$ rpki-client -vvf repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft File: 5561020450CCF35D395065D493AABB1C3F275482.mft (raw, json) Hash identifier: I0Xs7haAz5jTMmPP5WbM+W0OXNYcBown3P5ujowROuA= Subject key identifier: 11:79:27:13:F8:5F:3E:C3:79:4B:AF:32:58:F5:9B:0C:95:99:B3:72 Authority key identifier: 55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 Certificate issuer: /CN=5561020450CCF35D395065D493AABB1C3F275482 Certificate serial: 66DEADC4CF881628A94F6A1AD976AB773F8C066B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject info access: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft Manifest number: 01DC Signing time: Tue 29 Apr 2025 21:01:55 +0000 Manifest this update: Tue 29 Apr 2025 20:56:55 +0000 Manifest next update: Sat 03 May 2025 08:56:55 +0000 Files and hashes: 1: 5561020450CCF35D395065D493AABB1C3F275482.crl (hash: ruPs6+9EXK1I4/J8XkQNUOhK7Wy751h8TtD9zWz/K0Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 08:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:de:ad:c4:cf:88:16:28:a9:4f:6a:1a:d9:76:ab:77:3f:8c:06:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5561020450CCF35D395065D493AABB1C3F275482 Validity Not Before: Apr 29 20:56:55 2025 GMT Not After : May 3 08:56:55 2025 GMT Subject: CN=11792713F85F3EC3794BAF3258F59B0C9599B372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:24:bb:34:73:4b:4a:0f:a3:aa:8e:16:e9: a3:53:29:7c:07:f6:2e:72:54:46:13:6e:64:27:4a: 2b:90:80:98:ec:ee:1b:5c:65:70:12:94:6f:04:e9: 15:b5:8e:17:0b:5a:24:61:13:3e:f4:c3:1d:92:f5: 71:96:5e:db:2f:06:0e:f7:ff:04:ec:50:13:bf:b9: df:8f:36:c0:a4:e7:44:a5:fc:98:11:1f:f1:e5:c9: 07:18:c3:fa:0d:e4:06:fe:ec:3c:2b:24:a9:f8:69: cd:7d:f4:cc:39:a8:27:84:53:6f:48:51:81:4c:62: 3a:76:ad:fc:d7:4a:e3:0c:38:e1:2d:d2:52:90:03: bd:03:de:1d:db:2d:1e:97:da:0c:9e:23:63:21:03: 3c:19:26:75:e4:f0:63:b4:c4:16:23:b4:0b:fa:22: 14:db:75:50:4e:e9:58:c6:93:4f:1d:1b:ba:77:7b: 10:27:e8:b0:d3:16:9d:b1:64:c2:86:bc:7c:a5:fe: c8:57:89:86:47:91:ad:c4:16:d6:a0:0e:a1:7e:77: 23:cb:8c:95:ec:46:e1:0a:4b:28:33:44:3e:04:c7: 1d:f8:27:db:ec:bd:33:98:96:7a:73:bd:0b:7d:5a: 7d:bb:d3:4e:85:a9:d0:e2:e9:06:51:40:9d:44:42: c1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:79:27:13:F8:5F:3E:C3:79:4B:AF:32:58:F5:9B:0C:95:99:B3:72 X509v3 Authority Key Identifier: keyid:55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:18:bf:4c:15:c4:2e:9a:33:0f:37:e1:b6:96:6d:e7:df:b7: 97:ea:88:95:31:60:5c:e0:24:a6:dc:bf:ba:fc:0b:6b:4f:e6: d5:66:f5:03:72:cc:16:bf:9f:a0:eb:a1:df:c3:19:c4:10:dd: eb:71:ac:1f:64:4b:5c:67:4f:75:16:ba:18:b6:e0:34:52:a7: 21:26:01:80:1d:a9:31:e8:1c:ed:7b:67:52:9f:96:02:f7:cb: 68:cb:43:b3:a0:eb:51:23:30:a8:62:0c:82:2e:1e:8a:fc:76: f9:fa:e0:d1:c9:4a:88:88:50:32:ea:f6:d1:e2:81:72:40:26: 40:dd:b7:d8:14:8e:63:96:fc:bb:0a:89:48:b5:64:55:3c:df: 79:7e:b6:bb:5a:8a:82:16:8d:7e:c8:b1:cb:f6:15:af:f2:e9: 89:25:c6:a1:6f:6f:02:7b:51:7c:cd:89:0e:84:9a:6d:20:ca: 5c:bd:71:6b:8c:1e:3c:f5:1a:76:33:24:7a:8e:d2:67:3c:77: 4a:2f:0b:c2:e0:db:64:0d:d9:e7:28:76:c2:c9:74:f2:d9:d8: 50:06:ff:74:5f:96:c5:2c:ee:2b:32:b4:85:f0:1f:d3:a9:c7: 1f:ec:49:35:5a:c5:61:4b:27:84:5f:6d:19:c7:c7:34:07:f0: 87:e9:93:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZt6txM+IFiipT2oa2Xardz+MBmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMz RjI3NTQ4MjAeFw0yNTA0MjkyMDU2NTVaFw0yNTA1MDMwODU2NTVaMDMxMTAvBgNV BAMTKDExNzkyNzEzRjg1RjNFQzM3OTRCQUYzMjU4RjU5QjBDOTU5OUIzNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuxCS7NHNLSg+jqo4W6aNTKXwH 9i5yVEYTbmQnSiuQgJjs7htcZXASlG8E6RW1jhcLWiRhEz70wx2S9XGWXtsvBg73 /wTsUBO/ud+PNsCk50Sl/JgRH/HlyQcYw/oN5Ab+7DwrJKn4ac199Mw5qCeEU29I UYFMYjp2rfzXSuMMOOEt0lKQA70D3h3bLR6X2gyeI2MhAzwZJnXk8GO0xBYjtAv6 IhTbdVBO6VjGk08dG7p3exAn6LDTFp2xZMKGvHyl/shXiYZHka3EFtagDqF+dyPL jJXsRuEKSygzRD4Exx34J9vsvTOYlnpzvQt9Wn27006FqdDi6QZRQJ1EQsHrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEXknE/hfPsN5S68yWPWbDJWZs3IwHwYDVR0j BBgwFoAUVWECBFDM8105UGXUk6q7HD8nVIIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDdkNWJiNi05ZGEwLTRjM2MtOTM5NS0wNjQ1OTZhNGY3ODkvMC81NTYxMDIwNDUw Q0NGMzVEMzk1MDY1RDQ5M0FBQkIxQzNGMjc1NDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMzRjI3 NTQ4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA3ZDViYjYtOWRhMC00YzNjLTkz OTUtMDY0NTk2YTRmNzg5LzAvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJC MUMzRjI3NTQ4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkYv0wVxC6aMw834baWbefft5fqiJUxYFzg JKbcv7r8C2tP5tVm9QNyzBa/n6Drod/DGcQQ3etxrB9kS1xnT3UWuhi24DRSpyEm AYAdqTHoHO17Z1KflgL3y2jLQ7Og61EjMKhiDIIuHor8dvn64NHJSoiIUDLq9tHi gXJAJkDdt9gUjmOW/LsKiUi1ZFU833l+trtaioIWjX7Iscv2Fa/y6YklxqFvbwJ7 UXzNiQ6Emm0gyly9cWuMHjz1GnYzJHqO0mc8d0ovC8Lg22QN2ecodsLJdPLZ2FAG /3RflsUs7isytIXwH9Opxx/sSTVaxWFLJ4RfbRnHxzQH8IfpkyI= -----END CERTIFICATE-----Generated at Thu May 1 08:51:16 2025 by rpki-client