$ rpki-client -vvf repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft File: 5561020450CCF35D395065D493AABB1C3F275482.mft (raw, json) Hash identifier: AYRwKIhmAhfvA4qQuDlh+miemVPQaFp/50MA1qyUz2o= Subject key identifier: 45:47:74:8E:D4:A3:82:90:08:F0:81:DC:AB:01:43:D9:05:08:94:17 Authority key identifier: 55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 Certificate issuer: /CN=5561020450CCF35D395065D493AABB1C3F275482 Certificate serial: 7E7C3D0E5DF01FA28E5A2F9A426FA0E51F7E1418 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject info access: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft Manifest number: 01F1 Signing time: Tue 17 Jun 2025 04:31:57 +0000 Manifest this update: Tue 17 Jun 2025 04:26:57 +0000 Manifest next update: Fri 20 Jun 2025 09:00:57 +0000 Files and hashes: 1: 5561020450CCF35D395065D493AABB1C3F275482.crl (hash: 7Z3QQyCzAn3N4WLsCxPOKb3yAJ8Y57SsY2ygP4ytFoM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 09:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:7c:3d:0e:5d:f0:1f:a2:8e:5a:2f:9a:42:6f:a0:e5:1f:7e:14:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5561020450CCF35D395065D493AABB1C3F275482 Validity Not Before: Jun 17 04:26:57 2025 GMT Not After : Jun 20 09:00:57 2025 GMT Subject: CN=4547748ED4A3829008F081DCAB0143D905089417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4e:7c:26:c7:4b:02:c8:97:ba:04:e2:94:d6: 48:a2:c8:c0:74:54:fd:05:f7:09:99:f4:fa:f1:0d: 4b:8d:43:b9:53:2e:34:e0:f3:d7:4c:82:1d:58:6d: 44:6a:d1:2d:cb:22:9d:03:b8:ef:8f:aa:57:a8:2b: ba:f4:16:fb:34:90:5b:ce:fd:9c:e1:07:4d:25:c9: 10:65:4c:bb:6c:49:70:80:0a:5d:5e:67:5d:e3:e7: b0:c3:af:c7:af:a8:ed:b4:a2:1c:b9:3a:29:34:2e: 6b:d1:92:8c:ef:a7:68:ef:53:4f:e7:bf:dd:fb:d5: 57:7e:3a:a6:49:57:60:54:fb:1f:fa:28:f7:f2:74: 4f:0b:63:8e:46:8e:f1:62:0c:32:1c:2e:eb:10:75: 2d:22:60:f4:96:40:9b:b2:a7:92:e8:15:76:be:96: bc:ce:97:a4:f2:cb:b5:38:65:9a:2e:99:27:1a:87: a6:c5:0a:a7:77:70:2c:a4:50:7c:fb:4b:01:bc:af: 15:60:e2:c0:ce:f8:b7:54:00:07:5c:37:31:f2:ad: cd:7c:c3:17:67:f2:dd:13:1b:e6:67:c2:eb:ca:4b: 65:67:80:d0:e6:05:c0:a7:bb:d1:7f:66:5f:5d:3d: a2:86:34:94:cc:53:70:2a:1a:a1:43:97:74:e9:2a: 41:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:47:74:8E:D4:A3:82:90:08:F0:81:DC:AB:01:43:D9:05:08:94:17 X509v3 Authority Key Identifier: keyid:55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:9c:39:65:1d:23:cf:79:fd:26:50:8d:47:2d:c8:60:8d:26: 99:cb:a6:30:81:9b:8e:7d:39:72:b5:c9:91:c9:17:90:5f:d5: 9a:27:49:62:f7:78:8e:87:2a:ff:4e:0f:5a:93:76:80:e4:16: 83:8f:82:7c:93:5e:20:eb:31:e0:e8:e6:9e:79:76:c7:d2:a9: c2:48:94:5d:fc:4d:79:82:62:fb:51:92:2f:e9:88:de:90:cf: 6c:71:12:bd:42:90:a5:a2:aa:33:ee:3e:a5:39:4a:e8:ed:8d: 85:3b:64:49:dd:e1:39:89:2a:cb:fe:bd:62:84:1f:8e:db:88: c5:24:ae:df:47:bd:95:9e:47:67:6c:6a:93:be:4a:1c:83:8d: 12:b1:2b:0f:3f:9b:ff:ba:26:b0:3e:29:71:92:9e:80:f8:12: 2e:88:fe:64:e0:5a:42:4a:72:b1:16:13:3c:06:69:ae:0d:75: d7:98:e5:61:b6:11:ca:7f:53:8d:fb:fd:97:35:25:4a:c0:05: f4:4c:2d:c8:ed:05:70:12:a0:84:e3:5a:d8:b6:f6:0f:ab:f3: c4:83:4b:a3:17:92:a0:e6:12:c3:1a:9e:81:d8:8e:a5:60:98: fe:f4:f5:29:4f:cc:4f:05:b9:c5:15:d9:56:c6:50:72:9e:5a: 8d:ca:c1:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfnw9Dl3wH6KOWi+aQm+g5R9+FBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMz RjI3NTQ4MjAeFw0yNTA2MTcwNDI2NTdaFw0yNTA2MjAwOTAwNTdaMDMxMTAvBgNV BAMTKDQ1NDc3NDhFRDRBMzgyOTAwOEYwODFEQ0FCMDE0M0Q5MDUwODk0MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Tnwmx0sCyJe6BOKU1kiiyMB0 VP0F9wmZ9PrxDUuNQ7lTLjTg89dMgh1YbURq0S3LIp0DuO+PqleoK7r0Fvs0kFvO /ZzhB00lyRBlTLtsSXCACl1eZ13j57DDr8evqO20ohy5Oik0LmvRkozvp2jvU0/n v9371Vd+OqZJV2BU+x/6KPfydE8LY45GjvFiDDIcLusQdS0iYPSWQJuyp5LoFXa+ lrzOl6Tyy7U4ZZoumScah6bFCqd3cCykUHz7SwG8rxVg4sDO+LdUAAdcNzHyrc18 wxdn8t0TG+ZnwuvKS2VngNDmBcCnu9F/Zl9dPaKGNJTMU3AqGqFDl3TpKkHFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURUd0jtSjgpAI8IHcqwFD2QUIlBcwHwYDVR0j BBgwFoAUVWECBFDM8105UGXUk6q7HD8nVIIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDdkNWJiNi05ZGEwLTRjM2MtOTM5NS0wNjQ1OTZhNGY3ODkvMC81NTYxMDIwNDUw Q0NGMzVEMzk1MDY1RDQ5M0FBQkIxQzNGMjc1NDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMzRjI3 NTQ4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA3ZDViYjYtOWRhMC00YzNjLTkz OTUtMDY0NTk2YTRmNzg5LzAvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJC MUMzRjI3NTQ4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKcOWUdI895/SZQjUctyGCNJpnLpjCBm459 OXK1yZHJF5Bf1ZonSWL3eI6HKv9OD1qTdoDkFoOPgnyTXiDrMeDo5p55dsfSqcJI lF38TXmCYvtRki/piN6Qz2xxEr1CkKWiqjPuPqU5SujtjYU7ZEnd4TmJKsv+vWKE H47biMUkrt9HvZWeR2dsapO+ShyDjRKxKw8/m/+6JrA+KXGSnoD4Ei6I/mTgWkJK crEWEzwGaa4NddeY5WG2Ecp/U437/Zc1JUrABfRMLcjtBXASoITjWti29g+r88SD S6MXkqDmEsManoHYjqVgmP709SlPzE8FucUV2VbGUHKeWo3KweE= -----END CERTIFICATE-----Generated at Wed Jun 18 17:17:16 2025 by rpki-client