$ rpki-client -vvf repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft File: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft (raw, json) Hash identifier: aOP8mnSvRUU3ORm0GjSntXagaOjn0iT8vtaw6MGla2M= Subject key identifier: DE:75:79:E1:A9:A4:22:0A:DF:DC:88:63:81:17:91:B4:63:48:81:0F Authority key identifier: 55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 Certificate issuer: /CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Certificate serial: 29A23A8217BA5D003A75816B94A58FB570BDB89E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft Manifest number: 01CB Signing time: Mon 28 Apr 2025 09:41:42 +0000 Manifest this update: Mon 28 Apr 2025 09:36:42 +0000 Manifest next update: Thu 01 May 2025 10:40:42 +0000 Files and hashes: 1: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl (hash: s/6KWRfncgy93tm0hyp2VEPwbIc6pXFaTmFIdePcxzU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 10:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a2:3a:82:17:ba:5d:00:3a:75:81:6b:94:a5:8f:b5:70:bd:b8:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Validity Not Before: Apr 28 09:36:42 2025 GMT Not After : May 1 10:40:42 2025 GMT Subject: CN=DE7579E1A9A4220ADFDC8863811791B46348810F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3d:bf:28:c0:f8:4c:a1:41:9b:9f:91:42:81: 7f:4b:a3:18:5c:e4:1d:d1:c6:97:33:0d:5d:a0:ac: 40:4d:e8:1b:66:2a:37:52:da:5f:fa:0e:3a:48:83: b3:af:cc:36:d0:6e:2e:08:55:48:38:8a:b5:13:3c: 65:f3:d0:d4:2e:88:da:34:86:43:45:76:78:1f:23: 9c:d2:e2:e2:5b:1e:6c:31:a2:67:0d:62:3d:4f:17: b4:37:54:7e:9d:f3:d2:a4:5c:98:51:dc:d4:c0:f8: a1:53:be:f9:4d:c4:3c:d9:3f:68:f1:b4:c1:a0:1a: b0:92:23:1e:11:a2:8e:4f:7d:dc:de:4d:fd:e5:f4: fe:67:79:11:88:02:91:35:15:c2:ba:1e:39:ae:ac: 1f:d2:a3:3f:2d:31:fa:e4:53:7b:ff:b9:cb:27:b4: b0:19:34:b3:01:8e:8c:13:8f:b6:a8:4d:24:4a:8a: 34:12:eb:7f:0e:5b:62:76:bc:30:ad:eb:38:72:45: bc:ef:6c:82:2d:2d:9d:5a:05:f3:12:27:a9:df:d6: de:3a:9e:96:f0:08:bc:14:6e:35:38:b6:d0:3a:2b: e7:0f:8e:bb:3c:8b:d5:b4:ce:09:f6:5b:d0:1b:43: 9d:27:d1:c6:e7:2e:15:bc:11:ce:70:e6:7a:a3:99: 71:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:75:79:E1:A9:A4:22:0A:DF:DC:88:63:81:17:91:B4:63:48:81:0F X509v3 Authority Key Identifier: keyid:55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:b0:bb:9e:41:ab:5d:bd:ee:78:bd:ba:ee:bf:88:d2:bb:b4: e6:36:c9:43:cc:31:2c:e2:64:dc:19:7b:02:9e:56:df:f9:43: 4f:27:7a:1e:f6:c3:43:e0:94:28:38:40:3a:c6:89:25:ba:da: 83:1e:a4:77:e2:9a:aa:a3:00:60:0c:d9:37:ee:fe:c1:2d:9c: 63:cb:4b:3e:aa:08:06:ce:b9:89:64:b5:c5:b4:a4:0a:86:90: 0c:4d:3f:b5:be:ae:28:ab:7d:31:30:e6:df:15:41:d8:5a:59: c3:55:38:ae:ea:7a:f0:85:1f:72:fe:ad:71:d7:e5:5f:7a:22: d5:58:3d:3b:57:c9:63:9e:23:d2:fb:16:ad:ac:79:f2:56:7e: 29:b6:32:14:44:94:20:de:52:c7:94:84:27:09:18:49:50:1a: 64:1e:69:86:3f:56:5e:d8:b6:08:dc:31:c9:19:8d:2c:36:ad: 0d:8d:55:72:47:0a:b1:8c:e2:dd:b7:ff:93:40:fd:a5:52:d9: 76:f4:c1:e4:2a:ed:07:c6:5f:86:bf:a0:20:a5:bb:f2:58:8c: ee:a1:9e:a2:c4:e6:20:cc:3e:bc:31:05:44:7f:19:a7:2f:3e: 56:eb:cf:48:08:ff:8d:8d:09:f7:75:87:e6:ae:4c:7f:2c:79: a6:1e:f0:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKaI6ghe6XQA6dYFrlKWPtXC9uJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQx QkVDRUYwNDAeFw0yNTA0MjgwOTM2NDJaFw0yNTA1MDExMDQwNDJaMDMxMTAvBgNV BAMTKERFNzU3OUUxQTlBNDIyMEFERkRDODg2MzgxMTc5MUI0NjM0ODgxMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbPb8owPhMoUGbn5FCgX9Loxhc 5B3RxpczDV2grEBN6BtmKjdS2l/6DjpIg7OvzDbQbi4IVUg4irUTPGXz0NQuiNo0 hkNFdngfI5zS4uJbHmwxomcNYj1PF7Q3VH6d89KkXJhR3NTA+KFTvvlNxDzZP2jx tMGgGrCSIx4Roo5PfdzeTf3l9P5neRGIApE1FcK6HjmurB/Soz8tMfrkU3v/ucsn tLAZNLMBjowTj7aoTSRKijQS638OW2J2vDCt6zhyRbzvbIItLZ1aBfMSJ6nf1t46 npbwCLwUbjU4ttA6K+cPjrs8i9W0zgn2W9AbQ50n0cbnLhW8Ec5w5nqjmXFzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3nV54amkIgrf3IhjgReRtGNIgQ8wHwYDVR0j BBgwFoAUVUbp8c8s9YJ4xb21MOke/Rvs7wQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTQ4NmNjZC0wYzk1LTQ5MWEtYjllNi02NjdjZWU0NDU5NGYvMC81NTQ2RTlGMUNG MkNGNTgyNzhDNUJEQjUzMEU5MUVGRDFCRUNFRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQxQkVD RUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE0ODZjY2QtMGM5NS00OTFhLWI5 ZTYtNjY3Y2VlNDQ1OTRmLzAvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFF RkQxQkVDRUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGiwu55Bq1297ni9uu6/iNK7tOY2yUPMMSzi ZNwZewKeVt/5Q08neh72w0PglCg4QDrGiSW62oMepHfimqqjAGAM2Tfu/sEtnGPL Sz6qCAbOuYlktcW0pAqGkAxNP7W+riirfTEw5t8VQdhaWcNVOK7qevCFH3L+rXHX 5V96ItVYPTtXyWOeI9L7Fq2sefJWfim2MhRElCDeUseUhCcJGElQGmQeaYY/Vl7Y tgjcMckZjSw2rQ2NVXJHCrGM4t23/5NA/aVS2Xb0weQq7QfGX4a/oCClu/JYjO6h nqLE5iDMPrwxBUR/GacvPlbrz0gI/42NCfd1h+auTH8seaYe8Fw= -----END CERTIFICATE-----Generated at Tue Apr 29 23:31:36 2025 by rpki-client