$ rpki-client -vvf repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft File: D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft (raw, json) Hash identifier: Mf5kT74/yclCt/QEzT5wlks57mu9o9Wpm829UR6WQwM= Subject key identifier: 4E:BF:07:7E:56:DB:0E:0F:6B:99:30:93:44:5D:23:00:C8:E6:52:35 Authority key identifier: D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 Certificate issuer: /CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Certificate serial: 3F47A61746600E31E4E48A39C512FBD7F0C0573A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft Manifest number: 01F5 Signing time: Fri 27 Jun 2025 16:20:43 +0000 Manifest this update: Fri 27 Jun 2025 16:15:43 +0000 Manifest next update: Mon 30 Jun 2025 19:01:43 +0000 Files and hashes: 1: D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl (hash: 1JnixdnKrQXdnJ1vrkEKn1isSrBEVNl7YsnQQM9jgU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 19:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:47:a6:17:46:60:0e:31:e4:e4:8a:39:c5:12:fb:d7:f0:c0:57:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Validity Not Before: Jun 27 16:15:43 2025 GMT Not After : Jun 30 19:01:43 2025 GMT Subject: CN=4EBF077E56DB0E0F6B993093445D2300C8E65235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:ea:45:fd:72:18:30:29:26:62:c4:45:84: 2b:37:23:db:04:91:b6:05:9c:81:48:af:77:ba:a7: 8d:60:86:d5:a8:28:a1:09:31:b8:51:ba:aa:f7:59: 3d:9f:8f:f4:c5:98:f3:5c:88:be:28:a0:ae:52:10: 29:5a:14:1a:13:b8:e6:bf:4f:54:57:0e:82:8a:02: 32:d5:e9:07:85:40:86:d1:7f:b4:c4:92:b5:8b:7d: 75:6b:50:81:10:e3:3b:b3:89:4d:3c:7a:c9:dd:02: 66:e4:7c:3c:2e:7d:bd:e4:59:ba:44:bd:d4:4a:5b: 35:db:77:54:f8:95:4f:2c:9d:5e:d4:6a:99:5c:f7: db:29:a0:c3:c1:82:96:d9:b8:0b:6d:c6:75:37:16: 1c:9f:42:e6:50:f6:0e:84:6a:bc:ad:d3:16:76:5d: e5:22:f2:ab:6d:ab:9a:54:c2:fb:e0:d6:93:f3:c7: 81:f0:04:2b:ff:f8:2a:94:7f:65:62:47:20:37:6a: c7:38:52:1a:ee:85:4d:8b:33:18:b8:ed:c3:f5:15: a8:b8:af:94:5b:35:12:1c:27:f9:b4:c3:b0:5f:76: 74:06:c4:14:4c:b9:c8:de:72:74:74:b7:83:7a:5d: 1e:e3:40:02:66:95:bf:97:3d:95:6b:f9:b0:97:b9: d6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BF:07:7E:56:DB:0E:0F:6B:99:30:93:44:5D:23:00:C8:E6:52:35 X509v3 Authority Key Identifier: keyid:D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:d6:e2:4e:d0:4c:fb:03:05:98:71:2c:8e:33:69:c4:41:b5: 7e:94:27:5c:7d:d2:dd:7a:b8:22:cc:ba:68:e2:95:cb:b7:0b: f3:0a:c6:33:13:78:35:af:57:f3:bf:f8:45:c1:04:ca:d1:09: b0:89:34:15:f8:1e:56:3c:de:c7:ed:1b:66:e7:ce:82:e2:e2: 5e:6f:5d:00:8b:ab:ab:d4:40:7b:3f:7b:b1:6c:2b:93:8b:4e: 01:a9:21:f9:45:6f:99:21:39:32:3d:ef:82:da:5e:ad:d0:c8: 67:a2:99:e2:90:cf:35:78:35:45:9d:41:5e:df:32:31:74:1f: 55:07:1c:6b:cd:92:0a:f8:cc:e2:10:30:a1:9b:c4:78:33:76: 83:6d:9d:60:53:f5:c7:18:50:0a:c1:d3:ba:3c:0e:e6:64:a3: 3f:58:c8:93:49:8d:f8:92:02:86:53:1a:4e:b6:51:83:1a:f9: 19:46:17:b1:06:45:94:1b:b5:9a:a4:f0:94:30:ac:1a:4d:83: 84:e2:3e:81:9e:39:d3:4d:93:37:87:a2:bc:cb:c9:58:93:d3: c7:40:63:c4:a2:72:6b:ab:3c:22:0c:ec:47:ed:fd:7b:35:77: 01:3b:bf:3a:4c:ac:7b:65:d7:8c:1e:35:9c:57:ea:ce:09:39: ca:16:0c:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP0emF0ZgDjHk5Io5xRL71/DAVzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4 NTgyQkFDNDAeFw0yNTA2MjcxNjE1NDNaFw0yNTA2MzAxOTAxNDNaMDMxMTAvBgNV BAMTKDRFQkYwNzdFNTZEQjBFMEY2Qjk5MzA5MzQ0NUQyMzAwQzhFNjUyMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDEupF/XIYMCkmYsRFhCs3I9sE kbYFnIFIr3e6p41ghtWoKKEJMbhRuqr3WT2fj/TFmPNciL4ooK5SEClaFBoTuOa/ T1RXDoKKAjLV6QeFQIbRf7TEkrWLfXVrUIEQ4zuziU08esndAmbkfDwufb3kWbpE vdRKWzXbd1T4lU8snV7Uaplc99spoMPBgpbZuAttxnU3FhyfQuZQ9g6Earyt0xZ2 XeUi8qttq5pUwvvg1pPzx4HwBCv/+CqUf2ViRyA3asc4UhruhU2LMxi47cP1Fai4 r5RbNRIcJ/m0w7BfdnQGxBRMucjecnR0t4N6XR7jQAJmlb+XPZVr+bCXudb1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTr8HflbbDg9rmTCTRF0jAMjmUjUwHwYDVR0j BBgwFoAU18dhIkJkkbgfhOWoJOSr64WCusQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDUwZGNjMy04NGRkLTQ1OTUtYmEyYy1iYzY5OTg5NjkyZjEvMC9EN0M3NjEyMjQy NjQ5MUI4MUY4NEU1QTgyNEU0QUJFQjg1ODJCQUM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4NTgy QkFDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFC RUI4NTgyQkFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTW4k7QTPsDBZhxLI4zacRBtX6UJ1x90t16 uCLMumjilcu3C/MKxjMTeDWvV/O/+EXBBMrRCbCJNBX4HlY83sftG2bnzoLi4l5v XQCLq6vUQHs/e7FsK5OLTgGpIflFb5khOTI974LaXq3QyGeimeKQzzV4NUWdQV7f MjF0H1UHHGvNkgr4zOIQMKGbxHgzdoNtnWBT9ccYUArB07o8DuZkoz9YyJNJjfiS AoZTGk62UYMa+RlGF7EGRZQbtZqk8JQwrBpNg4TiPoGeOdNNkzeHorzLyViT08dA Y8SicmurPCIM7Eft/Xs1dwE7vzpMrHtl14weNZxX6s4JOcoWDEw= -----END CERTIFICATE-----Generated at Sun Jun 29 18:54:30 2025 by rpki-client