$ rpki-client -vvf repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft File: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft (raw, json) Hash identifier: Jwf++mZfYz6u6wQWNcrExDn/MexOoXmlOdFV4YBqRh4= Subject key identifier: FB:5B:D6:1B:2D:F1:07:46:C2:E5:24:1E:5A:4E:4A:86:C1:75:1C:36 Authority key identifier: 7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 Certificate issuer: /CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Certificate serial: 6B7874D9F4A3DD7DDC9F82FA72039C039F4B6615 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft Manifest number: 0140 Signing time: Mon 30 Jun 2025 23:22:18 +0000 Manifest this update: Mon 30 Jun 2025 23:17:18 +0000 Manifest next update: Fri 04 Jul 2025 08:53:18 +0000 Files and hashes: 1: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl (hash: SZOqhNS/SKCs8d8+hM0DDgGh3vwbnPDtowDgOf7X+7o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 08:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:78:74:d9:f4:a3:dd:7d:dc:9f:82:fa:72:03:9c:03:9f:4b:66:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Validity Not Before: Jun 30 23:17:18 2025 GMT Not After : Jul 4 08:53:18 2025 GMT Subject: CN=FB5BD61B2DF10746C2E5241E5A4E4A86C1751C36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:95:89:72:69:65:2d:3a:1b:3d:61:2b:1b:b4: cb:e4:2e:75:de:74:c5:d0:ab:33:32:d2:56:ec:64: b6:11:8c:04:42:25:25:5e:b7:6b:5b:71:e6:7e:7e: 72:1d:dc:e5:b1:bd:81:0b:d7:ef:00:e2:7a:a8:8b: f4:de:8f:d3:d3:91:4b:ec:ab:cf:16:41:a4:41:5d: 74:5c:7e:44:c7:4f:ec:23:cc:77:8f:60:86:f7:e3: 66:44:25:a5:d2:0c:db:7d:5e:5e:1d:7c:ba:bc:84: c5:e3:3f:77:23:bf:95:3d:d3:c4:de:c0:83:75:79: 62:fb:73:79:56:4e:44:44:0e:6f:5f:1e:b8:76:c1: 14:11:7b:db:32:b9:17:c5:6a:8e:a2:cd:e5:79:33: 76:7e:5e:73:89:f1:4b:f8:90:81:75:10:df:66:6a: 1c:99:ca:66:88:d8:44:37:6e:c8:4a:5e:1c:59:0e: 6c:dc:7f:7a:e3:5e:17:a4:7f:91:c7:0d:2d:03:14: 93:7e:84:5a:55:5d:a1:b3:7b:1d:75:40:18:4b:97: a6:48:f9:67:dd:42:71:91:34:f4:f7:e9:23:b6:15: 74:34:7f:fe:d7:10:41:94:a2:90:a5:22:87:48:25: 2c:96:4e:f7:2d:00:14:d4:de:f2:2d:d8:e2:8c:16: 94:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5B:D6:1B:2D:F1:07:46:C2:E5:24:1E:5A:4E:4A:86:C1:75:1C:36 X509v3 Authority Key Identifier: keyid:7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b3:48:46:10:73:0c:7e:ed:ce:86:2c:fc:10:91:19:a4:de: 14:50:83:4c:57:e1:39:85:91:55:80:e7:fc:78:31:97:2b:5b: 26:3a:f8:b3:e5:db:ff:79:0a:7d:19:9c:16:fd:8d:0d:8e:15: 20:a5:78:a5:dc:11:bf:e4:3e:55:43:78:e6:67:b2:0c:a0:13: f8:53:28:d6:45:de:91:91:c6:21:8f:fe:5a:5f:41:93:37:6a: 83:47:8b:d2:53:53:82:76:cb:ae:36:87:de:5d:9d:c2:45:dd: f5:51:19:0e:af:9c:72:f4:9f:e7:ce:fc:ab:e9:1d:3d:09:66: 74:ae:2c:a3:55:13:45:ec:28:27:d9:24:cb:c0:d6:09:a6:58: 51:13:85:92:17:57:c0:8b:91:fb:e6:6f:e9:28:3a:1e:3d:c9: 0d:52:b7:7c:a9:37:9a:44:ab:bc:33:a6:58:b3:dc:96:da:64: cd:e1:b4:34:48:d8:30:17:7c:bf:cb:95:4b:74:0c:b8:43:9d: 6d:80:b9:5f:ac:cc:f0:3f:ef:e4:df:5e:87:20:cd:9f:f3:da: 7b:05:b6:22:ea:31:74:51:c5:2e:7c:87:32:9a:83:7c:f5:98: c3:dd:2e:59:d2:ac:64:aa:64:91:b6:25:57:d4:40:91:f6:1a: 72:ea:ca:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa3h02fSj3X3cn4L6cgOcA59LZhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAx REFGODhEODAeFw0yNTA2MzAyMzE3MThaFw0yNTA3MDQwODUzMThaMDMxMTAvBgNV BAMTKEZCNUJENjFCMkRGMTA3NDZDMkU1MjQxRTVBNEU0QTg2QzE3NTFDMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4lYlyaWUtOhs9YSsbtMvkLnXe dMXQqzMy0lbsZLYRjARCJSVet2tbceZ+fnId3OWxvYEL1+8A4nqoi/Tej9PTkUvs q88WQaRBXXRcfkTHT+wjzHePYIb342ZEJaXSDNt9Xl4dfLq8hMXjP3cjv5U908Te wIN1eWL7c3lWTkREDm9fHrh2wRQRe9syuRfFao6izeV5M3Z+XnOJ8Uv4kIF1EN9m ahyZymaI2EQ3bshKXhxZDmzcf3rjXhekf5HHDS0DFJN+hFpVXaGzex11QBhLl6ZI +WfdQnGRNPT36SO2FXQ0f/7XEEGUopClIodIJSyWTvctABTU3vIt2OKMFpTrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+1vWGy3xB0bC5SQeWk5KhsF1HDYwHwYDVR0j BBgwFoAUfaMIpm73Bb7kLKBGMaDjkB2viNgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmI1ZmYzNy0zOTRhLTRlYmEtYTQ3MC0xMGFmMzdjZjc1ZGMvMC83REEzMDhBNjZF RjcwNUJFRTQyQ0EwNDYzMUEwRTM5MDFEQUY4OEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAxREFG ODhEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZiNWZmMzctMzk0YS00ZWJhLWE0 NzAtMTBhZjM3Y2Y3NWRjLzAvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUz OTAxREFGODhEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWzSEYQcwx+7c6GLPwQkRmk3hRQg0xX4TmF kVWA5/x4MZcrWyY6+LPl2/95Cn0ZnBb9jQ2OFSCleKXcEb/kPlVDeOZnsgygE/hT KNZF3pGRxiGP/lpfQZM3aoNHi9JTU4J2y642h95dncJF3fVRGQ6vnHL0n+fO/Kvp HT0JZnSuLKNVE0XsKCfZJMvA1gmmWFEThZIXV8CLkfvmb+koOh49yQ1St3ypN5pE q7wzpliz3JbaZM3htDRI2DAXfL/LlUt0DLhDnW2AuV+szPA/7+TfXocgzZ/z2nsF tiLqMXRRxS58hzKag3z1mMPdLlnSrGSqZJG2JVfUQJH2GnLqyl8= -----END CERTIFICATE-----Generated at Wed Jul 2 10:52:44 2025 by rpki-client