$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft File: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft (raw, json) Hash identifier: xljHzho0yLa28AQ7e/6X54oOepUaspDWdb/HEJPtQ0A= Subject key identifier: F3:C1:85:8A:E7:99:71:9D:33:81:E1:F6:2E:91:0F:FF:90:25:15:46 Authority key identifier: 7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 Certificate issuer: /CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Certificate serial: 152CD28B241A6437850A0BC0C4AA8A74F5BA8FC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft Manifest number: 71 Signing time: Wed 16 Apr 2025 20:11:58 +0000 Manifest this update: Wed 16 Apr 2025 20:06:58 +0000 Manifest next update: Sat 19 Apr 2025 23:42:58 +0000 Files and hashes: 1: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl (hash: ZaduKoH/X1mc/oMErWlssy3RpVF5J8uodLVdt9OIt64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 23:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:2c:d2:8b:24:1a:64:37:85:0a:0b:c0:c4:aa:8a:74:f5:ba:8f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Validity Not Before: Apr 16 20:06:58 2025 GMT Not After : Apr 19 23:42:58 2025 GMT Subject: CN=F3C1858AE799719D3381E1F62E910FFF90251546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f9:d1:0e:5b:42:b1:7e:40:74:63:a9:64:e0: 61:59:2c:5b:00:66:00:3b:69:1c:2e:c8:7e:9a:9f: 35:21:18:0d:f4:66:c6:25:7a:b6:d0:1f:85:31:49: 73:52:94:75:c9:a1:e3:16:67:6b:72:cd:30:40:dc: 0d:7c:90:b5:6d:9b:a2:21:8f:e2:e7:f8:cf:8d:3a: f5:bd:99:10:b6:d3:e6:08:7a:84:cb:41:ec:8a:d1: 86:d3:c7:0d:4e:25:86:34:80:81:71:23:24:5b:6f: 9e:00:37:8f:f7:8e:53:54:ed:b2:ef:62:be:fe:e1: 66:97:c9:16:87:d4:fb:94:8c:24:5e:e6:76:b0:5f: 9b:fd:b2:79:13:f9:07:31:2e:90:49:37:47:c2:2d: 85:61:44:94:03:c5:cb:d5:c6:8c:26:d1:6c:88:a5: 1a:20:c1:46:65:ae:12:e7:25:ae:f4:10:0c:06:8a: 7c:a7:46:0f:e4:6e:d0:dd:80:fc:93:98:42:ea:53: 61:8b:39:f4:bd:5a:12:4c:90:29:1b:b6:71:dc:ca: 7b:37:7e:92:a5:06:59:6a:69:47:fb:6f:b7:dd:46: d7:54:a1:63:89:63:c4:5d:c9:16:7a:86:34:b4:6c: 70:a6:29:7c:af:0a:24:b0:5d:48:25:a7:ee:30:7b: 13:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C1:85:8A:E7:99:71:9D:33:81:E1:F6:2E:91:0F:FF:90:25:15:46 X509v3 Authority Key Identifier: keyid:7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:1a:cc:70:2a:f3:e6:67:86:c8:4a:80:f2:15:7e:9e:42:aa: 94:b3:23:e9:de:92:ff:52:fb:6c:05:7c:af:2f:f0:c1:f8:e4: 68:73:c9:94:2a:ce:6a:b0:af:4c:7d:03:e6:86:d0:22:3e:3e: cb:0b:01:63:7a:64:98:77:7d:25:73:b6:8d:aa:c4:1d:2f:6d: 3d:c8:ee:4c:da:dd:63:f7:36:59:12:0a:93:0b:b0:04:a0:cd: 03:6d:76:af:7d:b9:fe:2c:12:99:e5:6d:9d:26:94:ec:1e:45: 5c:9c:83:22:2d:a1:51:a8:1f:72:05:a2:0c:11:e4:04:63:47: b4:28:eb:06:f5:55:80:80:d8:89:f3:fc:f4:59:a5:00:15:ab: 88:f9:21:dd:00:55:bc:d0:d7:7b:8e:5c:22:37:49:2c:8b:78: 1f:e1:bf:62:c6:e7:ef:88:7e:50:d3:97:0b:89:ba:18:9b:00: 8d:f3:6f:e8:51:c7:c6:4d:ce:d4:f2:aa:b2:d9:7a:15:10:54: f8:2e:26:63:75:94:4e:60:ce:4b:f8:97:c1:16:ec:5f:ec:74: 1a:bb:2c:bf:e5:06:81:e2:34:a5:f1:e2:86:37:e3:a7:3b:99: cc:0c:dc:65:f6:f1:b1:06:40:b1:8c:eb:97:f9:d9:9f:1a:10: 3d:3f:43:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFSzSiyQaZDeFCgvAxKqKdPW6j8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2 QUM0RkMzMTAeFw0yNTA0MTYyMDA2NThaFw0yNTA0MTkyMzQyNThaMDMxMTAvBgNV BAMTKEYzQzE4NThBRTc5OTcxOUQzMzgxRTFGNjJFOTEwRkZGOTAyNTE1NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa+dEOW0KxfkB0Y6lk4GFZLFsA ZgA7aRwuyH6anzUhGA30ZsYlerbQH4UxSXNSlHXJoeMWZ2tyzTBA3A18kLVtm6Ih j+Ln+M+NOvW9mRC20+YIeoTLQeyK0YbTxw1OJYY0gIFxIyRbb54AN4/3jlNU7bLv Yr7+4WaXyRaH1PuUjCRe5nawX5v9snkT+QcxLpBJN0fCLYVhRJQDxcvVxowm0WyI pRogwUZlrhLnJa70EAwGinynRg/kbtDdgPyTmELqU2GLOfS9WhJMkCkbtnHcyns3 fpKlBllqaUf7b7fdRtdUoWOJY8RdyRZ6hjS0bHCmKXyvCiSwXUglp+4wexPjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU88GFiueZcZ0zgeH2LpEP/5AlFUYwHwYDVR0j BBgwFoAUfVCLIlNQsNIE8ZQ/T1PU2GrE/DEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjNiMjMwYS1mZmYxLTQ3ZjAtYmY5MS03Y2ViOGQzNjA5NmUvMC83RDUwOEIyMjUz NTBCMEQyMDRGMTk0M0Y0RjUzRDREODZBQzRGQzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2QUM0 RkMzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0 RDg2QUM0RkMzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIazHAq8+ZnhshKgPIVfp5CqpSzI+nekv9S +2wFfK8v8MH45GhzyZQqzmqwr0x9A+aG0CI+PssLAWN6ZJh3fSVzto2qxB0vbT3I 7kza3WP3NlkSCpMLsASgzQNtdq99uf4sEpnlbZ0mlOweRVycgyItoVGoH3IFogwR 5ARjR7Qo6wb1VYCA2Inz/PRZpQAVq4j5Id0AVbzQ13uOXCI3SSyLeB/hv2LG5++I flDTlwuJuhibAI3zb+hRx8ZNztTyqrLZehUQVPguJmN1lE5gzkv4l8EW7F/sdBq7 LL/lBoHiNKXx4oY346c7mcwM3GX28bEGQLGM65f52Z8aED0/QzM= -----END CERTIFICATE-----Generated at Fri Apr 18 02:33:53 2025 by rpki-client