$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft File: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft (raw, json) Hash identifier: V9nWsZrTpBDw6nwsQUbbbwmzIbr2uVVamP83A4d1nCw= Subject key identifier: A5:92:21:8D:9B:D2:3E:F2:10:2E:87:5E:DF:EA:B9:42:28:90:8C:87 Authority key identifier: 7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 Certificate issuer: /CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Certificate serial: 68E10CF540543803E32D8493B0466CCC0B618C0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft Manifest number: 9B Signing time: Sun 20 Jul 2025 06:31:59 +0000 Manifest this update: Sun 20 Jul 2025 06:26:59 +0000 Manifest next update: Wed 23 Jul 2025 15:07:59 +0000 Files and hashes: 1: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl (hash: cVPA3PdrrB0wEw7wsENaFz3Yu91vLOPcZ5oIdpXAfiE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 15:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e1:0c:f5:40:54:38:03:e3:2d:84:93:b0:46:6c:cc:0b:61:8c:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Validity Not Before: Jul 20 06:26:59 2025 GMT Not After : Jul 23 15:07:59 2025 GMT Subject: CN=A592218D9BD23EF2102E875EDFEAB94228908C87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:93:b4:1c:e8:a3:c1:de:15:b8:95:34:3c:a4: 6a:98:15:cd:7b:e3:48:c0:87:cb:0d:16:8a:0e:88: 38:43:33:7d:a2:61:37:b3:9c:8d:65:f1:a5:bb:42: d2:66:25:5a:65:27:a3:ea:d8:01:56:bf:49:ea:81: a2:4a:3a:a5:c5:b7:63:52:cc:2d:c3:ea:38:cf:bf: c9:3a:ca:ba:a6:e1:a0:95:17:b5:28:7e:63:66:b8: 9e:eb:14:1d:40:97:d3:71:91:2c:9d:df:99:02:a5: 91:3d:1d:56:d1:c6:0e:29:54:c5:34:96:ef:a8:69: 8a:6a:c9:61:b5:ce:c8:2c:fa:a1:73:e7:1a:37:e0: d2:82:6d:12:97:56:5e:26:38:f1:cc:3e:9b:eb:57: 00:63:7c:d2:33:d8:d8:80:a4:0b:de:5b:c1:dd:c5: 54:19:ae:b6:65:84:0e:50:51:33:7e:a1:ad:85:32: b2:68:d8:9e:48:db:c6:4b:b5:ec:fe:7d:98:89:20: 84:7c:13:a7:22:10:63:42:7d:35:2b:7a:bb:63:40: 5b:fb:2d:19:98:fb:1b:46:94:cd:c4:bd:71:73:56: 01:e9:38:56:bc:b4:0d:dc:d0:f6:d8:0e:a6:a4:16: ce:df:4a:ba:5f:1a:2e:63:8f:6d:e3:ee:f5:29:e1: cd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:92:21:8D:9B:D2:3E:F2:10:2E:87:5E:DF:EA:B9:42:28:90:8C:87 X509v3 Authority Key Identifier: keyid:7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:cd:e8:57:38:6e:69:e3:0a:b6:05:86:71:30:14:6e:ad:fc: 5d:98:a9:71:d0:b3:b7:36:0b:8f:25:d4:28:ce:6a:af:03:1c: 81:62:b7:96:a1:fe:a7:57:22:6d:06:b9:ed:44:3b:5f:7b:b8: 35:bd:dd:86:d4:11:8f:85:11:c1:c7:dc:24:66:43:4e:fb:26: 6d:ff:6d:e9:2d:7e:ca:a0:84:f6:ee:ff:37:92:28:7d:3e:d2: f0:68:fe:c2:a1:dd:de:a0:a6:76:61:33:31:d8:fc:e2:ac:ad: 2f:59:d1:37:a6:a7:8b:b3:9e:52:f9:be:1e:69:b6:6c:08:b3: 0d:e5:fb:e7:25:58:fa:0c:3a:89:f5:78:61:c5:f3:a2:a7:6d: 42:42:a0:c3:a6:18:40:a2:ff:69:b8:dd:45:49:24:fb:94:4e: 6b:79:09:3d:10:f8:29:a2:4e:2c:4b:58:e1:96:c5:f3:7d:5c: 1e:2e:c1:35:53:7c:65:9f:3c:26:0c:f7:7e:d8:fd:43:33:0e: 84:6d:fb:07:f9:04:46:dc:b1:39:b2:32:69:e8:4e:5b:6b:e1: 8a:bc:3e:03:51:8a:20:04:f3:14:d8:e5:ab:ac:f4:66:37:2e: b5:7a:e0:14:41:30:9a:00:a9:04:57:df:21:b3:7f:7c:80:80: c3:8a:20:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaOEM9UBUOAPjLYSTsEZszAthjA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2 QUM0RkMzMTAeFw0yNTA3MjAwNjI2NTlaFw0yNTA3MjMxNTA3NTlaMDMxMTAvBgNV BAMTKEE1OTIyMThEOUJEMjNFRjIxMDJFODc1RURGRUFCOTQyMjg5MDhDODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXk7Qc6KPB3hW4lTQ8pGqYFc17 40jAh8sNFooOiDhDM32iYTeznI1l8aW7QtJmJVplJ6Pq2AFWv0nqgaJKOqXFt2NS zC3D6jjPv8k6yrqm4aCVF7UofmNmuJ7rFB1Al9NxkSyd35kCpZE9HVbRxg4pVMU0 lu+oaYpqyWG1zsgs+qFz5xo34NKCbRKXVl4mOPHMPpvrVwBjfNIz2NiApAveW8Hd xVQZrrZlhA5QUTN+oa2FMrJo2J5I28ZLtez+fZiJIIR8E6ciEGNCfTUrertjQFv7 LRmY+xtGlM3EvXFzVgHpOFa8tA3c0PbYDqakFs7fSrpfGi5jj23j7vUp4c0vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpZIhjZvSPvIQLode3+q5QiiQjIcwHwYDVR0j BBgwFoAUfVCLIlNQsNIE8ZQ/T1PU2GrE/DEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjNiMjMwYS1mZmYxLTQ3ZjAtYmY5MS03Y2ViOGQzNjA5NmUvMC83RDUwOEIyMjUz NTBCMEQyMDRGMTk0M0Y0RjUzRDREODZBQzRGQzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2QUM0 RkMzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0 RDg2QUM0RkMzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/N6Fc4bmnjCrYFhnEwFG6t/F2YqXHQs7c2 C48l1CjOaq8DHIFit5ah/qdXIm0Gue1EO197uDW93YbUEY+FEcHH3CRmQ077Jm3/ bektfsqghPbu/zeSKH0+0vBo/sKh3d6gpnZhMzHY/OKsrS9Z0Temp4uznlL5vh5p tmwIsw3l++clWPoMOon1eGHF86KnbUJCoMOmGECi/2m43UVJJPuUTmt5CT0Q+Cmi TixLWOGWxfN9XB4uwTVTfGWfPCYM937Y/UMzDoRt+wf5BEbcsTmyMmnoTltr4Yq8 PgNRiiAE8xTY5aus9GY3LrV64BRBMJoAqQRX3yGzf3yAgMOKIOk= -----END CERTIFICATE-----Generated at Mon Jul 21 02:19:51 2025 by rpki-client