$ rpki-client -vvf repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft File: 7A8364745196ADEDA32E89F410EFDC19F658815A.mft (raw, json) Hash identifier: irSDctpFCi2wXcZCg8iTA/OouDVOYBqzypAbMYIVNLI= Subject key identifier: 93:97:CB:D9:4E:C6:0D:97:C8:F6:A5:15:D5:B9:91:06:7B:08:A1:AC Authority key identifier: 7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A Certificate issuer: /CN=7A8364745196ADEDA32E89F410EFDC19F658815A Certificate serial: 409F92CE3AD728F6EA0FDDBE9EFE803BD1698C20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft Manifest number: 98 Signing time: Mon 30 Jun 2025 15:10:00 +0000 Manifest this update: Mon 30 Jun 2025 15:05:00 +0000 Manifest next update: Fri 04 Jul 2025 00:25:00 +0000 Files and hashes: 1: 7A8364745196ADEDA32E89F410EFDC19F658815A.crl (hash: dF05ezhTZQFBSnU5oCarckOUMZzIwz5044NEvJ/iRoA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 00:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:9f:92:ce:3a:d7:28:f6:ea:0f:dd:be:9e:fe:80:3b:d1:69:8c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A8364745196ADEDA32E89F410EFDC19F658815A Validity Not Before: Jun 30 15:05:00 2025 GMT Not After : Jul 4 00:25:00 2025 GMT Subject: CN=9397CBD94EC60D97C8F6A515D5B991067B08A1AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d2:72:be:ea:88:4b:72:bd:09:cf:47:69:32: 34:a5:75:01:bf:4f:b4:ac:08:71:38:c0:bf:d9:d5: 77:d6:f0:55:2e:e4:0b:10:35:3f:29:2c:8b:27:9b: 85:50:c4:90:4c:42:10:50:b3:6a:7f:5e:76:0d:bc: d9:8a:39:15:5c:42:64:54:35:f7:41:22:97:7f:16: bc:a8:53:bc:f5:bd:28:7d:9a:16:95:ea:89:77:af: d4:56:5c:b7:a7:f0:e5:78:77:57:0d:3d:b8:8f:a2: bb:50:e0:d1:b7:b4:c5:e7:fc:f3:9d:fb:3e:7d:a8: 88:28:a3:24:fa:04:2c:9e:ca:3c:75:0c:58:1d:00: 7b:22:aa:b8:4c:a7:3a:e7:32:67:92:92:8d:30:25: f6:ec:ac:d6:56:ed:76:05:23:fc:a9:16:54:13:17: 51:a6:18:81:15:ea:06:6e:ea:e9:cc:1b:00:87:c8: 84:53:9e:ce:a1:da:24:d8:b8:7d:81:ab:e8:eb:c8: 14:5b:ad:13:73:53:4a:d2:fc:fb:57:64:62:58:25: 9e:ed:2c:0f:34:ef:1e:96:24:b7:ab:50:71:f7:e5: ff:7e:17:ce:72:3f:18:58:bf:0a:f1:77:b2:c3:73: 1d:98:c6:9a:16:cc:0a:84:77:d4:27:64:40:ed:64: ec:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:97:CB:D9:4E:C6:0D:97:C8:F6:A5:15:D5:B9:91:06:7B:08:A1:AC X509v3 Authority Key Identifier: keyid:7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ed:cc:32:a0:1b:1c:6f:db:2f:44:35:25:21:06:7d:3d:d4: 87:b0:8f:d5:95:b8:ec:62:0c:22:01:bc:24:b2:d6:82:d8:f6: 28:4c:1b:1f:ee:3b:6c:01:a5:26:eb:55:f8:1f:6c:a4:ae:dc: 12:a5:fc:54:ab:56:0c:04:85:0e:6b:36:28:5b:b5:04:c3:9c: 42:89:8e:10:a0:c7:06:33:07:86:e3:42:88:ad:74:ff:93:50: 53:0c:cd:08:81:1a:c3:ee:c1:44:97:f6:07:fe:77:af:ce:5d: 9d:e1:5a:eb:dc:a8:66:3a:cd:cc:43:73:74:53:d8:2e:a6:64: a1:b9:59:00:0a:ba:a6:92:7f:5a:6e:4e:f7:a6:02:b8:43:fc: 46:71:1b:3e:e0:ea:38:8c:11:91:33:8b:15:43:13:38:2f:f3: 37:f2:e2:60:29:4f:e6:ea:64:df:cd:06:2d:30:30:88:cc:6e: a5:36:95:5c:04:1d:77:38:21:96:61:3d:42:74:06:88:ee:c7: 70:61:8a:5c:ea:34:86:0e:0d:5f:10:fc:b2:7a:7a:31:d1:08: e2:e4:4c:ab:c7:c7:ff:fe:05:d9:2c:9e:27:2f:74:79:f1:13: d5:65:42:e2:02:17:cb:09:42:a5:f9:43:44:38:bc:ef:9e:e9: df:47:3b:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQJ+SzjrXKPbqD92+nv6AO9FpjCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlG NjU4ODE1QTAeFw0yNTA2MzAxNTA1MDBaFw0yNTA3MDQwMDI1MDBaMDMxMTAvBgNV BAMTKDkzOTdDQkQ5NEVDNjBEOTdDOEY2QTUxNUQ1Qjk5MTA2N0IwOEExQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM0nK+6ohLcr0Jz0dpMjSldQG/ T7SsCHE4wL/Z1XfW8FUu5AsQNT8pLIsnm4VQxJBMQhBQs2p/XnYNvNmKORVcQmRU NfdBIpd/FryoU7z1vSh9mhaV6ol3r9RWXLen8OV4d1cNPbiPortQ4NG3tMXn/POd +z59qIgooyT6BCyeyjx1DFgdAHsiqrhMpzrnMmeSko0wJfbsrNZW7XYFI/ypFlQT F1GmGIEV6gZu6unMGwCHyIRTns6h2iTYuH2Bq+jryBRbrRNzU0rS/PtXZGJYJZ7t LA807x6WJLerUHH35f9+F85yPxhYvwrxd7LDcx2YxpoWzAqEd9QnZEDtZOxDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk5fL2U7GDZfI9qUV1bmRBnsIoawwHwYDVR0j BBgwFoAUeoNkdFGWre2jLon0EO/cGfZYgVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5YjRkMS1kNmI1LTQ4MjAtYTQ5Ny02OTNiOTNkZGY1OGUvMC83QTgzNjQ3NDUx OTZBREVEQTMyRTg5RjQxMEVGREMxOUY2NTg4MTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlGNjU4 ODE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRD MTlGNjU4ODE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/tzDKgGxxv2y9ENSUhBn091Iewj9WVuOxi DCIBvCSy1oLY9ihMGx/uO2wBpSbrVfgfbKSu3BKl/FSrVgwEhQ5rNihbtQTDnEKJ jhCgxwYzB4bjQoitdP+TUFMMzQiBGsPuwUSX9gf+d6/OXZ3hWuvcqGY6zcxDc3RT 2C6mZKG5WQAKuqaSf1puTvemArhD/EZxGz7g6jiMEZEzixVDEzgv8zfy4mApT+bq ZN/NBi0wMIjMbqU2lVwEHXc4IZZhPUJ0Bojux3BhilzqNIYODV8Q/LJ6ejHRCOLk TKvHx//+BdksnicvdHnxE9VlQuICF8sJQqX5Q0Q4vO+e6d9HO7k= -----END CERTIFICATE-----Generated at Tue Jul 1 15:42:40 2025 by rpki-client