$ rpki-client -vvf repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft File: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft (raw, json) Hash identifier: XdmVF/GDrRGb97Pp+rtcO/3noWWkmANbmGY620ndLto= Subject key identifier: D6:C1:D8:A1:A1:69:5E:58:CD:A7:D8:9E:B7:DD:E5:1D:3B:AF:93:8C Authority key identifier: 7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 Certificate issuer: /CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Certificate serial: 7902DDFEB18E406DFB1C15BA21C7A8565C57105F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft Manifest number: 0135 Signing time: Thu 05 Jun 2025 20:32:29 +0000 Manifest this update: Thu 05 Jun 2025 20:27:29 +0000 Manifest next update: Mon 09 Jun 2025 00:23:29 +0000 Files and hashes: 1: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl (hash: 0n3gaALWWLkaejegVyla1WqimzWUbRYHUnPAFWzBw2A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 00:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:02:dd:fe:b1:8e:40:6d:fb:1c:15:ba:21:c7:a8:56:5c:57:10:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Validity Not Before: Jun 5 20:27:29 2025 GMT Not After : Jun 9 00:23:29 2025 GMT Subject: CN=D6C1D8A1A1695E58CDA7D89EB7DDE51D3BAF938C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9c:05:bb:a1:57:f6:c8:2c:09:69:f8:8b:b7: a6:c6:27:d7:14:20:30:1c:78:da:e8:74:8c:8f:7b: c6:7d:f7:24:37:6e:6e:fa:91:5b:d7:f2:ec:75:2c: c7:7b:c3:87:34:46:c7:1c:9c:4a:b6:fd:b8:63:d3: dd:8f:26:27:25:fc:80:fb:e2:ce:e6:22:3b:ae:fc: 70:32:1d:5a:ae:81:1d:f4:f4:5e:83:5f:f0:07:a4: 6b:51:c4:b1:ff:9c:82:7f:1c:42:61:a6:64:f7:09: 3c:37:a8:c7:b3:ce:a9:66:23:23:73:d0:de:ac:84: 7b:83:a3:af:e5:9d:25:ef:20:e9:56:71:53:1e:a1: ce:8c:96:34:32:ea:92:cf:e7:82:55:cf:e5:54:af: 26:97:e7:70:96:aa:ca:30:55:df:c4:b5:0b:78:7b: b9:b8:5a:0a:63:73:ad:c8:c5:a7:d2:69:25:63:ad: 11:da:6e:34:4e:7f:2f:5b:82:8e:d7:57:6c:eb:8c: 2e:d2:bc:57:b6:c1:29:ca:5a:4b:5a:89:d2:1a:e9: a8:5b:b9:a8:da:7e:de:07:68:d5:96:6c:df:7c:31: 27:45:78:b4:e4:e0:c2:1b:07:2b:3e:31:ca:30:0e: 34:4d:8e:04:da:99:57:fa:a1:57:4c:e9:21:26:b9: 1a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C1:D8:A1:A1:69:5E:58:CD:A7:D8:9E:B7:DD:E5:1D:3B:AF:93:8C X509v3 Authority Key Identifier: keyid:7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ff:1f:b3:d4:22:d0:48:3f:d5:09:5a:3d:b3:33:1a:42:fc: e7:4f:f9:f3:6e:60:8f:71:6f:94:d5:1c:5e:8a:42:0e:98:15: a3:3e:8c:bb:54:ad:fb:67:cd:07:dd:df:a4:1c:7c:6e:d9:16: b6:c1:e6:4a:32:ec:23:7b:8e:8e:1d:a9:f4:92:2c:8a:4c:e3: 9e:cd:9a:97:f2:ff:6d:39:3c:13:45:c1:31:58:67:55:2c:b0: 1d:58:bd:f8:08:43:3c:d3:b8:72:73:cb:4f:f7:93:5c:33:4e: e0:69:11:ea:a5:7a:84:f0:b3:4c:b8:03:df:84:5a:4d:3f:1b: e1:75:b2:95:bb:b8:91:72:98:50:3d:be:ed:b0:d7:29:c5:ee: 4a:22:39:6c:9f:6b:d5:31:6d:f5:51:77:24:fb:c6:4a:66:57: 93:44:24:f8:65:ba:f2:ed:99:3a:86:d0:4c:af:d4:5e:47:5b: c4:55:92:7e:69:65:55:61:1d:d0:1f:4a:47:b5:2b:c9:6b:1d: 2d:86:b9:1f:50:8c:53:4f:ee:59:4c:72:82:be:4a:57:91:8b: bc:52:07:77:bf:05:8f:a9:b6:2e:4a:b5:84:a6:8d:6f:08:f3: 2f:6f:e1:7b:b8:81:01:5f:24:72:58:f5:07:b1:ab:d6:10:ae: d3:f0:16:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeQLd/rGOQG37HBW6IceoVlxXEF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAx REFGODhEODAeFw0yNTA2MDUyMDI3MjlaFw0yNTA2MDkwMDIzMjlaMDMxMTAvBgNV BAMTKEQ2QzFEOEExQTE2OTVFNThDREE3RDg5RUI3RERFNTFEM0JBRjkzOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrnAW7oVf2yCwJafiLt6bGJ9cU IDAceNrodIyPe8Z99yQ3bm76kVvX8ux1LMd7w4c0RsccnEq2/bhj092PJicl/ID7 4s7mIjuu/HAyHVqugR309F6DX/AHpGtRxLH/nIJ/HEJhpmT3CTw3qMezzqlmIyNz 0N6shHuDo6/lnSXvIOlWcVMeoc6MljQy6pLP54JVz+VUryaX53CWqsowVd/EtQt4 e7m4Wgpjc63IxafSaSVjrRHabjROfy9bgo7XV2zrjC7SvFe2wSnKWktaidIa6ahb uajaft4HaNWWbN98MSdFeLTk4MIbBys+McowDjRNjgTamVf6oVdM6SEmuRpFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1sHYoaFpXljNp9iet93lHTuvk4wwHwYDVR0j BBgwFoAUfaMIpm73Bb7kLKBGMaDjkB2viNgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmI1ZmYzNy0zOTRhLTRlYmEtYTQ3MC0xMGFmMzdjZjc1ZGMvMC83REEzMDhBNjZF RjcwNUJFRTQyQ0EwNDYzMUEwRTM5MDFEQUY4OEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAxREFG ODhEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZiNWZmMzctMzk0YS00ZWJhLWE0 NzAtMTBhZjM3Y2Y3NWRjLzAvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUz OTAxREFGODhEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACf/H7PUItBIP9UJWj2zMxpC/OdP+fNuYI9x b5TVHF6KQg6YFaM+jLtUrftnzQfd36QcfG7ZFrbB5koy7CN7jo4dqfSSLIpM457N mpfy/205PBNFwTFYZ1UssB1YvfgIQzzTuHJzy0/3k1wzTuBpEeqleoTws0y4A9+E Wk0/G+F1spW7uJFymFA9vu2w1ynF7koiOWyfa9UxbfVRdyT7xkpmV5NEJPhluvLt mTqG0Eyv1F5HW8RVkn5pZVVhHdAfSke1K8lrHS2GuR9QjFNP7llMcoK+SleRi7xS B3e/BY+pti5KtYSmjW8I8y9v4Xu4gQFfJHJY9Qexq9YQrtPwFpk= -----END CERTIFICATE-----Generated at Fri Jun 6 16:44:16 2025 by rpki-client