$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft File: 7F6E3BF22135CE510C383A9D95C74D2175B70558.mft (raw, json) Hash identifier: 69CV09zTC4zu+NbCD3PuJEczqaxZDvF3OFlsDIeo3fw= Subject key identifier: C2:FF:D8:7B:60:71:73:24:C5:CE:5A:56:AA:2B:01:B5:1F:5E:89:DC Authority key identifier: 7F:6E:3B:F2:21:35:CE:51:0C:38:3A:9D:95:C7:4D:21:75:B7:05:58 Certificate issuer: /CN=7F6E3BF22135CE510C383A9D95C74D2175B70558 Certificate serial: 5449FF2A2031A6A35EF8EBA01C81C9CCE0C79F37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer Subject info access: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft Manifest number: 5A Signing time: Tue 01 Jul 2025 17:21:14 +0000 Manifest this update: Tue 01 Jul 2025 17:16:14 +0000 Manifest next update: Fri 04 Jul 2025 18:10:14 +0000 Files and hashes: 1: 7F6E3BF22135CE510C383A9D95C74D2175B70558.crl (hash: jbI/1AcwlPcqqdyhfhjz2IW3oGZp7f8+bvnd8xoZSeA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.crl rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 18:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:49:ff:2a:20:31:a6:a3:5e:f8:eb:a0:1c:81:c9:cc:e0:c7:9f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F6E3BF22135CE510C383A9D95C74D2175B70558 Validity Not Before: Jul 1 17:16:14 2025 GMT Not After : Jul 4 18:10:14 2025 GMT Subject: CN=C2FFD87B60717324C5CE5A56AA2B01B51F5E89DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d0:1e:cd:35:f1:00:20:07:ad:f1:4e:23:d9: 11:15:39:d7:d2:dd:82:30:5b:7c:40:42:b5:46:08: 7f:ad:a9:a3:f2:92:07:ad:05:84:be:52:aa:fd:48: e9:fc:a3:54:36:ac:73:b9:f3:f9:99:9c:02:1f:e6: 70:ad:73:e0:96:96:75:3b:99:f2:69:01:a2:4a:42: cd:57:e8:94:3e:bb:f2:00:db:99:8e:00:fb:7e:e6: eb:2e:54:91:2f:7b:dd:09:0b:57:85:cd:72:40:c8: 04:3e:b0:ec:c1:97:af:2b:8f:ce:69:28:68:c5:5c: b6:d3:bb:4b:a0:f5:78:8c:94:1a:e5:45:03:1f:c9: 7b:84:a0:1f:8f:52:89:a4:52:83:37:9d:b0:11:48: 36:6d:df:bc:a3:ac:0f:dc:b8:c1:3b:d2:c9:1e:e3: b5:0d:3d:6e:f5:ea:7f:d3:aa:b7:7a:38:f3:b5:cd: e3:7b:30:f5:1c:fa:30:4f:d4:ff:86:6c:51:95:8f: 60:05:76:f9:e4:1a:23:7b:bf:40:2b:d9:c9:e4:70: 8f:23:8b:25:3d:29:2b:a6:24:92:1d:86:0e:6c:97: a5:28:7b:ed:c5:c1:51:3f:56:68:f9:a6:02:58:cd: 94:97:21:e0:b2:6e:4c:5a:b6:f6:cc:f7:45:0d:fb: d7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FF:D8:7B:60:71:73:24:C5:CE:5A:56:AA:2B:01:B5:1F:5E:89:DC X509v3 Authority Key Identifier: keyid:7F:6E:3B:F2:21:35:CE:51:0C:38:3A:9D:95:C7:4D:21:75:B7:05:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:d5:47:f7:bf:09:f3:c9:a3:3c:7b:d9:b1:b6:e8:45:31:46: 1c:67:d3:5b:2c:ff:45:35:ee:15:d4:8d:19:db:b1:ad:f7:a3: 44:0e:88:c4:02:3e:67:27:90:79:ed:38:e0:5d:db:5e:52:3c: 6a:de:30:bb:e7:d7:37:fd:8c:12:b5:3f:91:eb:20:36:eb:be: 7f:53:43:09:98:5c:cd:e7:56:37:1b:9a:c9:df:70:19:8d:b7: 33:67:56:a1:a4:9a:c6:a0:37:8d:4b:24:22:89:20:6c:e5:6f: 10:05:ac:a0:f3:bb:99:22:a8:e2:d4:50:58:c4:9f:62:f5:c8: f8:21:d7:c8:5b:6c:e8:8e:2a:54:f8:23:7f:30:40:c8:66:d1: 4c:ea:a8:d4:bb:af:cf:75:74:75:82:49:a7:88:47:c4:58:5f: 6d:d7:af:69:e6:40:59:66:90:95:22:4b:45:46:6e:05:7f:86: 75:43:e9:0b:2d:da:eb:af:50:a0:64:e5:ae:12:d9:4b:07:bd: 1b:29:93:22:26:58:49:67:c6:37:ec:f9:34:c6:30:c7:15:b9: e4:ba:c1:42:9f:5f:62:0a:7b:6a:1a:45:0e:2d:13:9b:ac:55: f5:ed:5d:6f:21:8b:86:43:33:fb:97:40:ff:6a:3f:be:c2:a4: 9e:3f:a3:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVEn/KiAxpqNe+OugHIHJzODHnzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y2RTNCRjIyMTM1Q0U1MTBDMzgzQTlEOTVDNzREMjE3 NUI3MDU1ODAeFw0yNTA3MDExNzE2MTRaFw0yNTA3MDQxODEwMTRaMDMxMTAvBgNV BAMTKEMyRkZEODdCNjA3MTczMjRDNUNFNUE1NkFBMkIwMUI1MUY1RTg5REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC90B7NNfEAIAet8U4j2REVOdfS 3YIwW3xAQrVGCH+tqaPykgetBYS+Uqr9SOn8o1Q2rHO58/mZnAIf5nCtc+CWlnU7 mfJpAaJKQs1X6JQ+u/IA25mOAPt+5usuVJEve90JC1eFzXJAyAQ+sOzBl68rj85p KGjFXLbTu0ug9XiMlBrlRQMfyXuEoB+PUomkUoM3nbARSDZt37yjrA/cuME70ske 47UNPW716n/Tqrd6OPO1zeN7MPUc+jBP1P+GbFGVj2AFdvnkGiN7v0Ar2cnkcI8j iyU9KSumJJIdhg5sl6Uoe+3FwVE/Vmj5pgJYzZSXIeCybkxatvbM90UN+9cpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwv/Ye2BxcyTFzlpWqisBtR9eidwwHwYDVR0j BBgwFoAUf2478iE1zlEMODqdlcdNIXW3BVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjlmOGFhOC04OTcxLTRlNTEtOGI1MS04MDNiNDliMzJhNGYvMS83RjZFM0JGMjIx MzVDRTUxMEMzODNBOUQ5NUM3NEQyMTc1QjcwNTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Y2RTNCRjIyMTM1Q0U1MTBDMzgzQTlEOTVDNzREMjE3NUI3 MDU1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY5ZjhhYTgtODk3MS00ZTUxLThi NTEtODAzYjQ5YjMyYTRmLzEvN0Y2RTNCRjIyMTM1Q0U1MTBDMzgzQTlEOTVDNzRE MjE3NUI3MDU1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPVR/e/CfPJozx72bG26EUxRhxn01ss/0U1 7hXUjRnbsa33o0QOiMQCPmcnkHntOOBd215SPGreMLvn1zf9jBK1P5HrIDbrvn9T QwmYXM3nVjcbmsnfcBmNtzNnVqGkmsagN41LJCKJIGzlbxAFrKDzu5kiqOLUUFjE n2L1yPgh18hbbOiOKlT4I38wQMhm0UzqqNS7r891dHWCSaeIR8RYX23Xr2nmQFlm kJUiS0VGbgV/hnVD6Qst2uuvUKBk5a4S2UsHvRspkyImWElnxjfs+TTGMMcVueS6 wUKfX2IKe2oaRQ4tE5usVfXtXW8hi4ZDM/uXQP9qP77CpJ4/o5o= -----END CERTIFICATE-----Generated at Thu Jul 3 09:58:46 2025 by rpki-client