$ rpki-client -vvf repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft File: 7A8364745196ADEDA32E89F410EFDC19F658815A.mft (raw, json) Hash identifier: KLXSL8NgF9yPo4FS5xi9o6X42KnhGhMexavFFiPSKfE= Subject key identifier: 57:9B:42:12:DE:3E:AB:49:DC:78:BA:8E:CE:30:9D:D2:82:97:44:C0 Authority key identifier: 7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A Certificate issuer: /CN=7A8364745196ADEDA32E89F410EFDC19F658815A Certificate serial: 71C17B7C01D40DB9DAFAC705379CE6169BFC77CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft Manifest number: 75 Signing time: Fri 11 Apr 2025 20:50:00 +0000 Manifest this update: Fri 11 Apr 2025 20:45:00 +0000 Manifest next update: Mon 14 Apr 2025 23:31:00 +0000 Files and hashes: 1: 7A8364745196ADEDA32E89F410EFDC19F658815A.crl (hash: vyj6OaETnP0C6tlRZfeARiB46pHUsL+NZkx8Rsvas70=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 12:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c1:7b:7c:01:d4:0d:b9:da:fa:c7:05:37:9c:e6:16:9b:fc:77:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A8364745196ADEDA32E89F410EFDC19F658815A Validity Not Before: Apr 11 20:45:00 2025 GMT Not After : Apr 14 23:31:00 2025 GMT Subject: CN=579B4212DE3EAB49DC78BA8ECE309DD2829744C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:86:31:fd:44:d1:94:32:41:22:27:31:01:af: 79:6b:d6:3b:60:3e:87:44:ed:34:c3:4c:9e:a8:e0: 2d:ac:b2:c9:d4:c7:b1:d4:2b:76:6a:59:24:39:cd: fb:ea:5d:36:bd:16:c1:ce:19:21:3d:96:73:ec:4d: e1:a2:90:7c:a4:88:5f:28:da:67:78:e9:9d:52:68: 42:50:45:af:12:09:75:3c:80:17:e4:79:d3:5e:56: 76:18:8f:8b:11:6c:25:2c:fb:31:50:d5:0a:4e:c6: 8a:b7:04:e9:12:77:0f:6d:7a:ef:f5:19:0d:4a:fa: 14:ec:ca:e4:e3:e4:3b:e2:45:a4:55:5c:78:ab:18: d3:1c:06:72:e4:76:29:d3:b3:57:1d:53:58:58:54: d8:ab:e5:7c:a2:4c:bf:69:3a:50:e7:b3:8b:f0:1d: 7d:ce:04:fd:5f:b2:eb:9c:44:44:18:4f:42:1b:dc: 06:f7:af:5a:b5:2d:af:fe:09:5a:0e:c3:b3:c9:6a: 67:30:88:45:d6:5e:eb:9a:af:8c:0a:02:a1:03:7b: c2:c0:aa:ed:1a:8b:53:93:e0:0a:1a:1c:19:56:c0: 04:06:17:a1:14:b1:78:26:28:29:41:a2:41:d6:ad: 5f:19:55:91:99:4b:81:c9:c4:f7:6b:b5:a0:d3:a0: 97:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9B:42:12:DE:3E:AB:49:DC:78:BA:8E:CE:30:9D:D2:82:97:44:C0 X509v3 Authority Key Identifier: keyid:7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e8:3b:17:99:66:d1:01:b0:cd:42:d5:53:a2:44:ff:87:a4:45: 17:2b:69:24:c5:2e:a2:39:0e:6f:3d:21:3f:14:aa:4b:ac:b8: 03:69:24:2d:22:29:e2:03:5b:c8:75:e1:11:05:b2:e9:5d:af: 6b:a4:dc:ad:61:9b:a5:d0:c4:d5:45:20:4e:4b:1e:43:ae:ae: 75:57:44:52:7c:90:df:d6:f6:c4:54:0d:64:20:44:f5:6a:57: a0:9f:27:06:70:bb:3f:90:c3:d0:1f:7e:eb:2d:fb:a1:51:d8: cb:f9:51:37:85:4a:93:ca:8c:bd:f8:da:2b:b4:d6:ca:3c:ff: 20:9a:68:0f:2d:b1:60:1c:a8:a3:83:77:33:e4:85:a2:5f:3e: fc:88:85:fe:9d:fc:1a:da:7e:93:23:0f:ef:5a:a8:24:dd:42: 49:19:fa:7f:a8:44:a3:2d:c9:12:99:16:af:c9:4b:39:2c:59: 31:7b:f0:72:59:08:a2:73:9c:07:73:7e:5d:c7:39:55:ce:cb: f9:5e:a6:1d:5d:10:44:97:ac:5e:2f:97:dc:a6:27:09:b4:f2: 32:0b:9a:ac:f9:d3:67:5a:b9:56:a3:3b:a4:6c:a4:06:c6:e8: 2f:9c:8a:73:ba:8d:27:70:03:80:1d:d4:e5:bb:41:7f:48:ca: 24:a5:e1:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUccF7fAHUDbna+scFN5zmFpv8d8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlG NjU4ODE1QTAeFw0yNTA0MTEyMDQ1MDBaFw0yNTA0MTQyMzMxMDBaMDMxMTAvBgNV BAMTKDU3OUI0MjEyREUzRUFCNDlEQzc4QkE4RUNFMzA5REQyODI5NzQ0QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6hjH9RNGUMkEiJzEBr3lr1jtg PodE7TTDTJ6o4C2sssnUx7HUK3ZqWSQ5zfvqXTa9FsHOGSE9lnPsTeGikHykiF8o 2md46Z1SaEJQRa8SCXU8gBfkedNeVnYYj4sRbCUs+zFQ1QpOxoq3BOkSdw9teu/1 GQ1K+hTsyuTj5DviRaRVXHirGNMcBnLkdinTs1cdU1hYVNir5XyiTL9pOlDns4vw HX3OBP1fsuucREQYT0Ib3Ab3r1q1La/+CVoOw7PJamcwiEXWXuuar4wKAqEDe8LA qu0ai1OT4AoaHBlWwAQGF6EUsXgmKClBokHWrV8ZVZGZS4HJxPdrtaDToJfPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV5tCEt4+q0nceLqOzjCd0oKXRMAwHwYDVR0j BBgwFoAUeoNkdFGWre2jLon0EO/cGfZYgVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5YjRkMS1kNmI1LTQ4MjAtYTQ5Ny02OTNiOTNkZGY1OGUvMC83QTgzNjQ3NDUx OTZBREVEQTMyRTg5RjQxMEVGREMxOUY2NTg4MTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlGNjU4 ODE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRD MTlGNjU4ODE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOg7F5lm0QGwzULVU6JE/4ekRRcraSTFLqI5 Dm89IT8UqkusuANpJC0iKeIDW8h14REFsuldr2uk3K1hm6XQxNVFIE5LHkOurnVX RFJ8kN/W9sRUDWQgRPVqV6CfJwZwuz+Qw9Affust+6FR2Mv5UTeFSpPKjL342iu0 1so8/yCaaA8tsWAcqKODdzPkhaJfPvyIhf6d/BrafpMjD+9aqCTdQkkZ+n+oRKMt yRKZFq/JSzksWTF78HJZCKJznAdzfl3HOVXOy/leph1dEESXrF4vl9ymJwm08jIL mqz502dauVajO6RspAbG6C+cinO6jSdwA4Ad1OW7QX9IyiSl4ZU= -----END CERTIFICATE-----Generated at Sat Apr 12 04:12:14 2025 by rpki-client