$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft File: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft (raw, json) Hash identifier: 2fsXOyRDHf9dq2QzokSEuTRFH1q6/1D2UmT+2JJlmZ4= Subject key identifier: 64:40:8D:DD:FD:48:2A:09:02:EC:AA:98:B0:DA:9C:49:CF:75:A9:E5 Authority key identifier: 10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 Certificate issuer: /CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Certificate serial: 4A9753B2F93F54144E064217C8A9E9B81969B892 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft Manifest number: 01E8 Signing time: Tue 22 Jul 2025 02:21:55 +0000 Manifest this update: Tue 22 Jul 2025 02:16:55 +0000 Manifest next update: Fri 25 Jul 2025 07:56:55 +0000 Files and hashes: 1: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl (hash: NELIuCZkn8a11lWfnyaMYp/aotF1BN+rwi46Zbb/cnI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 07:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:97:53:b2:f9:3f:54:14:4e:06:42:17:c8:a9:e9:b8:19:69:b8:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Validity Not Before: Jul 22 02:16:55 2025 GMT Not After : Jul 25 07:56:55 2025 GMT Subject: CN=64408DDDFD482A0902ECAA98B0DA9C49CF75A9E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cd:0a:6a:ac:5c:e9:a7:a7:02:14:88:7f:ff: 46:fb:38:46:08:f5:08:f6:60:57:32:01:70:73:b2: 2c:50:b8:72:d6:00:db:36:c4:05:b6:0d:e1:dc:1e: be:f5:ae:fe:da:18:e1:b4:03:fc:58:4e:f8:91:55: fe:99:e9:4f:92:64:33:a0:00:07:dd:69:4d:44:b4: 51:c2:e1:75:f5:cb:22:3e:fb:e9:56:46:a9:3f:75: 98:44:a5:d8:55:e5:f8:12:bb:d4:56:c1:72:00:7f: 5f:5d:a6:6d:d6:63:c1:79:ba:b2:ca:54:55:75:80: a8:d1:8f:b8:67:05:cf:23:7f:8b:50:b6:47:97:78: 9d:35:e7:48:ff:ae:21:41:17:c8:7c:f8:c6:51:9e: f3:c1:97:eb:88:3c:07:2e:34:e5:7b:1b:31:87:5b: d5:92:0d:0c:07:e6:78:13:11:a4:11:83:33:d5:4e: f9:d3:63:9e:09:85:90:3a:71:e4:3b:1d:58:f7:43: 9c:7e:42:a0:df:ae:9f:dc:23:b0:b7:45:5f:10:5e: fe:3f:49:fc:68:d0:c1:26:c3:e7:56:28:12:7c:7d: e2:80:cc:a0:6a:02:ab:68:b4:bf:36:33:51:85:5e: cf:7b:01:55:10:ca:5e:60:53:51:b8:20:49:29:0f: 1c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:40:8D:DD:FD:48:2A:09:02:EC:AA:98:B0:DA:9C:49:CF:75:A9:E5 X509v3 Authority Key Identifier: keyid:10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:44:ee:49:83:5b:ae:38:04:c1:ad:ef:53:a1:c5:24:9a:50: 9b:0c:41:2d:b8:7d:3d:b7:8c:87:6c:51:92:a2:0e:d5:26:eb: 71:d9:ef:b3:a9:5d:52:7f:2c:09:ad:2e:04:01:f0:e0:98:ff: 51:d5:a5:93:55:45:fd:bf:65:80:1c:02:d0:4d:fb:bf:37:61: 78:9a:97:49:e3:96:fa:d0:4b:23:54:13:8c:c0:65:ef:24:c1: 38:9d:46:2d:43:0d:6e:6d:5e:5a:8f:fb:5a:a3:ac:4a:7e:0b: fc:c9:b4:12:0a:89:2a:1a:59:1e:cc:57:14:2d:06:05:ec:68: ba:31:09:fa:4a:c3:f3:34:82:09:f6:6b:89:9d:fc:f5:99:97: d2:d2:91:e4:57:e2:e4:ad:b9:bb:68:5d:24:f4:af:a4:ff:29: 17:06:8c:69:b5:e3:ae:e6:42:07:cd:a9:45:8b:4e:4e:7b:02: 27:83:1a:7f:93:21:f4:93:d2:0f:08:b5:6f:68:df:06:4a:99: 91:02:d1:9f:7c:6d:bc:5c:41:1a:b5:f6:d2:6d:ff:bc:4c:5f: 20:c1:3c:f8:7f:66:46:de:41:58:8e:f1:a2:56:a0:c5:b6:75: a3:69:32:2d:da:35:8d:08:1a:96:4a:77:a3:ff:59:ff:dc:08: 2f:87:4d:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSpdTsvk/VBROBkIXyKnpuBlpuJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdC NzU3QkQyMzAeFw0yNTA3MjIwMjE2NTVaFw0yNTA3MjUwNzU2NTVaMDMxMTAvBgNV BAMTKDY0NDA4RERERkQ0ODJBMDkwMkVDQUE5OEIwREE5QzQ5Q0Y3NUE5RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDizQpqrFzpp6cCFIh//0b7OEYI 9Qj2YFcyAXBzsixQuHLWANs2xAW2DeHcHr71rv7aGOG0A/xYTviRVf6Z6U+SZDOg AAfdaU1EtFHC4XX1yyI+++lWRqk/dZhEpdhV5fgSu9RWwXIAf19dpm3WY8F5urLK VFV1gKjRj7hnBc8jf4tQtkeXeJ0150j/riFBF8h8+MZRnvPBl+uIPAcuNOV7GzGH W9WSDQwH5ngTEaQRgzPVTvnTY54JhZA6ceQ7HVj3Q5x+QqDfrp/cI7C3RV8QXv4/ Sfxo0MEmw+dWKBJ8feKAzKBqAqtotL82M1GFXs97AVUQyl5gU1G4IEkpDxxRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZECN3f1IKgkC7KqYsNqcSc91qeUwHwYDVR0j BBgwFoAUEAfRXLvqq94Zmu+8Kj/jF7dXvSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWExNmVjNS01ODdlLTQ3YTQtOGFmZS1kMWJlY2Y1NmI2MTQvMC8xMDA3RDE1Q0JC RUFBQkRFMTk5QUVGQkMyQTNGRTMxN0I3NTdCRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdCNzU3 QkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUz MTdCNzU3QkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlE7kmDW644BMGt71OhxSSaUJsMQS24fT23 jIdsUZKiDtUm63HZ77OpXVJ/LAmtLgQB8OCY/1HVpZNVRf2/ZYAcAtBN+783YXia l0njlvrQSyNUE4zAZe8kwTidRi1DDW5tXlqP+1qjrEp+C/zJtBIKiSoaWR7MVxQt BgXsaLoxCfpKw/M0ggn2a4md/PWZl9LSkeRX4uStubtoXST0r6T/KRcGjGm1467m QgfNqUWLTk57AieDGn+TIfST0g8ItW9o3wZKmZEC0Z98bbxcQRq19tJt/7xMXyDB PPh/ZkbeQViO8aJWoMW2daNpMi3aNY0IGpZKd6P/Wf/cCC+HTeA= -----END CERTIFICATE-----Generated at Wed Jul 23 12:26:11 2025 by rpki-client