$ rpki-client -vvf repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.mft File: 7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.mft (raw, json) Hash identifier: HlhH8847Fwy4Og1L+r2FxEEwIZWeE5lJAewiaqGAwZs= Subject key identifier: 70:E1:01:15:C7:09:68:0C:6F:0C:21:01:81:CF:85:E7:3A:9C:85:F4 Authority key identifier: 7A:82:C5:E5:CF:F6:8F:50:08:CC:06:8E:C7:CA:6D:A3:83:C3:3D:56 Certificate issuer: /CN=7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56 Certificate serial: 68C1DD310367F0522BBCB3FC4CFC59C2A4DD0B7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.mft Manifest number: F7 Signing time: Wed 04 Jun 2025 03:12:24 +0000 Manifest this update: Wed 04 Jun 2025 03:07:24 +0000 Manifest next update: Sat 07 Jun 2025 15:07:24 +0000 Files and hashes: 1: 7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.crl (hash: sdNWoleG/xt7bXVGXdm9Cc1dqz++GPBmnnE/oIcI+ZQ=) 2: 3231302e37392e3139302e302f32332d3234203d3e20313336303532.roa (hash: wqHFOj2dO5m4a3lfYG+6lBK8bTapD/d8EJpnCFvqcWQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.crl rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c1:dd:31:03:67:f0:52:2b:bc:b3:fc:4c:fc:59:c2:a4:dd:0b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56 Validity Not Before: Jun 4 03:07:24 2025 GMT Not After : Jun 7 15:07:24 2025 GMT Subject: CN=70E10115C709680C6F0C210181CF85E73A9C85F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b8:8c:43:5c:89:d2:37:17:a2:14:5e:76:05: e9:03:81:21:0f:d0:70:bb:6f:5d:b3:3d:94:68:00: af:6b:2c:b4:f8:28:72:d2:e5:35:4e:1c:07:84:6c: 4e:44:3a:3c:ba:2c:d7:09:d4:c5:89:b4:68:f7:fd: e9:93:d4:33:ea:36:fe:90:55:02:fc:21:5a:2f:3f: af:91:fd:77:80:ef:76:c3:94:16:4b:40:25:69:07: e5:17:06:8a:7d:e5:35:a1:b6:2c:8a:42:9a:86:52: c3:a7:91:cc:a6:23:a7:2b:9e:e2:a1:72:8a:ac:7a: 1f:27:f0:ef:40:c6:4f:ec:b9:7f:8d:c2:22:46:0c: 55:77:23:4c:82:e3:a0:51:8e:cf:23:2e:3f:80:dc: 40:ab:a2:16:fa:17:da:9c:c5:2b:60:f6:28:f4:f3: f2:f4:82:7d:af:5f:c7:cb:ec:a3:aa:24:cf:15:2a: ce:40:c2:1f:45:f7:25:0b:f7:e6:83:eb:25:07:44: 38:0a:01:be:43:f4:85:d6:09:c6:c0:6d:d2:cb:49: 2b:bd:cc:ad:73:37:a0:4e:d1:85:47:79:47:88:52: 34:a0:f5:05:0c:fa:55:92:94:f8:f5:6b:81:b9:f8: 7b:d0:2e:60:05:40:12:0a:ca:32:d4:59:d7:f7:b4: 3f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E1:01:15:C7:09:68:0C:6F:0C:21:01:81:CF:85:E7:3A:9C:85:F4 X509v3 Authority Key Identifier: keyid:7A:82:C5:E5:CF:F6:8F:50:08:CC:06:8E:C7:CA:6D:A3:83:C3:3D:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:fa:38:cc:14:9e:cd:52:3b:35:ba:39:7b:3e:e9:44:81:64: 5c:49:76:c5:a4:4a:28:cd:ee:ec:a3:55:74:97:61:b4:87:f9: 03:f3:12:a4:71:4d:66:97:b3:d6:6b:a5:ec:c9:4e:58:cc:7a: 9c:c3:84:29:90:f5:dd:47:5b:7a:34:5e:fc:45:43:48:cf:77: be:0d:38:1d:9a:fe:4b:4c:4e:cd:8d:5a:2b:b9:cd:0f:cd:4a: 7a:31:9b:9e:4b:c0:57:e9:95:d0:a7:4b:23:ef:70:13:19:f7: 99:28:c7:a8:2a:eb:2b:c1:b1:1f:7a:a1:72:10:fa:3e:f4:ac: 53:c8:7d:48:cb:cb:bd:4b:b5:d7:50:e8:23:71:83:1e:44:ed: f6:81:71:fb:d8:0c:ca:0a:aa:41:aa:90:f8:45:52:92:67:0d: 57:5f:eb:25:9f:3c:55:f6:d9:5e:3b:e3:cb:d6:08:c9:da:3a: 91:fd:3c:12:a8:60:f9:7f:3f:f4:b5:a8:9e:9f:e8:f7:6e:71: 70:b5:78:f2:74:14:3e:1c:aa:9c:17:8c:37:f5:be:d6:3f:fa: 69:b3:a8:df:db:c2:3f:64:44:a1:b6:74:4c:66:0d:c8:1a:7e: d8:86:2c:ee:97:96:61:db:04:31:3e:3f:6a:d3:39:fa:a1:18: 4c:87:84:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaMHdMQNn8FIrvLP8TPxZwqTdC38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E4MkM1RTVDRkY2OEY1MDA4Q0MwNjhFQzdDQTZEQTM4 M0MzM0Q1NjAeFw0yNTA2MDQwMzA3MjRaFw0yNTA2MDcxNTA3MjRaMDMxMTAvBgNV BAMTKDcwRTEwMTE1QzcwOTY4MEM2RjBDMjEwMTgxQ0Y4NUU3M0E5Qzg1RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXuIxDXInSNxeiFF52BekDgSEP 0HC7b12zPZRoAK9rLLT4KHLS5TVOHAeEbE5EOjy6LNcJ1MWJtGj3/emT1DPqNv6Q VQL8IVovP6+R/XeA73bDlBZLQCVpB+UXBop95TWhtiyKQpqGUsOnkcymI6crnuKh coqseh8n8O9Axk/suX+NwiJGDFV3I0yC46BRjs8jLj+A3ECrohb6F9qcxStg9ij0 8/L0gn2vX8fL7KOqJM8VKs5Awh9F9yUL9+aD6yUHRDgKAb5D9IXWCcbAbdLLSSu9 zK1zN6BO0YVHeUeIUjSg9QUM+lWSlPj1a4G5+HvQLmAFQBIKyjLUWdf3tD8vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcOEBFccJaAxvDCEBgc+F5zqchfQwHwYDVR0j BBgwFoAUeoLF5c/2j1AIzAaOx8pto4PDPVYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjYwZjAzYy04OTY4LTQ3MGYtYjYxOC1kM2ViMmM5MjhhNGQvMC83QTgyQzVFNUNG RjY4RjUwMDhDQzA2OEVDN0NBNkRBMzgzQzMzRDU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0E4MkM1RTVDRkY2OEY1MDA4Q0MwNjhFQzdDQTZEQTM4M0Mz M0Q1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI2MGYwM2MtODk2OC00NzBmLWI2 MTgtZDNlYjJjOTI4YTRkLzAvN0E4MkM1RTVDRkY2OEY1MDA4Q0MwNjhFQzdDQTZE QTM4M0MzM0Q1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/6OMwUns1SOzW6OXs+6USBZFxJdsWkSijN 7uyjVXSXYbSH+QPzEqRxTWaXs9ZrpezJTljMepzDhCmQ9d1HW3o0XvxFQ0jPd74N OB2a/ktMTs2NWiu5zQ/NSnoxm55LwFfpldCnSyPvcBMZ95kox6gq6yvBsR96oXIQ +j70rFPIfUjLy71LtddQ6CNxgx5E7faBcfvYDMoKqkGqkPhFUpJnDVdf6yWfPFX2 2V4748vWCMnaOpH9PBKoYPl/P/S1qJ6f6PducXC1ePJ0FD4cqpwXjDf1vtY/+mmz qN/bwj9kRKG2dExmDcgaftiGLO6XlmHbBDE+P2rTOfqhGEyHhOY= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:45 2025 by rpki-client