$ rpki-client -vvf repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft File: 5561020450CCF35D395065D493AABB1C3F275482.mft (raw, json) Hash identifier: yljavYEy4PhfSD0ebGQgpicrCy/8RhGXX0o9EsxtSY0= Subject key identifier: BB:29:74:CB:12:46:9E:BA:2C:73:B4:26:29:6F:9C:D8:6D:AE:26:7F Authority key identifier: 55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 Certificate issuer: /CN=5561020450CCF35D395065D493AABB1C3F275482 Certificate serial: 55D04F8EF6623F1BC2CD78FA5283033E661C4B90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject info access: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft Manifest number: 020A Signing time: Mon 11 Aug 2025 05:12:04 +0000 Manifest this update: Mon 11 Aug 2025 05:07:04 +0000 Manifest next update: Thu 14 Aug 2025 05:56:04 +0000 Files and hashes: 1: 5561020450CCF35D395065D493AABB1C3F275482.crl (hash: 9k9RbyqxbcGK2vwLf4HR9gMCoJSRuwp48EXsQWbSuSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:d0:4f:8e:f6:62:3f:1b:c2:cd:78:fa:52:83:03:3e:66:1c:4b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5561020450CCF35D395065D493AABB1C3F275482 Validity Not Before: Aug 11 05:07:04 2025 GMT Not After : Aug 14 05:56:04 2025 GMT Subject: CN=BB2974CB12469EBA2C73B426296F9CD86DAE267F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6a:0b:ee:ec:05:b8:de:88:98:d7:c2:27:aa: 63:32:b2:54:29:a5:ef:9d:34:c9:3e:53:e2:3e:70: ac:ff:17:6e:23:70:c0:5e:80:6d:50:f0:fb:8d:4a: b2:8f:f2:d5:af:55:13:21:22:88:d7:da:7f:f4:30: 87:28:74:2d:82:13:d2:66:e1:f9:89:3d:2f:53:c9: 4e:87:25:93:f1:d1:fd:b1:5f:41:2c:af:f4:e7:31: 96:22:05:2e:c9:60:71:54:62:61:e3:5a:e5:a6:a9: 30:73:a3:c3:c8:1a:fc:37:5e:8f:03:8b:1d:99:cc: 3f:08:03:32:b7:d8:88:ae:55:98:dc:0f:f1:d8:8b: c0:e8:c4:4e:22:d5:c5:0a:6c:a6:83:9a:b8:52:dd: fc:cd:d9:86:2c:90:30:8b:7c:4c:3d:fe:cb:83:86: 0e:df:ad:4a:8e:f2:17:95:32:ec:78:b7:ee:b1:87: 5e:f5:3c:f8:24:7f:b5:b6:96:34:20:7d:70:a1:73: d8:38:4b:08:63:71:c5:0b:0a:4e:e8:7b:31:cc:c0: 66:2f:27:62:3b:c5:a2:e1:e1:46:32:6a:00:ea:e1: 92:f4:ff:05:20:c7:7f:7c:f5:2a:70:83:82:e5:cb: c3:c5:02:a6:5e:fd:7d:b8:eb:9a:a6:10:05:5e:3e: b7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:29:74:CB:12:46:9E:BA:2C:73:B4:26:29:6F:9C:D8:6D:AE:26:7F X509v3 Authority Key Identifier: keyid:55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:43:fc:7f:d6:ed:56:93:c1:95:ba:e7:2c:84:da:ea:33:74: 98:6a:48:56:fd:f0:11:2c:e1:bf:e9:e3:90:40:73:d3:fd:d5: 91:70:93:94:dd:c3:32:db:8a:19:6a:29:45:ba:11:81:46:6c: f9:7d:06:65:57:ab:d5:a2:08:97:9b:51:12:6d:2b:4d:ea:36: 7e:68:5f:82:fc:df:d1:31:23:fa:21:29:05:f9:27:61:db:4f: e8:6b:04:cd:65:eb:b3:8a:72:e7:c6:ff:e5:34:23:c7:9c:f9: 5b:60:fd:40:63:5b:28:e8:ed:b1:cf:06:da:06:9c:dd:97:a1: 66:9d:bd:65:ec:77:06:0d:7c:d6:ac:6c:53:4c:1c:28:1a:d3: 3e:0f:10:2b:1e:86:49:ee:0f:c0:bd:bc:31:5c:a8:fd:b8:23: 3c:74:d2:3b:1c:6b:9b:54:91:ac:e6:c3:3d:a6:3b:4f:74:88: ca:61:95:a0:aa:cd:d6:95:41:b0:88:66:89:4a:25:8d:cd:fb: 61:e7:b0:ba:7b:12:72:ac:e2:5f:d1:2c:f0:59:35:74:b7:bd: 56:28:98:55:04:9a:46:df:6f:32:8a:4a:5c:32:f5:ec:b7:40: fe:73:c7:67:fc:03:f5:27:22:89:94:f2:51:ef:a1:b0:42:ff: 18:36:bd:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVdBPjvZiPxvCzXj6UoMDPmYcS5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMz RjI3NTQ4MjAeFw0yNTA4MTEwNTA3MDRaFw0yNTA4MTQwNTU2MDRaMDMxMTAvBgNV BAMTKEJCMjk3NENCMTI0NjlFQkEyQzczQjQyNjI5NkY5Q0Q4NkRBRTI2N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCragvu7AW43oiY18InqmMyslQp pe+dNMk+U+I+cKz/F24jcMBegG1Q8PuNSrKP8tWvVRMhIojX2n/0MIcodC2CE9Jm 4fmJPS9TyU6HJZPx0f2xX0Esr/TnMZYiBS7JYHFUYmHjWuWmqTBzo8PIGvw3Xo8D ix2ZzD8IAzK32IiuVZjcD/HYi8DoxE4i1cUKbKaDmrhS3fzN2YYskDCLfEw9/suD hg7frUqO8heVMux4t+6xh171PPgkf7W2ljQgfXChc9g4SwhjccULCk7oezHMwGYv J2I7xaLh4UYyagDq4ZL0/wUgx3989Spwg4Lly8PFAqZe/X2465qmEAVePrc/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuyl0yxJGnrosc7QmKW+c2G2uJn8wHwYDVR0j BBgwFoAUVWECBFDM8105UGXUk6q7HD8nVIIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDdkNWJiNi05ZGEwLTRjM2MtOTM5NS0wNjQ1OTZhNGY3ODkvMC81NTYxMDIwNDUw Q0NGMzVEMzk1MDY1RDQ5M0FBQkIxQzNGMjc1NDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMzRjI3 NTQ4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA3ZDViYjYtOWRhMC00YzNjLTkz OTUtMDY0NTk2YTRmNzg5LzAvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJC MUMzRjI3NTQ4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVD/H/W7VaTwZW65yyE2uozdJhqSFb98BEs 4b/p45BAc9P91ZFwk5TdwzLbihlqKUW6EYFGbPl9BmVXq9WiCJebURJtK03qNn5o X4L839ExI/ohKQX5J2HbT+hrBM1l67OKcufG/+U0I8ec+Vtg/UBjWyjo7bHPBtoG nN2XoWadvWXsdwYNfNasbFNMHCga0z4PECsehknuD8C9vDFcqP24Izx00jsca5tU kazmwz2mO090iMphlaCqzdaVQbCIZolKJY3N+2HnsLp7EnKs4l/RLPBZNXS3vVYo mFUEmkbfbzKKSlwy9ey3QP5zx2f8A/UnIomU8lHvobBC/xg2vWI= -----END CERTIFICATE-----Generated at Mon Aug 11 09:57:05 2025 by rpki-client