$ rpki-client -vvf repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft File: 7A8364745196ADEDA32E89F410EFDC19F658815A.mft (raw, json) Hash identifier: lL6Ul27ZgLBgHJwlA/Tde8uIbv+XRMPnHJXxzuyPxmI= Subject key identifier: EB:0F:BB:8E:27:64:79:57:30:19:3C:6F:46:B6:EA:80:1A:D5:95:71 Authority key identifier: 7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A Certificate issuer: /CN=7A8364745196ADEDA32E89F410EFDC19F658815A Certificate serial: 0345666CA1DBB0F42A20B6095A32CB0985CC64D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft Manifest number: 8D Signing time: Thu 05 Jun 2025 16:40:00 +0000 Manifest this update: Thu 05 Jun 2025 16:35:00 +0000 Manifest next update: Sun 08 Jun 2025 21:53:00 +0000 Files and hashes: 1: 7A8364745196ADEDA32E89F410EFDC19F658815A.crl (hash: sU67CFXcnrcDPP2KKbVBEWPRjCH7EAaOUymYuakM3X4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 21:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:45:66:6c:a1:db:b0:f4:2a:20:b6:09:5a:32:cb:09:85:cc:64:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A8364745196ADEDA32E89F410EFDC19F658815A Validity Not Before: Jun 5 16:35:00 2025 GMT Not After : Jun 8 21:53:00 2025 GMT Subject: CN=EB0FBB8E2764795730193C6F46B6EA801AD59571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cf:43:64:5c:bd:5c:74:37:d8:9a:14:e6:61: 42:63:93:b6:f2:9e:c9:b4:c4:56:ae:c2:8c:07:26: b9:83:a4:61:20:7a:52:01:9b:ea:44:85:7f:ed:6e: 60:74:3b:17:12:91:80:0a:c3:46:d3:6b:20:40:41: 76:c3:00:17:93:c4:30:81:59:50:3f:d3:8c:2a:50: d3:bd:40:16:8e:f8:9d:d6:d1:0f:7b:b3:5b:7d:dc: b2:7f:d7:8c:06:b4:27:e7:dd:c3:e5:cd:3c:36:f6: a9:e6:db:cc:6a:b7:81:fe:b3:c1:7a:41:16:fd:49: 09:06:2d:1d:f2:35:c0:29:61:55:96:01:9d:ad:ff: 0a:3f:6b:6b:64:58:d0:f7:4f:f2:a9:ee:7a:11:11: 4a:c1:89:0f:18:3f:8c:8d:db:6f:e9:45:d9:43:09: 81:44:b1:c4:3e:9f:d1:9d:53:49:44:ef:e9:2f:a0: 1b:98:b3:8b:73:d2:8d:a2:1b:4c:05:55:a8:ba:26: 6b:d8:42:0c:f3:f8:cc:61:59:96:cf:f2:b1:69:0a: f7:01:d5:ae:c3:cd:fa:93:5f:d2:09:a8:79:2f:37: 19:b1:d2:26:c4:73:5f:7f:d8:3c:19:3b:26:fc:fa: 9d:5e:f5:80:28:82:1c:3f:4d:3c:45:f4:15:2d:b2: 69:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0F:BB:8E:27:64:79:57:30:19:3C:6F:46:B6:EA:80:1A:D5:95:71 X509v3 Authority Key Identifier: keyid:7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:4d:dd:1e:2a:0c:71:b4:db:10:9f:a9:bc:95:87:d0:e0:ef: b7:1d:c3:6b:4c:b0:b4:29:3f:b8:b5:bb:8f:a6:71:e0:f5:5e: 11:48:b5:32:cd:38:5c:3d:01:d8:64:54:9c:33:24:9e:1c:25: 66:57:c3:fd:c5:bb:8b:01:ed:82:80:b2:b8:ad:e5:1b:dd:38: c0:c0:54:38:fa:c8:fe:f6:95:48:37:c2:03:fa:85:1b:73:a2: 98:94:f0:a0:95:6d:12:e0:c9:bf:29:79:bc:9c:84:f2:79:64: 6b:b5:9c:73:bb:9f:a6:f5:84:ab:62:06:cf:3b:22:8c:33:57: 04:f0:2e:5a:36:e4:6d:ed:a9:89:62:b9:ca:1c:03:4d:10:92: b5:a2:a6:20:f6:98:5a:ca:5f:c9:87:9a:21:04:d9:3b:c9:ce: 8d:3f:71:fe:6b:19:97:8c:f3:25:1a:d4:0b:c1:84:76:b6:ae: 5d:40:93:37:0e:d2:cb:e2:8d:f5:6a:7c:e5:71:99:4c:70:18: aa:ab:b1:1a:14:5c:64:55:33:9d:5c:a5:f1:c8:81:1e:23:54: e3:3b:94:9e:4f:0f:bd:d1:bf:5a:5c:c3:07:15:58:ef:dc:69: 84:e1:5d:77:cc:f6:06:bc:6f:a4:72:1a:d5:94:23:e6:c6:61: b1:83:3a:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA0VmbKHbsPQqILYJWjLLCYXMZNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlG NjU4ODE1QTAeFw0yNTA2MDUxNjM1MDBaFw0yNTA2MDgyMTUzMDBaMDMxMTAvBgNV BAMTKEVCMEZCQjhFMjc2NDc5NTczMDE5M0M2RjQ2QjZFQTgwMUFENTk1NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHz0NkXL1cdDfYmhTmYUJjk7by nsm0xFauwowHJrmDpGEgelIBm+pEhX/tbmB0OxcSkYAKw0bTayBAQXbDABeTxDCB WVA/04wqUNO9QBaO+J3W0Q97s1t93LJ/14wGtCfn3cPlzTw29qnm28xqt4H+s8F6 QRb9SQkGLR3yNcApYVWWAZ2t/wo/a2tkWND3T/Kp7noREUrBiQ8YP4yN22/pRdlD CYFEscQ+n9GdU0lE7+kvoBuYs4tz0o2iG0wFVai6JmvYQgzz+MxhWZbP8rFpCvcB 1a7DzfqTX9IJqHkvNxmx0ibEc19/2DwZOyb8+p1e9YAoghw/TTxF9BUtsmlxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6w+7jidkeVcwGTxvRrbqgBrVlXEwHwYDVR0j BBgwFoAUeoNkdFGWre2jLon0EO/cGfZYgVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5YjRkMS1kNmI1LTQ4MjAtYTQ5Ny02OTNiOTNkZGY1OGUvMC83QTgzNjQ3NDUx OTZBREVEQTMyRTg5RjQxMEVGREMxOUY2NTg4MTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlGNjU4 ODE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRD MTlGNjU4ODE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhN3R4qDHG02xCfqbyVh9Dg77cdw2tMsLQp P7i1u4+mceD1XhFItTLNOFw9AdhkVJwzJJ4cJWZXw/3Fu4sB7YKAsrit5RvdOMDA VDj6yP72lUg3wgP6hRtzopiU8KCVbRLgyb8pebychPJ5ZGu1nHO7n6b1hKtiBs87 IowzVwTwLlo25G3tqYliucocA00QkrWipiD2mFrKX8mHmiEE2TvJzo0/cf5rGZeM 8yUa1AvBhHa2rl1AkzcO0svijfVqfOVxmUxwGKqrsRoUXGRVM51cpfHIgR4jVOM7 lJ5PD73Rv1pcwwcVWO/caYThXXfM9ga8b6RyGtWUI+bGYbGDOuw= -----END CERTIFICATE-----Generated at Fri Jun 6 06:27:01 2025 by rpki-client