$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft File: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft (raw, json) Hash identifier: YnT25eN1DXyN5bWPvw1gA/ttJkjVTLK2IR5BvP53fM0= Subject key identifier: 6E:7C:FA:46:1C:49:89:06:7C:D6:82:7D:4E:03:58:84:94:12:98:A8 Authority key identifier: 7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 Certificate issuer: /CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Certificate serial: 2006E9CE14AFF14675D71458D917F5DC914EC329 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft Manifest number: 92 Signing time: Mon 30 Jun 2025 12:41:59 +0000 Manifest this update: Mon 30 Jun 2025 12:36:59 +0000 Manifest next update: Thu 03 Jul 2025 18:06:59 +0000 Files and hashes: 1: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl (hash: Ks8IpHvakpCVtUFb/hPXd4Fpnb2ukgqt9LwHsrEVK2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 18:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:06:e9:ce:14:af:f1:46:75:d7:14:58:d9:17:f5:dc:91:4e:c3:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Validity Not Before: Jun 30 12:36:59 2025 GMT Not After : Jul 3 18:06:59 2025 GMT Subject: CN=6E7CFA461C4989067CD6827D4E035884941298A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f8:bf:69:05:58:c4:7f:a0:15:ec:9a:3e:fe: 24:0a:3f:df:03:4f:b0:65:c6:ab:c2:4d:e0:ba:aa: d3:10:f5:4b:35:5d:94:5d:84:26:5d:62:5c:0a:cc: 05:ff:91:ae:86:af:2b:96:b5:4b:08:ce:37:2f:55: 15:d0:95:58:6f:a3:b5:f9:b1:c2:2a:d9:9c:3a:09: 30:8e:4f:9e:0d:3e:eb:a8:b9:cf:73:d6:85:57:d8: 8d:70:18:56:6c:67:68:5d:60:75:7c:9d:ad:84:6c: 2c:35:1d:9b:b3:dc:1f:eb:dd:03:4b:76:ab:09:d8: 7b:a8:41:68:35:bf:b7:a7:f4:1f:6c:e4:de:01:1d: 94:6d:bd:2c:26:21:33:72:59:65:d5:31:5b:56:ff: 9e:14:80:a1:81:c6:f8:46:40:3b:ff:3a:cc:5e:58: ee:45:bc:31:c4:26:03:02:94:3e:ee:3c:a7:53:36: dc:21:a0:0e:c4:9e:42:0e:f5:e2:68:71:50:97:43: 83:db:59:23:2f:a0:8d:f4:ac:a3:f6:6e:53:6a:25: 37:14:b3:81:5e:50:8b:1d:32:33:47:3f:a8:13:09: 91:68:bc:85:f8:3a:9c:3f:15:1d:d9:aa:c9:64:15: cd:1d:12:ed:01:05:2c:45:21:42:26:cb:8e:79:77: e4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7C:FA:46:1C:49:89:06:7C:D6:82:7D:4E:03:58:84:94:12:98:A8 X509v3 Authority Key Identifier: keyid:7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:6c:9f:42:7e:27:b6:b9:7e:21:91:69:50:b3:35:3b:99:e4: a6:4d:7c:81:28:00:ef:0d:00:3f:e4:27:e4:ed:b6:a8:7c:ca: 21:88:be:a3:be:77:b7:83:50:dd:8b:76:1a:4c:4b:2a:a2:b7: de:75:03:64:ad:be:b5:d3:36:2a:ae:ad:fc:9c:d0:e3:1d:78: e2:d7:54:27:ff:53:f2:10:c1:36:b2:a4:90:74:20:ab:5b:41: 7d:e3:5d:6d:08:10:fe:0c:1d:2d:d8:e8:34:5d:15:7a:e7:72: 94:7b:42:42:ed:94:28:e4:7d:c1:e2:5c:20:de:c9:8f:6c:72: be:81:5f:0b:f7:8f:56:94:2f:86:06:ab:b7:a8:db:12:38:82: 99:4b:6d:4d:80:e7:2f:b6:08:b8:2d:7b:0d:80:4a:20:18:93: 76:31:6e:99:ed:46:e6:05:00:bd:e2:ca:0f:30:77:5e:31:09: 61:30:43:1f:36:14:52:26:a3:08:fb:f2:25:d6:0c:91:98:20: 8f:e7:0f:5b:5a:77:9b:b5:a7:61:37:b4:cb:24:25:db:d8:91: a5:e0:63:48:9d:af:5d:2b:c3:c9:49:cc:cd:1d:d1:38:b1:f7: 3b:41:de:d7:54:4e:78:da:ad:30:64:80:09:9f:26:5c:0c:ba: fb:67:51:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIAbpzhSv8UZ11xRY2Rf13JFOwykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2 QUM0RkMzMTAeFw0yNTA2MzAxMjM2NTlaFw0yNTA3MDMxODA2NTlaMDMxMTAvBgNV BAMTKDZFN0NGQTQ2MUM0OTg5MDY3Q0Q2ODI3RDRFMDM1ODg0OTQxMjk4QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb+L9pBVjEf6AV7Jo+/iQKP98D T7BlxqvCTeC6qtMQ9Us1XZRdhCZdYlwKzAX/ka6GryuWtUsIzjcvVRXQlVhvo7X5 scIq2Zw6CTCOT54NPuuouc9z1oVX2I1wGFZsZ2hdYHV8na2EbCw1HZuz3B/r3QNL dqsJ2HuoQWg1v7en9B9s5N4BHZRtvSwmITNyWWXVMVtW/54UgKGBxvhGQDv/Osxe WO5FvDHEJgMClD7uPKdTNtwhoA7EnkIO9eJocVCXQ4PbWSMvoI30rKP2blNqJTcU s4FeUIsdMjNHP6gTCZFovIX4Opw/FR3ZqslkFc0dEu0BBSxFIUImy455d+SFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbnz6RhxJiQZ81oJ9TgNYhJQSmKgwHwYDVR0j BBgwFoAUfVCLIlNQsNIE8ZQ/T1PU2GrE/DEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjNiMjMwYS1mZmYxLTQ3ZjAtYmY5MS03Y2ViOGQzNjA5NmUvMC83RDUwOEIyMjUz NTBCMEQyMDRGMTk0M0Y0RjUzRDREODZBQzRGQzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2QUM0 RkMzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0 RDg2QUM0RkMzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABsn0J+J7a5fiGRaVCzNTuZ5KZNfIEoAO8N AD/kJ+Tttqh8yiGIvqO+d7eDUN2LdhpMSyqit951A2StvrXTNiqurfyc0OMdeOLX VCf/U/IQwTaypJB0IKtbQX3jXW0IEP4MHS3Y6DRdFXrncpR7QkLtlCjkfcHiXCDe yY9scr6BXwv3j1aUL4YGq7eo2xI4gplLbU2A5y+2CLgtew2ASiAYk3YxbpntRuYF AL3iyg8wd14xCWEwQx82FFImowj78iXWDJGYII/nD1tad5u1p2E3tMskJdvYkaXg Y0idr10rw8lJzM0d0Tix9ztB3tdUTnjarTBkgAmfJlwMuvtnUeM= -----END CERTIFICATE-----Generated at Mon Jun 30 19:15:01 2025 by rpki-client