$ rpki-client -vvf repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft File: 7AD0DDB5789DE529C8697A033978C381FFE40D83.mft (raw, json) Hash identifier: FtKu2R+sDagdIbisk1hkDuACOyiSOaMgFFau0AcRih4= Subject key identifier: 4B:45:57:56:AB:F6:BA:98:F0:89:77:38:FF:A3:7D:F3:D2:29:BE:FD Authority key identifier: 7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 Certificate issuer: /CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Certificate serial: 3C126EA1CE553C95E2AB67EC76A69CF774EFC5F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft Manifest number: 01C4 Signing time: Sat 19 Apr 2025 07:51:27 +0000 Manifest this update: Sat 19 Apr 2025 07:46:27 +0000 Manifest next update: Tue 22 Apr 2025 12:05:27 +0000 Files and hashes: 1: 7AD0DDB5789DE529C8697A033978C381FFE40D83.crl (hash: yjt9s3jjc8+yjtVauUffrkxeFF+M2kV6ws4g12E5t/8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 12:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:12:6e:a1:ce:55:3c:95:e2:ab:67:ec:76:a6:9c:f7:74:ef:c5:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Validity Not Before: Apr 19 07:46:27 2025 GMT Not After : Apr 22 12:05:27 2025 GMT Subject: CN=4B455756ABF6BA98F0897738FFA37DF3D229BEFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e5:c5:fb:d3:1f:c3:c4:8a:4b:98:b6:28:00: b7:81:5b:ed:b9:42:73:00:61:a8:2f:0c:11:95:1c: 70:b0:1e:fc:fe:c2:6a:60:20:41:b9:eb:18:5d:f1: 4d:3b:90:e7:c1:4a:ee:f8:63:3b:13:d1:89:98:55: f7:bb:09:93:2a:bc:dd:48:dd:18:0b:2f:85:a4:f8: 60:ec:c4:1b:14:5c:dd:b2:3c:00:c1:78:3b:3f:7c: f8:dd:cf:de:f0:5f:99:b8:d1:49:2d:88:b3:b1:0b: 31:a9:e8:24:b5:ea:e0:be:77:b9:21:30:53:bd:48: f4:a5:a8:cc:95:0e:f6:95:6a:d0:25:a8:a0:eb:c1: cb:c5:07:8d:b3:65:4a:f9:e2:dd:38:85:dc:d2:95: 6a:6e:e7:3d:f2:b2:b7:fb:62:99:e3:88:99:4e:60: 73:67:56:f9:7b:1f:a9:a3:bc:c6:de:29:98:f2:d8: 56:7c:ba:d4:44:05:4a:42:72:31:08:23:22:16:a1: 4a:a9:b1:86:a4:ba:93:4e:18:51:0a:0e:c5:94:82: 2a:8d:00:33:56:66:95:b8:96:41:61:3e:a1:03:3a: 08:16:36:97:61:0b:41:46:e3:ac:1b:02:5b:07:6a: 8f:ef:9d:19:54:2e:fc:84:eb:9c:49:2c:22:cb:36: ac:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:45:57:56:AB:F6:BA:98:F0:89:77:38:FF:A3:7D:F3:D2:29:BE:FD X509v3 Authority Key Identifier: keyid:7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:02:b3:51:35:43:5e:d9:aa:32:1d:24:f6:56:05:76:4a:40: d2:47:94:c1:4f:e3:48:11:8c:f3:0e:be:ee:ac:1b:1a:05:0e: d0:90:46:c1:01:91:93:4d:10:d4:42:ae:1b:26:77:00:a5:9c: 3f:66:ae:d5:30:4b:39:2d:82:49:74:c3:0b:85:86:02:35:be: ba:e8:f2:88:97:95:c2:6f:47:7b:62:47:d6:ba:e0:ef:6c:cc: e1:e1:40:87:b6:6f:d0:ae:12:a6:88:65:e5:40:41:a1:cb:f8: 51:ae:b1:5f:8a:25:e2:1c:ca:7a:3b:bc:b8:eb:af:4b:e3:87: a5:a9:04:25:42:b6:50:44:11:19:77:33:02:d0:ae:f9:f2:e6: cd:12:b2:00:da:41:0d:5b:47:be:ad:26:73:fd:94:96:a5:a2: 87:40:8d:50:c5:29:b9:0e:74:31:ac:bd:3c:0f:a5:0f:9a:69: 9e:0a:d5:a7:2c:82:29:e9:7e:7c:bb:bf:88:fa:aa:ad:54:c7: 4e:b2:d7:61:8e:5d:d1:44:07:97:5b:28:8f:f2:44:60:10:c6: e4:9b:c7:2a:0a:be:03:78:60:79:85:f5:07:2b:f1:29:e8:76: 0f:4b:92:c2:6a:c4:2f:3d:0e:59:91:de:32:9a:42:c2:3e:18: 67:fe:fd:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPBJuoc5VPJXiq2fsdqac93TvxfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFG RkU0MEQ4MzAeFw0yNTA0MTkwNzQ2MjdaFw0yNTA0MjIxMjA1MjdaMDMxMTAvBgNV BAMTKDRCNDU1NzU2QUJGNkJBOThGMDg5NzczOEZGQTM3REYzRDIyOUJFRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm5cX70x/DxIpLmLYoALeBW+25 QnMAYagvDBGVHHCwHvz+wmpgIEG56xhd8U07kOfBSu74YzsT0YmYVfe7CZMqvN1I 3RgLL4Wk+GDsxBsUXN2yPADBeDs/fPjdz97wX5m40UktiLOxCzGp6CS16uC+d7kh MFO9SPSlqMyVDvaVatAlqKDrwcvFB42zZUr54t04hdzSlWpu5z3ysrf7YpnjiJlO YHNnVvl7H6mjvMbeKZjy2FZ8utREBUpCcjEIIyIWoUqpsYakupNOGFEKDsWUgiqN ADNWZpW4lkFhPqEDOggWNpdhC0FG46wbAlsHao/vnRlULvyE65xJLCLLNqy5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS0VXVqv2upjwiXc4/6N989Ipvv0wHwYDVR0j BBgwFoAUetDdtXid5SnIaXoDOXjDgf/kDYMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjJiMTc4Ni0xODMzLTRkMGEtYTEzOS00NjQ0MzMzOTNkNzgvMC83QUQwRERCNTc4 OURFNTI5Qzg2OTdBMDMzOTc4QzM4MUZGRTQwRDgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFGRkU0 MEQ4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYyYjE3ODYtMTgzMy00ZDBhLWEx MzktNDY0NDMzMzkzZDc4LzAvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMz ODFGRkU0MEQ4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgCs1E1Q17ZqjIdJPZWBXZKQNJHlMFP40gR jPMOvu6sGxoFDtCQRsEBkZNNENRCrhsmdwClnD9mrtUwSzktgkl0wwuFhgI1vrro 8oiXlcJvR3tiR9a64O9szOHhQIe2b9CuEqaIZeVAQaHL+FGusV+KJeIcyno7vLjr r0vjh6WpBCVCtlBEERl3MwLQrvny5s0SsgDaQQ1bR76tJnP9lJaloodAjVDFKbkO dDGsvTwPpQ+aaZ4K1acsginpfny7v4j6qq1Ux06y12GOXdFEB5dbKI/yRGAQxuSb xyoKvgN4YHmF9Qcr8Snodg9LksJqxC89DlmR3jKaQsI+GGf+/bs= -----END CERTIFICATE-----Generated at Mon Apr 21 11:11:00 2025 by rpki-client