$ rpki-client -vvf repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft File: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft (raw, json) Hash identifier: WtyFIAcBP17zQxm3IV1lTUBB4U95MkasfELmPdxgLUU= Subject key identifier: D9:F6:61:29:59:68:76:1E:06:C4:57:7C:81:50:4F:A2:83:A1:62:32 Authority key identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 Certificate issuer: /CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Certificate serial: 38CD73CC17752F102408E6A52C315A2F4036F3B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft Manifest number: 04C7 Signing time: Sun 27 Apr 2025 00:50:41 +0000 Manifest this update: Sun 27 Apr 2025 00:45:41 +0000 Manifest next update: Wed 30 Apr 2025 11:19:41 +0000 Files and hashes: 1: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl (hash: 4PeYCCRTeBdN8Ih4/gPs73TJd3q+lJMxmPQJK8bC2Sc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 11:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:cd:73:cc:17:75:2f:10:24:08:e6:a5:2c:31:5a:2f:40:36:f3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Validity Not Before: Apr 27 00:45:41 2025 GMT Not After : Apr 30 11:19:41 2025 GMT Subject: CN=D9F661295968761E06C4577C81504FA283A16232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:53:07:63:54:52:a5:32:13:81:5b:8d:9b:0f: fa:d4:ea:ef:4e:66:a6:10:44:05:46:55:24:c8:b7: eb:f2:0c:f7:04:94:89:b8:91:46:b0:fb:62:89:08: 77:1f:9c:63:8e:24:98:fc:8f:18:48:f7:c1:21:c9: 85:26:b8:c1:5b:5a:b4:89:62:1c:a7:87:56:64:bb: 6d:bd:fb:84:00:e3:dd:ab:e2:de:c0:83:02:c3:4e: f6:71:3a:4e:b6:e0:07:98:3a:57:9d:38:c2:3b:7b: e7:31:ff:af:2b:96:4b:c6:59:84:fb:e9:d7:2b:43: f9:2c:14:e1:29:cb:45:a5:55:27:98:a7:75:66:ae: a8:fa:98:e5:31:83:c6:9c:1a:3f:fd:f3:33:25:1c: f8:4e:00:4d:1c:b8:a2:72:5f:c6:cc:0e:23:3c:ee: 2c:6c:30:43:91:31:45:fe:dc:9e:4a:5f:77:a5:72: 79:42:cc:a3:9b:57:b6:17:80:79:0d:96:d4:07:4b: 82:9d:64:b4:be:d5:78:c4:c2:1f:16:38:ad:81:1b: 14:f9:aa:22:67:19:83:e0:9a:62:88:e5:f6:0c:d7: 4b:16:94:56:5d:4d:b8:f2:ee:ae:97:68:0c:96:08: 5e:27:bb:3f:7a:9f:23:ef:64:1f:1f:1f:f3:69:93: d5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F6:61:29:59:68:76:1E:06:C4:57:7C:81:50:4F:A2:83:A1:62:32 X509v3 Authority Key Identifier: keyid:5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:98:04:a0:a5:0b:63:c6:0a:cd:9b:4e:75:1a:b9:50:ec:a6: e3:4e:96:ce:64:4c:2e:6e:73:8d:30:73:ca:a1:92:f5:2c:ff: bb:96:aa:76:28:ec:0d:74:45:b9:7a:d3:f9:54:87:e3:86:1f: 6f:c6:7c:d3:9e:aa:6a:17:3c:c7:ec:16:08:66:1b:d6:1a:cd: 49:be:d4:d4:42:ce:77:e7:85:bf:55:ce:13:61:f6:af:0a:a4: 1f:cd:b5:c2:ce:8c:6c:22:f4:db:1c:54:6c:b0:98:17:fe:37: c3:19:ab:8f:8f:87:e8:32:b0:de:4c:b5:07:cc:18:bb:21:1f: 6f:1d:aa:26:ef:37:a7:a1:0b:ce:36:b2:bc:9d:8c:00:0c:f6: d5:57:95:35:48:3d:76:e6:e1:aa:6a:07:ff:be:10:71:1b:95: 8b:ae:25:eb:e7:ba:0d:70:ab:fe:70:c5:16:0e:7a:63:f8:61: c2:b2:1d:f0:fc:18:b7:ec:02:e9:83:ba:12:6e:55:93:30:e9: a6:32:71:0f:fc:0f:50:58:b9:c4:db:88:b7:a8:93:f6:ea:2f: 88:49:7a:5e:e5:d5:a8:03:21:9f:44:53:c9:6a:28:a3:c1:6a: f0:9d:07:71:f6:e4:46:fa:18:d0:15:e6:e3:f6:08:41:b2:cb: 5d:97:55:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOM1zzBd1LxAkCOalLDFaL0A287kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OURE MEM3OTk0ODAeFw0yNTA0MjcwMDQ1NDFaFw0yNTA0MzAxMTE5NDFaMDMxMTAvBgNV BAMTKEQ5RjY2MTI5NTk2ODc2MUUwNkM0NTc3QzgxNTA0RkEyODNBMTYyMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsUwdjVFKlMhOBW42bD/rU6u9O ZqYQRAVGVSTIt+vyDPcElIm4kUaw+2KJCHcfnGOOJJj8jxhI98EhyYUmuMFbWrSJ Yhynh1Zku229+4QA492r4t7AgwLDTvZxOk624AeYOledOMI7e+cx/68rlkvGWYT7 6dcrQ/ksFOEpy0WlVSeYp3Vmrqj6mOUxg8acGj/98zMlHPhOAE0cuKJyX8bMDiM8 7ixsMEORMUX+3J5KX3elcnlCzKObV7YXgHkNltQHS4KdZLS+1XjEwh8WOK2BGxT5 qiJnGYPgmmKI5fYM10sWlFZdTbjy7q6XaAyWCF4nuz96nyPvZB8fH/Npk9X5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2fZhKVlodh4GxFd8gVBPooOhYjIwHwYDVR0j BBgwFoAUWxIhA9PBxzCuzlmn7SinndDHmUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTcyZWVmOS1lYzZhLTQ1NTgtODE4MS1hMTFmZTY1YjhmZjgvMC81QjEyMjEwM0Qz QzFDNzMwQUVDRTU5QTdFRDI4QTc5REQwQzc5OTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OUREMEM3 OTk0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjE3MmVlZjktZWM2YS00NTU4LTgx ODEtYTExZmU2NWI4ZmY4LzAvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3 OUREMEM3OTk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKYBKClC2PGCs2bTnUauVDspuNOls5kTC5u c40wc8qhkvUs/7uWqnYo7A10Rbl60/lUh+OGH2/GfNOeqmoXPMfsFghmG9YazUm+ 1NRCznfnhb9VzhNh9q8KpB/NtcLOjGwi9NscVGywmBf+N8MZq4+Ph+gysN5MtQfM GLshH28dqibvN6ehC842srydjAAM9tVXlTVIPXbm4apqB/++EHEblYuuJevnug1w q/5wxRYOemP4YcKyHfD8GLfsAumDuhJuVZMw6aYycQ/8D1BYucTbiLeok/bqL4hJ el7l1agDIZ9EU8lqKKPBavCdB3H25Eb6GNAV5uP2CEGyy12XVYw= -----END CERTIFICATE-----Generated at Tue Apr 29 09:26:41 2025 by rpki-client