$ rpki-client -vvf repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft File: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft (raw, json) Hash identifier: XEZezZwzWtv+FdrOmhewPkNHEQHEZqQ+RTGZ+MOBYZY= Subject key identifier: 3B:FB:49:71:ED:80:2A:FF:B8:18:9B:25:86:DB:17:D2:5C:41:35:17 Authority key identifier: 7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 Certificate issuer: /CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Certificate serial: 612E59CD91540410B64AE4F6F3FE5F878BD31D1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft Manifest number: 87 Signing time: Thu 05 Jun 2025 14:30:00 +0000 Manifest this update: Thu 05 Jun 2025 14:25:00 +0000 Manifest next update: Mon 09 Jun 2025 02:20:00 +0000 Files and hashes: 1: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl (hash: 0np+l43IexTh16BLsUEUDrjNHyqrrUHU8P7LhHFrWB8=) 2: 3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa (hash: V98kYcU8v569igqvltJ62ENZBRSZDERQept9pSJvYEE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 19:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:2e:59:cd:91:54:04:10:b6:4a:e4:f6:f3:fe:5f:87:8b:d3:1d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Validity Not Before: Jun 5 14:25:00 2025 GMT Not After : Jun 9 02:20:00 2025 GMT Subject: CN=3BFB4971ED802AFFB8189B2586DB17D25C413517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d5:68:60:37:15:7d:bd:a2:86:f2:af:a2:85: 76:90:33:0a:7b:bb:63:06:d1:0e:0d:3d:0e:6a:2f: 1c:08:b1:33:e0:32:34:f1:a1:8a:32:1c:9c:ae:38: fd:a6:55:8c:00:3a:be:b6:d1:d1:c9:61:1c:00:a8: 82:8d:c6:0c:ea:de:71:97:ab:00:f3:15:30:a0:11: 75:de:ea:55:99:2f:da:e9:92:f3:c0:4a:3e:48:18: 9e:c4:f4:8d:c1:82:11:4e:19:0f:87:42:b9:18:bb: 4d:a3:31:4a:c3:97:e1:7b:80:f3:23:a9:b7:8b:27: 23:90:c7:43:c0:e7:ce:df:44:57:3c:85:6f:94:88: e5:1f:af:55:09:ed:49:c0:61:69:f3:4a:e8:5c:fa: dd:c7:8e:da:f6:af:78:f2:a5:85:67:05:5d:62:ea: fe:9e:11:f7:19:26:b1:10:cd:4b:87:64:b5:b8:6a: cd:e2:bb:b2:df:d8:c0:d3:8a:d1:ff:1d:0d:69:d9: b0:1d:5b:94:54:cb:25:83:ed:32:9d:db:8a:22:22: 72:b4:19:2f:07:6f:29:85:df:ce:2d:bd:78:ab:bc: c4:6d:ff:eb:85:54:fc:70:5c:f1:c8:dd:d5:50:ef: 28:34:c0:92:9a:3d:a7:e8:f6:ae:2f:93:09:46:0a: af:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FB:49:71:ED:80:2A:FF:B8:18:9B:25:86:DB:17:D2:5C:41:35:17 X509v3 Authority Key Identifier: keyid:7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:5d:8f:89:8d:61:95:b4:b4:88:54:c9:0d:ab:11:e7:d3:0c: 9d:97:44:18:34:4d:dd:11:33:e5:a0:21:3b:38:98:7b:e5:98: cf:02:e9:7c:21:45:8a:2b:75:88:df:e0:96:dd:ad:8c:d1:f7: fc:fa:74:bf:68:aa:07:9e:b4:91:f2:f9:10:86:d6:58:8c:77: f1:91:a0:9b:ce:52:81:38:2e:87:89:18:f7:a6:d1:27:50:99: 1a:e5:18:ad:d7:7d:b1:b3:b2:cc:97:82:08:d9:88:eb:c0:04: 2d:13:db:ca:24:73:56:f9:8a:14:ee:46:e6:6d:ce:5b:66:42: b5:54:98:90:6e:bf:94:65:63:4e:7c:5b:f8:8f:eb:74:68:c8: 08:0d:06:87:d4:6c:c8:4f:3f:53:50:5d:26:b2:59:24:7f:54: 02:6d:49:2f:f1:e2:04:52:25:87:d4:f9:62:3f:f1:72:82:45: ea:c7:4a:42:fa:ed:8c:57:b4:ab:93:b1:62:0c:9d:8a:46:72: 33:cc:a5:72:61:32:23:33:71:d6:49:30:a3:51:d9:3a:5d:e9: 13:0c:1e:52:27:04:dc:dc:33:9e:32:c0:95:b4:6c:1b:fd:fb: db:7a:3d:4a:93:76:d2:0e:b1:d2:b9:a7:4e:c3:fd:be:d1:57: 48:1a:25:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYS5ZzZFUBBC2SuT28/5fh4vTHR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNC QzA0MDRDNzAeFw0yNTA2MDUxNDI1MDBaFw0yNTA2MDkwMjIwMDBaMDMxMTAvBgNV BAMTKDNCRkI0OTcxRUQ4MDJBRkZCODE4OUIyNTg2REIxN0QyNUM0MTM1MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc1WhgNxV9vaKG8q+ihXaQMwp7 u2MG0Q4NPQ5qLxwIsTPgMjTxoYoyHJyuOP2mVYwAOr620dHJYRwAqIKNxgzq3nGX qwDzFTCgEXXe6lWZL9rpkvPASj5IGJ7E9I3BghFOGQ+HQrkYu02jMUrDl+F7gPMj qbeLJyOQx0PA587fRFc8hW+UiOUfr1UJ7UnAYWnzSuhc+t3Hjtr2r3jypYVnBV1i 6v6eEfcZJrEQzUuHZLW4as3iu7Lf2MDTitH/HQ1p2bAdW5RUyyWD7TKd24oiInK0 GS8HbymF384tvXirvMRt/+uFVPxwXPHI3dVQ7yg0wJKaPafo9q4vkwlGCq/dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO/tJce2AKv+4GJslhtsX0lxBNRcwHwYDVR0j BBgwFoAUfZ4O5b5yc2CBAdk8X3+2HLwEBMcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmRlMWE4ZS1jMmI4LTQ5OTYtOTQ5Mi02ZjkyYzJkZmVjN2EvMC83RDlFMEVFNUJF NzI3MzYwODEwMUQ5M0M1RjdGQjYxQ0JDMDQwNEM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNCQzA0 MDRDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkZTFhOGUtYzJiOC00OTk2LTk0 OTItNmY5MmMyZGZlYzdhLzAvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2 MUNCQzA0MDRDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKxdj4mNYZW0tIhUyQ2rEefTDJ2XRBg0Td0R M+WgITs4mHvlmM8C6XwhRYordYjf4JbdrYzR9/z6dL9oqgeetJHy+RCG1liMd/GR oJvOUoE4LoeJGPem0SdQmRrlGK3XfbGzssyXggjZiOvABC0T28okc1b5ihTuRuZt zltmQrVUmJBuv5RlY058W/iP63RoyAgNBofUbMhPP1NQXSayWSR/VAJtSS/x4gRS JYfU+WI/8XKCRerHSkL67YxXtKuTsWIMnYpGcjPMpXJhMiMzcdZJMKNR2Tpd6RMM HlInBNzcM54ywJW0bBv9+9t6PUqTdtIOsdK5p07D/b7RV0gaJVU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:25:49 2025 by rpki-client