$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft File: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft (raw, json) Hash identifier: X/jvjB/2d8IAU1KhF+n5ngRIST8RU4tsQmWveTsNOJQ= Subject key identifier: 19:39:0C:51:80:46:AF:42:15:53:33:28:2C:9B:22:87:6D:00:37:91 Authority key identifier: 7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 Certificate issuer: /CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Certificate serial: 0704E811DDCEA3143835F4208C966EB3A266CA10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft Manifest number: 86 Signing time: Tue 03 Jun 2025 17:54:44 +0000 Manifest this update: Tue 03 Jun 2025 17:49:44 +0000 Manifest next update: Fri 06 Jun 2025 21:48:44 +0000 Files and hashes: 1: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl (hash: bVA+vPqNiTQZ+Ta1HzHynb+Qy5a550ExfwhbhVUgOSg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:04:e8:11:dd:ce:a3:14:38:35:f4:20:8c:96:6e:b3:a2:66:ca:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Validity Not Before: Jun 3 17:49:44 2025 GMT Not After : Jun 6 21:48:44 2025 GMT Subject: CN=19390C518046AF42155333282C9B22876D003791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:c9:98:83:9c:18:f6:21:33:c6:e2:8a:70: 1d:7a:08:cc:4f:3a:b8:c7:49:20:f5:55:c9:c8:d8: 5a:b8:de:b1:bb:3f:03:65:57:d6:fa:fa:34:3f:7e: e0:0f:fc:c5:1d:cc:5a:17:97:14:9d:c6:70:44:db: 98:35:77:3b:d0:94:53:a1:a8:9f:ef:ed:0e:c2:f0: cd:a2:a8:8c:8e:d3:b7:77:e0:74:c9:86:5c:de:e7: 8a:9f:19:48:a4:4f:6f:a9:ff:8b:82:45:d9:3a:ea: 5f:58:40:d1:41:6f:9a:f7:75:a6:b2:73:3b:cc:42: e9:65:ca:c0:c1:e7:36:f0:61:ea:81:9c:09:47:77: 8b:6e:d5:8e:91:4b:69:6f:e6:b5:f4:02:b6:90:81: fa:1e:76:b1:65:6b:fd:a2:95:b1:a0:38:a7:54:50: 5b:f6:74:8f:d5:e5:40:4d:37:c2:ba:a0:10:17:33: ce:b5:7b:0f:60:13:7a:f4:51:11:30:8b:bf:9b:82: 47:d3:95:d8:7b:1f:2b:d3:f3:58:ed:3e:47:50:08: 19:6a:94:ed:1a:54:17:7d:58:29:28:f2:48:41:4c: e3:e1:18:c3:44:b6:98:74:08:3b:ed:6f:3b:2f:87: ad:37:54:bb:e3:f4:e6:a1:33:07:ff:7a:59:7f:a0: e4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:39:0C:51:80:46:AF:42:15:53:33:28:2C:9B:22:87:6D:00:37:91 X509v3 Authority Key Identifier: keyid:7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:43:ad:10:04:21:d2:22:48:70:f8:cc:23:ce:b4:c8:8c:b3: de:3f:f2:bc:6c:c0:bf:67:fe:06:1d:9d:f3:7a:14:5e:09:11: 3f:f6:05:08:6a:bd:0f:64:99:44:4a:0f:68:00:47:c6:95:0c: 56:0d:23:21:67:62:87:05:5d:ee:07:c5:13:da:c0:00:c8:5e: 93:de:7d:80:1d:95:1f:a9:0c:f6:4b:91:bd:08:27:3b:b4:a5: 8d:f5:ce:4b:6a:9d:6a:e1:c0:eb:9d:df:0b:d0:0e:17:4c:95: a8:16:09:1a:a9:dc:3b:83:ae:48:c7:15:af:ae:e3:44:09:51: 07:76:52:95:b9:46:92:8c:99:01:dc:7d:37:e6:79:b8:ef:f1: 5a:d6:63:fa:40:ea:11:b7:8c:b7:4d:38:d0:2a:bc:37:69:44: 74:a5:4d:bd:51:e3:17:db:ad:d1:e4:bd:55:49:29:d1:fa:c0: 2f:ad:30:31:7c:95:19:54:40:bc:08:20:1e:34:4a:de:3a:f0: 5f:c7:df:71:5b:df:2f:40:23:df:a1:08:93:d3:b6:5b:1d:95: c7:06:b5:86:42:84:9b:e5:68:84:91:57:2e:5b:46:b3:5f:d1: d5:75:e5:34:b2:6b:d7:d4:32:d0:a3:5d:e2:df:d3:1e:9a:64: 90:fb:13:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBwToEd3OoxQ4NfQgjJZus6JmyhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2 QUM0RkMzMTAeFw0yNTA2MDMxNzQ5NDRaFw0yNTA2MDYyMTQ4NDRaMDMxMTAvBgNV BAMTKDE5MzkwQzUxODA0NkFGNDIxNTUzMzMyODJDOUIyMjg3NkQwMDM3OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyFMmYg5wY9iEzxuKKcB16CMxP OrjHSSD1VcnI2Fq43rG7PwNlV9b6+jQ/fuAP/MUdzFoXlxSdxnBE25g1dzvQlFOh qJ/v7Q7C8M2iqIyO07d34HTJhlze54qfGUikT2+p/4uCRdk66l9YQNFBb5r3daay czvMQullysDB5zbwYeqBnAlHd4tu1Y6RS2lv5rX0AraQgfoedrFla/2ilbGgOKdU UFv2dI/V5UBNN8K6oBAXM861ew9gE3r0UREwi7+bgkfTldh7HyvT81jtPkdQCBlq lO0aVBd9WCko8khBTOPhGMNEtph0CDvtbzsvh603VLvj9OahMwf/ell/oORNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGTkMUYBGr0IVUzMoLJsih20AN5EwHwYDVR0j BBgwFoAUfVCLIlNQsNIE8ZQ/T1PU2GrE/DEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjNiMjMwYS1mZmYxLTQ3ZjAtYmY5MS03Y2ViOGQzNjA5NmUvMC83RDUwOEIyMjUz NTBCMEQyMDRGMTk0M0Y0RjUzRDREODZBQzRGQzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2QUM0 RkMzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0 RDg2QUM0RkMzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVDrRAEIdIiSHD4zCPOtMiMs94/8rxswL9n /gYdnfN6FF4JET/2BQhqvQ9kmURKD2gAR8aVDFYNIyFnYocFXe4HxRPawADIXpPe fYAdlR+pDPZLkb0IJzu0pY31zktqnWrhwOud3wvQDhdMlagWCRqp3DuDrkjHFa+u 40QJUQd2UpW5RpKMmQHcfTfmebjv8VrWY/pA6hG3jLdNONAqvDdpRHSlTb1R4xfb rdHkvVVJKdH6wC+tMDF8lRlUQLwIIB40St468F/H33Fb3y9AI9+hCJPTtlsdlccG tYZChJvlaISRVy5bRrNf0dV15TSya9fUMtCjXeLf0x6aZJD7E4k= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:02 2025 by rpki-client