$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft File: 7F6E3BF22135CE510C383A9D95C74D2175B70558.mft (raw, json) Hash identifier: tvVIYW4tIFytVfJ623JOgZBDwL1JIWDg9U9AtKb8rUg= Subject key identifier: 66:DE:38:2C:DD:3A:99:9A:86:E9:E1:5E:71:D8:5C:DD:BC:A1:B4:C3 Authority key identifier: 7F:6E:3B:F2:21:35:CE:51:0C:38:3A:9D:95:C7:4D:21:75:B7:05:58 Certificate issuer: /CN=7F6E3BF22135CE510C383A9D95C74D2175B70558 Certificate serial: 3D35FA5577FCAE862D5D0F99895103B689DEF348 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer Subject info access: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft Manifest number: 44 Signing time: Tue 13 May 2025 16:41:15 +0000 Manifest this update: Tue 13 May 2025 16:36:15 +0000 Manifest next update: Fri 16 May 2025 18:31:15 +0000 Files and hashes: 1: 7F6E3BF22135CE510C383A9D95C74D2175B70558.crl (hash: RfbP67+EWWWl+6loUpx+/2dto3nQ3j+v8cvSS9B2j4c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.crl rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 18:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:35:fa:55:77:fc:ae:86:2d:5d:0f:99:89:51:03:b6:89:de:f3:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F6E3BF22135CE510C383A9D95C74D2175B70558 Validity Not Before: May 13 16:36:15 2025 GMT Not After : May 16 18:31:15 2025 GMT Subject: CN=66DE382CDD3A999A86E9E15E71D85CDDBCA1B4C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b1:7e:ab:7b:1d:32:26:21:ad:88:1e:50:88: e3:16:4a:23:54:24:3b:5c:f7:fd:86:41:fa:e3:1c: 47:d1:d4:28:71:52:f3:87:04:31:15:14:83:b8:f5: 1e:10:ad:ff:95:59:5f:1a:ed:7b:b4:41:7b:26:fc: 7d:6b:bb:ac:e0:55:18:f4:74:5a:b0:6f:62:1f:7a: 6d:23:77:6d:1c:ed:16:91:cb:f0:ff:9d:ec:96:00: 3b:a8:47:6f:9f:b9:51:d6:40:02:9a:63:11:d1:5f: 07:b7:ee:56:e3:ad:b9:d8:86:8c:f3:c3:dc:09:04: 88:39:54:60:b7:49:ce:66:5c:39:cf:7c:3e:f4:a2: 12:ef:d4:92:33:31:35:e5:e5:8a:f5:7d:03:04:1a: 64:72:79:2c:70:d2:f8:d7:74:67:b0:a8:fc:7e:02: b0:0c:75:5d:b6:be:74:43:1b:d7:97:ae:79:f9:5d: 5f:6d:ab:f0:67:ff:12:20:ec:95:12:f0:66:96:82: 54:cf:d1:4c:f5:03:8c:0b:a1:9a:b3:8d:ff:24:18: 66:3c:3a:63:fe:fa:fe:0e:b4:dc:95:53:92:24:1d: f1:5d:4b:ac:87:a9:9a:e7:7d:e5:41:4a:c1:06:2c: 24:9f:2d:1a:f7:57:18:42:cc:78:a7:c4:94:06:99: bf:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DE:38:2C:DD:3A:99:9A:86:E9:E1:5E:71:D8:5C:DD:BC:A1:B4:C3 X509v3 Authority Key Identifier: keyid:7F:6E:3B:F2:21:35:CE:51:0C:38:3A:9D:95:C7:4D:21:75:B7:05:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:d6:12:fe:00:ae:4f:97:b8:09:6e:68:9a:4f:b7:8d:3d:55: 91:78:59:62:96:3e:06:64:48:ec:b9:03:9e:d9:bf:2a:12:be: b7:89:db:20:36:f3:d5:01:4a:e3:60:98:6d:29:6d:ee:ff:9e: c1:81:59:46:8c:42:88:a4:43:cb:ae:6d:c3:18:29:10:7f:39: dd:b6:57:80:20:b3:6a:3b:26:b7:c1:6e:ad:1c:3b:ea:4b:45: 57:41:19:bd:48:d9:05:58:89:80:1a:04:82:86:67:4c:ad:1b: 7d:52:39:6f:01:02:61:f6:f6:79:2f:ed:cd:7c:41:6c:d0:8c: 79:0b:94:08:2f:04:d5:d6:3a:d2:4a:a1:6d:af:c6:52:e1:97: 17:c9:82:e6:4a:5d:ad:aa:a6:0d:da:60:21:4f:c0:50:25:73: 76:0b:13:a5:12:29:f3:2c:34:18:f0:41:36:04:a1:98:f2:59: d1:ea:10:e6:4f:e9:b3:11:c4:37:30:96:cd:f9:b9:8f:e6:13: a6:bd:e4:29:b4:4c:d3:d5:95:62:10:82:35:f0:30:f7:45:4b: f8:44:2d:e1:4f:5b:21:09:9b:7d:5d:03:6f:9d:2e:e4:2a:50: 95:bb:83:40:64:d8:95:f1:86:b0:7a:8f:0a:49:b7:e7:8b:97: d9:88:cd:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPTX6VXf8roYtXQ+ZiVEDtone80gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y2RTNCRjIyMTM1Q0U1MTBDMzgzQTlEOTVDNzREMjE3 NUI3MDU1ODAeFw0yNTA1MTMxNjM2MTVaFw0yNTA1MTYxODMxMTVaMDMxMTAvBgNV BAMTKDY2REUzODJDREQzQTk5OUE4NkU5RTE1RTcxRDg1Q0REQkNBMUI0QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtsX6rex0yJiGtiB5QiOMWSiNU JDtc9/2GQfrjHEfR1ChxUvOHBDEVFIO49R4Qrf+VWV8a7Xu0QXsm/H1ru6zgVRj0 dFqwb2Ifem0jd20c7RaRy/D/neyWADuoR2+fuVHWQAKaYxHRXwe37lbjrbnYhozz w9wJBIg5VGC3Sc5mXDnPfD70ohLv1JIzMTXl5Yr1fQMEGmRyeSxw0vjXdGewqPx+ ArAMdV22vnRDG9eXrnn5XV9tq/Bn/xIg7JUS8GaWglTP0Uz1A4wLoZqzjf8kGGY8 OmP++v4OtNyVU5IkHfFdS6yHqZrnfeVBSsEGLCSfLRr3VxhCzHinxJQGmb+HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZt44LN06mZqG6eFecdhc3byhtMMwHwYDVR0j BBgwFoAUf2478iE1zlEMODqdlcdNIXW3BVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjlmOGFhOC04OTcxLTRlNTEtOGI1MS04MDNiNDliMzJhNGYvMS83RjZFM0JGMjIx MzVDRTUxMEMzODNBOUQ5NUM3NEQyMTc1QjcwNTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Y2RTNCRjIyMTM1Q0U1MTBDMzgzQTlEOTVDNzREMjE3NUI3 MDU1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY5ZjhhYTgtODk3MS00ZTUxLThi NTEtODAzYjQ5YjMyYTRmLzEvN0Y2RTNCRjIyMTM1Q0U1MTBDMzgzQTlEOTVDNzRE MjE3NUI3MDU1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXWEv4Ark+XuAluaJpPt409VZF4WWKWPgZk SOy5A57ZvyoSvreJ2yA289UBSuNgmG0pbe7/nsGBWUaMQoikQ8uubcMYKRB/Od22 V4Ags2o7JrfBbq0cO+pLRVdBGb1I2QVYiYAaBIKGZ0ytG31SOW8BAmH29nkv7c18 QWzQjHkLlAgvBNXWOtJKoW2vxlLhlxfJguZKXa2qpg3aYCFPwFAlc3YLE6USKfMs NBjwQTYEoZjyWdHqEOZP6bMRxDcwls35uY/mE6a95Cm0TNPVlWIQgjXwMPdFS/hE LeFPWyEJm31dA2+dLuQqUJW7g0Bk2JXxhrB6jwpJt+eLl9mIzVs= -----END CERTIFICATE-----Generated at Thu May 15 10:28:07 2025 by rpki-client