$ rpki-client -vvf repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft File: 7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft (raw, json) Hash identifier: dxgTOqGy27RknMFZylD3c3VlUxz+uYFqZJQV+ohl+b8= Subject key identifier: 4A:C7:89:71:4E:EC:C7:AB:62:14:28:D4:09:1A:8D:DC:46:C5:69:53 Authority key identifier: 7E:EB:EF:D1:AE:72:51:99:E4:B0:23:CD:A2:2A:30:05:EF:BF:4D:E8 Certificate issuer: /CN=7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8 Certificate serial: 7DD3655A62E907A23CA9986FD991BB22504B4EED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft Manifest number: 1E Signing time: Mon 30 Jun 2025 07:51:50 +0000 Manifest this update: Mon 30 Jun 2025 07:46:50 +0000 Manifest next update: Thu 03 Jul 2025 16:23:50 +0000 Files and hashes: 1: 7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl (hash: gG1Abo51IQeZh1E1WHanreJuUm7SrYk8g9fmGqIJUx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 16:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:d3:65:5a:62:e9:07:a2:3c:a9:98:6f:d9:91:bb:22:50:4b:4e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8 Validity Not Before: Jun 30 07:46:50 2025 GMT Not After : Jul 3 16:23:50 2025 GMT Subject: CN=4AC789714EECC7AB621428D4091A8DDC46C56953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:36:c5:a7:bb:61:5b:4d:2e:d3:c0:4a:3e:67: 06:b4:eb:90:68:a5:ec:3f:48:c2:48:e9:6a:54:0b: eb:0b:fd:77:44:c1:65:dc:d0:1c:1b:41:ca:52:2f: fb:e5:89:0b:1f:63:55:a3:63:af:2b:64:4e:83:47: 6e:fa:5b:81:34:41:e6:2d:7c:cc:c9:a5:c1:40:44: 00:1e:82:36:25:e2:12:f8:14:15:62:2e:4e:ab:dc: 50:b1:de:f0:30:93:68:e9:47:c5:8b:18:ae:5f:ab: 65:ec:7a:a1:3f:29:bd:38:66:4c:ab:98:ff:3b:d2: 95:18:03:a9:5f:1c:16:bd:13:06:16:9f:4d:9e:8e: ba:44:a5:0c:97:0e:07:a9:22:26:97:0d:23:ee:cb: 34:3c:74:b7:4a:7a:19:9e:3a:76:ea:82:d5:9d:61: 7c:5a:1b:42:1b:89:65:6a:f3:43:eb:e8:e8:9e:2e: a6:5d:a8:ec:1e:5d:4f:db:79:e5:ae:6c:fa:08:cf: 1f:3c:e4:71:a7:43:fd:bc:3e:98:62:e7:5d:2d:e5: 99:1f:47:27:a8:d8:ab:46:74:10:c5:52:c0:4b:a3: 0a:e4:97:04:5d:cb:b8:b6:ea:d1:29:f2:53:00:64: 5b:62:08:3b:1c:26:d2:5f:33:ff:05:1c:e5:cd:af: 5d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C7:89:71:4E:EC:C7:AB:62:14:28:D4:09:1A:8D:DC:46:C5:69:53 X509v3 Authority Key Identifier: keyid:7E:EB:EF:D1:AE:72:51:99:E4:B0:23:CD:A2:2A:30:05:EF:BF:4D:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e9:98:ab:af:96:3b:4b:4f:53:7e:91:bc:08:5b:d5:a8:be:e2: 07:6d:e6:b1:1c:f3:66:ba:4a:44:18:48:be:c1:e5:1b:24:9f: 03:02:6b:e3:45:74:56:be:ef:3b:84:d0:a3:0c:23:18:30:38: 32:ed:a4:ae:99:4f:a4:d5:3c:7f:b5:49:51:9c:54:ef:b0:05: 68:30:6c:47:c0:1f:cb:fb:79:76:dc:45:a3:20:f3:0c:da:6e: 5f:7c:c3:61:36:c7:80:47:98:ef:dd:40:88:ce:da:a5:50:23: 56:3c:07:41:76:02:05:cf:ef:56:d5:65:4c:f4:02:68:ab:e6: 17:63:92:cd:2e:8e:b5:ff:a2:f4:a4:a1:92:92:32:3f:ca:4d: d0:9b:43:be:1a:08:03:b4:ce:31:f4:d6:cd:64:0a:e1:78:fd: df:77:4b:17:f9:9a:be:b7:55:9f:5e:41:5a:3b:2a:6d:f2:66: 31:8e:0a:df:a8:ec:45:13:23:ef:69:92:50:97:01:08:dc:85: 56:13:34:e5:ce:99:71:e1:fc:2c:cb:65:b0:35:e9:c2:c7:84: 98:ec:e0:ce:ae:57:ef:8c:b5:c1:09:54:4c:38:0e:bd:ac:53: c0:cc:56:5b:b6:ee:7e:8c:ad:a8:33:44:a6:da:48:54:1e:71: c4:8c:22:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfdNlWmLpB6I8qZhv2ZG7IlBLTu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMwMDVF RkJGNERFODAeFw0yNTA2MzAwNzQ2NTBaFw0yNTA3MDMxNjIzNTBaMDMxMTAvBgNV BAMTKDRBQzc4OTcxNEVFQ0M3QUI2MjE0MjhENDA5MUE4RERDNDZDNTY5NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJNsWnu2FbTS7TwEo+Zwa065Bo pew/SMJI6WpUC+sL/XdEwWXc0BwbQcpSL/vliQsfY1WjY68rZE6DR276W4E0QeYt fMzJpcFARAAegjYl4hL4FBViLk6r3FCx3vAwk2jpR8WLGK5fq2XseqE/Kb04Zkyr mP870pUYA6lfHBa9EwYWn02ejrpEpQyXDgepIiaXDSPuyzQ8dLdKehmeOnbqgtWd YXxaG0IbiWVq80Pr6OieLqZdqOweXU/beeWubPoIzx885HGnQ/28Pphi510t5Zkf Ryeo2KtGdBDFUsBLowrklwRdy7i26tEp8lMAZFtiCDscJtJfM/8FHOXNr13PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSseJcU7sx6tiFCjUCRqN3EbFaVMwHwYDVR0j BBgwFoAUfuvv0a5yUZnksCPNoiowBe+/TegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTIwZTgwMC0yNWJiLTRjNzgtYThiMy1mMGViMjVjMmU4MmEvMC83RUVCRUZEMUFF NzI1MTk5RTRCMDIzQ0RBMjJBMzAwNUVGQkY0REU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMwMDVFRkJG NERFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWUyMGU4MDAtMjViYi00Yzc4LWE4 YjMtZjBlYjI1YzJlODJhLzAvN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMw MDVFRkJGNERFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOmYq6+WO0tPU36RvAhb1ai+4gdt5rEc82a6 SkQYSL7B5RsknwMCa+NFdFa+7zuE0KMMIxgwODLtpK6ZT6TVPH+1SVGcVO+wBWgw bEfAH8v7eXbcRaMg8wzabl98w2E2x4BHmO/dQIjO2qVQI1Y8B0F2AgXP71bVZUz0 Amir5hdjks0ujrX/ovSkoZKSMj/KTdCbQ74aCAO0zjH01s1kCuF4/d93Sxf5mr63 VZ9eQVo7Km3yZjGOCt+o7EUTI+9pklCXAQjchVYTNOXOmXHh/CzLZbA16cLHhJjs 4M6uV++MtcEJVEw4Dr2sU8DMVlu27n6MragzRKbaSFQeccSMIsA= -----END CERTIFICATE-----Generated at Tue Jul 1 05:02:00 2025 by rpki-client