$ rpki-client -vvf repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft File: 5561020450CCF35D395065D493AABB1C3F275482.mft (raw, json) Hash identifier: TdRYp8V3R2QqQ0T81jdqmxfiB5g8ibIiUlo4xuVGp+I= Subject key identifier: EA:24:CA:65:E8:4A:38:59:83:63:91:85:19:52:8C:C3:B2:58:6B:68 Authority key identifier: 55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 Certificate issuer: /CN=5561020450CCF35D395065D493AABB1C3F275482 Certificate serial: 7C8C4008EF9D26C941B511A9DF9EE64D70ACF736 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject info access: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft Manifest number: 022F Signing time: Mon 03 Nov 2025 01:31:58 +0000 Manifest this update: Mon 03 Nov 2025 01:26:58 +0000 Manifest next update: Thu 06 Nov 2025 05:30:58 +0000 Files and hashes: 1: 5561020450CCF35D395065D493AABB1C3F275482.crl (hash: KX1WW5FFTk7JcKVtKAK0OJNNhVtTsoUi+lgwlAhDM5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 05:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:8c:40:08:ef:9d:26:c9:41:b5:11:a9:df:9e:e6:4d:70:ac:f7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5561020450CCF35D395065D493AABB1C3F275482 Validity Not Before: Nov 3 01:26:58 2025 GMT Not After : Nov 6 05:30:58 2025 GMT Subject: CN=EA24CA65E84A38598363918519528CC3B2586B68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:41:fd:f8:cf:a7:46:7e:69:4f:75:7a:c4:3e: 33:53:0c:b4:06:06:29:98:f0:e0:c3:bc:7a:a7:37: ff:49:e3:06:00:e3:07:97:e2:23:81:2f:6c:b4:6e: 13:ab:25:43:60:a3:9d:c5:36:2b:26:94:0c:db:ad: 5d:2b:2c:aa:89:7a:a5:de:d2:05:32:75:5f:49:f6: cf:b2:25:e0:a0:83:16:c3:86:40:c5:73:2a:7f:d2: d9:80:ba:e3:c6:86:c0:89:b0:d9:c6:91:31:38:89: 24:9e:74:3e:b5:9b:5e:d6:be:b2:a1:bd:c4:7f:46: d2:a1:2a:5e:09:7d:ae:2e:d5:e4:a9:d6:1c:97:9e: 51:83:0d:22:c2:9a:83:44:40:e8:c3:32:3b:00:7b: 6e:3f:4b:47:02:c9:f5:60:2d:53:56:9a:3e:e8:38: 1c:5a:25:1f:60:a8:36:99:fc:99:75:e5:b8:ef:22: 4f:cb:01:ce:a1:e4:6e:ea:80:c6:0d:8a:20:20:03: db:77:9e:cd:74:bb:e5:e4:23:6e:04:a5:04:0f:dd: 15:e0:37:44:af:36:9a:da:b8:a1:32:5e:21:4d:04: 81:eb:c4:fb:53:a0:fb:5f:59:12:af:b9:93:c6:1f: 53:05:8c:63:ae:af:00:7e:b8:93:c4:45:c9:a3:0b: 16:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:24:CA:65:E8:4A:38:59:83:63:91:85:19:52:8C:C3:B2:58:6B:68 X509v3 Authority Key Identifier: keyid:55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:3a:5d:12:f7:67:21:76:f9:5d:51:9a:71:3b:cb:40:67:bc: 56:07:50:d8:11:ae:b8:5a:4b:c0:5f:59:61:01:1f:f4:d2:f7: 0c:51:a3:8a:5c:4a:83:9f:83:d4:4f:99:0e:c4:ae:67:dd:71: 9e:85:2f:29:5e:2f:3e:25:3d:9b:bf:c8:75:1b:97:62:84:b7: d4:aa:13:a5:0b:33:57:f9:58:bb:fd:36:b7:d5:76:45:1a:9c: 0b:28:90:9c:5d:f3:ea:93:e6:0b:74:2c:80:5a:d9:95:95:81: ec:40:aa:cf:bb:34:8c:d5:36:02:6e:1a:1e:ff:b6:44:07:15: b4:ac:b6:cd:41:73:11:e8:ac:47:12:da:47:6d:b7:79:18:68: e4:26:f0:12:af:13:15:80:40:4d:c1:59:1e:50:e3:d3:7c:4e: 1a:11:46:15:9a:e7:03:65:b3:4a:e8:6f:6b:21:f3:ba:2e:9e: 27:cf:21:23:37:2d:67:2c:ac:36:70:b2:dd:fa:40:b8:e4:7c: 2f:ee:91:04:ba:cc:6c:74:43:b2:9d:47:3e:ec:c8:83:60:74: be:97:a6:47:ae:ec:ca:fd:c7:f4:9a:e0:d3:c8:f6:ca:47:b6: 12:08:90:69:03:7d:83:84:0a:1f:ea:e1:5d:53:36:6e:54:68: 58:16:dd:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfIxACO+dJslBtRGp357mTXCs9zYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMz RjI3NTQ4MjAeFw0yNTExMDMwMTI2NThaFw0yNTExMDYwNTMwNThaMDMxMTAvBgNV BAMTKEVBMjRDQTY1RTg0QTM4NTk4MzYzOTE4NTE5NTI4Q0MzQjI1ODZCNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQf34z6dGfmlPdXrEPjNTDLQG BimY8ODDvHqnN/9J4wYA4weX4iOBL2y0bhOrJUNgo53FNismlAzbrV0rLKqJeqXe 0gUydV9J9s+yJeCggxbDhkDFcyp/0tmAuuPGhsCJsNnGkTE4iSSedD61m17WvrKh vcR/RtKhKl4Jfa4u1eSp1hyXnlGDDSLCmoNEQOjDMjsAe24/S0cCyfVgLVNWmj7o OBxaJR9gqDaZ/Jl15bjvIk/LAc6h5G7qgMYNiiAgA9t3ns10u+XkI24EpQQP3RXg N0SvNprauKEyXiFNBIHrxPtToPtfWRKvuZPGH1MFjGOurwB+uJPERcmjCxZFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6iTKZehKOFmDY5GFGVKMw7JYa2gwHwYDVR0j BBgwFoAUVWECBFDM8105UGXUk6q7HD8nVIIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDdkNWJiNi05ZGEwLTRjM2MtOTM5NS0wNjQ1OTZhNGY3ODkvMC81NTYxMDIwNDUw Q0NGMzVEMzk1MDY1RDQ5M0FBQkIxQzNGMjc1NDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMzRjI3 NTQ4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA3ZDViYjYtOWRhMC00YzNjLTkz OTUtMDY0NTk2YTRmNzg5LzAvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJC MUMzRjI3NTQ4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHA6XRL3ZyF2+V1RmnE7y0BnvFYHUNgRrrha S8BfWWEBH/TS9wxRo4pcSoOfg9RPmQ7ErmfdcZ6FLyleLz4lPZu/yHUbl2KEt9Sq E6ULM1f5WLv9NrfVdkUanAsokJxd8+qT5gt0LIBa2ZWVgexAqs+7NIzVNgJuGh7/ tkQHFbSsts1BcxHorEcS2kdtt3kYaOQm8BKvExWAQE3BWR5Q49N8ThoRRhWa5wNl s0rob2sh87ounifPISM3LWcsrDZwst36QLjkfC/ukQS6zGx0Q7KdRz7syINgdL6X pkeu7Mr9x/Sa4NPI9spHthIIkGkDfYOECh/q4V1TNm5UaFgW3ao= -----END CERTIFICATE-----Generated at Tue Nov 4 19:10:56 2025 by rpki-client