$ rpki-client -vvf repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft File: 7AD0DDB5789DE529C8697A033978C381FFE40D83.mft (raw, json) Hash identifier: g6yzjDqCkn8otNfvXf/OrYTQoil2p7sUi+6T/nfSWFU= Subject key identifier: 8D:E7:C4:E7:2E:F3:62:D0:D9:17:43:82:C1:1E:DC:C7:5D:48:91:55 Authority key identifier: 7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 Certificate issuer: /CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Certificate serial: 629608B768DB0398D20F81DEFF9303818DD83D87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft Manifest number: 01A9 Signing time: Tue 18 Feb 2025 13:21:25 +0000 Manifest this update: Tue 18 Feb 2025 13:16:25 +0000 Manifest next update: Fri 21 Feb 2025 16:59:25 +0000 Files and hashes: 1: 7AD0DDB5789DE529C8697A033978C381FFE40D83.crl (hash: LDNcls3Ewrg/toqBD3pcExIP2s/qtQrWog4iwfGbUi4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 16:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:96:08:b7:68:db:03:98:d2:0f:81:de:ff:93:03:81:8d:d8:3d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Validity Not Before: Feb 18 13:16:25 2025 GMT Not After : Feb 21 16:59:25 2025 GMT Subject: CN=8DE7C4E72EF362D0D9174382C11EDCC75D489155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6a:1b:3e:01:cb:67:40:1d:58:e1:1e:39:1d: dd:13:4c:fc:73:c8:44:c5:85:2b:61:14:20:91:92: da:a6:98:35:34:0b:18:57:e5:cd:ae:83:25:27:53: dd:88:05:01:35:6d:22:88:6e:85:fd:28:09:eb:89: e2:1c:89:5a:3e:2d:dc:7c:d8:e4:48:86:d6:af:4b: 2b:b7:ea:33:c5:90:2d:25:e7:23:29:e2:35:96:2e: ee:16:f9:c0:5f:ca:d2:06:2c:15:e0:6b:d5:89:55: a4:31:52:18:92:92:b0:8d:e9:fb:1e:f5:24:0e:f3: 8d:4e:bf:76:90:07:75:51:7c:12:e9:76:6d:78:df: 57:44:40:24:01:f6:99:95:ba:d5:4f:20:15:c9:bd: 6f:16:cf:3c:95:c7:29:eb:62:f9:3f:5d:38:60:05: 99:2f:eb:c1:39:37:2d:12:7f:0a:56:1c:0f:7e:3c: 49:f3:8b:e1:81:9d:ed:80:45:2f:b7:c1:f0:f0:dd: 88:07:0e:aa:1c:c1:08:a5:7d:b8:bf:89:1e:d7:4e: 06:69:68:fb:58:c2:a8:da:09:25:23:e1:8b:c5:77: 1e:aa:f4:93:a5:a5:c6:8f:3b:20:2e:ca:be:78:ee: e4:f8:46:98:1a:21:72:ac:ea:09:b6:70:39:2e:41: 18:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E7:C4:E7:2E:F3:62:D0:D9:17:43:82:C1:1E:DC:C7:5D:48:91:55 X509v3 Authority Key Identifier: keyid:7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:e9:6f:7d:e8:f8:c3:45:aa:ea:3a:e3:af:ed:87:00:a2:c1: 06:19:d9:ae:d2:b9:dd:25:2a:17:76:33:f9:bd:c2:f0:d3:0f: c3:ef:ca:b2:5e:5c:b6:e9:71:3b:df:a6:17:af:51:2d:64:30: 43:f2:15:15:ce:1b:db:91:c7:47:d3:45:41:0e:8b:55:16:43: bf:52:cf:55:6d:8b:1b:c4:a0:c4:0c:8b:1f:45:ea:82:af:b2: 67:db:9a:4c:43:6d:dc:d2:4d:6f:0a:77:2f:23:92:9b:e3:61: 30:53:8b:3a:fd:77:d2:4a:6a:f7:70:9e:8b:e2:5d:2f:b3:23: da:ef:6d:92:12:6a:dd:59:1a:19:50:02:f8:70:0f:e6:94:ba: 7e:9c:2e:90:97:dd:ae:2d:b8:09:75:a8:6e:41:a5:29:25:fb: 36:a5:7b:84:cd:2e:0b:ba:50:1f:b8:a5:50:4a:9e:6d:dd:e1: 0a:aa:57:b3:8e:23:69:ef:0b:7f:09:d1:e4:4b:75:27:16:8b: 8e:ed:90:ff:c8:b6:8c:48:79:36:2c:58:a9:fc:2b:85:76:85: 9d:35:06:a1:df:39:1f:fb:4f:1d:50:ec:8f:01:b2:c5:3c:ad: 8f:37:22:19:c6:7b:20:24:42:eb:1f:06:7d:22:26:13:97:90: 7c:b1:9e:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYpYIt2jbA5jSD4He/5MDgY3YPYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFG RkU0MEQ4MzAeFw0yNTAyMTgxMzE2MjVaFw0yNTAyMjExNjU5MjVaMDMxMTAvBgNV BAMTKDhERTdDNEU3MkVGMzYyRDBEOTE3NDM4MkMxMUVEQ0M3NUQ0ODkxNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiahs+ActnQB1Y4R45Hd0TTPxz yETFhSthFCCRktqmmDU0CxhX5c2ugyUnU92IBQE1bSKIboX9KAnrieIciVo+Ldx8 2ORIhtavSyu36jPFkC0l5yMp4jWWLu4W+cBfytIGLBXga9WJVaQxUhiSkrCN6fse 9SQO841Ov3aQB3VRfBLpdm1431dEQCQB9pmVutVPIBXJvW8WzzyVxynrYvk/XThg BZkv68E5Ny0SfwpWHA9+PEnzi+GBne2ARS+3wfDw3YgHDqocwQilfbi/iR7XTgZp aPtYwqjaCSUj4YvFdx6q9JOlpcaPOyAuyr547uT4RpgaIXKs6gm2cDkuQRi9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjefE5y7zYtDZF0OCwR7cx11IkVUwHwYDVR0j BBgwFoAUetDdtXid5SnIaXoDOXjDgf/kDYMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjJiMTc4Ni0xODMzLTRkMGEtYTEzOS00NjQ0MzMzOTNkNzgvMC83QUQwRERCNTc4 OURFNTI5Qzg2OTdBMDMzOTc4QzM4MUZGRTQwRDgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFGRkU0 MEQ4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYyYjE3ODYtMTgzMy00ZDBhLWEx MzktNDY0NDMzMzkzZDc4LzAvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMz ODFGRkU0MEQ4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnpb33o+MNFquo646/thwCiwQYZ2a7Sud0l Khd2M/m9wvDTD8PvyrJeXLbpcTvfphevUS1kMEPyFRXOG9uRx0fTRUEOi1UWQ79S z1VtixvEoMQMix9F6oKvsmfbmkxDbdzSTW8Kdy8jkpvjYTBTizr9d9JKavdwnovi XS+zI9rvbZISat1ZGhlQAvhwD+aUun6cLpCX3a4tuAl1qG5BpSkl+zale4TNLgu6 UB+4pVBKnm3d4QqqV7OOI2nvC38J0eRLdScWi47tkP/ItoxIeTYsWKn8K4V2hZ01 BqHfOR/7Tx1Q7I8BssU8rY83IhnGeyAkQusfBn0iJhOXkHyxngg= -----END CERTIFICATE-----Generated at Wed Feb 19 22:09:21 2025 by rpki-client