$ rpki-client -vvf repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft File: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft (raw, json) Hash identifier: b6+Qh2WpSooaLhsH0llXc2fZ0xTwwHBrV7jDxWqecgQ= Subject key identifier: 42:01:28:44:1C:0B:10:FE:6D:0C:44:FF:35:28:B0:75:BF:4C:72:A4 Authority key identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 Certificate issuer: /CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Certificate serial: 3556049BC4CEFAA19146E8993A4ADC2A243B060B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft Manifest number: 04DD Signing time: Sun 15 Jun 2025 09:00:41 +0000 Manifest this update: Sun 15 Jun 2025 08:55:41 +0000 Manifest next update: Wed 18 Jun 2025 13:27:41 +0000 Files and hashes: 1: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl (hash: 1EcWjQXrdcRCMta99mZvoneqHMhZdqbYrimxAwMGiMA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 13:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:56:04:9b:c4:ce:fa:a1:91:46:e8:99:3a:4a:dc:2a:24:3b:06:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Validity Not Before: Jun 15 08:55:41 2025 GMT Not After : Jun 18 13:27:41 2025 GMT Subject: CN=420128441C0B10FE6D0C44FF3528B075BF4C72A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4e:a7:6b:4b:5b:32:f4:25:95:00:cd:32:ce: 5e:a8:6d:d2:9b:c4:1b:15:06:5c:29:62:03:83:ab: 58:11:2c:88:31:84:7b:31:1c:8b:7d:3c:87:24:1a: bd:8d:e5:3a:bf:d7:df:9c:b6:e6:b3:48:01:dc:ff: 81:6c:22:a7:4d:79:2e:b1:32:70:72:3f:5a:04:f1: d6:e5:aa:83:67:36:a1:e5:e9:22:59:95:38:7e:0b: c2:98:6b:6f:af:73:3c:4c:ec:b6:d4:69:66:b4:70: 9e:bf:21:3f:b0:fd:03:f3:21:9e:10:6e:98:b4:0a: 6d:fd:41:ee:6a:9f:36:bc:bd:43:00:bd:23:30:c7: 69:c2:78:d6:93:d0:3d:d4:29:98:07:07:81:82:a2: 6c:be:cb:ab:d6:0d:6f:74:31:de:2c:c5:89:32:64: f8:e8:7a:3f:05:df:47:89:d7:b8:19:7e:ab:9b:b8: e1:68:e5:ba:85:84:4d:02:53:83:7d:f6:bb:9f:d5: a1:30:38:4b:82:06:48:bc:4a:1c:16:0b:99:b4:48: 49:49:ad:f3:37:f9:66:19:8f:2f:01:91:e0:b7:c4: 4d:f1:6a:8b:4f:33:0c:8c:24:a5:33:68:3b:b3:5c: 7d:ee:96:db:37:84:5a:fd:4e:98:2f:f8:a2:23:a1: cc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:01:28:44:1C:0B:10:FE:6D:0C:44:FF:35:28:B0:75:BF:4C:72:A4 X509v3 Authority Key Identifier: keyid:5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:56:48:8b:67:7d:70:d8:52:7a:3c:7f:85:0d:7d:53:a6:b7: 65:64:e1:b7:56:a0:84:9a:be:7a:06:2c:25:21:7a:63:53:d6: d4:2e:73:73:cc:b7:1e:3a:61:bb:b9:d8:69:b0:93:a5:6d:b2: e3:27:f6:ee:5f:97:22:7d:65:a2:80:6a:65:e4:07:7e:bf:c1: 17:14:2a:0c:1f:e1:fd:15:d0:d3:0c:52:f6:10:02:40:d3:30: a1:bb:83:d8:19:c5:4c:a3:21:f1:52:f5:e0:c3:f6:40:a1:e7: fc:2b:f3:87:75:7e:b0:b3:6d:4e:a9:05:f3:23:12:5a:e8:5f: 67:60:6a:ef:65:b8:6f:5e:3b:ae:b4:25:99:a8:1d:65:2a:40: 1b:94:ff:46:f3:11:c8:88:54:7e:3d:51:7c:88:2f:2b:9d:f4: 87:2a:a5:22:b9:03:9e:1b:b0:6d:0e:89:0b:a8:8d:92:dc:74: 40:d6:db:26:35:b0:7f:a1:d3:4f:5b:7e:a6:d8:39:dc:57:f6: c7:09:ce:c2:57:0b:9a:70:bb:8f:c3:15:d9:ac:4c:e7:09:83: a6:80:b6:17:a6:b9:64:bf:76:8f:d7:bd:3d:77:37:b3:b2:80: 17:d7:bd:01:c8:2c:ce:88:74:a4:00:04:9b:ca:94:6e:80:1a: fa:22:9a:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNVYEm8TO+qGRRuiZOkrcKiQ7BgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OURE MEM3OTk0ODAeFw0yNTA2MTUwODU1NDFaFw0yNTA2MTgxMzI3NDFaMDMxMTAvBgNV BAMTKDQyMDEyODQ0MUMwQjEwRkU2RDBDNDRGRjM1MjhCMDc1QkY0QzcyQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6TqdrS1sy9CWVAM0yzl6obdKb xBsVBlwpYgODq1gRLIgxhHsxHIt9PIckGr2N5Tq/19+ctuazSAHc/4FsIqdNeS6x MnByP1oE8dblqoNnNqHl6SJZlTh+C8KYa2+vczxM7LbUaWa0cJ6/IT+w/QPzIZ4Q bpi0Cm39Qe5qnza8vUMAvSMwx2nCeNaT0D3UKZgHB4GComy+y6vWDW90Md4sxYky ZPjoej8F30eJ17gZfqubuOFo5bqFhE0CU4N99ruf1aEwOEuCBki8ShwWC5m0SElJ rfM3+WYZjy8BkeC3xE3xaotPMwyMJKUzaDuzXH3ults3hFr9Tpgv+KIjocyLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQgEoRBwLEP5tDET/NSiwdb9McqQwHwYDVR0j BBgwFoAUWxIhA9PBxzCuzlmn7SinndDHmUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTcyZWVmOS1lYzZhLTQ1NTgtODE4MS1hMTFmZTY1YjhmZjgvMC81QjEyMjEwM0Qz QzFDNzMwQUVDRTU5QTdFRDI4QTc5REQwQzc5OTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OUREMEM3 OTk0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjE3MmVlZjktZWM2YS00NTU4LTgx ODEtYTExZmU2NWI4ZmY4LzAvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3 OUREMEM3OTk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABdWSItnfXDYUno8f4UNfVOmt2Vk4bdWoISa vnoGLCUhemNT1tQuc3PMtx46Ybu52Gmwk6VtsuMn9u5flyJ9ZaKAamXkB36/wRcU Kgwf4f0V0NMMUvYQAkDTMKG7g9gZxUyjIfFS9eDD9kCh5/wr84d1frCzbU6pBfMj ElroX2dgau9luG9eO660JZmoHWUqQBuU/0bzEciIVH49UXyILyud9IcqpSK5A54b sG0OiQuojZLcdEDW2yY1sH+h009bfqbYOdxX9scJzsJXC5pwu4/DFdmsTOcJg6aA themuWS/do/XvT13N7OygBfXvQHILM6IdKQABJvKlG6AGvoimr8= -----END CERTIFICATE-----Generated at Mon Jun 16 20:59:25 2025 by rpki-client