$ rpki-client -vvf repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft File: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft (raw, json) Hash identifier: j+lzGrtm92WqVAub+7sjZxs8s+w42NCenHRHE26wsDM= Subject key identifier: CE:C7:DA:D6:BB:B9:2B:F1:F9:37:40:FD:28:9E:29:07:82:98:34:89 Authority key identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 Certificate issuer: /CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Certificate serial: 76530B013980A3899EDD54B15F4C742D04E662AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft Manifest number: 04F5 Signing time: Fri 08 Aug 2025 11:20:43 +0000 Manifest this update: Fri 08 Aug 2025 11:15:43 +0000 Manifest next update: Mon 11 Aug 2025 21:24:43 +0000 Files and hashes: 1: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl (hash: hp67jNbs2Co82dnWzfQ9X2RytpgvR46LziuQHRH/PFM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 21:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:53:0b:01:39:80:a3:89:9e:dd:54:b1:5f:4c:74:2d:04:e6:62:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Validity Not Before: Aug 8 11:15:43 2025 GMT Not After : Aug 11 21:24:43 2025 GMT Subject: CN=CEC7DAD6BBB92BF1F93740FD289E290782983489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:ae:3c:0d:32:f7:21:07:17:eb:35:f2:b7: 81:3c:c4:84:ca:03:be:50:66:30:07:89:17:9a:79: 15:1f:a4:f6:0a:54:ff:ef:6e:1c:b8:c5:46:54:37: fc:69:e3:29:f1:af:ae:e1:d4:e2:40:1c:c8:f5:f5: f4:1f:39:54:28:97:e1:72:b5:4e:2e:c0:7e:12:77: 4b:8c:98:7f:28:5b:ff:24:2f:88:b2:d6:3d:2f:80: 5f:9a:d1:ee:79:72:a5:58:d8:1e:b5:42:7a:1e:e1: 0c:58:9f:d9:76:31:8f:6e:14:c1:b2:e3:38:92:86: b5:46:e8:5e:2c:ee:0a:d4:fc:2d:08:22:fd:f2:fe: 6c:c4:16:0c:ee:90:c3:e3:ab:62:49:2b:e6:bc:2a: 85:97:3e:ee:31:40:60:e0:df:45:91:eb:e7:dd:48: 24:d4:e6:e9:f9:af:62:54:7a:b8:73:d7:2a:79:28: e1:fa:c7:c1:4d:1c:12:32:c4:d2:6c:74:d7:3f:5a: ef:87:07:9d:d2:6a:21:56:54:ad:46:25:f4:13:e8: 22:28:a7:20:ba:89:ed:9c:9d:fe:dd:b8:07:06:bf: 95:e0:72:a3:ab:4f:81:66:97:26:f1:07:68:34:20: e7:79:9c:d5:a3:1a:70:39:36:b8:fe:0f:f8:ed:8b: 2a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C7:DA:D6:BB:B9:2B:F1:F9:37:40:FD:28:9E:29:07:82:98:34:89 X509v3 Authority Key Identifier: keyid:5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:fc:29:b0:80:2f:0a:14:16:a2:f8:ca:9c:44:7f:c7:9a:5b: 51:14:23:50:d3:43:5a:90:16:bb:16:f9:b1:39:52:b7:7e:12: 5d:7e:45:1d:03:91:8f:30:73:07:32:0f:8c:6f:4f:ba:83:45: 0a:ef:2a:5f:00:72:8c:48:38:9b:7b:a3:54:c1:b5:93:14:19: 46:a3:b8:48:93:a0:c8:85:af:d9:91:9d:da:7d:51:90:88:1b: 7d:4f:52:d6:07:83:2b:1a:cd:a8:d0:d4:23:02:be:7c:d4:0d: 21:4c:5a:51:4e:ab:36:cb:3b:96:c5:b5:5d:b6:58:fc:db:19: a2:f6:a4:7a:d0:75:5c:24:86:72:c4:59:e6:f6:2e:35:c2:96: 06:99:66:ce:45:77:3e:13:f2:3f:5c:e2:04:77:78:bf:e8:23: 21:28:ac:e5:74:53:2a:40:2e:32:74:08:d8:b5:e8:68:63:1b: cf:74:50:5f:49:c4:06:df:55:a4:d1:01:73:7d:e7:4e:f0:df: 69:6c:64:0c:85:b8:e8:ef:d8:54:f4:9a:c3:52:6c:fb:18:4a: c0:f1:e2:04:b7:03:b7:34:d4:1e:7c:f1:61:bd:36:46:fd:4f: 71:97:72:6a:97:19:9b:71:ae:bb:e1:e8:f3:6d:ca:c4:dc:b4: 74:c9:6f:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdlMLATmAo4me3VSxX0x0LQTmYq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OURE MEM3OTk0ODAeFw0yNTA4MDgxMTE1NDNaFw0yNTA4MTEyMTI0NDNaMDMxMTAvBgNV BAMTKENFQzdEQUQ2QkJCOTJCRjFGOTM3NDBGRDI4OUUyOTA3ODI5ODM0ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfK48DTL3IQcX6zXyt4E8xITK A75QZjAHiReaeRUfpPYKVP/vbhy4xUZUN/xp4ynxr67h1OJAHMj19fQfOVQol+Fy tU4uwH4Sd0uMmH8oW/8kL4iy1j0vgF+a0e55cqVY2B61Qnoe4QxYn9l2MY9uFMGy 4ziShrVG6F4s7grU/C0IIv3y/mzEFgzukMPjq2JJK+a8KoWXPu4xQGDg30WR6+fd SCTU5un5r2JUerhz1yp5KOH6x8FNHBIyxNJsdNc/Wu+HB53SaiFWVK1GJfQT6CIo pyC6ie2cnf7duAcGv5XgcqOrT4FmlybxB2g0IOd5nNWjGnA5Nrj+D/jtiyq3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzsfa1ru5K/H5N0D9KJ4pB4KYNIkwHwYDVR0j BBgwFoAUWxIhA9PBxzCuzlmn7SinndDHmUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTcyZWVmOS1lYzZhLTQ1NTgtODE4MS1hMTFmZTY1YjhmZjgvMC81QjEyMjEwM0Qz QzFDNzMwQUVDRTU5QTdFRDI4QTc5REQwQzc5OTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OUREMEM3 OTk0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjE3MmVlZjktZWM2YS00NTU4LTgx ODEtYTExZmU2NWI4ZmY4LzAvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3 OUREMEM3OTk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAID8KbCALwoUFqL4ypxEf8eaW1EUI1DTQ1qQ FrsW+bE5Urd+El1+RR0DkY8wcwcyD4xvT7qDRQrvKl8AcoxIOJt7o1TBtZMUGUaj uEiToMiFr9mRndp9UZCIG31PUtYHgysazajQ1CMCvnzUDSFMWlFOqzbLO5bFtV22 WPzbGaL2pHrQdVwkhnLEWeb2LjXClgaZZs5Fdz4T8j9c4gR3eL/oIyEorOV0UypA LjJ0CNi16GhjG890UF9JxAbfVaTRAXN9507w32lsZAyFuOjv2FT0msNSbPsYSsDx 4gS3A7c01B588WG9Nkb9T3GXcmqXGZtxrrvh6PNtysTctHTJb0w= -----END CERTIFICATE-----Generated at Sat Aug 9 20:48:05 2025 by rpki-client