$ rpki-client -vvf repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft File: 7AD0DDB5789DE529C8697A033978C381FFE40D83.mft (raw, json) Hash identifier: UyzHMuudT8vp4tkBznc0TLuo74RNEB5bG0sI+V39sFw= Subject key identifier: 9A:63:F3:A3:98:87:65:15:EF:F5:3C:AC:26:B3:99:A4:7D:1F:E8:81 Authority key identifier: 7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 Certificate issuer: /CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Certificate serial: 409C40A7DBB12D5493BB6C74D4D0B417496D7899 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft Manifest number: 01DA Signing time: Sat 07 Jun 2025 02:51:28 +0000 Manifest this update: Sat 07 Jun 2025 02:46:28 +0000 Manifest next update: Tue 10 Jun 2025 08:56:28 +0000 Files and hashes: 1: 7AD0DDB5789DE529C8697A033978C381FFE40D83.crl (hash: 69VBWLyIIBunPYL/iPqh/vt+lqXSsQ8nbZS28fi7Ckw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 08:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:9c:40:a7:db:b1:2d:54:93:bb:6c:74:d4:d0:b4:17:49:6d:78:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Validity Not Before: Jun 7 02:46:28 2025 GMT Not After : Jun 10 08:56:28 2025 GMT Subject: CN=9A63F3A398876515EFF53CAC26B399A47D1FE881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:48:6a:9c:e8:99:4a:b6:18:a5:a2:b0:b0:0f: 90:6f:a4:e1:00:4d:a7:5c:28:29:2a:ab:3d:76:19: 36:50:29:c3:b7:31:2c:3f:b5:46:40:e8:c4:22:28: 4c:2d:9f:ae:7f:4a:ce:cd:68:52:26:8e:79:69:9e: 5b:a2:25:c7:e1:d2:b3:6f:3f:28:27:a8:2b:eb:63: 3c:24:7f:56:8f:ab:d8:11:46:50:92:cd:02:98:c2: f6:85:8c:bd:48:75:66:df:04:f2:5b:30:ce:7c:2e: 5d:be:18:1b:65:0a:76:43:4a:39:1a:4f:ca:0e:c8: 44:e1:d9:fb:1e:25:f4:45:d1:35:2f:5a:bb:c6:cd: 80:10:aa:f9:9e:93:dd:dd:9f:5f:0d:9b:6b:33:d2: 14:61:2f:ff:6e:25:2f:a3:18:6b:dc:47:2f:da:15: e9:2a:ab:16:e6:22:e8:21:9b:1a:23:83:97:89:9a: 0f:90:5e:7c:b0:72:13:1f:c4:bf:10:03:0d:75:72: 73:94:76:cc:89:f9:48:34:5d:a4:af:d9:a4:b8:8d: 95:cd:f5:12:58:6c:93:25:e7:28:07:b9:42:b2:ec: ed:a6:5a:3a:f4:b8:f4:3a:a3:e5:d8:15:9a:8e:2e: 87:d6:46:b8:84:d8:8a:ed:17:e9:f5:0d:ec:db:ee: 94:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:63:F3:A3:98:87:65:15:EF:F5:3C:AC:26:B3:99:A4:7D:1F:E8:81 X509v3 Authority Key Identifier: keyid:7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b9:aa:20:39:dc:b1:4f:9b:84:96:04:0b:f9:1d:f9:ad:ea: 4f:d5:14:47:c5:a7:39:46:e6:90:02:5a:79:6e:29:27:54:41: a8:41:fb:ad:4e:dd:97:e1:0c:79:be:a3:bc:35:72:45:b2:c0: 15:5d:4c:43:79:2a:75:8b:60:88:e8:dd:92:40:33:dd:06:99: 2f:2f:94:68:e2:e6:f4:42:a4:ec:6e:fb:15:7d:64:07:4e:5d: 38:67:33:09:cc:a5:30:43:58:ae:d1:54:28:70:bc:f6:ac:ef: 71:5c:36:eb:ca:59:61:88:14:c5:6e:16:3b:29:50:89:b4:bc: f1:6c:06:1c:d5:67:e8:7b:44:f3:33:75:6b:58:4a:3a:f8:1c: 32:54:99:ee:5f:9d:f7:2b:cf:c1:80:c9:d9:49:c2:25:42:6e: 50:85:51:6b:86:4b:05:91:92:da:21:aa:4a:d2:a4:09:3f:e9: d2:ff:60:f7:02:c2:88:83:de:8d:73:d7:1c:d3:19:44:c7:a2: 9e:6d:8e:47:12:58:f0:f3:13:6a:50:5f:cc:6c:6f:8c:41:31: cc:4b:0f:17:bc:f1:ba:e0:d6:3d:ba:fd:f9:6e:d9:c1:87:07: f8:9b:96:60:24:00:17:dc:65:ed:cf:08:c0:cf:35:b7:d7:45: 2f:5b:51:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQJxAp9uxLVSTu2x01NC0F0lteJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFG RkU0MEQ4MzAeFw0yNTA2MDcwMjQ2MjhaFw0yNTA2MTAwODU2MjhaMDMxMTAvBgNV BAMTKDlBNjNGM0EzOTg4NzY1MTVFRkY1M0NBQzI2QjM5OUE0N0QxRkU4ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcSGqc6JlKthilorCwD5BvpOEA TadcKCkqqz12GTZQKcO3MSw/tUZA6MQiKEwtn65/Ss7NaFImjnlpnluiJcfh0rNv PygnqCvrYzwkf1aPq9gRRlCSzQKYwvaFjL1IdWbfBPJbMM58Ll2+GBtlCnZDSjka T8oOyETh2fseJfRF0TUvWrvGzYAQqvmek93dn18Nm2sz0hRhL/9uJS+jGGvcRy/a FekqqxbmIughmxojg5eJmg+QXnywchMfxL8QAw11cnOUdsyJ+Ug0XaSv2aS4jZXN 9RJYbJMl5ygHuUKy7O2mWjr0uPQ6o+XYFZqOLofWRriE2IrtF+n1Dezb7pSlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmmPzo5iHZRXv9TysJrOZpH0f6IEwHwYDVR0j BBgwFoAUetDdtXid5SnIaXoDOXjDgf/kDYMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjJiMTc4Ni0xODMzLTRkMGEtYTEzOS00NjQ0MzMzOTNkNzgvMC83QUQwRERCNTc4 OURFNTI5Qzg2OTdBMDMzOTc4QzM4MUZGRTQwRDgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFGRkU0 MEQ4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYyYjE3ODYtMTgzMy00ZDBhLWEx MzktNDY0NDMzMzkzZDc4LzAvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMz ODFGRkU0MEQ4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJy5qiA53LFPm4SWBAv5Hfmt6k/VFEfFpzlG 5pACWnluKSdUQahB+61O3ZfhDHm+o7w1ckWywBVdTEN5KnWLYIjo3ZJAM90GmS8v lGji5vRCpOxu+xV9ZAdOXThnMwnMpTBDWK7RVChwvPas73FcNuvKWWGIFMVuFjsp UIm0vPFsBhzVZ+h7RPMzdWtYSjr4HDJUme5fnfcrz8GAydlJwiVCblCFUWuGSwWR ktohqkrSpAk/6dL/YPcCwoiD3o1z1xzTGUTHop5tjkcSWPDzE2pQX8xsb4xBMcxL Dxe88brg1j26/flu2cGHB/iblmAkABfcZe3PCMDPNbfXRS9bURA= -----END CERTIFICATE-----Generated at Sun Jun 8 23:31:13 2025 by rpki-client