$ rpki-client -vvf repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft File: 53576544C2D7C29DEC5245A4A81C19686D1160AA.mft (raw, json) Hash identifier: QPfM1N2wnCWcruJst56slj6799gNJaOvmrk/L813RNA= Subject key identifier: FC:28:5A:9B:30:59:74:E3:01:6B:63:68:D9:75:F4:97:B8:25:AE:5D Authority key identifier: 53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA Certificate issuer: /CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Certificate serial: 29B508C5AB80A76FAE69625469361946A6A360B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft Manifest number: 011F Signing time: Sun 15 Jun 2025 06:50:37 +0000 Manifest this update: Sun 15 Jun 2025 06:45:37 +0000 Manifest next update: Wed 18 Jun 2025 16:53:37 +0000 Files and hashes: 1: 53576544C2D7C29DEC5245A4A81C19686D1160AA.crl (hash: 5LjlSTdIVpZXQtB2M0rnNVhmEeHuAqaFvCspU57PJgY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 16:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b5:08:c5:ab:80:a7:6f:ae:69:62:54:69:36:19:46:a6:a3:60:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Validity Not Before: Jun 15 06:45:37 2025 GMT Not After : Jun 18 16:53:37 2025 GMT Subject: CN=FC285A9B305974E3016B6368D975F497B825AE5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1d:ff:e5:62:85:ee:88:f4:dd:5c:02:24:fb: e4:e0:4a:84:2d:1e:ff:4b:d4:cb:53:35:68:86:60: 6c:27:c7:96:5d:0c:39:a3:d2:30:ac:03:6a:cf:b9: c9:ac:3f:29:9d:9b:e5:a0:0a:05:d4:32:ab:34:16: db:cd:6e:5e:c6:8b:18:0c:79:48:ad:c2:e7:0b:bb: 7b:9e:f5:4d:1a:22:79:53:0c:29:ef:b4:b6:af:77: 9b:d1:21:94:50:ff:f2:a7:20:b4:8b:33:21:5a:8d: 1f:73:6f:8d:91:d5:16:e7:b8:0f:89:f2:8c:07:27: 0e:2b:20:12:c4:f0:1f:f5:ae:e4:4c:ba:df:49:68: 1a:ec:7c:4f:50:45:47:72:7f:0e:82:22:ea:dc:46: 9d:bf:02:06:b6:2e:a1:2f:d0:ec:78:54:bf:83:04: 51:59:ed:ac:cc:d9:74:c4:50:b1:da:99:41:c2:50: e5:14:d7:32:40:87:16:e9:01:fc:63:44:9a:2b:cc: ac:44:89:5e:7b:0e:ab:89:c9:c5:02:96:2d:df:2a: d4:4a:3e:68:a5:e8:e0:a2:b0:af:4b:7e:a5:3a:f3: 3f:49:99:f0:4d:48:0e:c7:5d:be:a9:4a:68:dd:00: 5f:50:7c:dd:a6:ae:d4:b5:95:37:04:19:82:ed:d9: 29:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:28:5A:9B:30:59:74:E3:01:6B:63:68:D9:75:F4:97:B8:25:AE:5D X509v3 Authority Key Identifier: keyid:53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:7c:e0:f8:e7:55:f0:ec:5b:f6:89:78:da:8f:a0:e4:1b:d8: a6:f5:19:53:f0:4f:c2:e6:03:c1:c4:50:28:e2:62:b5:e1:2a: 71:a1:8b:74:b7:08:4a:5e:8a:3e:9a:6a:ce:f7:dc:33:a0:ea: fc:ea:90:7e:e5:6b:49:8c:44:1a:dc:4b:63:54:88:0b:66:1c: 5d:77:35:80:a8:c8:90:52:bd:43:f5:a5:de:ca:5d:66:8b:ef: 6f:b0:4b:fc:e5:53:88:d1:21:40:76:e5:19:56:16:11:f3:f4: 0e:8c:0a:c7:a4:23:ec:27:34:c4:8c:a2:72:9c:95:a8:51:8d: 3a:29:75:8b:39:5b:a7:fd:63:3e:d9:25:49:69:c2:d9:b2:e2: b4:cf:fa:e7:5b:2c:2d:5d:d0:16:09:65:31:a7:eb:a1:a1:77: da:b2:c7:4a:3e:63:8d:d3:2d:ff:6f:25:4b:85:68:a9:c5:a5: 99:3d:86:3c:52:da:6a:4d:3d:85:88:c5:07:64:88:f1:e6:e6: 78:93:50:f4:f4:be:ac:ea:04:36:1d:ac:f9:9a:da:52:2f:1f: 28:fe:cf:88:7f:73:53:73:3a:21:b7:85:3a:f9:13:81:27:ea: e8:7e:27:50:00:d1:ce:fa:95:39:0e:ae:1d:db:cf:89:37:31: ec:73:69:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKbUIxauAp2+uaWJUaTYZRqajYLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2 RDExNjBBQTAeFw0yNTA2MTUwNjQ1MzdaFw0yNTA2MTgxNjUzMzdaMDMxMTAvBgNV BAMTKEZDMjg1QTlCMzA1OTc0RTMwMTZCNjM2OEQ5NzVGNDk3QjgyNUFFNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUHf/lYoXuiPTdXAIk++TgSoQt Hv9L1MtTNWiGYGwnx5ZdDDmj0jCsA2rPucmsPymdm+WgCgXUMqs0FtvNbl7GixgM eUitwucLu3ue9U0aInlTDCnvtLavd5vRIZRQ//KnILSLMyFajR9zb42R1RbnuA+J 8owHJw4rIBLE8B/1ruRMut9JaBrsfE9QRUdyfw6CIurcRp2/Aga2LqEv0Ox4VL+D BFFZ7azM2XTEULHamUHCUOUU1zJAhxbpAfxjRJorzKxEiV57DquJycUCli3fKtRK Pmil6OCisK9LfqU68z9JmfBNSA7HXb6pSmjdAF9QfN2mrtS1lTcEGYLt2SnXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/ChamzBZdOMBa2No2XX0l7glrl0wHwYDVR0j BBgwFoAUU1dlRMLXwp3sUkWkqBwZaG0RYKowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTdlYTBlNi00M2VhLTQzMWUtYTAxMy0wYjIwMWIyYzBkOWUvMC81MzU3NjU0NEMy RDdDMjlERUM1MjQ1QTRBODFDMTk2ODZEMTE2MEFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2RDEx NjBBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3ZWEwZTYtNDNlYS00MzFlLWEw MTMtMGIyMDFiMmMwZDllLzAvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5 Njg2RDExNjBBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACh84PjnVfDsW/aJeNqPoOQb2Kb1GVPwT8Lm A8HEUCjiYrXhKnGhi3S3CEpeij6aas733DOg6vzqkH7la0mMRBrcS2NUiAtmHF13 NYCoyJBSvUP1pd7KXWaL72+wS/zlU4jRIUB25RlWFhHz9A6MCsekI+wnNMSMonKc lahRjTopdYs5W6f9Yz7ZJUlpwtmy4rTP+udbLC1d0BYJZTGn66Ghd9qyx0o+Y43T Lf9vJUuFaKnFpZk9hjxS2mpNPYWIxQdkiPHm5niTUPT0vqzqBDYdrPma2lIvHyj+ z4h/c1NzOiG3hTr5E4En6uh+J1AA0c76lTkOrh3bz4k3MexzafI= -----END CERTIFICATE-----Generated at Tue Jun 17 17:35:02 2025 by rpki-client