$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft File: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft (raw, json) Hash identifier: w3ijoIRZv6Li5TVvLASGGr1y+Av+PXl4mgiBBlAdl4Y= Subject key identifier: C0:D8:00:AC:84:88:64:6B:B1:AC:8B:93:98:6C:23:4E:13:60:37:0B Authority key identifier: D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED Certificate issuer: /CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Certificate serial: 3BC74052148DF20D41CE2A2A68BE22B8FA2992F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft Manifest number: 4F Signing time: Sun 04 May 2025 08:01:02 +0000 Manifest this update: Sun 04 May 2025 07:56:02 +0000 Manifest next update: Wed 07 May 2025 11:23:02 +0000 Files and hashes: 1: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl (hash: KHgP8HBVxvIFXCxM8azFkUNO9H/cn23MsEloACPzUQE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 11:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c7:40:52:14:8d:f2:0d:41:ce:2a:2a:68:be:22:b8:fa:29:92:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Validity Not Before: May 4 07:56:02 2025 GMT Not After : May 7 11:23:02 2025 GMT Subject: CN=C0D800AC8488646BB1AC8B93986C234E1360370B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fc:b1:f9:e8:d8:2e:72:7e:59:4f:fa:7d:ed: 18:3f:03:80:f3:b3:bc:89:8b:10:99:d4:6a:47:d1: d5:c8:15:3f:2b:1e:4b:cc:13:b6:fd:63:e4:e1:1f: 70:9d:54:39:d9:6d:94:de:9d:a9:b1:20:1e:51:3e: 9d:c0:8f:c7:46:0e:85:f8:98:32:a5:88:16:04:5f: 94:75:46:54:d8:6f:c9:d0:12:0f:38:83:82:42:cb: 9f:34:c4:5b:b2:1d:f0:ba:0d:19:c5:98:2d:4a:21: 68:e5:ef:74:9c:50:e4:ff:a2:bf:bc:fc:8c:d3:3a: 31:f2:a6:34:f2:55:1c:d9:fc:0b:62:ef:8d:fc:7b: 2a:ed:e0:fd:22:85:7c:61:8f:01:e4:ee:23:96:6d: 76:ea:9a:9e:42:f5:de:e1:c5:c9:ca:8a:4f:28:e6: 64:51:2e:d7:05:17:f7:3f:d1:a8:43:bc:c3:62:df: 42:09:20:3a:2e:4a:0e:3d:8e:5b:2d:d6:2b:b5:6c: 7f:cf:90:46:23:3e:2b:b6:45:bc:a9:07:55:ac:e9: 93:8c:ed:5a:5c:97:95:d0:31:44:ea:2f:c8:c9:4a: bd:65:bb:ab:54:e1:14:e9:87:ee:45:14:1a:69:39: 28:03:33:20:46:1a:c1:3d:4d:60:a3:e3:4a:21:09: 5a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D8:00:AC:84:88:64:6B:B1:AC:8B:93:98:6C:23:4E:13:60:37:0B X509v3 Authority Key Identifier: keyid:D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:c4:50:47:f3:51:1e:6c:91:62:10:1a:81:a7:e1:ad:da:62: 5c:58:ed:64:fc:7f:f3:51:74:48:6e:c3:72:c9:50:bb:06:31: 70:c1:7e:49:46:29:72:6e:54:57:9e:21:07:8f:92:77:7f:c7: 7d:ab:21:6c:ee:15:82:0f:c6:02:1a:84:dc:74:bc:21:db:a8: e2:d3:8a:d6:4d:84:bf:25:4f:b7:b1:b6:72:3b:41:52:f0:05: 60:fa:19:a3:ee:c2:d6:b8:42:ba:1f:cb:cd:df:e1:29:74:0a: 58:da:34:f2:fa:53:6f:98:d0:5e:ce:9f:05:5c:39:38:86:a7: 3e:26:14:d7:75:b1:20:e3:8a:b1:00:ac:78:01:2e:dd:03:81: 0b:75:23:88:6b:29:14:cc:12:fa:fb:43:fe:fe:6f:70:3d:df: e6:9e:c3:85:37:69:51:3d:f7:99:75:65:04:54:ba:d0:b7:9b: a4:42:e7:32:39:1b:87:85:49:7f:84:f6:53:df:2a:46:bf:b3: bb:13:b3:7e:7a:0c:7c:b8:69:99:da:7f:9f:70:d4:21:17:be: 69:a0:33:f4:00:b7:87:7c:5c:19:37:5e:51:e7:31:bd:d2:06: e1:42:67:e6:02:9c:3d:71:64:1b:12:c1:3d:9c:26:75:b2:80: 29:0c:77:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO8dAUhSN8g1BzioqaL4iuPopkvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZG REY2RDBFRDAeFw0yNTA1MDQwNzU2MDJaFw0yNTA1MDcxMTIzMDJaMDMxMTAvBgNV BAMTKEMwRDgwMEFDODQ4ODY0NkJCMUFDOEI5Mzk4NkMyMzRFMTM2MDM3MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/LH56Ngucn5ZT/p97Rg/A4Dz s7yJixCZ1GpH0dXIFT8rHkvME7b9Y+ThH3CdVDnZbZTenamxIB5RPp3Aj8dGDoX4 mDKliBYEX5R1RlTYb8nQEg84g4JCy580xFuyHfC6DRnFmC1KIWjl73ScUOT/or+8 /IzTOjHypjTyVRzZ/Ati7438eyrt4P0ihXxhjwHk7iOWbXbqmp5C9d7hxcnKik8o 5mRRLtcFF/c/0ahDvMNi30IJIDouSg49jlst1iu1bH/PkEYjPiu2RbypB1Ws6ZOM 7Vpcl5XQMUTqL8jJSr1lu6tU4RTph+5FFBppOSgDMyBGGsE9TWCj40ohCVp/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwNgArISIZGuxrIuTmGwjThNgNwswHwYDVR0j BBgwFoAU1VQkyRU948KF2isAhv927/320O0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMS9ENTU0MjRDOTE1 M0RFM0MyODVEQTJCMDA4NkZGNzZFRkZERjZEMEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZGREY2 RDBFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzEvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2 RUZGREY2RDBFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnEUEfzUR5skWIQGoGn4a3aYlxY7WT8f/NR dEhuw3LJULsGMXDBfklGKXJuVFeeIQePknd/x32rIWzuFYIPxgIahNx0vCHbqOLT itZNhL8lT7extnI7QVLwBWD6GaPuwta4Qrofy83f4Sl0CljaNPL6U2+Y0F7OnwVc OTiGpz4mFNd1sSDjirEArHgBLt0DgQt1I4hrKRTMEvr7Q/7+b3A93+aew4U3aVE9 95l1ZQRUutC3m6RC5zI5G4eFSX+E9lPfKka/s7sTs356DHy4aZnaf59w1CEXvmmg M/QAt4d8XBk3XlHnMb3SBuFCZ+YCnD1xZBsSwT2cJnWygCkMd0Y= -----END CERTIFICATE-----Generated at Tue May 6 06:40:09 2025 by rpki-client