$ rpki-client -vvf repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft File: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft (raw, json) Hash identifier: /2HOXUQAJbFUuvFJ2AUg8mhblS2zjbOtQ1kZ7Him60Y= Subject key identifier: 34:FD:93:6B:BC:08:5F:72:69:E6:2A:2B:0A:24:CF:CC:97:DE:AE:81 Authority key identifier: 55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 Certificate issuer: /CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Certificate serial: 61CC83997FF92EFF433FF1FB53285CE76086DD61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft Manifest number: 01E7 Signing time: Mon 30 Jun 2025 12:11:43 +0000 Manifest this update: Mon 30 Jun 2025 12:06:43 +0000 Manifest next update: Thu 03 Jul 2025 12:36:43 +0000 Files and hashes: 1: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl (hash: 1wwzKN2U6VTPJBtL5McCik0eFAD3ToPb5ORyWN+Snm8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 12:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:cc:83:99:7f:f9:2e:ff:43:3f:f1:fb:53:28:5c:e7:60:86:dd:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Validity Not Before: Jun 30 12:06:43 2025 GMT Not After : Jul 3 12:36:43 2025 GMT Subject: CN=34FD936BBC085F7269E62A2B0A24CFCC97DEAE81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:23:44:e1:4e:4b:41:df:9b:08:9e:98:9c:e7: 41:36:c4:40:e8:c0:f6:2b:0a:93:9b:88:b3:61:42: 75:fb:ce:44:d1:bc:96:3b:f5:05:d7:25:6d:78:83: a5:47:44:a7:67:53:9b:7c:d2:06:de:f3:50:9f:88: 97:2a:4b:77:5e:73:cd:db:30:4d:aa:48:19:c6:c4: 98:aa:25:a2:7d:ad:55:ba:3f:fe:d6:2b:0a:f7:d8: 6b:03:a4:14:31:4b:6e:e6:84:ac:68:88:c5:fd:72: e9:14:46:2c:9e:68:53:78:d2:ce:0f:ff:77:e2:3f: 06:36:85:6d:80:3e:20:61:88:9a:b5:9e:e9:f8:0b: 2b:f1:19:9d:9b:8f:18:90:54:b1:58:af:91:7b:2f: 2c:89:6f:45:85:91:ee:52:71:08:9f:5b:bb:b6:20: c0:71:02:88:22:f4:c2:de:4f:cb:81:5a:6e:0b:0b: d6:ab:ed:2a:d7:bc:d2:8a:b0:26:cc:b9:a6:d0:e6: 64:f5:75:eb:39:bf:ac:e4:e9:57:c8:62:df:fe:95: 76:38:33:d6:0c:85:1d:30:f5:ec:34:18:6f:01:8e: 7e:f6:6e:0c:67:b8:e6:b1:af:79:7e:a9:e6:4d:2e: c5:2d:49:75:a6:b0:10:4f:b3:05:16:bd:e2:b2:64: c7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FD:93:6B:BC:08:5F:72:69:E6:2A:2B:0A:24:CF:CC:97:DE:AE:81 X509v3 Authority Key Identifier: keyid:55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:53:24:79:d2:0f:ae:64:95:d6:8b:d2:bc:99:a6:ce:6b:6a: 11:03:3e:7e:29:c3:96:ab:cc:72:1c:09:ca:c9:a1:14:dc:eb: 6d:21:92:5f:3c:04:2b:e9:ed:57:a7:2b:05:b2:07:31:1f:3f: b4:c9:d6:e0:91:49:26:c5:4a:84:51:35:9c:35:e9:2a:03:43: 72:2f:be:a2:cc:02:56:e1:db:e5:08:79:7b:5b:fd:06:73:ca: 0f:ee:a6:51:16:97:9d:11:7b:ed:9c:6b:bf:5f:a1:15:01:a2: 27:d0:a5:3a:1c:15:2d:c7:ee:d7:ae:8f:58:f1:f3:34:a5:96: 75:f0:16:e9:28:2f:0c:d7:f9:4a:10:5f:9f:73:51:1c:8c:12: 26:9f:e5:7f:5c:8c:a5:2d:73:0b:6b:0e:90:5e:64:d8:62:ba: 9a:51:55:92:6f:75:4e:2a:42:c6:5e:76:e9:16:a3:b7:77:86: eb:0d:a3:bf:dd:54:5a:4a:99:67:0e:02:aa:40:3d:99:bc:7d: 9a:c2:79:b9:8c:75:8e:ab:98:87:3a:d5:fd:81:a8:90:05:e2: bf:8d:68:5a:2c:f4:81:b8:62:be:ea:bc:00:fa:ed:53:02:20: 9d:eb:1d:9c:20:17:96:82:13:9a:8b:d6:80:3b:5f:12:77:48: c7:c1:0c:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYcyDmX/5Lv9DP/H7Uyhc52CG3WEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQx QkVDRUYwNDAeFw0yNTA2MzAxMjA2NDNaFw0yNTA3MDMxMjM2NDNaMDMxMTAvBgNV BAMTKDM0RkQ5MzZCQkMwODVGNzI2OUU2MkEyQjBBMjRDRkNDOTdERUFFODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9I0ThTktB35sInpic50E2xEDo wPYrCpObiLNhQnX7zkTRvJY79QXXJW14g6VHRKdnU5t80gbe81CfiJcqS3dec83b ME2qSBnGxJiqJaJ9rVW6P/7WKwr32GsDpBQxS27mhKxoiMX9cukURiyeaFN40s4P /3fiPwY2hW2APiBhiJq1nun4CyvxGZ2bjxiQVLFYr5F7LyyJb0WFke5ScQifW7u2 IMBxAogi9MLeT8uBWm4LC9ar7SrXvNKKsCbMuabQ5mT1des5v6zk6VfIYt/+lXY4 M9YMhR0w9ew0GG8Bjn72bgxnuOaxr3l+qeZNLsUtSXWmsBBPswUWveKyZMdzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNP2Ta7wIX3Jp5iorCiTPzJferoEwHwYDVR0j BBgwFoAUVUbp8c8s9YJ4xb21MOke/Rvs7wQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTQ4NmNjZC0wYzk1LTQ5MWEtYjllNi02NjdjZWU0NDU5NGYvMC81NTQ2RTlGMUNG MkNGNTgyNzhDNUJEQjUzMEU5MUVGRDFCRUNFRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQxQkVD RUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE0ODZjY2QtMGM5NS00OTFhLWI5 ZTYtNjY3Y2VlNDQ1OTRmLzAvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFF RkQxQkVDRUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBTJHnSD65kldaL0ryZps5rahEDPn4pw5ar zHIcCcrJoRTc620hkl88BCvp7VenKwWyBzEfP7TJ1uCRSSbFSoRRNZw16SoDQ3Iv vqLMAlbh2+UIeXtb/QZzyg/uplEWl50Re+2ca79foRUBoifQpTocFS3H7teuj1jx 8zSllnXwFukoLwzX+UoQX59zURyMEiaf5X9cjKUtcwtrDpBeZNhiuppRVZJvdU4q QsZedukWo7d3husNo7/dVFpKmWcOAqpAPZm8fZrCebmMdY6rmIc61f2BqJAF4r+N aFos9IG4Yr7qvAD67VMCIJ3rHZwgF5aCE5qL1oA7XxJ3SMfBDO4= -----END CERTIFICATE-----Generated at Tue Jul 1 05:03:23 2025 by rpki-client