07:10:43 +0000 Manifest this update: Fri 22 Aug 2025 07:05:43 +0000 Manifest next update: Mon 25 Aug 2025 17:40:43 +0000 Files and hashes: 1: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl (hash: zNVYyXJT9Jn6NA0CpzBqwY69g1HEuj+NZBSpWz5rHGE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 17:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:93:e1:fb:78:e1:27:99:ab:60:6e:eb:10:d1:55:04:da:94:fd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Validity Not Before: Aug 22 07:05:43 2025 GMT Not After : Aug 25 17:40:43 2025 GMT Subject: CN=25CFE189BE9DA3BC3DD863B0E50F361845BB1F2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5b:69:c3:f7:28:b3:9d:98:06:ec:df:a4:b9: 32:aa:27:71:35:8e:c5:90:46:96:be:f4:ab:10:9b: be:57:c7:03:db:66:28:ef:56:14:75:59:dc:10:f0: 90:3c:0e:ea:c6:4b:75:e7:a8:67:51:09:d0:b5:3a: 29:19:8f:38:a4:89:74:b7:72:04:a7:15:a4:b2:57: 8d:69:bc:b2:4e:40:a5:98:70:e0:dc:61:09:c8:cc: 99:0c:03:34:e1:16:17:f7:d1:ab:0f:55:fb:b7:af: 1c:8a:0d:a7:13:db:b3:9e:7d:4d:8b:60:91:a5:70: 81:39:1e:05:a6:05:28:11:2d:7e:ae:04:27:1d:44: 8c:c5:f0:b6:8f:46:55:e8:61:fe:ff:3d:fb:7b:1a: 66:7b:69:fb:3f:14:74:b1:ba:aa:0a:f5:ef:02:65: 37:61:67:b2:26:f5:05:50:85:f9:e8:32:39:f7:1c: 57:af:78:8c:83:84:8a:0d:0c:76:6b:66:a7:c5:b0: f5:3e:4b:a8:06:98:b5:60:c9:41:72:41:16:0a:54: 63:12:d5:a9:cb:72:28:cf:a6:1b:68:35:0a:ad:5d: f0:19:9c:f8:dc:24:2e:7c:12:fd:0c:23:85:41:68: a1:fc:b2:d6:9e:ad:b3:d5:6c:71:90:7b:b7:a8:7f: 5f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CF:E1:89:BE:9D:A3:BC:3D:D8:63:B0:E5:0F:36:18:45:BB:1F:2C X509v3 Authority Key Identifier: keyid:5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:1c:73:6c:32:8b:d4:7f:7a:a5:09:78:61:32:82:b4:c4:64: 2f:a7:4b:63:b4:bb:cb:ce:8e:2f:b2:61:f1:33:85:4f:be:8d: 4e:11:fa:8d:15:b9:4e:9d:f2:96:04:d5:13:a2:a6:19:ab:ff: bd:8b:02:b5:cd:f3:9b:ec:9f:69:c5:3c:2a:e4:45:d9:86:28: 7a:e7:75:e4:dc:b4:5f:c8:12:7c:b7:89:0a:ce:a3:d3:2f:82: 7c:9b:6c:c3:8f:c1:4e:39:15:b9:0d:00:c9:d4:c6:6c:87:38: 0b:52:8f:55:db:0f:75:37:9f:c7:9e:f0:c6:18:41:8e:d8:ae: 02:be:72:2f:a1:30:0c:a7:8f:ba:b2:a8:b6:ef:1c:55:88:07: 28:a0:a5:31:b7:53:16:97:b0:32:0d:8e:67:51:dd:95:8a:c4: b1:1a:07:b4:43:a0:a4:8a:89:fe:1d:db:75:ad:59:5d:e7:f9: 92:50:77:cd:b6:57:94:ca:4d:7a:00:c7:fe:70:50:65:d8:77: 1e:b6:07:e7:15:bf:8a:a7:c7:04:ae:40:ac:6b:31:0a:cb:7f: fe:71:5d:61:aa:3c:a5:e8:50:dc:8c:9a:3a:44:6f:62:26:50: 42:21:61:bf:a8:a8:36:46:0c:a2:eb:26:d0:26:c6:e1:5f:1c: 7d:82:4e:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULZPh+3jhJ5mrYG7rENFVBNqU/aAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OURE MEM3OTk0ODAeFw0yNTA4MjIwNzA1NDNaFw0yNTA4MjUxNzQwNDNaMDMxMTAvBgNV BAMTKDI1Q0ZFMTg5QkU5REEzQkMzREQ4NjNCMEU1MEYzNjE4NDVCQjFGMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPW2nD9yiznZgG7N+kuTKqJ3E1 jsWQRpa+9KsQm75XxwPbZijvVhR1WdwQ8JA8DurGS3XnqGdRCdC1OikZjzikiXS3 cgSnFaSyV41pvLJOQKWYcODcYQnIzJkMAzThFhf30asPVfu3rxyKDacT27OefU2L YJGlcIE5HgWmBSgRLX6uBCcdRIzF8LaPRlXoYf7/Pft7GmZ7afs/FHSxuqoK9e8C ZTdhZ7Im9QVQhfnoMjn3HFeveIyDhIoNDHZrZqfFsPU+S6gGmLVgyUFyQRYKVGMS 1anLcijPphtoNQqtXfAZnPjcJC58Ev0MI4VBaKH8staerbPVbHGQe7eof19zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJc/hib6do7w92GOw5Q82GEW7HywwHwYDVR0j BBgwFoAUWxIhA9PBxzCuzlmn7SinndDHmUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTcyZWVmOS1lYzZhLTQ1NTgtODE4MS1hMTFmZTY1YjhmZjgvMC81QjEyMjEwM0Qz QzFDNzMwQUVDRTU5QTdFRDI4QTc5REQwQzc5OTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OUREMEM3 OTk0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjE3MmVlZjktZWM2YS00NTU4LTgx ODEtYTExZmU2NWI4ZmY4LzAvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3 OUREMEM3OTk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMcc2wyi9R/eqUJeGEygrTEZC+nS2O0u8vO ji+yYfEzhU++jU4R+o0VuU6d8pYE1ROiphmr/72LArXN85vsn2nFPCrkRdmGKHrn deTctF/IEny3iQrOo9MvgnybbMOPwU45FbkNAMnUxmyHOAtSj1XbD3U3n8ee8MYY QY7YrgK+ci+hMAynj7qyqLbvHFWIByigpTG3UxaXsDINjmdR3ZWKxLEaB7RDoKSK if4d23WtWV3n+ZJQd822V5TKTXoAx/5wUGXYdx62B+cVv4qnxwSuQKxrMQrLf/5x XWGqPKXoUNyMmjpEb2ImUEIhYb+oqDZGDKLrJtAmxuFfHH2CThQ= -----END CERTIFICATE-----Generated at Sat Aug 23 10:33:17 2025 by rpki-client