$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft File: 7F6E3BF22135CE510C383A9D95C74D2175B70558.mft (raw, json) Hash identifier: RdpKwQXuDZGe4G0qUasZVBiKDiOGrc6eF9K4ZCfygbg= Subject key identifier: 57:6F:3D:CE:83:4C:B9:95:CF:EB:58:E9:15:9D:0D:30:AD:D5:61:B8 Authority key identifier: 7F:6E:3B:F2:21:35:CE:51:0C:38:3A:9D:95:C7:4D:21:75:B7:05:58 Certificate issuer: /CN=7F6E3BF22135CE510C383A9D95C74D2175B70558 Certificate serial: 502D398D23C4758A423E86EA02038A6A1EE35655 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer Subject info access: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft Manifest number: 4E Signing time: Thu 05 Jun 2025 01:41:17 +0000 Manifest this update: Thu 05 Jun 2025 01:36:17 +0000 Manifest next update: Sun 08 Jun 2025 08:19:17 +0000 Files and hashes: 1: 7F6E3BF22135CE510C383A9D95C74D2175B70558.crl (hash: QNnVPno04zhyXl/lrfRIS9tYyko3LiVB5XGRWGRtP3o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.crl rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 08:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:2d:39:8d:23:c4:75:8a:42:3e:86:ea:02:03:8a:6a:1e:e3:56:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F6E3BF22135CE510C383A9D95C74D2175B70558 Validity Not Before: Jun 5 01:36:17 2025 GMT Not After : Jun 8 08:19:17 2025 GMT Subject: CN=576F3DCE834CB995CFEB58E9159D0D30ADD561B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:ce:17:90:57:51:47:03:45:9f:ef:68:9f: 96:9e:74:6a:06:7a:a7:dc:59:04:79:e1:64:a9:92: 33:cf:d7:07:b6:6d:5b:95:5d:d4:9c:c1:b1:2f:91: 7b:bc:86:88:a9:e2:49:15:3c:36:5d:77:c6:98:0c: 22:dc:d2:81:ad:31:08:09:e2:ca:34:d5:d0:c8:9d: 9f:15:94:3e:41:f2:63:89:b5:44:9d:ff:e4:e0:ef: 9b:bf:e2:06:f8:f0:65:7a:43:ec:a6:0a:68:55:c4: 57:7e:49:5a:f4:9e:e4:8b:a2:65:f7:0f:e8:17:75: 16:32:e0:ac:ca:16:af:10:d0:bc:cf:ed:fa:1c:e0: 8e:8e:b0:31:8b:7e:eb:d5:6d:62:a9:98:f1:9d:28: 7d:53:11:cc:5b:c1:75:32:49:99:1d:99:05:cc:b6: b0:5f:56:80:0b:4a:de:73:5f:3e:8c:dc:16:53:d5: e0:b4:eb:d8:bf:04:56:16:3b:e6:b2:da:6b:6d:b2: a9:8f:8c:53:3c:4c:51:19:b2:75:d0:8a:13:4c:16: 8c:4f:9e:f2:d2:bc:e5:23:81:18:39:9a:c7:67:68: f7:09:3c:16:3a:5d:a4:9c:ff:d8:94:96:e6:18:d7: 32:c1:1e:9d:2b:6a:82:f0:a3:e6:62:7d:57:55:01: 10:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6F:3D:CE:83:4C:B9:95:CF:EB:58:E9:15:9D:0D:30:AD:D5:61:B8 X509v3 Authority Key Identifier: keyid:7F:6E:3B:F2:21:35:CE:51:0C:38:3A:9D:95:C7:4D:21:75:B7:05:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:74:f3:97:46:6b:72:33:0f:db:de:45:70:20:47:f9:be:5d: 57:b5:4b:d9:9f:36:32:b6:3d:c3:ad:57:97:a8:05:b0:62:7a: b9:a1:5d:e6:1e:1c:d7:e5:ec:05:07:a8:e7:17:e7:f9:52:3a: de:2a:f7:ca:e6:43:28:b9:61:1c:bc:d1:a1:80:79:35:3f:c1: 1c:62:35:42:41:60:22:5d:3e:8b:2d:79:20:5b:66:08:d2:25: c3:2f:c2:d1:b9:11:37:92:c6:bb:da:86:22:fb:b9:44:bd:e1: 2f:aa:79:fa:6c:e9:35:dc:0e:21:b9:4f:68:50:5e:64:77:6a: 1f:39:c5:bd:78:f7:55:2d:5d:e8:f7:e0:8a:9e:bc:a1:25:0a: a2:ca:45:d3:cb:0a:50:f2:f7:fe:cc:7a:70:3f:72:32:c7:ed: b1:ad:32:c2:bc:41:13:43:cb:5a:9d:12:82:38:ce:fc:90:a2: 88:c1:fa:cf:a1:f4:21:7c:f9:81:fa:9e:b6:e1:8c:32:7b:e1: 87:05:af:ca:f6:d9:34:83:7e:f7:3f:7c:a9:70:a2:f4:b5:a7: bb:b7:8c:27:3a:de:d0:1d:89:bd:76:f8:c2:a4:72:37:0b:8f: 85:bc:5d:5e:ca:86:22:a9:5c:f9:f5:68:67:8e:d9:f9:2d:e7: a8:15:6b:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUC05jSPEdYpCPobqAgOKah7jVlUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y2RTNCRjIyMTM1Q0U1MTBDMzgzQTlEOTVDNzREMjE3 NUI3MDU1ODAeFw0yNTA2MDUwMTM2MTdaFw0yNTA2MDgwODE5MTdaMDMxMTAvBgNV BAMTKDU3NkYzRENFODM0Q0I5OTVDRkVCNThFOTE1OUQwRDMwQURENTYxQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEYc4XkFdRRwNFn+9on5aedGoG eqfcWQR54WSpkjPP1we2bVuVXdScwbEvkXu8hoip4kkVPDZdd8aYDCLc0oGtMQgJ 4so01dDInZ8VlD5B8mOJtUSd/+Tg75u/4gb48GV6Q+ymCmhVxFd+SVr0nuSLomX3 D+gXdRYy4KzKFq8Q0LzP7foc4I6OsDGLfuvVbWKpmPGdKH1TEcxbwXUySZkdmQXM trBfVoALSt5zXz6M3BZT1eC069i/BFYWO+ay2mttsqmPjFM8TFEZsnXQihNMFoxP nvLSvOUjgRg5msdnaPcJPBY6XaSc/9iUluYY1zLBHp0raoLwo+ZifVdVARDNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV289zoNMuZXP61jpFZ0NMK3VYbgwHwYDVR0j BBgwFoAUf2478iE1zlEMODqdlcdNIXW3BVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjlmOGFhOC04OTcxLTRlNTEtOGI1MS04MDNiNDliMzJhNGYvMS83RjZFM0JGMjIx MzVDRTUxMEMzODNBOUQ5NUM3NEQyMTc1QjcwNTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Y2RTNCRjIyMTM1Q0U1MTBDMzgzQTlEOTVDNzREMjE3NUI3 MDU1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY5ZjhhYTgtODk3MS00ZTUxLThi NTEtODAzYjQ5YjMyYTRmLzEvN0Y2RTNCRjIyMTM1Q0U1MTBDMzgzQTlEOTVDNzRE MjE3NUI3MDU1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEp085dGa3IzD9veRXAgR/m+XVe1S9mfNjK2 PcOtV5eoBbBiermhXeYeHNfl7AUHqOcX5/lSOt4q98rmQyi5YRy80aGAeTU/wRxi NUJBYCJdPosteSBbZgjSJcMvwtG5ETeSxrvahiL7uUS94S+qefps6TXcDiG5T2hQ XmR3ah85xb1491UtXej34IqevKElCqLKRdPLClDy9/7MenA/cjLH7bGtMsK8QRND y1qdEoI4zvyQoojB+s+h9CF8+YH6nrbhjDJ74YcFr8r22TSDfvc/fKlwovS1p7u3 jCc63tAdib12+MKkcjcLj4W8XV7KhiKpXPn1aGeO2fkt56gVa8A= -----END CERTIFICATE-----Generated at Fri Jun 6 16:29:35 2025 by rpki-client