$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft File: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft (raw, json) Hash identifier: CvepfbYYp0ZNRHSYYKtsCxEYKJH3djgCQkV9wlMQqOU= Subject key identifier: 7C:CD:C8:EA:A7:2F:8B:3E:C2:95:40:07:45:FE:F2:3F:58:34:EE:F7 Authority key identifier: A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 Certificate issuer: /CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Certificate serial: 06FEFC48B0EA3A8AB88FAB264DF17A83E9911B39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft Manifest number: 01A4 Signing time: Fri 06 Jun 2025 16:31:25 +0000 Manifest this update: Fri 06 Jun 2025 16:26:25 +0000 Manifest next update: Mon 09 Jun 2025 16:38:25 +0000 Files and hashes: 1: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl (hash: PlAF/nkpUl5xTkfBiNDfGO8hrIeo68JuuwBH8hEes/8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 16:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:fe:fc:48:b0:ea:3a:8a:b8:8f:ab:26:4d:f1:7a:83:e9:91:1b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Validity Not Before: Jun 6 16:26:25 2025 GMT Not After : Jun 9 16:38:25 2025 GMT Subject: CN=7CCDC8EAA72F8B3EC295400745FEF23F5834EEF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:70:3d:0b:41:3e:7e:1e:b4:4f:77:8f:1a:00: 1f:e0:6d:6e:0e:17:ce:95:f7:d7:6e:5c:09:41:15: 61:67:cc:f6:46:cd:4e:cd:76:73:cc:b1:46:9a:29: e8:34:8f:bc:40:be:58:a8:69:28:69:aa:62:1d:28: bb:ec:0f:ca:03:12:78:4d:21:5d:d5:e5:38:af:a9: 4a:50:3c:6e:35:50:9f:e9:20:c0:2c:48:78:bb:e5: 70:ae:83:59:dd:64:9f:d8:d9:5b:88:01:64:11:00: 5c:18:24:53:6c:67:d5:f5:ee:20:88:60:96:73:cf: b8:5f:41:5e:b7:a1:dd:99:2e:80:5d:90:d1:da:f1: 21:1e:a2:60:85:c6:f2:c8:04:30:ec:0b:70:12:69: 41:6f:87:3b:36:3f:25:8a:93:3b:21:fc:3b:c1:60: 9d:07:7d:c7:31:16:b7:b8:a1:b7:46:8a:26:2b:ef: 7f:39:3f:5e:f6:a4:54:c9:d6:27:df:cf:c0:67:b3: 7a:13:1d:06:79:68:ac:a8:cd:72:a0:6a:d3:c0:fc: b4:2f:80:df:89:7d:f2:16:85:9c:ce:be:8c:fe:77: 67:e8:05:51:60:2e:23:c1:2c:c8:f3:40:d6:48:16: 5c:69:67:3e:23:84:f5:da:8d:34:fd:3c:cd:7c:2c: bb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CD:C8:EA:A7:2F:8B:3E:C2:95:40:07:45:FE:F2:3F:58:34:EE:F7 X509v3 Authority Key Identifier: keyid:A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:b7:d1:b3:6b:ab:be:03:33:d2:85:f4:92:e2:ad:a3:80:39: 4c:0a:3a:50:c3:dc:69:95:c5:8f:6d:f1:f6:72:c0:d8:d4:c2: 7f:3b:7f:03:8a:da:d4:f4:27:d4:27:a9:48:66:99:b3:dc:19: 35:c5:4d:8b:d3:12:e0:83:a2:d0:b6:b2:36:b1:fc:dc:15:3d: e7:54:5e:03:37:8c:84:81:60:30:96:53:80:95:0a:82:88:8a: 24:61:02:1c:12:a9:89:c4:6b:da:3f:40:87:4b:e3:31:e2:f1: 56:79:d0:bc:44:9c:ed:c7:76:3d:5d:0c:29:45:de:d1:f8:4c: 94:38:60:94:cf:63:d4:b9:77:33:90:0c:69:69:ba:a2:a6:17: 3d:4e:cd:04:2a:c3:79:8d:f4:0a:5f:af:de:c9:8f:bd:9f:59: 33:3c:f6:fa:95:33:96:8f:6f:bb:8f:b1:ca:16:50:35:1d:70: f7:92:2f:b6:74:f5:3d:f4:e5:76:12:49:3e:7a:79:f3:f3:a3: 24:d1:b3:a6:b4:97:b3:12:93:17:86:c8:32:91:09:d5:22:ec: 56:22:6a:80:33:f6:d3:8a:c2:cb:02:3f:cb:01:8e:d1:40:d6: 37:02:0b:10:d9:8f:68:e7:73:30:f4:83:bc:98:d1:b8:06:8f: 66:ce:30:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBv78SLDqOoq4j6smTfF6g+mRGzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4 RjM2NjlGODAeFw0yNTA2MDYxNjI2MjVaFw0yNTA2MDkxNjM4MjVaMDMxMTAvBgNV BAMTKDdDQ0RDOEVBQTcyRjhCM0VDMjk1NDAwNzQ1RkVGMjNGNTgzNEVFRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpcD0LQT5+HrRPd48aAB/gbW4O F86V99duXAlBFWFnzPZGzU7NdnPMsUaaKeg0j7xAvlioaShpqmIdKLvsD8oDEnhN IV3V5TivqUpQPG41UJ/pIMAsSHi75XCug1ndZJ/Y2VuIAWQRAFwYJFNsZ9X17iCI YJZzz7hfQV63od2ZLoBdkNHa8SEeomCFxvLIBDDsC3ASaUFvhzs2PyWKkzsh/DvB YJ0HfccxFre4obdGiiYr7385P172pFTJ1iffz8Bns3oTHQZ5aKyozXKgatPA/LQv gN+JffIWhZzOvoz+d2foBVFgLiPBLMjzQNZIFlxpZz4jhPXajTT9PM18LLt/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfM3I6qcviz7ClUAHRf7yP1g07vcwHwYDVR0j BBgwFoAUp9znZH+ndafp30Tq76xSEY82afgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2YzMGUyNy1iOTVlLTRkNzUtOTY4ZC01MzhmYjc5MTg4MjkvMC9BN0RDRTc2NDdG QTc3NUE3RTlERjQ0RUFFRkFDNTIxMThGMzY2OUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4RjM2 NjlGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmMzBlMjctYjk1ZS00ZDc1LTk2 OGQtNTM4ZmI3OTE4ODI5LzAvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUy MTE4RjM2NjlGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL230bNrq74DM9KF9JLiraOAOUwKOlDD3GmV xY9t8fZywNjUwn87fwOK2tT0J9QnqUhmmbPcGTXFTYvTEuCDotC2sjax/NwVPedU XgM3jISBYDCWU4CVCoKIiiRhAhwSqYnEa9o/QIdL4zHi8VZ50LxEnO3Hdj1dDClF 3tH4TJQ4YJTPY9S5dzOQDGlpuqKmFz1OzQQqw3mN9Apfr97Jj72fWTM89vqVM5aP b7uPscoWUDUdcPeSL7Z09T305XYSST56efPzoyTRs6a0l7MSkxeGyDKRCdUi7FYi aoAz9tOKwssCP8sBjtFA1jcCCxDZj2jnczD0g7yY0bgGj2bOMME= -----END CERTIFICATE-----Generated at Sat Jun 7 03:58:22 2025 by rpki-client