$ rpki-client -vvf repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft File: 7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft (raw, json) Hash identifier: OxZUHKiReJjS0fRHx5tMHxR74icZfh/z570KhHjVTAo= Subject key identifier: 9A:99:C5:4D:C6:8D:3E:4F:84:2F:7F:03:59:4B:43:DB:4A:FD:12:15 Authority key identifier: 7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C Certificate issuer: /CN=7F9ECE743A3074E61F56CD11161AA58A6BB4092C Certificate serial: 390F81294157BA581FC2BFF78C344CEAD57FF9FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft Manifest number: 02 Signing time: Sat 07 Jun 2025 11:31:15 +0000 Manifest this update: Sat 07 Jun 2025 11:26:15 +0000 Manifest next update: Tue 10 Jun 2025 16:15:15 +0000 Files and hashes: 1: 7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl (hash: k4SX4liEA1XB4F3J7sZ/CL6ulNfXiMQuAXa6zkT8FZY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 16:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:0f:81:29:41:57:ba:58:1f:c2:bf:f7:8c:34:4c:ea:d5:7f:f9:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F9ECE743A3074E61F56CD11161AA58A6BB4092C Validity Not Before: Jun 7 11:26:15 2025 GMT Not After : Jun 10 16:15:15 2025 GMT Subject: CN=9A99C54DC68D3E4F842F7F03594B43DB4AFD1215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:10:61:67:e1:c7:61:04:ce:04:68:c5:e2:1c: fd:df:8e:9b:95:84:37:24:59:3d:9e:df:36:a7:da: ef:8e:84:0d:73:2d:83:e5:89:d8:46:55:50:4d:95: be:c9:11:42:e8:79:54:94:19:a2:5e:1e:c4:12:4e: 9b:8e:4f:bf:c8:66:39:15:aa:10:98:8f:c6:af:15: 3c:c4:9e:72:b6:b1:3c:b4:fc:5f:61:09:ac:1c:ef: f8:cb:cd:5b:5d:22:92:34:38:03:82:82:c8:c4:56: 56:48:65:4a:42:da:c2:ad:0d:7a:83:e6:70:1b:a8: 54:8f:82:79:79:47:14:3e:56:8a:13:af:8f:78:bc: b0:40:f2:af:c7:1b:da:56:b5:7f:49:8d:e9:5a:3e: b7:43:48:80:8a:69:1b:7f:00:86:38:36:c7:20:e4: b4:fb:11:e2:50:c5:78:d1:e5:c6:08:2f:b7:b9:dc: 83:cd:dc:e1:2a:4d:41:17:02:83:2c:61:a4:39:99: ca:15:6e:31:2f:d7:d4:bf:3b:5f:48:51:72:56:53: 2c:52:02:07:2d:d3:26:b8:d6:fe:82:d6:4c:c5:59: b7:49:b4:89:e2:d8:f0:9b:a7:43:33:74:80:8b:14: c3:04:4f:6c:f0:a1:e2:30:fe:04:28:32:39:93:33: d9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:99:C5:4D:C6:8D:3E:4F:84:2F:7F:03:59:4B:43:DB:4A:FD:12:15 X509v3 Authority Key Identifier: keyid:7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:fa:de:82:2a:ee:13:47:e8:1c:d6:74:62:e0:e5:e8:4e:d5: fb:df:38:ab:3f:74:6f:fc:4d:15:96:21:cd:e3:e5:d0:a9:3d: 9d:6b:9e:ab:92:8f:1a:60:5d:46:60:79:c7:07:8c:90:80:81: b1:ef:70:f8:47:f3:04:81:f9:f8:3d:d7:79:3f:cb:59:b3:2d: bc:9b:9c:38:d9:af:36:b7:a1:79:d0:8b:ad:cf:5b:6b:98:61: 30:7f:65:0c:db:26:76:2f:36:ad:1a:af:b4:16:3b:25:9e:9c: a1:b8:6b:f3:6d:5e:f0:ea:36:f4:87:6e:40:8e:43:88:07:fc: 66:b7:96:bc:16:cf:51:22:54:cf:52:5e:7f:c5:f8:5e:ac:a9: 2d:0d:8f:cb:e7:2f:e6:71:4f:87:c2:72:50:7b:ff:e8:b8:be: 78:e7:d8:da:27:3b:ea:f0:c7:78:71:d4:c8:47:e3:86:e8:66: 69:2f:1b:09:5e:40:96:97:ba:31:b2:3d:a5:44:d9:9b:36:f5: dc:c9:7c:13:09:d3:37:1b:38:dc:89:6e:ab:a8:13:3f:3e:33: be:eb:dd:6d:32:50:79:08:d2:1d:de:2e:1c:bc:53:89:5b:a3: 61:12:d6:58:61:30:7f:c9:a9:e3:cb:89:b8:e9:7f:1a:ef:bf: 17:12:10:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOQ+BKUFXulgfwr/3jDRM6tV/+f0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1OEE2 QkI0MDkyQzAeFw0yNTA2MDcxMTI2MTVaFw0yNTA2MTAxNjE1MTVaMDMxMTAvBgNV BAMTKDlBOTlDNTREQzY4RDNFNEY4NDJGN0YwMzU5NEI0M0RCNEFGRDEyMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfEGFn4cdhBM4EaMXiHP3fjpuV hDckWT2e3zan2u+OhA1zLYPlidhGVVBNlb7JEULoeVSUGaJeHsQSTpuOT7/IZjkV qhCYj8avFTzEnnK2sTy0/F9hCawc7/jLzVtdIpI0OAOCgsjEVlZIZUpC2sKtDXqD 5nAbqFSPgnl5RxQ+VooTr494vLBA8q/HG9pWtX9JjelaPrdDSICKaRt/AIY4Nscg 5LT7EeJQxXjR5cYIL7e53IPN3OEqTUEXAoMsYaQ5mcoVbjEv19S/O19IUXJWUyxS Agct0ya41v6C1kzFWbdJtIni2PCbp0MzdICLFMMET2zwoeIw/gQoMjmTM9k3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmpnFTcaNPk+EL38DWUtD20r9EhUwHwYDVR0j BBgwFoAUf57OdDowdOYfVs0RFhqlimu0CSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjY2YmZhNi1kYzRjLTQxMDgtOTMyYy0yMDRiNjJlODYyNzIvMC83RjlFQ0U3NDNB MzA3NEU2MUY1NkNEMTExNjFBQTU4QTZCQjQwOTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1OEE2QkI0 MDkyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmY2NmJmYTYtZGM0Yy00MTA4LTkz MmMtMjA0YjYyZTg2MjcyLzAvN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1 OEE2QkI0MDkyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADX63oIq7hNH6BzWdGLg5ehO1fvfOKs/dG/8 TRWWIc3j5dCpPZ1rnquSjxpgXUZgeccHjJCAgbHvcPhH8wSB+fg913k/y1mzLbyb nDjZrza3oXnQi63PW2uYYTB/ZQzbJnYvNq0ar7QWOyWenKG4a/NtXvDqNvSHbkCO Q4gH/Ga3lrwWz1EiVM9SXn/F+F6sqS0Nj8vnL+ZxT4fCclB7/+i4vnjn2NonO+rw x3hx1MhH44boZmkvGwleQJaXujGyPaVE2Zs29dzJfBMJ0zcbONyJbquoEz8+M77r 3W0yUHkI0h3eLhy8U4lbo2ES1lhhMH/JqePLibjpfxrvvxcSEEY= -----END CERTIFICATE-----Generated at Sun Jun 8 01:43:17 2025 by rpki-client