$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft File: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft (raw, json) Hash identifier: DzrgsGpIhfX+GSzwE58CP4tvx4ucuyXPN3ASTftA9vM= Subject key identifier: A1:BA:DB:20:40:35:2F:51:E2:22:84:5F:D9:B2:0B:D1:68:2F:11:C7 Authority key identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 Certificate issuer: /CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Certificate serial: 04EBD169DDB83F8FFE70DE33EE517E3B3FC70303 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft Manifest number: 52 Signing time: Mon 02 Jun 2025 05:40:58 +0000 Manifest this update: Mon 02 Jun 2025 05:35:58 +0000 Manifest next update: Thu 05 Jun 2025 13:56:58 +0000 Files and hashes: 1: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl (hash: iShTGFgbDCmEuwATz5M+FSQEVow44zCdjChOU/srUeg=) 2: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: TtLF2mCHfSEfxKosRTbgY2pYRo+Ox0NN2gzHDI6VY/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 13:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:eb:d1:69:dd:b8:3f:8f:fe:70:de:33:ee:51:7e:3b:3f:c7:03:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Validity Not Before: Jun 2 05:35:58 2025 GMT Not After : Jun 5 13:56:58 2025 GMT Subject: CN=A1BADB2040352F51E222845FD9B20BD1682F11C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d6:02:73:22:de:f8:aa:aa:53:20:ec:7b:ad: 54:2c:26:fa:ca:af:3a:46:56:02:5f:4a:b9:aa:68: 15:4c:84:ac:a0:7e:1c:62:70:b8:4e:32:74:b6:38: 2a:9c:31:5f:6a:d1:01:76:76:cb:da:bd:76:58:ab: 41:8c:94:6e:c7:98:f5:64:88:98:8d:37:90:d4:3a: 4f:50:be:1a:11:31:fa:8a:de:cd:09:81:3b:e0:47: d5:34:fc:97:71:f8:f4:87:c9:50:8b:a1:9c:8f:11: 99:62:45:12:75:64:b8:94:34:aa:e2:42:5c:ea:d5: 4a:bf:c6:da:f0:38:cb:ee:2b:82:68:ab:72:68:4a: 3b:2f:1c:21:2d:77:ce:10:d5:57:1a:cb:03:e7:33: 83:f4:99:4b:d0:12:04:d0:3e:a7:b3:8e:c4:f2:eb: e0:ef:ba:fc:79:6b:bd:48:f3:fe:61:30:dc:21:7c: af:af:f5:22:8b:6c:90:d4:ec:33:e7:31:4f:95:db: b3:49:70:69:69:fa:09:67:91:b0:60:94:1d:bf:e6: 88:6d:da:73:65:78:dd:c5:be:6c:78:fc:01:76:15: 09:be:e5:7c:a5:5a:9a:c2:ef:6b:52:0c:2a:97:aa: 2d:62:e2:05:45:14:16:91:9c:44:ad:2d:18:84:75: f7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BA:DB:20:40:35:2F:51:E2:22:84:5F:D9:B2:0B:D1:68:2F:11:C7 X509v3 Authority Key Identifier: keyid:7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:11:14:a9:a1:8a:4b:79:b8:ad:8f:e3:31:88:44:65:e4:e8: 25:c3:8b:0f:be:e7:4e:f4:4e:dc:e5:8b:e8:d3:da:57:9a:16: 6f:d4:b4:c7:8e:cd:71:fc:d9:d1:d9:4c:60:ea:8a:96:dd:07: 80:39:69:55:7a:46:b6:3a:89:20:16:d5:e5:42:bb:f7:06:bf: 32:1c:dc:72:86:c5:33:89:f6:34:f8:fe:44:12:4d:5e:8b:9c: 86:59:7c:e0:85:90:ea:af:f5:8f:e3:19:50:0d:57:bd:db:d3: 62:db:d8:7f:76:0d:2c:dc:f2:32:82:7a:c5:e6:16:78:19:5a: c1:a7:21:0a:74:27:74:65:7d:dc:64:9c:29:63:63:a9:53:51: 33:cb:6a:1f:c2:59:a9:04:f6:f4:da:de:1b:56:8f:c3:a7:1c: 58:36:f6:29:73:a9:7b:a7:71:32:45:44:d5:f4:6c:52:ad:6f: 4f:78:00:c9:67:65:b5:fe:26:20:24:96:2a:24:da:e3:42:40: 09:14:b7:b0:e1:03:ac:a2:de:fc:21:c3:b3:83:c2:6d:5a:e1: 00:a0:7a:24:5d:f0:ef:16:0f:3b:27:a5:db:93:1f:9e:34:e6: 4f:de:44:11:38:2f:f0:0e:ea:06:91:6a:8c:57:a7:43:da:b4: 47:8c:23:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBOvRad24P4/+cN4z7lF+Oz/HAwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3 RkRGNUYyNDAeFw0yNTA2MDIwNTM1NThaFw0yNTA2MDUxMzU2NThaMDMxMTAvBgNV BAMTKEExQkFEQjIwNDAzNTJGNTFFMjIyODQ1RkQ5QjIwQkQxNjgyRjExQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1gJzIt74qqpTIOx7rVQsJvrK rzpGVgJfSrmqaBVMhKygfhxicLhOMnS2OCqcMV9q0QF2dsvavXZYq0GMlG7HmPVk iJiNN5DUOk9QvhoRMfqK3s0JgTvgR9U0/Jdx+PSHyVCLoZyPEZliRRJ1ZLiUNKri Qlzq1Uq/xtrwOMvuK4Joq3JoSjsvHCEtd84Q1VcaywPnM4P0mUvQEgTQPqezjsTy 6+Dvuvx5a71I8/5hMNwhfK+v9SKLbJDU7DPnMU+V27NJcGlp+glnkbBglB2/5oht 2nNleN3Fvmx4/AF2FQm+5XylWprC72tSDCqXqi1i4gVFFBaRnEStLRiEdff3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUobrbIEA1L1HiIoRf2bIL0WgvEccwHwYDVR0j BBgwFoAUfo3hVJ6J1LSAtVZpXKvpzn/fXyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMS83RThERTE1NDlF ODlENEI0ODBCNTU2Njk1Q0FCRTlDRTdGREY1RjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3RkRG NUYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzEvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5 Q0U3RkRGNUYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALERFKmhikt5uK2P4zGIRGXk6CXDiw++5070 Ttzli+jT2leaFm/UtMeOzXH82dHZTGDqipbdB4A5aVV6RrY6iSAW1eVCu/cGvzIc 3HKGxTOJ9jT4/kQSTV6LnIZZfOCFkOqv9Y/jGVANV73b02Lb2H92DSzc8jKCesXm FngZWsGnIQp0J3RlfdxknCljY6lTUTPLah/CWakE9vTa3htWj8OnHFg29ilzqXun cTJFRNX0bFKtb094AMlnZbX+JiAkliok2uNCQAkUt7DhA6yi3vwhw7ODwm1a4QCg eiRd8O8WDzsnpduTH5405k/eRBE4L/AO6gaRaoxXp0PatEeMI3s= -----END CERTIFICATE-----Generated at Tue Jun 3 23:39:31 2025 by rpki-client