$ rpki-client -vvf repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft File: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft (raw, json) Hash identifier: 3GwOhzXfiE0Cp//Iyk3P+YK3RTjkWxXVXH4oFqv48GM= Subject key identifier: 7E:BD:09:5C:65:95:AE:CD:65:EA:48:58:AE:D8:BB:92:F2:B6:82:EA Authority key identifier: 7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 Certificate issuer: /CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Certificate serial: 7110E66DFCFBFC91BF370DD317C3C228B9E92124 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft Manifest number: 0149 Signing time: Mon 21 Jul 2025 04:22:16 +0000 Manifest this update: Mon 21 Jul 2025 04:17:16 +0000 Manifest next update: Thu 24 Jul 2025 08:56:16 +0000 Files and hashes: 1: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl (hash: 7FtF1aGS/ZI4bnZ3PTwkLXtQSEYX9seDdjDh2ge6C7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 08:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:10:e6:6d:fc:fb:fc:91:bf:37:0d:d3:17:c3:c2:28:b9:e9:21:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Validity Not Before: Jul 21 04:17:16 2025 GMT Not After : Jul 24 08:56:16 2025 GMT Subject: CN=7EBD095C6595AECD65EA4858AED8BB92F2B682EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f1:ce:9f:6e:3a:56:62:8b:1e:31:c6:98:73: ca:31:6e:ca:f6:00:e1:14:6a:5c:88:04:6a:74:bc: e8:cf:1f:37:af:f1:6b:5a:46:71:79:ce:33:d8:c1: c3:e4:5e:6d:94:a3:3c:11:05:c9:85:0d:66:3c:34: 9d:a3:7d:d6:17:92:0c:5c:7e:89:ca:95:13:f8:a4: c9:9f:26:c5:fa:e7:d8:a4:eb:fc:1d:d5:c5:00:1d: f8:c7:ef:5a:59:aa:4e:78:a2:7d:a0:4c:d8:e5:b7: 07:47:e3:bb:05:e4:68:c4:e9:b7:36:f5:f0:cf:dc: 18:94:e9:8b:51:7b:54:22:12:f1:a0:42:63:bd:4e: bc:9b:b9:e8:bf:25:b7:d7:82:24:0d:2e:f5:0d:11: d5:f8:3a:cd:03:2b:83:05:a2:39:a1:91:b5:d7:c7: eb:84:66:e9:f1:86:cb:d0:4b:28:a1:1f:be:7e:be: 2a:cf:62:fb:fa:41:90:aa:67:37:89:dc:eb:78:fd: 4c:fe:e1:41:3e:82:2a:82:ce:67:41:de:97:fc:b1: f6:b5:e4:f7:05:2c:7d:4a:6a:14:78:c0:b0:f8:41: e4:82:7d:8c:41:a3:7c:f2:e7:26:57:a7:09:55:7a: d9:b5:4d:74:cf:2b:bd:2c:41:ec:7d:4c:6f:ca:f6: 03:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BD:09:5C:65:95:AE:CD:65:EA:48:58:AE:D8:BB:92:F2:B6:82:EA X509v3 Authority Key Identifier: keyid:7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:0c:f5:3c:24:ab:8e:e2:eb:fb:d8:d8:f3:20:fe:ca:0e:f3: f6:02:a1:08:99:b4:62:69:59:5d:20:e5:92:f9:fa:ac:1c:3a: 74:dd:bb:d9:49:67:bc:00:c6:63:df:73:dc:34:ed:ff:2a:2d: aa:93:03:35:10:fd:5d:21:7e:b1:33:33:ad:cd:12:17:0c:50: 77:5e:f6:a3:af:0a:5b:d2:2e:0c:5f:ae:f1:55:f5:1c:d1:dc: 3b:2f:11:cf:99:5b:43:63:3b:4b:71:12:9d:ed:7f:d0:5d:91: 02:c6:9b:99:1b:a8:4e:3e:6b:93:f1:f5:47:7d:8c:55:fa:da: 9d:2a:10:30:f6:74:05:a0:95:88:88:3a:e9:76:8f:b3:66:fe: 2d:56:73:2a:62:f4:59:d5:e4:64:3f:33:7e:68:32:97:35:85: 42:9d:52:02:96:7e:4f:d7:14:a3:54:65:4b:0c:b0:22:e1:c6: 07:a6:38:cf:bf:cb:cb:6e:f6:c7:ad:e4:c8:49:ce:45:9d:42: fa:2d:eb:83:3e:58:18:d7:b3:47:88:52:d2:ab:6d:63:2a:05: 76:d4:76:1d:ba:9b:6b:ac:2e:ca:27:11:08:1f:f4:e1:88:7f: 45:5e:78:f1:f4:a9:de:b1:ba:2f:ef:e5:60:81:97:ca:e8:60: 48:83:2e:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcRDmbfz7/JG/Nw3TF8PCKLnpISQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAx REFGODhEODAeFw0yNTA3MjEwNDE3MTZaFw0yNTA3MjQwODU2MTZaMDMxMTAvBgNV BAMTKDdFQkQwOTVDNjU5NUFFQ0Q2NUVBNDg1OEFFRDhCQjkyRjJCNjgyRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl8c6fbjpWYoseMcaYc8oxbsr2 AOEUalyIBGp0vOjPHzev8WtaRnF5zjPYwcPkXm2UozwRBcmFDWY8NJ2jfdYXkgxc fonKlRP4pMmfJsX659ik6/wd1cUAHfjH71pZqk54on2gTNjltwdH47sF5GjE6bc2 9fDP3BiU6YtRe1QiEvGgQmO9Trybuei/JbfXgiQNLvUNEdX4Os0DK4MFojmhkbXX x+uEZunxhsvQSyihH75+virPYvv6QZCqZzeJ3Ot4/Uz+4UE+giqCzmdB3pf8sfa1 5PcFLH1KahR4wLD4QeSCfYxBo3zy5yZXpwlVetm1TXTPK70sQex9TG/K9gPFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfr0JXGWVrs1l6khYrti7kvK2guowHwYDVR0j BBgwFoAUfaMIpm73Bb7kLKBGMaDjkB2viNgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmI1ZmYzNy0zOTRhLTRlYmEtYTQ3MC0xMGFmMzdjZjc1ZGMvMC83REEzMDhBNjZF RjcwNUJFRTQyQ0EwNDYzMUEwRTM5MDFEQUY4OEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAxREFG ODhEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZiNWZmMzctMzk0YS00ZWJhLWE0 NzAtMTBhZjM3Y2Y3NWRjLzAvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUz OTAxREFGODhEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcM9Twkq47i6/vY2PMg/soO8/YCoQiZtGJp WV0g5ZL5+qwcOnTdu9lJZ7wAxmPfc9w07f8qLaqTAzUQ/V0hfrEzM63NEhcMUHde 9qOvClvSLgxfrvFV9RzR3DsvEc+ZW0NjO0txEp3tf9BdkQLGm5kbqE4+a5Px9Ud9 jFX62p0qEDD2dAWglYiIOul2j7Nm/i1Wcypi9FnV5GQ/M35oMpc1hUKdUgKWfk/X FKNUZUsMsCLhxgemOM+/y8tu9set5MhJzkWdQvot64M+WBjXs0eIUtKrbWMqBXbU dh26m2usLsonEQgf9OGIf0VeePH0qd6xui/v5WCBl8roYEiDLhM= -----END CERTIFICATE-----Generated at Wed Jul 23 02:02:26 2025 by rpki-client