$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft File: 7F6E3BF22135CE510C383A9D95C74D2175B70558.mft (raw, json) Hash identifier: tioO8okIPAkL334UivNw98XxdsrUKiA25HLwJqvY2e0= Subject key identifier: 00:CC:1A:E7:72:CA:E8:F2:E7:5B:D7:DE:68:69:74:63:13:A8:F3:1E Authority key identifier: 7F:6E:3B:F2:21:35:CE:51:0C:38:3A:9D:95:C7:4D:21:75:B7:05:58 Certificate issuer: /CN=7F6E3BF22135CE510C383A9D95C74D2175B70558 Certificate serial: 1DFF5FB398714AF270C6843428B24F59EB60B8D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer Subject info access: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft Manifest number: 64 Signing time: Thu 24 Jul 2025 03:31:15 +0000 Manifest this update: Thu 24 Jul 2025 03:26:15 +0000 Manifest next update: Sun 27 Jul 2025 03:49:15 +0000 Files and hashes: 1: 7F6E3BF22135CE510C383A9D95C74D2175B70558.crl (hash: mjeNeka+wJMi76byjRl4dUSmsnknC/4CNask6S8VnOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.crl rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 03:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ff:5f:b3:98:71:4a:f2:70:c6:84:34:28:b2:4f:59:eb:60:b8:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F6E3BF22135CE510C383A9D95C74D2175B70558 Validity Not Before: Jul 24 03:26:15 2025 GMT Not After : Jul 27 03:49:15 2025 GMT Subject: CN=00CC1AE772CAE8F2E75BD7DE6869746313A8F31E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:77:f1:f9:5b:64:34:6c:fb:bd:a6:ab:49:fb: 11:f5:07:90:c3:c1:94:f6:bf:4e:d9:c5:f9:65:ae: 68:11:ac:ce:c5:14:2a:82:c4:fa:b5:51:0d:d3:58: d3:c2:f7:0f:b3:51:90:72:05:06:90:e8:f1:7c:44: 5d:dc:2d:b4:09:48:6a:70:ba:2d:e2:ae:8a:49:be: 0e:e4:d1:86:04:f7:a9:d9:b5:cf:78:d5:73:e6:46: a9:23:71:41:7a:4d:67:ae:13:8d:63:48:1a:a1:c7: 2b:dc:1e:51:99:e1:78:49:38:33:2f:94:67:26:d5: 46:40:b6:b1:65:06:f8:a4:56:6f:3c:9e:2f:d8:57: b0:67:7a:cc:c0:03:14:95:99:d9:a9:cc:04:3d:3f: 97:da:8e:bb:f5:4d:6e:be:f1:4f:f8:90:eb:2b:ca: 05:30:aa:b2:d3:f6:f2:c1:84:c3:dd:25:a9:f8:17: c4:f2:16:e5:bb:59:a5:63:fe:0a:93:9c:d1:db:46: 7c:9d:85:b4:55:b9:80:91:11:e9:c8:4f:65:f3:4a: a6:56:21:3c:62:80:ba:ac:49:64:89:6f:ec:c4:fc: 27:4b:8a:95:5e:a8:2d:72:bf:1b:99:fb:fb:3f:d1: e8:69:2b:a5:a9:7c:66:b0:2f:f8:18:27:40:e5:40: 2a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CC:1A:E7:72:CA:E8:F2:E7:5B:D7:DE:68:69:74:63:13:A8:F3:1E X509v3 Authority Key Identifier: keyid:7F:6E:3B:F2:21:35:CE:51:0C:38:3A:9D:95:C7:4D:21:75:B7:05:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ab:a4:19:dd:3a:67:12:b3:ca:81:e8:41:cf:82:df:0d:39: d7:c5:a1:6b:da:fa:ca:22:f4:1f:c5:43:13:0c:20:70:65:9d: cf:67:71:76:83:87:7e:a0:57:0b:17:da:9a:bf:3f:15:a3:37: 24:fa:4b:8a:13:87:66:71:a3:8f:c9:59:7d:7f:d9:ee:da:f3: 22:6d:34:cb:01:95:d5:23:af:ac:86:83:44:92:0b:b3:a0:75: bc:eb:27:f8:17:a3:75:89:99:0a:70:1d:dc:ed:4b:dd:7d:1c: 66:32:03:fc:db:d1:47:ba:a5:6d:13:ac:50:be:f4:10:13:76: 27:e3:96:54:b7:fe:1c:aa:97:72:3c:e1:f5:5b:2c:8a:20:c4: a0:c7:24:33:e6:7c:59:c3:5b:cf:82:b9:3a:43:3d:cd:75:8b: 90:85:e6:21:a9:a4:b8:1f:5d:63:ea:b4:bb:5c:ff:26:43:f9: 4f:0c:9c:b1:b7:75:60:bf:5b:dd:e7:dc:bd:ba:58:c6:8b:5d: bc:cc:27:77:fc:6f:40:f9:29:f5:43:ed:15:86:8d:23:58:4d: 37:24:0b:91:1a:45:83:98:48:65:ff:d4:26:2f:3b:a4:f1:47: 2e:09:0d:bd:cb:60:2c:e7:15:df:67:99:04:92:36:ae:ee:b8: ef:e0:24:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHf9fs5hxSvJwxoQ0KLJPWetguNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y2RTNCRjIyMTM1Q0U1MTBDMzgzQTlEOTVDNzREMjE3 NUI3MDU1ODAeFw0yNTA3MjQwMzI2MTVaFw0yNTA3MjcwMzQ5MTVaMDMxMTAvBgNV BAMTKDAwQ0MxQUU3NzJDQUU4RjJFNzVCRDdERTY4Njk3NDYzMTNBOEYzMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBd/H5W2Q0bPu9pqtJ+xH1B5DD wZT2v07ZxfllrmgRrM7FFCqCxPq1UQ3TWNPC9w+zUZByBQaQ6PF8RF3cLbQJSGpw ui3iropJvg7k0YYE96nZtc941XPmRqkjcUF6TWeuE41jSBqhxyvcHlGZ4XhJODMv lGcm1UZAtrFlBvikVm88ni/YV7BneszAAxSVmdmpzAQ9P5fajrv1TW6+8U/4kOsr ygUwqrLT9vLBhMPdJan4F8TyFuW7WaVj/gqTnNHbRnydhbRVuYCREenIT2XzSqZW ITxigLqsSWSJb+zE/CdLipVeqC1yvxuZ+/s/0ehpK6WpfGawL/gYJ0DlQCrfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAMwa53LK6PLnW9feaGl0YxOo8x4wHwYDVR0j BBgwFoAUf2478iE1zlEMODqdlcdNIXW3BVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjlmOGFhOC04OTcxLTRlNTEtOGI1MS04MDNiNDliMzJhNGYvMS83RjZFM0JGMjIx MzVDRTUxMEMzODNBOUQ5NUM3NEQyMTc1QjcwNTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Y2RTNCRjIyMTM1Q0U1MTBDMzgzQTlEOTVDNzREMjE3NUI3 MDU1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY5ZjhhYTgtODk3MS00ZTUxLThi NTEtODAzYjQ5YjMyYTRmLzEvN0Y2RTNCRjIyMTM1Q0U1MTBDMzgzQTlEOTVDNzRE MjE3NUI3MDU1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADerpBndOmcSs8qB6EHPgt8NOdfFoWva+soi 9B/FQxMMIHBlnc9ncXaDh36gVwsX2pq/PxWjNyT6S4oTh2Zxo4/JWX1/2e7a8yJt NMsBldUjr6yGg0SSC7OgdbzrJ/gXo3WJmQpwHdztS919HGYyA/zb0Ue6pW0TrFC+ 9BATdifjllS3/hyql3I84fVbLIogxKDHJDPmfFnDW8+CuTpDPc11i5CF5iGppLgf XWPqtLtc/yZD+U8MnLG3dWC/W93n3L26WMaLXbzMJ3f8b0D5KfVD7RWGjSNYTTck C5EaRYOYSGX/1CYvO6TxRy4JDb3LYCznFd9nmQSSNq7uuO/gJOk= -----END CERTIFICATE-----Generated at Fri Jul 25 00:53:03 2025 by rpki-client