$ rpki-client -vvf repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.mft File: 75124AA5DD7D2B53783B8C956570CF3235324A6C.mft (raw, json) Hash identifier: UYEhOAJqq1LMrmxBqfyUxExeS25q+ZYny+iK9cJAthA= Subject key identifier: 95:62:3B:52:51:52:69:9C:00:49:72:37:35:D5:D4:1F:FE:1F:6B:B8 Authority key identifier: 75:12:4A:A5:DD:7D:2B:53:78:3B:8C:95:65:70:CF:32:35:32:4A:6C Certificate issuer: /CN=75124AA5DD7D2B53783B8C956570CF3235324A6C Certificate serial: 397C8FFCCD44418E1369282156EA9CD250F426E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75124AA5DD7D2B53783B8C956570CF3235324A6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.mft Manifest number: 01E7 Signing time: Sat 19 Jul 2025 17:10:58 +0000 Manifest this update: Sat 19 Jul 2025 17:05:58 +0000 Manifest next update: Tue 22 Jul 2025 18:17:58 +0000 Files and hashes: 1: 75124AA5DD7D2B53783B8C956570CF3235324A6C.crl (hash: qq/GznsEBtkqWKUXWAsAQLiBHX8a2KVZZkhHteEGl0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.crl rsync://repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75124AA5DD7D2B53783B8C956570CF3235324A6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 18:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:7c:8f:fc:cd:44:41:8e:13:69:28:21:56:ea:9c:d2:50:f4:26:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75124AA5DD7D2B53783B8C956570CF3235324A6C Validity Not Before: Jul 19 17:05:58 2025 GMT Not After : Jul 22 18:17:58 2025 GMT Subject: CN=95623B525152699C0049723735D5D41FFE1F6BB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6d:70:49:19:f0:a2:d2:27:68:36:c4:95:fc: 2b:fa:f6:bd:fc:23:f1:1b:45:05:a2:a3:e0:dd:83: 05:b1:90:6e:b4:e8:1d:3d:c1:f1:87:32:60:8c:38: 75:df:54:81:7f:55:a6:2e:78:fd:ab:61:f8:a7:f8: d5:02:03:1d:f7:e8:84:10:29:5d:d9:50:c2:3d:54: c6:5b:6b:ad:38:e7:65:7f:3e:01:6e:a5:78:ef:9e: 10:ca:4d:87:9b:d1:c8:01:2f:fb:5c:61:cd:a0:9b: 9a:97:bc:14:7e:7d:f1:21:b8:b9:47:43:5d:b9:67: c8:f8:4b:9c:bc:4a:ff:2f:09:66:ce:48:cc:d3:6e: 3b:50:22:c6:9c:4f:89:f2:75:db:51:af:e4:34:31: 16:4c:0f:44:78:b9:a5:79:1f:b0:ab:36:d1:87:ac: e6:9c:ac:4e:92:66:d5:0b:2e:2c:ed:27:cd:9c:1c: 50:9a:22:84:60:a1:58:27:0c:38:f6:79:50:ca:08: d8:c5:54:d1:0f:0c:73:1d:7d:2d:6e:20:99:67:b4: 4b:54:2a:d7:b2:85:f5:5b:c7:10:7d:49:c1:8c:1e: 15:23:3a:34:94:34:e1:98:7f:10:e3:fd:95:c2:54: d9:87:3f:c7:fb:aa:86:85:36:e0:13:7c:33:1d:20: 8f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:62:3B:52:51:52:69:9C:00:49:72:37:35:D5:D4:1F:FE:1F:6B:B8 X509v3 Authority Key Identifier: keyid:75:12:4A:A5:DD:7D:2B:53:78:3B:8C:95:65:70:CF:32:35:32:4A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75124AA5DD7D2B53783B8C956570CF3235324A6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:cd:e8:cc:92:5a:7f:0e:fb:23:6e:ed:8c:a7:1f:e7:22:7c: 1f:7a:01:d8:2c:a9:0f:18:8c:34:4c:ed:ae:b7:9e:97:2b:e5: 36:d7:05:91:ec:a9:36:4e:bf:06:9a:d0:d8:84:01:8c:31:53: dd:74:7d:0e:2a:6c:ea:9e:27:4a:80:27:17:02:7a:2a:98:db: c2:b7:90:54:b1:c6:37:a5:0b:89:8f:e7:ef:02:77:63:9d:9b: 7d:24:a4:16:68:65:e9:54:ff:80:eb:f7:bc:7e:a8:e7:7d:f5: b1:99:6e:1b:21:e2:a7:ce:8a:66:e8:e9:c7:4c:27:c3:a3:00: cd:78:83:1d:7b:5e:3a:ca:30:7b:aa:a2:fb:2e:c0:0d:5e:02: 70:10:da:b3:91:2a:14:33:b8:d0:ba:8b:24:30:a3:88:8b:98: 5f:72:a7:61:8d:5e:1a:ff:34:2c:7e:56:6b:01:f5:b7:84:dd: ba:7e:1a:64:8f:1f:a5:84:2d:c9:a0:cc:2b:05:b3:06:d2:d4: 7c:5f:22:34:6a:42:9f:80:d2:9d:ce:ed:b4:6e:ab:41:2d:f5: 94:e8:70:12:f7:eb:64:35:0f:f7:e9:ac:76:e0:f4:3d:5a:7d: 5e:ef:7a:ce:48:0a:4c:92:c4:69:4a:dc:fc:85:a7:58:5d:13: 79:cb:3b:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOXyP/M1EQY4TaSghVuqc0lD0JuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzUxMjRBQTVERDdEMkI1Mzc4M0I4Qzk1NjU3MENGMzIz NTMyNEE2QzAeFw0yNTA3MTkxNzA1NThaFw0yNTA3MjIxODE3NThaMDMxMTAvBgNV BAMTKDk1NjIzQjUyNTE1MjY5OUMwMDQ5NzIzNzM1RDVENDFGRkUxRjZCQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDibXBJGfCi0idoNsSV/Cv69r38 I/EbRQWio+DdgwWxkG606B09wfGHMmCMOHXfVIF/VaYueP2rYfin+NUCAx336IQQ KV3ZUMI9VMZba60452V/PgFupXjvnhDKTYeb0cgBL/tcYc2gm5qXvBR+ffEhuLlH Q125Z8j4S5y8Sv8vCWbOSMzTbjtQIsacT4nyddtRr+Q0MRZMD0R4uaV5H7CrNtGH rOacrE6SZtULLiztJ82cHFCaIoRgoVgnDDj2eVDKCNjFVNEPDHMdfS1uIJlntEtU KteyhfVbxxB9ScGMHhUjOjSUNOGYfxDj/ZXCVNmHP8f7qoaFNuATfDMdII8XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlWI7UlFSaZwASXI3NdXUH/4fa7gwHwYDVR0j BBgwFoAUdRJKpd19K1N4O4yVZXDPMjUySmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDQ4OGQ1Ni02ZWFkLTRjZTQtOGQzMy0yZGNmMDgwZDA4NzYvMC83NTEyNEFBNURE N0QyQjUzNzgzQjhDOTU2NTcwQ0YzMjM1MzI0QTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzUxMjRBQTVERDdEMkI1Mzc4M0I4Qzk1NjU3MENGMzIzNTMy NEE2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ0ODhkNTYtNmVhZC00Y2U0LThk MzMtMmRjZjA4MGQwODc2LzAvNzUxMjRBQTVERDdEMkI1Mzc4M0I4Qzk1NjU3MENG MzIzNTMyNEE2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnN6MySWn8O+yNu7YynH+cifB96AdgsqQ8Y jDRM7a63npcr5TbXBZHsqTZOvwaa0NiEAYwxU910fQ4qbOqeJ0qAJxcCeiqY28K3 kFSxxjelC4mP5+8Cd2Odm30kpBZoZelU/4Dr97x+qOd99bGZbhsh4qfOimbo6cdM J8OjAM14gx17XjrKMHuqovsuwA1eAnAQ2rORKhQzuNC6iyQwo4iLmF9yp2GNXhr/ NCx+VmsB9beE3bp+GmSPH6WELcmgzCsFswbS1HxfIjRqQp+A0p3O7bRuq0Et9ZTo cBL362Q1D/fprHbg9D1afV7ves5ICkySxGlK3PyFp1hdE3nLO9o= -----END CERTIFICATE-----Generated at Mon Jul 21 02:20:48 2025 by rpki-client