$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft File: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft (raw, json) Hash identifier: uApt7X0GcgJQnt7VpqIBZXz5Bbva9XMqAuk4ILo2WK0= Subject key identifier: A2:6D:4F:67:1D:9F:B0:AB:1D:C8:5E:3B:0D:AC:D9:F1:55:32:78:DE Authority key identifier: 7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 Certificate issuer: /CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Certificate serial: 74C6F1553EED54B528C9BB218F68FF4CD3296D70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft Manifest number: 7B Signing time: Fri 09 May 2025 08:41:59 +0000 Manifest this update: Fri 09 May 2025 08:36:59 +0000 Manifest next update: Mon 12 May 2025 09:45:59 +0000 Files and hashes: 1: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl (hash: mi3tnMcpHlauZ7eICIaD+exmVlfUT4A3kfCip2hUOHo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 09:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c6:f1:55:3e:ed:54:b5:28:c9:bb:21:8f:68:ff:4c:d3:29:6d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Validity Not Before: May 9 08:36:59 2025 GMT Not After : May 12 09:45:59 2025 GMT Subject: CN=A26D4F671D9FB0AB1DC85E3B0DACD9F1553278DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0b:a7:dd:30:71:f7:1d:06:fe:15:87:92:05: 9e:c1:c4:10:a4:9a:47:ed:92:b7:f0:31:17:7d:e2: 60:ba:13:d3:a9:49:b0:c2:a2:e5:64:29:ea:c4:59: 53:10:93:b3:15:ab:82:18:ff:87:59:bb:7c:01:c5: 80:fd:60:9f:be:9d:c9:3e:f3:99:34:6a:11:81:ed: 89:f3:35:b1:75:b2:5e:30:9b:80:2c:ef:15:96:44: b9:4b:fc:81:97:fb:96:96:dd:bf:5e:2f:ad:f1:ec: 4e:d4:17:8b:66:d5:d6:f0:94:16:67:7b:e3:f6:19: b0:8c:61:54:26:20:7e:29:9a:3e:91:ee:7b:6f:29: c6:c8:d1:68:91:ad:64:c1:e3:01:7c:08:ff:68:d4: e4:37:0c:3b:d1:98:37:32:ce:b3:0d:33:22:d4:df: a5:58:58:95:38:8b:6e:73:13:c8:09:da:97:58:34: a7:0a:08:8b:10:3e:6e:8b:56:dc:7b:6c:58:c7:47: 58:97:8b:4b:8f:74:a4:65:85:c8:5d:84:da:3e:cb: 67:01:35:f6:95:fc:ae:e1:07:b2:b9:b2:57:f9:a7: ab:86:38:84:e8:d0:df:12:9e:ad:a4:55:01:a6:4c: 38:22:88:ad:65:12:9f:bd:69:53:43:87:3b:eb:8b: 96:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6D:4F:67:1D:9F:B0:AB:1D:C8:5E:3B:0D:AC:D9:F1:55:32:78:DE X509v3 Authority Key Identifier: keyid:7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:8d:cb:4b:46:9b:a9:17:2d:3f:de:94:62:65:30:89:7b:84: 2e:c3:b1:ef:de:9d:f4:db:11:b3:d9:2e:5b:23:77:3a:27:87: a6:34:fe:69:ad:ce:af:57:f8:07:05:b2:c1:05:43:a6:35:07: 26:67:80:0d:c0:c9:97:58:08:e3:89:17:63:4f:a7:64:f8:68: eb:82:d1:15:31:3a:95:f8:14:bc:8a:c2:18:aa:31:1d:66:3d: 8e:26:25:4f:c4:a8:7e:98:e5:11:39:ca:e4:02:14:38:c0:b7: df:ee:eb:89:42:4e:d8:cc:44:d7:18:e2:f0:0a:47:e1:8f:a2: b9:10:0f:8f:90:84:fe:3a:cc:ec:49:fd:94:d1:05:8d:b8:45: 83:6f:d2:1e:f4:27:f0:3d:01:11:9c:03:48:04:c0:23:29:5b: 65:db:62:f8:5a:63:2d:40:a6:39:ea:1c:60:b4:6e:86:b1:80: ed:2c:28:69:21:f1:86:fe:8d:c2:4f:8d:0f:90:cd:27:4e:d2: fa:6b:f6:67:49:38:60:1f:20:5e:2e:67:a9:cd:11:b4:96:a9: 86:33:2b:a2:cb:5c:73:c7:e2:9b:94:c8:d2:b1:90:18:b9:60: 92:55:c3:26:62:16:63:3e:65:c5:a9:62:6e:50:47:31:36:10: 24:22:a1:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdMbxVT7tVLUoybshj2j/TNMpbXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2 QUM0RkMzMTAeFw0yNTA1MDkwODM2NTlaFw0yNTA1MTIwOTQ1NTlaMDMxMTAvBgNV BAMTKEEyNkQ0RjY3MUQ5RkIwQUIxREM4NUUzQjBEQUNEOUYxNTUzMjc4REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3C6fdMHH3HQb+FYeSBZ7BxBCk mkftkrfwMRd94mC6E9OpSbDCouVkKerEWVMQk7MVq4IY/4dZu3wBxYD9YJ++nck+ 85k0ahGB7YnzNbF1sl4wm4As7xWWRLlL/IGX+5aW3b9eL63x7E7UF4tm1dbwlBZn e+P2GbCMYVQmIH4pmj6R7ntvKcbI0WiRrWTB4wF8CP9o1OQ3DDvRmDcyzrMNMyLU 36VYWJU4i25zE8gJ2pdYNKcKCIsQPm6LVtx7bFjHR1iXi0uPdKRlhchdhNo+y2cB NfaV/K7hB7K5slf5p6uGOITo0N8Snq2kVQGmTDgiiK1lEp+9aVNDhzvri5blAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUom1PZx2fsKsdyF47DazZ8VUyeN4wHwYDVR0j BBgwFoAUfVCLIlNQsNIE8ZQ/T1PU2GrE/DEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjNiMjMwYS1mZmYxLTQ3ZjAtYmY5MS03Y2ViOGQzNjA5NmUvMC83RDUwOEIyMjUz NTBCMEQyMDRGMTk0M0Y0RjUzRDREODZBQzRGQzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2QUM0 RkMzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0 RDg2QUM0RkMzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2Ny0tGm6kXLT/elGJlMIl7hC7Dse/enfTb EbPZLlsjdzonh6Y0/mmtzq9X+AcFssEFQ6Y1ByZngA3AyZdYCOOJF2NPp2T4aOuC 0RUxOpX4FLyKwhiqMR1mPY4mJU/EqH6Y5RE5yuQCFDjAt9/u64lCTtjMRNcY4vAK R+GPorkQD4+QhP46zOxJ/ZTRBY24RYNv0h70J/A9ARGcA0gEwCMpW2XbYvhaYy1A pjnqHGC0boaxgO0sKGkh8Yb+jcJPjQ+QzSdO0vpr9mdJOGAfIF4uZ6nNEbSWqYYz K6LLXHPH4puUyNKxkBi5YJJVwyZiFmM+ZcWpYm5QRzE2ECQioes= -----END CERTIFICATE-----Generated at Sat May 10 13:02:34 2025 by rpki-client