$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft File: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft (raw, json) Hash identifier: fkqHG91O6Iq7KgUcrRtNekLGo6FS0ZkTkdl6fgvJJJw= Subject key identifier: 08:96:D5:A6:ED:DE:42:4D:20:29:BD:88:5D:8C:30:FD:DD:9D:A0:C5 Authority key identifier: 7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 Certificate issuer: /CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Certificate serial: 79934993C7CED3D3C1106A054599342467758D67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft Manifest number: AA Signing time: Fri 22 Aug 2025 08:32:02 +0000 Manifest this update: Fri 22 Aug 2025 08:27:02 +0000 Manifest next update: Mon 25 Aug 2025 17:45:02 +0000 Files and hashes: 1: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl (hash: RFqYrDP1C8PnEvFV2Q19fFhejNYpzPKT7VolntlclBY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 17:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:93:49:93:c7:ce:d3:d3:c1:10:6a:05:45:99:34:24:67:75:8d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Validity Not Before: Aug 22 08:27:02 2025 GMT Not After : Aug 25 17:45:02 2025 GMT Subject: CN=0896D5A6EDDE424D2029BD885D8C30FDDD9DA0C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ec:20:88:ef:c6:d7:46:8a:1d:fa:a7:ad:e3: 1e:5e:88:d8:2e:27:6e:e8:a0:29:f1:ca:b8:03:60: 57:eb:b0:9d:b5:11:06:3e:ad:92:1b:09:11:c0:0b: 46:bf:59:05:a4:4a:7b:d8:1d:ef:83:59:21:e7:e7: 97:50:3c:1d:52:4f:bc:8b:4c:39:ca:0d:e2:af:0f: 6b:81:8a:6c:96:6a:23:44:3d:44:d6:b7:54:fe:88: 36:d5:6d:32:b5:3a:07:de:2a:bb:14:08:67:79:af: 27:da:81:f1:e0:43:90:3c:89:2c:9a:cc:03:b9:fa: 1c:0e:2a:61:d1:33:7d:66:40:1b:05:aa:b6:4f:fd: 8d:9d:c4:2d:0e:31:4f:6e:01:f5:db:ce:47:ec:ed: 31:67:ea:cb:67:05:14:32:a9:74:a1:bf:68:40:6e: dc:9a:44:75:16:9f:76:6b:30:71:01:ca:1a:90:a2: 36:fb:b7:07:e7:91:1d:89:23:d5:53:03:26:e5:49: 9c:85:94:91:e0:5c:12:ba:75:d9:72:5b:98:1a:a0: f3:dd:4b:66:a3:ee:7c:23:90:b3:a3:6e:29:f8:69: 07:7b:8a:fe:56:22:9b:03:78:c7:b0:4c:f2:6a:00: 07:4e:b9:00:53:cc:9f:90:82:31:f0:66:9c:88:b5: b6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:96:D5:A6:ED:DE:42:4D:20:29:BD:88:5D:8C:30:FD:DD:9D:A0:C5 X509v3 Authority Key Identifier: keyid:7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:96:48:82:b6:78:17:24:c7:31:2c:17:07:02:7d:8e:7f:ea: e5:56:e0:65:1d:e1:b3:d0:f0:ad:aa:9e:93:76:60:6b:54:1d: 8d:17:da:fa:fc:91:b3:ac:03:cb:cb:76:0d:58:b9:58:3d:34: b7:02:b3:a2:f6:64:0e:a0:66:36:db:25:50:67:da:e2:5a:60: 17:71:ac:fd:b8:cf:f3:dc:ec:50:15:4d:5b:be:51:f6:8d:e4: 26:70:61:a5:3a:b9:77:b0:2b:2f:e2:cd:71:51:91:d1:b7:ff: 1c:43:fd:a8:96:07:39:7f:ff:57:5e:6c:60:4f:80:90:8e:aa: e1:b8:db:de:db:d3:07:91:98:21:7f:59:82:74:e9:15:a4:90: 41:54:3c:d2:0d:b1:50:6a:59:a2:6a:1f:21:f1:4d:52:49:0a: 55:a9:d5:d9:59:88:7e:3e:6c:11:a9:40:3f:28:af:af:9a:ac: 46:b4:34:a4:c2:3c:63:1a:9b:4b:a9:d4:99:34:e9:73:02:fc: 46:cb:2a:84:f3:8d:2b:dc:69:d7:03:d2:59:04:0d:d1:dc:21: 38:ea:3d:05:2d:aa:d2:f4:fb:cf:40:29:a3:5d:77:89:d5:fc: db:84:47:39:74:aa:f7:7a:58:bd:4c:56:5e:73:af:01:95:28: 88:ac:96:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeZNJk8fO09PBEGoFRZk0JGd1jWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2 QUM0RkMzMTAeFw0yNTA4MjIwODI3MDJaFw0yNTA4MjUxNzQ1MDJaMDMxMTAvBgNV BAMTKDA4OTZENUE2RURERTQyNEQyMDI5QkQ4ODVEOEMzMEZEREQ5REEwQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ7CCI78bXRood+qet4x5eiNgu J27ooCnxyrgDYFfrsJ21EQY+rZIbCRHAC0a/WQWkSnvYHe+DWSHn55dQPB1ST7yL TDnKDeKvD2uBimyWaiNEPUTWt1T+iDbVbTK1OgfeKrsUCGd5ryfagfHgQ5A8iSya zAO5+hwOKmHRM31mQBsFqrZP/Y2dxC0OMU9uAfXbzkfs7TFn6stnBRQyqXShv2hA btyaRHUWn3ZrMHEByhqQojb7twfnkR2JI9VTAyblSZyFlJHgXBK6ddlyW5gaoPPd S2aj7nwjkLOjbin4aQd7iv5WIpsDeMewTPJqAAdOuQBTzJ+QgjHwZpyItbaZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCJbVpu3eQk0gKb2IXYww/d2doMUwHwYDVR0j BBgwFoAUfVCLIlNQsNIE8ZQ/T1PU2GrE/DEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjNiMjMwYS1mZmYxLTQ3ZjAtYmY5MS03Y2ViOGQzNjA5NmUvMC83RDUwOEIyMjUz NTBCMEQyMDRGMTk0M0Y0RjUzRDREODZBQzRGQzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2QUM0 RkMzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0 RDg2QUM0RkMzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6WSIK2eBckxzEsFwcCfY5/6uVW4GUd4bPQ 8K2qnpN2YGtUHY0X2vr8kbOsA8vLdg1YuVg9NLcCs6L2ZA6gZjbbJVBn2uJaYBdx rP24z/Pc7FAVTVu+UfaN5CZwYaU6uXewKy/izXFRkdG3/xxD/aiWBzl//1debGBP gJCOquG4297b0weRmCF/WYJ06RWkkEFUPNINsVBqWaJqHyHxTVJJClWp1dlZiH4+ bBGpQD8or6+arEa0NKTCPGMam0up1Jk06XMC/EbLKoTzjSvcadcD0lkEDdHcITjq PQUtqtL0+89AKaNdd4nV/NuERzl0qvd6WL1MVl5zrwGVKIisllU= -----END CERTIFICATE-----Generated at Sat Aug 23 19:53:06 2025 by rpki-client