$ rpki-client -vvf repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft File: D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft (raw, json) Hash identifier: MYBbE5d7tJyrIDYlxPs5aRZv2t5EkQqw6lnTZ0rqQbg= Subject key identifier: 77:3A:34:DF:4B:EE:15:83:31:EF:49:75:0B:AF:7A:2E:D8:9E:36:CF Authority key identifier: D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 Certificate issuer: /CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Certificate serial: 46AEE120B02F3E2CF5F92D28FFA76D78611B167C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft Manifest number: 01EB Signing time: Thu 05 Jun 2025 00:40:44 +0000 Manifest this update: Thu 05 Jun 2025 00:35:44 +0000 Manifest next update: Sun 08 Jun 2025 12:25:44 +0000 Files and hashes: 1: D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl (hash: oUzPihNt4gpCLc/EGa+U2HQ6A5+h5UGG+W9n3iKjzi0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 12:25:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ae:e1:20:b0:2f:3e:2c:f5:f9:2d:28:ff:a7:6d:78:61:1b:16:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Validity Not Before: Jun 5 00:35:44 2025 GMT Not After : Jun 8 12:25:44 2025 GMT Subject: CN=773A34DF4BEE158331EF49750BAF7A2ED89E36CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b3:16:81:b5:24:c7:c3:91:3a:f1:3a:58:06: 64:56:33:06:92:2c:08:48:32:bb:49:d2:13:55:1e: 1a:cf:4f:6e:f6:28:27:68:e0:93:fd:1d:10:77:b6: 63:44:61:be:4c:63:a3:7c:fa:20:4a:37:fe:24:7b: 50:2a:85:76:02:12:2c:55:71:49:26:b6:80:01:4f: 98:ea:c6:2c:a7:30:7c:92:96:a9:1f:08:da:49:60: a0:87:5e:dd:79:8c:2f:eb:16:96:fc:30:7f:c9:e6: 77:ee:89:0e:15:f7:a2:11:f6:1e:47:dd:de:8d:72: 58:6f:b7:aa:98:4d:5a:0f:06:9d:78:d1:27:75:b6: 61:8c:5c:95:ce:38:f9:07:0c:a8:6d:15:bb:6c:35: e2:e2:db:c6:3a:7b:74:d3:ed:42:fa:92:34:b8:13: 3f:60:09:9f:9d:5c:4d:c2:ec:ec:20:59:e3:ca:55: d8:2f:9f:be:86:51:ae:36:4a:2f:f8:46:96:87:91: d2:fc:4f:21:6f:d8:06:85:8a:08:49:2b:a7:5b:db: 8e:6d:54:90:d1:db:c4:a3:07:5a:c1:97:71:ad:b7: bd:7b:94:1b:6c:88:ad:2f:09:ed:cd:75:dd:70:41: 74:cf:f6:f7:78:b9:06:53:e4:e4:90:a4:0e:e8:9a: 3c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3A:34:DF:4B:EE:15:83:31:EF:49:75:0B:AF:7A:2E:D8:9E:36:CF X509v3 Authority Key Identifier: keyid:D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:b0:e4:05:1e:14:b5:22:84:51:8a:ca:cc:a4:8f:1b:73:65: 4a:c8:37:8a:9f:63:df:d1:35:fb:e5:fd:f2:dd:32:a7:ed:e3: 90:78:db:1d:16:ac:8f:b7:42:4a:83:23:dc:67:5a:01:3a:f7: 51:a5:21:a1:55:5d:df:fd:a9:59:55:0d:12:f8:d0:a3:5a:30: f8:36:0b:af:28:86:e6:81:74:46:2e:98:44:fb:b1:51:a7:55: d8:81:57:c6:fa:43:5e:4f:79:e3:32:5c:6c:ac:d1:94:e9:ad: 10:4e:48:3d:9f:97:4f:91:d4:2e:b7:9a:80:28:63:f9:59:b1: 48:cd:19:b3:49:f9:36:b4:75:99:3e:2a:dc:54:91:74:d4:9d: 65:df:21:6b:aa:ab:d3:62:20:35:ef:c1:14:ea:29:d0:97:85: e0:87:db:3a:75:56:65:ed:33:81:d1:a5:1e:64:b3:b4:ae:22: 08:73:bd:13:ee:ed:a2:9b:ae:32:0d:8f:d2:44:f1:4c:dc:ac: a4:bc:ea:25:30:7f:61:f4:91:8f:da:d5:09:51:78:2d:9e:9a: 5d:c1:ca:a7:c4:f1:dc:43:6e:d6:09:73:66:1e:d5:89:7d:17: c3:1c:2a:5d:5e:98:c3:39:b6:64:c8:8c:e5:a2:0e:d8:ef:8e: 3f:57:1d:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURq7hILAvPiz1+S0o/6dteGEbFnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4 NTgyQkFDNDAeFw0yNTA2MDUwMDM1NDRaFw0yNTA2MDgxMjI1NDRaMDMxMTAvBgNV BAMTKDc3M0EzNERGNEJFRTE1ODMzMUVGNDk3NTBCQUY3QTJFRDg5RTM2Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAsxaBtSTHw5E68TpYBmRWMwaS LAhIMrtJ0hNVHhrPT272KCdo4JP9HRB3tmNEYb5MY6N8+iBKN/4ke1AqhXYCEixV cUkmtoABT5jqxiynMHySlqkfCNpJYKCHXt15jC/rFpb8MH/J5nfuiQ4V96IR9h5H 3d6Nclhvt6qYTVoPBp140Sd1tmGMXJXOOPkHDKhtFbtsNeLi28Y6e3TT7UL6kjS4 Ez9gCZ+dXE3C7OwgWePKVdgvn76GUa42Si/4RpaHkdL8TyFv2AaFighJK6db245t VJDR28SjB1rBl3Gtt717lBtsiK0vCe3Ndd1wQXTP9vd4uQZT5OSQpA7omjyxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdzo030vuFYMx70l1C696LtieNs8wHwYDVR0j BBgwFoAU18dhIkJkkbgfhOWoJOSr64WCusQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDUwZGNjMy04NGRkLTQ1OTUtYmEyYy1iYzY5OTg5NjkyZjEvMC9EN0M3NjEyMjQy NjQ5MUI4MUY4NEU1QTgyNEU0QUJFQjg1ODJCQUM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4NTgy QkFDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFC RUI4NTgyQkFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISw5AUeFLUihFGKysykjxtzZUrIN4qfY9/R Nfvl/fLdMqft45B42x0WrI+3QkqDI9xnWgE691GlIaFVXd/9qVlVDRL40KNaMPg2 C68ohuaBdEYumET7sVGnVdiBV8b6Q15PeeMyXGys0ZTprRBOSD2fl0+R1C63moAo Y/lZsUjNGbNJ+Ta0dZk+KtxUkXTUnWXfIWuqq9NiIDXvwRTqKdCXheCH2zp1VmXt M4HRpR5ks7SuIghzvRPu7aKbrjINj9JE8UzcrKS86iUwf2H0kY/a1QlReC2eml3B yqfE8dxDbtYJc2Ye1Yl9F8McKl1emMM5tmTIjOWiDtjvjj9XHfI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:18:38 2025 by rpki-client