$ rpki-client -vvf repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft File: 7188210EAEFBA7947009E19B6219830752F542A9.mft (raw, json) Hash identifier: gwQnlhxdi26XNGvrIbbixQH6Nyt7CGJYEZzauTV5l4g= Subject key identifier: E8:2D:00:A0:55:98:49:14:B9:8D:3C:A1:FC:27:FB:63:6E:44:43:66 Authority key identifier: 71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 Certificate issuer: /CN=7188210EAEFBA7947009E19B6219830752F542A9 Certificate serial: 5E7D9AE9BC5C04C4612FFCDB85940F71D8E9997E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft Manifest number: 0178 Signing time: Fri 06 Jun 2025 10:11:07 +0000 Manifest this update: Fri 06 Jun 2025 10:06:07 +0000 Manifest next update: Mon 09 Jun 2025 15:26:07 +0000 Files and hashes: 1: 7188210EAEFBA7947009E19B6219830752F542A9.crl (hash: xbbe2bN9VZtEiZGubFpDbBIQPnpc3RBrcqkn6nH9IVo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 15:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:7d:9a:e9:bc:5c:04:c4:61:2f:fc:db:85:94:0f:71:d8:e9:99:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7188210EAEFBA7947009E19B6219830752F542A9 Validity Not Before: Jun 6 10:06:07 2025 GMT Not After : Jun 9 15:26:07 2025 GMT Subject: CN=E82D00A055984914B98D3CA1FC27FB636E444366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cf:5d:92:db:a3:e8:ff:6b:a8:bc:f0:bf:ae: 1d:af:71:c0:0b:f9:8d:a7:bb:4e:1f:42:e5:09:74: 24:1f:89:18:4f:3b:0b:7d:17:02:6a:c2:44:50:2e: c3:34:51:02:55:c2:dc:04:59:49:0e:1b:81:37:11: 60:32:64:d9:41:26:5d:ee:a0:3e:5f:d1:29:d8:46: d8:ad:0b:54:b9:02:44:2e:6a:bc:26:9f:5d:f6:0e: f8:f4:85:f6:f7:50:67:8b:a7:fa:94:1d:41:87:7f: 17:f0:a6:b9:10:41:ce:bc:12:9d:0f:b9:e4:93:0b: 26:d8:8d:fa:39:16:c7:6f:a9:4d:9c:76:08:1b:de: d9:4a:ac:ad:b5:79:30:7c:7b:a1:1c:5b:f4:7e:2d: 57:c9:8f:b2:b7:31:b9:5a:2f:97:13:3c:3f:a3:8f: 9d:75:8f:d0:41:01:9c:53:ea:59:63:2f:30:b2:c1: 69:ee:21:af:4a:3e:af:3c:d5:8e:b6:a1:41:94:62: 2a:8e:8f:df:3f:96:ee:55:0c:b6:7b:14:05:62:b8: 65:0e:f0:91:9f:f2:e4:39:15:4f:a0:86:97:db:62: 8a:ba:b7:b7:05:3e:ba:d5:10:0d:95:50:72:58:49: dc:9d:ae:3b:50:7f:a8:db:18:e9:d1:ff:ac:8a:b7: 8b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2D:00:A0:55:98:49:14:B9:8D:3C:A1:FC:27:FB:63:6E:44:43:66 X509v3 Authority Key Identifier: keyid:71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:80:a8:9b:9e:82:3c:6c:15:2d:1a:bd:cd:83:35:e6:77:04: e1:95:df:f3:16:02:01:61:bf:1a:68:f7:46:1b:78:9b:d0:81: 4c:a5:12:97:92:5a:75:8a:29:01:75:6d:ba:24:ac:57:2c:7a: 5c:e0:f3:a0:31:f5:ba:5b:e0:a0:49:16:5f:2b:68:4d:4c:d7: 99:80:7b:5b:1c:67:1e:2b:c8:5e:10:fa:c9:d8:71:aa:4c:9e: b9:de:b2:7c:d3:ae:8d:62:de:ed:59:a8:c1:c6:13:0f:90:fa: 24:94:a0:d5:e2:ae:c4:a9:c2:08:52:60:d8:95:a6:1a:ff:35: 0f:78:51:15:70:00:30:be:82:5f:4e:d6:1e:48:ce:09:38:84: c0:ab:dc:97:1e:82:a2:b1:f1:86:49:ff:a8:83:60:38:ef:15: 1b:51:cc:ea:f6:f0:4f:6c:df:ae:40:7f:37:c1:f3:f4:60:a1: 68:1d:30:e8:6a:12:52:8a:a9:81:1f:24:1b:7c:5c:32:e7:c1: 72:39:82:9e:c6:23:4f:c7:e4:e8:77:23:b4:82:d7:ad:f5:82: 90:8b:62:ea:d1:cf:4b:f5:79:ca:cc:2f:e9:90:9b:66:26:9e: 9c:ff:7a:c5:97:a7:81:f1:6a:0c:1c:f1:33:63:1f:9b:c3:c5: be:ca:0e:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXn2a6bxcBMRhL/zbhZQPcdjpmX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1 MkY1NDJBOTAeFw0yNTA2MDYxMDA2MDdaFw0yNTA2MDkxNTI2MDdaMDMxMTAvBgNV BAMTKEU4MkQwMEEwNTU5ODQ5MTRCOThEM0NBMUZDMjdGQjYzNkU0NDQzNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChz12S26Po/2uovPC/rh2vccAL +Y2nu04fQuUJdCQfiRhPOwt9FwJqwkRQLsM0UQJVwtwEWUkOG4E3EWAyZNlBJl3u oD5f0SnYRtitC1S5AkQuarwmn132Dvj0hfb3UGeLp/qUHUGHfxfwprkQQc68Ep0P ueSTCybYjfo5FsdvqU2cdggb3tlKrK21eTB8e6EcW/R+LVfJj7K3MblaL5cTPD+j j511j9BBAZxT6lljLzCywWnuIa9KPq881Y62oUGUYiqOj98/lu5VDLZ7FAViuGUO 8JGf8uQ5FU+ghpfbYoq6t7cFPrrVEA2VUHJYSdydrjtQf6jbGOnR/6yKt4uPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6C0AoFWYSRS5jTyh/Cf7Y25EQ2YwHwYDVR0j BBgwFoAUcYghDq77p5RwCeGbYhmDB1L1QqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTdkN2IzOC1kNjZiLTQzYjMtOTFmYi00YmI5ZTY2MzdlMmEvMC83MTg4MjEwRUFF RkJBNzk0NzAwOUUxOUI2MjE5ODMwNzUyRjU0MkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1MkY1 NDJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE3ZDdiMzgtZDY2Yi00M2IzLTkx ZmItNGJiOWU2NjM3ZTJhLzAvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgz MDc1MkY1NDJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6AqJuegjxsFS0avc2DNeZ3BOGV3/MWAgFh vxpo90YbeJvQgUylEpeSWnWKKQF1bbokrFcselzg86Ax9bpb4KBJFl8raE1M15mA e1scZx4ryF4Q+snYcapMnrnesnzTro1i3u1ZqMHGEw+Q+iSUoNXirsSpwghSYNiV phr/NQ94URVwADC+gl9O1h5Izgk4hMCr3JcegqKx8YZJ/6iDYDjvFRtRzOr28E9s 365AfzfB8/RgoWgdMOhqElKKqYEfJBt8XDLnwXI5gp7GI0/H5Oh3I7SC1631gpCL YurRz0v1ecrML+mQm2Ymnpz/esWXp4Hxagwc8TNjH5vDxb7KDgI= -----END CERTIFICATE-----Generated at Sun Jun 8 03:51:12 2025 by rpki-client