$ rpki-client -vvf repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft File: 7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft (raw, json) Hash identifier: jqlR360jjWbmslLllyO/0fe81J98QHnHvxlQSjX21EQ= Subject key identifier: 58:C2:16:8D:43:14:15:CC:F2:2E:53:6E:38:AF:D7:12:E4:86:81:C4 Authority key identifier: 7E:EB:EF:D1:AE:72:51:99:E4:B0:23:CD:A2:2A:30:05:EF:BF:4D:E8 Certificate issuer: /CN=7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8 Certificate serial: 79C11C8C5CB347EAD523A5DE140E3EFC418D4BB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft Manifest number: 3B Signing time: Wed 03 Sep 2025 21:31:53 +0000 Manifest this update: Wed 03 Sep 2025 21:26:53 +0000 Manifest next update: Sun 07 Sep 2025 00:56:53 +0000 Files and hashes: 1: 7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl (hash: rTMeFu7Qlx9D5gRZsJ0v3p26rvmTq21LbN/XFglzSxM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 00:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c1:1c:8c:5c:b3:47:ea:d5:23:a5:de:14:0e:3e:fc:41:8d:4b:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8 Validity Not Before: Sep 3 21:26:53 2025 GMT Not After : Sep 7 00:56:53 2025 GMT Subject: CN=58C2168D431415CCF22E536E38AFD712E48681C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3b:39:8a:26:a1:12:28:48:2b:98:a3:0f:29: d5:e8:92:c4:36:53:4e:03:69:de:ac:49:98:84:85: aa:95:40:33:07:60:96:7a:be:71:03:a3:44:95:7e: 18:6a:2b:5f:31:68:62:8d:08:9b:cd:9b:42:ad:a1: 55:5b:de:43:28:d5:1e:ec:52:28:a6:d0:78:dc:90: 6d:c6:3e:87:57:04:bb:64:cb:e3:7f:d8:d6:7c:89: 88:a6:62:5f:f8:78:0b:35:92:b9:dc:90:58:0e:c6: 87:04:bc:ee:6b:ff:a1:37:77:b2:1b:76:20:f7:f8: a8:7d:8f:e4:56:2c:19:b7:18:05:e0:d5:ce:20:5d: 65:ad:34:95:73:9f:cc:62:a9:45:a2:7e:34:b0:76: 9d:8a:e8:99:3a:09:4f:60:f2:2d:3b:71:da:68:05: 22:e0:f0:a5:8a:01:b3:8c:83:15:2e:c8:03:f2:71: fc:e6:4c:ef:cc:e2:3d:2e:f6:44:96:17:ec:ee:06: d7:4f:86:8e:ac:93:97:5c:6f:4c:2a:b2:25:ee:17: b3:2c:1f:27:9a:f6:1c:d5:ab:1b:c3:f9:66:80:4c: 93:8e:37:b9:03:38:c6:63:3e:2e:ba:f0:96:9c:ac: ed:90:c8:22:2b:30:a2:d9:05:bd:45:8c:d1:d9:0d: eb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C2:16:8D:43:14:15:CC:F2:2E:53:6E:38:AF:D7:12:E4:86:81:C4 X509v3 Authority Key Identifier: keyid:7E:EB:EF:D1:AE:72:51:99:E4:B0:23:CD:A2:2A:30:05:EF:BF:4D:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:71:65:20:e4:64:58:7a:3d:71:ca:09:48:37:11:f1:c2:1c: 8d:f0:47:07:61:be:3b:ed:8c:81:c8:6c:04:64:fd:7d:d9:ff: a6:93:0d:de:15:46:f0:fd:7b:eb:03:17:d1:f7:6f:64:ac:e6: 78:e9:90:04:a0:66:8b:22:97:44:86:b0:6b:0a:be:dd:16:fe: d4:27:aa:8d:5e:05:74:09:9a:69:e3:09:15:7b:93:b0:c0:1a: 2d:23:45:dc:ff:e0:f6:0c:c4:5b:4c:4e:59:9c:5d:06:b8:cd: 5a:cf:a3:eb:b9:8c:ad:fd:0f:55:07:a4:d1:fc:7e:3f:10:f4: 20:1e:14:cb:66:e6:11:bb:58:f3:b9:e8:37:ed:ad:f5:29:5a: 3b:4c:3c:0c:e2:5e:97:7a:4a:3d:b8:7a:d9:53:cf:58:4d:3e: cd:24:9f:70:36:3a:ec:92:ab:59:a5:37:e5:f1:88:4f:10:a5: 4a:44:c0:d9:22:ee:ca:9f:67:f3:e1:67:5d:9a:78:34:55:1e: e3:b6:51:ec:5e:a1:63:c1:6c:72:bb:b2:30:5d:3e:28:f1:f4: 3a:3f:51:a2:d3:c7:ea:9c:8d:37:f0:f1:2e:67:36:41:60:58: bd:86:87:23:10:af:78:00:e8:2e:36:f5:3f:f7:df:dd:65:87: 09:ec:cd:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUecEcjFyzR+rVI6XeFA4+/EGNS7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMwMDVF RkJGNERFODAeFw0yNTA5MDMyMTI2NTNaFw0yNTA5MDcwMDU2NTNaMDMxMTAvBgNV BAMTKDU4QzIxNjhENDMxNDE1Q0NGMjJFNTM2RTM4QUZENzEyRTQ4NjgxQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5OzmKJqESKEgrmKMPKdXoksQ2 U04Dad6sSZiEhaqVQDMHYJZ6vnEDo0SVfhhqK18xaGKNCJvNm0KtoVVb3kMo1R7s Uiim0HjckG3GPodXBLtky+N/2NZ8iYimYl/4eAs1krnckFgOxocEvO5r/6E3d7Ib diD3+Kh9j+RWLBm3GAXg1c4gXWWtNJVzn8xiqUWifjSwdp2K6Jk6CU9g8i07cdpo BSLg8KWKAbOMgxUuyAPycfzmTO/M4j0u9kSWF+zuBtdPho6sk5dcb0wqsiXuF7Ms Hyea9hzVqxvD+WaATJOON7kDOMZjPi668JacrO2QyCIrMKLZBb1FjNHZDetjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWMIWjUMUFczyLlNuOK/XEuSGgcQwHwYDVR0j BBgwFoAUfuvv0a5yUZnksCPNoiowBe+/TegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTIwZTgwMC0yNWJiLTRjNzgtYThiMy1mMGViMjVjMmU4MmEvMC83RUVCRUZEMUFF NzI1MTk5RTRCMDIzQ0RBMjJBMzAwNUVGQkY0REU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMwMDVFRkJG NERFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWUyMGU4MDAtMjViYi00Yzc4LWE4 YjMtZjBlYjI1YzJlODJhLzAvN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMw MDVFRkJGNERFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtxZSDkZFh6PXHKCUg3EfHCHI3wRwdhvjvt jIHIbARk/X3Z/6aTDd4VRvD9e+sDF9H3b2Ss5njpkASgZosil0SGsGsKvt0W/tQn qo1eBXQJmmnjCRV7k7DAGi0jRdz/4PYMxFtMTlmcXQa4zVrPo+u5jK39D1UHpNH8 fj8Q9CAeFMtm5hG7WPO56DftrfUpWjtMPAziXpd6Sj24etlTz1hNPs0kn3A2OuyS q1mlN+XxiE8QpUpEwNki7sqfZ/PhZ12aeDRVHuO2UexeoWPBbHK7sjBdPijx9Do/ UaLTx+qcjTfw8S5nNkFgWL2GhyMQr3gA6C429T/3391lhwnszco= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:12 2025 by rpki-client