$ rpki-client -vvf repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft File: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft (raw, json) Hash identifier: V7fLOdv1X5q1SvRyCKA+Fz7p9/NdVWxPOCTEc+x+Dt4= Subject key identifier: C0:A6:63:7D:30:B1:F0:FE:8D:79:87:F1:BD:85:69:CA:C7:A8:97:6F Authority key identifier: 55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 Certificate issuer: /CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Certificate serial: 1E440C623976B897C5620BFCFD83A7F3B8FE30BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft Manifest number: 01D0 Signing time: Fri 09 May 2025 14:41:44 +0000 Manifest this update: Fri 09 May 2025 14:36:44 +0000 Manifest next update: Mon 12 May 2025 19:17:44 +0000 Files and hashes: 1: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl (hash: g7iFBVuKc9A0ksVsJhPAgUu1DGRqN0Js62X39+3/CPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 19:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:44:0c:62:39:76:b8:97:c5:62:0b:fc:fd:83:a7:f3:b8:fe:30:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Validity Not Before: May 9 14:36:44 2025 GMT Not After : May 12 19:17:44 2025 GMT Subject: CN=C0A6637D30B1F0FE8D7987F1BD8569CAC7A8976F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:60:0d:07:d6:0f:5a:7a:71:14:0c:ea:a5:22: b8:e5:73:67:14:fc:e0:58:19:a1:78:ae:71:9d:dd: 3f:f3:85:bc:f3:ea:80:f6:cd:04:d6:d4:78:b1:43: fd:4e:d6:d3:76:05:37:72:18:7f:53:7b:c2:83:77: 47:61:79:a4:37:1c:1b:85:94:14:ad:1a:bc:2f:78: c7:51:0e:fe:22:07:69:f3:a5:89:e7:69:ee:df:72: b1:51:c3:88:04:60:2a:7a:d2:98:16:b8:be:4e:17: 49:3d:31:8d:23:d2:40:6a:ff:76:4d:e4:d9:56:25: 48:55:c3:bd:3e:80:62:88:52:a3:7b:a5:24:98:5f: cb:1a:bc:49:d0:b6:7b:c7:a1:4b:41:10:c5:e1:98: cd:88:6c:3c:c0:69:be:16:2b:14:f8:9c:65:a7:f4: cb:c2:4e:62:12:bb:4f:97:44:ed:31:b0:2e:f3:16: b3:12:14:fd:ac:66:f2:89:fa:60:98:24:cc:8c:48: a7:e0:21:51:e9:c7:ce:c9:6a:ff:e6:40:34:53:be: fc:b8:29:3b:da:52:0d:45:fd:5c:fc:81:f7:2d:87: f1:6e:06:cc:d5:f1:dc:52:ee:19:bf:e7:59:a2:80: 09:5a:ee:98:4c:b7:15:2f:58:a2:79:0b:db:7d:fd: cf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A6:63:7D:30:B1:F0:FE:8D:79:87:F1:BD:85:69:CA:C7:A8:97:6F X509v3 Authority Key Identifier: keyid:55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:0e:8c:db:8f:a6:d5:30:04:29:36:99:0c:2a:25:ee:09:c4: b7:9c:52:18:f5:ef:5b:5d:93:99:7f:14:6d:19:eb:17:1f:29: 8b:6c:7e:1f:7a:64:26:d7:d4:da:69:8d:8f:9d:26:6a:9a:44: de:4b:56:56:b6:97:d0:c5:0b:34:e2:15:1a:c6:5f:ea:77:ad: dd:39:e7:f2:05:8d:ab:8b:06:56:4c:70:bf:65:25:4c:b3:65: 32:41:9c:68:75:d7:36:d9:54:f4:21:a9:5c:53:cb:51:db:a3: 5e:32:77:49:72:83:53:28:09:65:99:60:0a:00:fc:4c:26:df: 5a:0a:94:e6:17:a0:b8:f7:67:11:8f:cd:24:40:20:60:74:fb: 4b:a7:7b:46:64:62:7d:e5:09:2b:e9:20:33:b6:9c:cb:d7:a5: fc:8b:a6:96:90:a0:af:df:72:1d:e3:ca:74:0d:db:79:ca:bd: 25:34:1a:66:dc:45:3e:33:5f:a0:9f:9a:fa:08:f2:6c:13:fa: ee:87:9a:1f:d4:fd:83:fb:87:e6:75:57:dd:e5:68:ba:68:bc: 20:bb:05:57:69:ad:20:36:18:cf:57:bb:01:1b:c8:2f:cd:8e: 03:3b:d8:82:6c:32:30:8d:02:f4:87:7b:a0:05:81:c7:cf:65: 26:92:6b:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHkQMYjl2uJfFYgv8/YOn87j+MLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQx QkVDRUYwNDAeFw0yNTA1MDkxNDM2NDRaFw0yNTA1MTIxOTE3NDRaMDMxMTAvBgNV BAMTKEMwQTY2MzdEMzBCMUYwRkU4RDc5ODdGMUJEODU2OUNBQzdBODk3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsYA0H1g9aenEUDOqlIrjlc2cU /OBYGaF4rnGd3T/zhbzz6oD2zQTW1HixQ/1O1tN2BTdyGH9Te8KDd0dheaQ3HBuF lBStGrwveMdRDv4iB2nzpYnnae7fcrFRw4gEYCp60pgWuL5OF0k9MY0j0kBq/3ZN 5NlWJUhVw70+gGKIUqN7pSSYX8savEnQtnvHoUtBEMXhmM2IbDzAab4WKxT4nGWn 9MvCTmISu0+XRO0xsC7zFrMSFP2sZvKJ+mCYJMyMSKfgIVHpx87Jav/mQDRTvvy4 KTvaUg1F/Vz8gfcth/FuBszV8dxS7hm/51migAla7phMtxUvWKJ5C9t9/c9XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwKZjfTCx8P6NeYfxvYVpyseol28wHwYDVR0j BBgwFoAUVUbp8c8s9YJ4xb21MOke/Rvs7wQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTQ4NmNjZC0wYzk1LTQ5MWEtYjllNi02NjdjZWU0NDU5NGYvMC81NTQ2RTlGMUNG MkNGNTgyNzhDNUJEQjUzMEU5MUVGRDFCRUNFRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQxQkVD RUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE0ODZjY2QtMGM5NS00OTFhLWI5 ZTYtNjY3Y2VlNDQ1OTRmLzAvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFF RkQxQkVDRUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIOjNuPptUwBCk2mQwqJe4JxLecUhj171td k5l/FG0Z6xcfKYtsfh96ZCbX1NppjY+dJmqaRN5LVla2l9DFCzTiFRrGX+p3rd05 5/IFjauLBlZMcL9lJUyzZTJBnGh11zbZVPQhqVxTy1Hbo14yd0lyg1MoCWWZYAoA /Ewm31oKlOYXoLj3ZxGPzSRAIGB0+0une0ZkYn3lCSvpIDO2nMvXpfyLppaQoK/f ch3jynQN23nKvSU0GmbcRT4zX6CfmvoI8mwT+u6Hmh/U/YP7h+Z1V93laLpovCC7 BVdprSA2GM9XuwEbyC/NjgM72IJsMjCNAvSHe6AFgcfPZSaSa6E= -----END CERTIFICATE-----Generated at Sat May 10 20:10:33 2025 by rpki-client