$ rpki-client -vvf repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft File: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft (raw, json) Hash identifier: QpINGY+joO91/Dt2qPHeKTpyHsEO8taDs1a43d9Vo/U= Subject key identifier: 96:CC:58:A7:27:64:87:37:EC:ED:69:09:87:97:83:D3:3D:63:6C:AE Authority key identifier: D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 Certificate issuer: /CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Certificate serial: 65D019092FCE2544F7BBEC62A0F153A0120A14EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft Manifest number: EA Signing time: Sat 19 Jul 2025 22:51:17 +0000 Manifest this update: Sat 19 Jul 2025 22:46:17 +0000 Manifest next update: Wed 23 Jul 2025 08:22:17 +0000 Files and hashes: 1: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl (hash: Ktfq11DWjK29hrMM0PT6lnPM77jAqfHr7GyTGpRqGiU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 08:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d0:19:09:2f:ce:25:44:f7:bb:ec:62:a0:f1:53:a0:12:0a:14:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Validity Not Before: Jul 19 22:46:17 2025 GMT Not After : Jul 23 08:22:17 2025 GMT Subject: CN=96CC58A727648737ECED6909879783D33D636CAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b2:cc:5f:1e:e6:db:b9:9e:4e:3b:3b:68:30: 97:74:69:39:70:d7:1b:32:a1:1c:c9:5b:2a:74:e1: 99:fd:f1:4c:12:18:c1:76:db:21:15:63:4c:4b:cb: 72:26:df:0a:23:44:06:f6:aa:59:55:69:91:53:fd: 72:82:10:79:50:73:bd:cc:7e:da:8e:57:98:15:90: 3c:21:1c:7e:07:5a:57:1b:93:91:00:51:09:9a:0a: 61:da:8d:33:e4:69:c4:4d:95:85:be:b6:3e:85:22: 27:81:28:4f:be:40:93:38:78:4d:d9:e9:df:54:b1: 89:8a:1c:44:cc:6c:a3:55:2e:83:66:71:1e:b2:25: 5e:60:d9:d9:ae:4f:bf:a1:89:33:68:eb:da:d2:33: 55:8a:54:59:81:f9:41:aa:9f:ac:79:f0:80:e1:10: 01:61:f1:6e:f0:3b:3f:c1:70:36:95:4e:1e:05:a7: c7:48:de:8c:61:05:50:73:cf:0d:ed:7c:b3:e5:71: a7:50:95:b1:99:6a:18:92:fa:8f:51:b1:c1:f6:6b: 68:65:a9:7a:aa:dd:a1:3d:02:41:70:65:6c:13:a7: e1:2a:39:f6:0d:0d:7b:55:3e:f0:98:47:b5:fc:45: b4:ed:9e:df:ed:ad:28:44:d4:bf:ef:6a:e2:f7:4f: e3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CC:58:A7:27:64:87:37:EC:ED:69:09:87:97:83:D3:3D:63:6C:AE X509v3 Authority Key Identifier: keyid:D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:18:2d:3b:16:5c:3f:fb:0d:47:29:39:7e:48:f9:c6:26:ae: 75:fb:52:66:c3:2e:3b:68:68:93:36:04:99:c2:8d:9e:89:cb: 74:a5:47:f5:4d:29:3a:d5:59:57:1e:c6:af:6d:6c:73:54:47: 6f:7a:86:48:35:de:4a:c1:8d:d5:5f:68:b2:bf:95:f5:1a:38: c8:ae:2c:82:bf:6f:99:9b:29:14:ab:e6:e9:98:ff:e6:f5:6a: 86:ee:3b:d3:22:cf:97:a4:c5:d3:1c:5e:aa:36:16:8e:80:0d: 65:f2:37:3a:72:6f:e1:9c:58:c2:f1:76:82:ae:22:68:99:e5: df:c9:6c:a7:9b:12:8d:65:c3:73:b4:14:07:93:77:39:c0:62: 08:59:85:73:95:47:60:5e:4a:32:36:d5:90:49:b9:eb:09:d3: b0:51:05:eb:43:75:85:1d:b3:d7:bc:c6:b6:95:42:1c:6e:f7: a3:a2:4c:ad:28:16:cb:09:c5:7c:d8:46:c4:26:d3:cd:47:9c: ce:14:e9:93:25:da:9d:07:2d:f1:d3:cf:22:f8:6c:aa:cf:07: c2:1f:2d:0e:b9:26:b6:f3:c7:7a:0b:00:4b:b0:01:64:91:74: 4e:c9:b2:a8:c8:b0:e8:5b:ee:62:d9:c6:83:6d:53:2c:b1:be: f7:1c:d9:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZdAZCS/OJUT3u+xioPFToBIKFO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0 RDlCRDRDOTAeFw0yNTA3MTkyMjQ2MTdaFw0yNTA3MjMwODIyMTdaMDMxMTAvBgNV BAMTKDk2Q0M1OEE3Mjc2NDg3MzdFQ0VENjkwOTg3OTc4M0QzM0Q2MzZDQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClssxfHubbuZ5OOztoMJd0aTlw 1xsyoRzJWyp04Zn98UwSGMF22yEVY0xLy3Im3wojRAb2qllVaZFT/XKCEHlQc73M ftqOV5gVkDwhHH4HWlcbk5EAUQmaCmHajTPkacRNlYW+tj6FIieBKE++QJM4eE3Z 6d9UsYmKHETMbKNVLoNmcR6yJV5g2dmuT7+hiTNo69rSM1WKVFmB+UGqn6x58IDh EAFh8W7wOz/BcDaVTh4Fp8dI3oxhBVBzzw3tfLPlcadQlbGZahiS+o9RscH2a2hl qXqq3aE9AkFwZWwTp+EqOfYNDXtVPvCYR7X8RbTtnt/trShE1L/vauL3T+NZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlsxYpydkhzfs7WkJh5eD0z1jbK4wHwYDVR0j BBgwFoAU1/I9e1SJDw7s9VD/pCeZtk2b1MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Yjk4NTFiMS01YTZkLTRlNzUtOWZmZi1jMDNhOWM0OWNmNjkvMC9EN0YyM0Q3QjU0 ODkwRjBFRUNGNTUwRkZBNDI3OTlCNjREOUJENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0RDlC RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI5ODUxYjEtNWE2ZC00ZTc1LTlm ZmYtYzAzYTljNDljZjY5LzAvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5 QjY0RDlCRDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8YLTsWXD/7DUcpOX5I+cYmrnX7UmbDLjto aJM2BJnCjZ6Jy3SlR/VNKTrVWVcexq9tbHNUR296hkg13krBjdVfaLK/lfUaOMiu LIK/b5mbKRSr5umY/+b1aobuO9Miz5ekxdMcXqo2Fo6ADWXyNzpyb+GcWMLxdoKu ImiZ5d/JbKebEo1lw3O0FAeTdznAYghZhXOVR2BeSjI21ZBJuesJ07BRBetDdYUd s9e8xraVQhxu96OiTK0oFssJxXzYRsQm081HnM4U6ZMl2p0HLfHTzyL4bKrPB8If LQ65Jrbzx3oLAEuwAWSRdE7JsqjIsOhb7mLZxoNtUyyxvvcc2YE= -----END CERTIFICATE-----Generated at Mon Jul 21 18:12:06 2025 by rpki-client