$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft File: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft (raw, json) Hash identifier: Uol9Ca59MXuOvK6ZAvCnloslpi5bSx14knhMqAdi70w= Subject key identifier: 1D:11:32:9E:2F:4C:1F:83:F0:9A:E3:0A:09:4E:04:5B:BD:A5:F2:E0 Authority key identifier: 7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 Certificate issuer: /CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Certificate serial: 2472DDCE460AE84157B38849072F547EB1185286 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft Manifest number: B1 Signing time: Sun 07 Sep 2025 12:02:01 +0000 Manifest this update: Sun 07 Sep 2025 11:57:01 +0000 Manifest next update: Wed 10 Sep 2025 22:42:01 +0000 Files and hashes: 1: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl (hash: KSUVaOgJbsANEc4hZULyNP3F2h7uVzEVSgowUMEA4zE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:72:dd:ce:46:0a:e8:41:57:b3:88:49:07:2f:54:7e:b1:18:52:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Validity Not Before: Sep 7 11:57:01 2025 GMT Not After : Sep 10 22:42:01 2025 GMT Subject: CN=1D11329E2F4C1F83F09AE30A094E045BBDA5F2E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3b:1e:a2:ad:57:38:58:d6:e9:03:d0:b3:2c: ec:3d:2b:34:07:e9:90:01:4b:e6:2e:c6:ee:92:20: b1:0d:59:cf:46:c1:c6:ad:db:21:d6:11:9e:63:3d: 8d:c7:83:84:5e:8e:26:e8:3d:12:60:c4:94:24:d0: ee:1c:04:4b:4b:7d:e0:ca:72:9a:de:04:ba:5b:a7: e6:11:3d:61:dd:c6:43:5a:74:b0:ab:cb:00:5a:6b: 3b:b3:4c:d1:3b:c6:f5:94:78:28:8f:6b:70:44:3e: d6:ea:aa:c5:f5:20:52:85:b2:4c:89:40:44:50:6a: 7e:95:b1:b4:fa:1a:1e:f9:7b:f0:cc:68:b4:7a:a4: b0:66:e7:8f:23:31:4e:e7:ff:5b:24:88:a2:f1:be: b8:e6:7c:cc:1a:f7:b6:41:3d:ee:a1:d4:fc:fb:0e: 88:46:cc:ac:1e:bf:7b:d8:bb:17:a3:98:45:ef:54: d0:30:26:67:8b:c9:fd:6d:7c:10:e3:ce:83:7c:47: ff:ff:35:e9:d9:56:a5:64:11:cf:41:1a:d3:d2:78: 45:65:a1:02:e6:ec:53:33:f6:70:7d:f8:99:dc:5a: f6:4f:25:29:47:3e:1d:1f:c2:3a:ee:53:b9:24:bf: 05:d5:0e:97:9e:6e:59:09:79:bd:f9:5f:ac:b0:35: f3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:11:32:9E:2F:4C:1F:83:F0:9A:E3:0A:09:4E:04:5B:BD:A5:F2:E0 X509v3 Authority Key Identifier: keyid:7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:53:b7:fa:49:bf:1e:ad:0c:f7:cc:78:72:f0:f1:12:7b:30: 00:67:42:ee:04:60:a4:c0:7f:97:a4:c0:19:42:d5:7b:37:86: 8b:17:8c:08:bd:69:59:81:91:e5:d7:40:35:c1:64:0b:f3:1f: 57:d3:6d:e4:e5:d4:60:89:2b:a8:30:46:34:25:fe:10:db:e7: 8d:aa:9e:0a:b2:21:d7:96:0e:3a:19:a6:a3:7a:92:7e:89:7a: 2d:db:cc:2c:b7:70:d6:e9:aa:4a:31:26:b2:ca:e6:94:b0:c3: 6c:73:f7:22:d2:0c:16:31:c4:2e:0a:cc:ed:d0:44:55:48:1e: 71:4f:86:4e:fe:87:7a:83:32:98:17:d8:b1:96:ea:49:be:72: 17:c5:55:c4:e6:13:34:c8:33:36:25:71:4b:d7:74:a6:3f:c8: 76:b4:d7:8b:3d:8a:c5:2e:93:39:b6:8d:c9:4d:cd:e9:0e:51: 98:d6:94:dc:23:9e:9a:44:c0:7e:1b:4d:d3:f9:92:e0:e8:b2: 18:f4:7f:8d:17:34:2b:9e:9f:eb:1e:b7:2c:54:b9:22:3b:b9: 8e:91:98:7a:8a:b5:76:75:95:d0:fc:7a:cb:e5:bf:94:51:70: 17:0e:47:ca:ad:f6:27:ec:2c:b3:09:4d:31:67:b9:52:a0:2b: 47:03:5e:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJHLdzkYK6EFXs4hJBy9UfrEYUoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2 QUM0RkMzMTAeFw0yNTA5MDcxMTU3MDFaFw0yNTA5MTAyMjQyMDFaMDMxMTAvBgNV BAMTKDFEMTEzMjlFMkY0QzFGODNGMDlBRTMwQTA5NEUwNDVCQkRBNUYyRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Ox6irVc4WNbpA9CzLOw9KzQH 6ZABS+Yuxu6SILENWc9Gwcat2yHWEZ5jPY3Hg4RejiboPRJgxJQk0O4cBEtLfeDK cpreBLpbp+YRPWHdxkNadLCrywBaazuzTNE7xvWUeCiPa3BEPtbqqsX1IFKFskyJ QERQan6VsbT6Gh75e/DMaLR6pLBm548jMU7n/1skiKLxvrjmfMwa97ZBPe6h1Pz7 DohGzKwev3vYuxejmEXvVNAwJmeLyf1tfBDjzoN8R///NenZVqVkEc9BGtPSeEVl oQLm7FMz9nB9+JncWvZPJSlHPh0fwjruU7kkvwXVDpeeblkJeb35X6ywNfPrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHREyni9MH4PwmuMKCU4EW72l8uAwHwYDVR0j BBgwFoAUfVCLIlNQsNIE8ZQ/T1PU2GrE/DEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjNiMjMwYS1mZmYxLTQ3ZjAtYmY5MS03Y2ViOGQzNjA5NmUvMC83RDUwOEIyMjUz NTBCMEQyMDRGMTk0M0Y0RjUzRDREODZBQzRGQzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2QUM0 RkMzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0 RDg2QUM0RkMzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMBTt/pJvx6tDPfMeHLw8RJ7MABnQu4EYKTA f5ekwBlC1Xs3hosXjAi9aVmBkeXXQDXBZAvzH1fTbeTl1GCJK6gwRjQl/hDb542q ngqyIdeWDjoZpqN6kn6Jei3bzCy3cNbpqkoxJrLK5pSww2xz9yLSDBYxxC4KzO3Q RFVIHnFPhk7+h3qDMpgX2LGW6km+chfFVcTmEzTIMzYlcUvXdKY/yHa014s9isUu kzm2jclNzekOUZjWlNwjnppEwH4bTdP5kuDoshj0f40XNCuen+setyxUuSI7uY6R mHqKtXZ1ldD8esvlv5RRcBcOR8qt9ifsLLMJTTFnuVKgK0cDXig= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:14 2025 by rpki-client