$ rpki-client -vvf repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft File: 7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft (raw, json) Hash identifier: GSTmK5QOOueAChEYBHJS/2nPmiMXx3MuByo500HQk6g= Subject key identifier: E9:7D:A5:7B:11:B6:C0:20:6B:FE:1E:F5:D1:B7:EA:C9:BB:A9:5B:64 Authority key identifier: 7E:EB:EF:D1:AE:72:51:99:E4:B0:23:CD:A2:2A:30:05:EF:BF:4D:E8 Certificate issuer: /CN=7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8 Certificate serial: 4B807DFE7C1749540364A747F30CAC43F2F3E27C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft Manifest number: 12 Signing time: Mon 02 Jun 2025 17:41:53 +0000 Manifest this update: Mon 02 Jun 2025 17:36:53 +0000 Manifest next update: Thu 05 Jun 2025 18:21:53 +0000 Files and hashes: 1: 7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl (hash: 8bKejSnPy30DuAbwn6ro5v83FPkh4TnLBTg1UBMZYJY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 18:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:80:7d:fe:7c:17:49:54:03:64:a7:47:f3:0c:ac:43:f2:f3:e2:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8 Validity Not Before: Jun 2 17:36:53 2025 GMT Not After : Jun 5 18:21:53 2025 GMT Subject: CN=E97DA57B11B6C0206BFE1EF5D1B7EAC9BBA95B64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:27:c8:fe:e0:a6:5b:53:6a:74:be:cc:1f:2a: 08:2c:3e:a8:7d:f2:65:fb:8e:7d:88:b7:9a:2a:7e: 4e:83:f6:71:e1:c8:4d:66:cb:b1:0e:d2:44:22:e6: 33:0d:e4:3a:82:2f:c3:29:c8:98:05:ed:4d:80:c2: 3b:0c:24:35:7c:b4:21:b1:a4:43:af:86:a2:4c:e9: f2:20:e7:e2:2d:71:32:b4:ab:d7:5c:50:39:16:21: fc:4d:84:d2:60:b0:9d:ab:88:e6:2a:8b:83:b0:32: ac:fa:93:dc:a7:ea:e5:4f:6b:52:94:f2:66:48:14: 39:5b:38:88:5f:68:88:a6:78:75:85:8f:da:dd:40: 61:7a:ee:98:bf:d5:dc:44:55:65:b9:e9:04:6d:0c: 64:24:26:b1:ba:b3:a4:b1:69:c8:71:7c:4c:c7:7c: 06:8e:e5:5c:90:1b:a0:24:7e:c1:88:76:15:d0:21: 2f:3b:fa:47:6c:a8:f1:d6:85:8f:8e:df:28:cb:25: 3b:18:73:ae:28:ed:ee:6d:9d:6d:c0:4c:5e:9a:a3: b3:81:b4:1a:fa:f0:65:4e:0d:04:bc:ff:2a:ec:d6: f5:58:46:6c:e7:4f:f9:3e:8f:27:cb:fc:e4:53:cf: 22:f7:5c:46:fd:cc:c0:c9:c7:d8:bf:1f:74:54:33: 95:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7D:A5:7B:11:B6:C0:20:6B:FE:1E:F5:D1:B7:EA:C9:BB:A9:5B:64 X509v3 Authority Key Identifier: keyid:7E:EB:EF:D1:AE:72:51:99:E4:B0:23:CD:A2:2A:30:05:EF:BF:4D:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:11:d7:04:5e:da:87:7f:71:31:4d:f9:6e:81:44:25:e3:6a: 92:57:a7:0a:cf:79:98:f1:32:2e:eb:04:17:94:f9:28:db:15: 11:b6:07:d6:b6:10:1b:68:45:99:51:a7:e1:f0:62:be:4b:fe: b7:21:8e:f0:f8:c9:08:b7:2c:4b:5c:eb:09:df:51:93:07:aa: 8d:d2:a0:06:6b:2e:93:51:e9:cd:87:39:9e:06:56:5a:5d:ad: 58:03:b5:0a:2c:f9:01:56:e2:ff:b3:f4:d2:3d:84:6e:6b:95: 59:cc:83:fc:fd:79:96:2e:84:dd:9c:4c:49:ec:7d:48:93:ab: 01:2e:0c:f0:53:f2:d7:3f:07:25:6e:b0:dd:30:53:d3:0c:5b: d6:58:c6:08:27:9e:15:0e:bb:3c:bb:5e:26:9e:03:f2:29:db: a8:fc:3f:43:1b:be:4b:93:a6:f1:a3:7b:86:c4:b4:06:15:72: d6:20:63:e7:dc:7a:71:fe:75:ad:c6:d7:c2:16:fb:ec:ef:b3: a3:d4:20:fa:98:83:ad:91:d7:f0:b5:8b:7f:35:c1:5a:c0:ee: c5:9d:4e:9d:b5:66:20:6c:1d:f6:06:c5:df:3e:da:b5:47:bc: 0b:7d:32:33:c0:3f:56:9e:79:60:30:40:16:d1:26:73:e7:da: 56:41:97:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS4B9/nwXSVQDZKdH8wysQ/Lz4nwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMwMDVF RkJGNERFODAeFw0yNTA2MDIxNzM2NTNaFw0yNTA2MDUxODIxNTNaMDMxMTAvBgNV BAMTKEU5N0RBNTdCMTFCNkMwMjA2QkZFMUVGNUQxQjdFQUM5QkJBOTVCNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRJ8j+4KZbU2p0vswfKggsPqh9 8mX7jn2It5oqfk6D9nHhyE1my7EO0kQi5jMN5DqCL8MpyJgF7U2AwjsMJDV8tCGx pEOvhqJM6fIg5+ItcTK0q9dcUDkWIfxNhNJgsJ2riOYqi4OwMqz6k9yn6uVPa1KU 8mZIFDlbOIhfaIimeHWFj9rdQGF67pi/1dxEVWW56QRtDGQkJrG6s6SxachxfEzH fAaO5VyQG6AkfsGIdhXQIS87+kdsqPHWhY+O3yjLJTsYc64o7e5tnW3ATF6ao7OB tBr68GVODQS8/yrs1vVYRmznT/k+jyfL/ORTzyL3XEb9zMDJx9i/H3RUM5UZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6X2lexG2wCBr/h710bfqybupW2QwHwYDVR0j BBgwFoAUfuvv0a5yUZnksCPNoiowBe+/TegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTIwZTgwMC0yNWJiLTRjNzgtYThiMy1mMGViMjVjMmU4MmEvMC83RUVCRUZEMUFF NzI1MTk5RTRCMDIzQ0RBMjJBMzAwNUVGQkY0REU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMwMDVFRkJG NERFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWUyMGU4MDAtMjViYi00Yzc4LWE4 YjMtZjBlYjI1YzJlODJhLzAvN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMw MDVFRkJGNERFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwR1wRe2od/cTFN+W6BRCXjapJXpwrPeZjx Mi7rBBeU+SjbFRG2B9a2EBtoRZlRp+HwYr5L/rchjvD4yQi3LEtc6wnfUZMHqo3S oAZrLpNR6c2HOZ4GVlpdrVgDtQos+QFW4v+z9NI9hG5rlVnMg/z9eZYuhN2cTEns fUiTqwEuDPBT8tc/ByVusN0wU9MMW9ZYxggnnhUOuzy7XiaeA/Ip26j8P0MbvkuT pvGje4bEtAYVctYgY+fcenH+da3G18IW++zvs6PUIPqYg62R1/C1i381wVrA7sWd Tp21ZiBsHfYGxd8+2rVHvAt9MjPAP1aeeWAwQBbRJnPn2lZBl6Y= -----END CERTIFICATE-----Generated at Tue Jun 3 23:27:28 2025 by rpki-client