$ rpki-client -vvf repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft File: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft (raw, json) Hash identifier: gB34TcGFc95GWVwCU4Dmd/txkJQ+Z7mXMCsj8yk2iz4= Subject key identifier: FE:3E:B5:AA:95:E8:6E:EA:E5:1D:B0:2F:AD:80:05:2D:B5:9D:81:4E Authority key identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 Certificate issuer: /CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Certificate serial: 2B821ABD9E6FCD3E859A0555AF1A6DFF3B755F28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft Manifest number: 04E4 Signing time: Tue 01 Jul 2025 15:40:42 +0000 Manifest this update: Tue 01 Jul 2025 15:35:42 +0000 Manifest next update: Fri 04 Jul 2025 21:08:42 +0000 Files and hashes: 1: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl (hash: HDOkIjpG9jnTfcyDzuDFF3fQa7HicCLrDFjheZwRogA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 15:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:82:1a:bd:9e:6f:cd:3e:85:9a:05:55:af:1a:6d:ff:3b:75:5f:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Validity Not Before: Jul 1 15:35:42 2025 GMT Not After : Jul 4 21:08:42 2025 GMT Subject: CN=FE3EB5AA95E86EEAE51DB02FAD80052DB59D814E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0a:73:89:9c:76:76:c9:56:50:d7:39:d0:c0: 74:a1:22:c1:b3:6e:2b:ce:4b:18:ab:eb:98:24:5a: 7d:25:37:76:1f:2d:84:69:89:18:3c:e7:9c:cf:42: 8b:22:20:0b:a5:76:98:4e:52:77:93:30:97:56:2b: ea:77:7c:7e:50:15:b9:20:35:89:e4:32:97:52:7b: ce:79:72:18:37:48:d6:65:80:60:74:72:e6:c5:c0: 34:b4:9f:ed:03:20:60:98:4c:4c:4d:67:02:af:08: 7b:15:c3:80:9b:f1:82:60:9c:85:7a:25:5f:62:fd: ee:e8:f3:4b:5d:89:a5:bd:80:48:d6:5b:b6:c8:b4: b4:f6:56:2b:c5:38:53:42:8f:fe:d2:b3:bc:78:5c: d2:30:6b:ce:69:7e:34:d6:ea:48:46:2f:f8:cf:0c: 1b:22:5f:0e:eb:f8:bc:36:6b:7f:3b:19:ce:ec:33: c8:e5:22:f0:41:66:0f:72:45:a2:80:9b:d3:78:1d: e3:26:a2:79:2b:4b:25:63:84:b4:b5:14:ba:87:07: 00:64:1f:ee:6a:d6:da:0c:01:94:e6:43:da:6b:c5: fc:d6:a3:08:8e:39:55:10:8b:84:97:9d:ae:fc:21: fd:c0:13:2f:6c:2e:24:24:eb:be:ff:7e:c4:27:02: fe:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:3E:B5:AA:95:E8:6E:EA:E5:1D:B0:2F:AD:80:05:2D:B5:9D:81:4E X509v3 Authority Key Identifier: keyid:5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:62:a3:ed:18:dc:84:be:63:15:a5:19:38:ac:e6:32:ff:45: e2:13:3e:a0:22:07:b1:e3:86:0e:79:95:28:e7:fc:4a:42:a1: 10:7c:e6:5c:be:1c:0a:3b:48:e1:d2:8e:24:96:10:cc:30:27: 50:02:8e:58:27:bb:b9:f8:cd:31:17:31:27:e8:59:b6:0b:21: 81:fd:48:90:72:bb:54:9e:13:eb:f8:5a:f6:03:84:e3:ab:6b: 7c:1a:d7:f4:0d:4f:17:7b:ee:db:7c:e7:e8:e4:63:0e:91:01: 1a:5d:f5:b0:75:98:a1:aa:98:bf:e3:2a:6a:4d:54:7c:69:f4: 31:9a:43:61:0e:9d:f4:dc:60:9e:a4:1c:4d:5b:8f:30:9d:bf: af:bf:23:33:43:8d:96:4f:d3:20:14:48:86:f6:96:04:4f:42: 9f:b7:f4:64:27:d4:ff:e2:f2:a9:e1:42:d6:dc:ba:98:50:d8: de:42:99:3c:ad:d5:38:f3:e5:99:c6:9f:0f:5f:b9:c8:6e:bb: df:91:55:45:27:52:f6:ab:d6:5d:fc:8d:fc:34:53:3f:a0:ba: 00:da:02:06:18:98:3d:05:d2:39:3a:83:bd:68:8c:c5:45:c0: c7:23:91:7a:69:24:be:c6:07:8a:f5:74:24:86:dd:c8:e9:71: 55:a9:96:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK4IavZ5vzT6FmgVVrxpt/zt1XygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OURE MEM3OTk0ODAeFw0yNTA3MDExNTM1NDJaFw0yNTA3MDQyMTA4NDJaMDMxMTAvBgNV BAMTKEZFM0VCNUFBOTVFODZFRUFFNTFEQjAyRkFEODAwNTJEQjU5RDgxNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9CnOJnHZ2yVZQ1znQwHShIsGz bivOSxir65gkWn0lN3YfLYRpiRg855zPQosiIAuldphOUneTMJdWK+p3fH5QFbkg NYnkMpdSe855chg3SNZlgGB0cubFwDS0n+0DIGCYTExNZwKvCHsVw4Cb8YJgnIV6 JV9i/e7o80tdiaW9gEjWW7bItLT2VivFOFNCj/7Ss7x4XNIwa85pfjTW6khGL/jP DBsiXw7r+Lw2a387Gc7sM8jlIvBBZg9yRaKAm9N4HeMmonkrSyVjhLS1FLqHBwBk H+5q1toMAZTmQ9prxfzWowiOOVUQi4SXna78If3AEy9sLiQk677/fsQnAv6NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/j61qpXoburlHbAvrYAFLbWdgU4wHwYDVR0j BBgwFoAUWxIhA9PBxzCuzlmn7SinndDHmUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTcyZWVmOS1lYzZhLTQ1NTgtODE4MS1hMTFmZTY1YjhmZjgvMC81QjEyMjEwM0Qz QzFDNzMwQUVDRTU5QTdFRDI4QTc5REQwQzc5OTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OUREMEM3 OTk0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjE3MmVlZjktZWM2YS00NTU4LTgx ODEtYTExZmU2NWI4ZmY4LzAvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3 OUREMEM3OTk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhio+0Y3IS+YxWlGTis5jL/ReITPqAiB7Hj hg55lSjn/EpCoRB85ly+HAo7SOHSjiSWEMwwJ1ACjlgnu7n4zTEXMSfoWbYLIYH9 SJByu1SeE+v4WvYDhOOra3wa1/QNTxd77tt85+jkYw6RARpd9bB1mKGqmL/jKmpN VHxp9DGaQ2EOnfTcYJ6kHE1bjzCdv6+/IzNDjZZP0yAUSIb2lgRPQp+39GQn1P/i 8qnhQtbcuphQ2N5CmTyt1Tjz5ZnGnw9fuchuu9+RVUUnUvar1l38jfw0Uz+gugDa AgYYmD0F0jk6g71ojMVFwMcjkXppJL7GB4r1dCSG3cjpcVWpljE= -----END CERTIFICATE-----Generated at Tue Jul 1 19:23:05 2025 by rpki-client