$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft File: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft (raw, json) Hash identifier: 9lS+ushNf0uhX4yY9w2CL0uIeYFhMlbYUGHuqi9y/Ag= Subject key identifier: 3F:9B:5F:0E:EB:E0:FE:C8:14:C4:67:DE:49:BC:BB:7C:47:51:0D:17 Authority key identifier: 10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 Certificate issuer: /CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Certificate serial: 0EE00E4A64566D82C89FF59A0EF28FFAAB8C9427 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft Manifest number: 01E0 Signing time: Thu 03 Jul 2025 10:21:54 +0000 Manifest this update: Thu 03 Jul 2025 10:16:54 +0000 Manifest next update: Sun 06 Jul 2025 15:37:54 +0000 Files and hashes: 1: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl (hash: 6HLO0Cu/CBz3I4EJzaKXSUopz39E75VapKfnZCnqQe8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 15:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e0:0e:4a:64:56:6d:82:c8:9f:f5:9a:0e:f2:8f:fa:ab:8c:94:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Validity Not Before: Jul 3 10:16:54 2025 GMT Not After : Jul 6 15:37:54 2025 GMT Subject: CN=3F9B5F0EEBE0FEC814C467DE49BCBB7C47510D17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ac:e9:48:29:85:0b:d2:ee:53:3f:f6:c7:6f: ca:2c:33:21:0f:75:76:44:b4:ab:b0:82:b3:c1:69: b1:ce:ca:93:61:0d:c5:1d:2f:6c:45:17:73:01:eb: 6b:fb:f6:56:0c:06:53:12:b9:f0:bc:ab:05:23:c5: d9:ed:cb:b7:56:46:eb:2c:b9:1f:c5:bb:ce:16:96: 31:6b:77:fa:ae:de:94:a1:05:b5:4c:94:c5:07:16: 31:41:67:dd:27:8d:95:c3:81:c9:00:3b:ec:5f:29: 99:85:a7:66:32:5a:67:90:98:86:bb:4a:cd:04:75: ef:18:e8:22:02:33:e7:3e:89:ca:64:ae:d7:0f:63: 27:0a:93:de:ce:cb:14:79:bf:ba:1a:03:7c:bb:2b: 59:de:62:3b:57:7d:6e:bc:74:f0:fb:62:39:01:01: ce:26:85:02:20:aa:57:47:1b:3f:29:62:ff:e5:73: 2e:83:15:70:cd:ad:4e:bb:24:99:89:da:d5:60:00: 30:22:71:a8:3c:a6:90:19:d6:b6:b4:cd:ad:46:01: 36:e5:20:e5:7a:87:2c:58:0f:0a:06:5d:0b:79:7d: e1:1f:32:a5:dd:2e:78:43:12:d9:2d:b7:48:b3:bf: 21:01:c3:d2:e0:04:b5:f2:8b:c8:d6:71:46:50:17: b3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9B:5F:0E:EB:E0:FE:C8:14:C4:67:DE:49:BC:BB:7C:47:51:0D:17 X509v3 Authority Key Identifier: keyid:10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:63:2b:34:87:f4:36:55:59:a7:05:ec:9a:20:b3:c4:cf:50: 0e:59:44:c0:f7:a5:29:bd:50:4f:b4:63:d1:0e:6a:bc:05:87: 8b:4c:e0:8f:83:1b:2a:64:11:c7:8d:87:53:f1:f2:63:ea:4e: 79:be:27:99:48:27:8d:0d:67:f8:f9:69:81:00:12:95:27:84: 1e:c1:fc:ce:2f:75:49:e8:29:84:dc:e5:74:49:79:2f:78:bb: ae:82:ee:6c:d8:ce:47:95:6b:78:7c:57:18:c8:24:d4:4c:d8: 50:89:63:96:ec:48:5f:9b:11:2d:a7:e7:c9:7c:ee:f7:2c:43: 06:cb:bc:0d:d6:f1:41:f1:42:be:08:5f:76:3f:b5:37:6a:e5: 55:8d:1c:83:ad:3f:eb:38:be:42:22:5c:1a:65:42:fb:6c:ff: 0a:94:52:d6:85:a2:76:57:03:82:fc:c6:09:61:8a:a4:65:c6: 6c:41:5e:fa:1d:55:c0:4b:17:12:81:6f:b7:4a:87:a2:61:d0: a8:dd:86:bd:a9:ad:98:c4:dd:19:c2:b6:f5:9d:f3:d6:0e:0e: 19:f1:e0:d6:d0:38:f4:f2:ce:2b:74:3c:d7:69:3d:95:1f:2f: 7e:1a:73:d7:10:2d:72:14:4d:52:2e:d8:48:b3:e7:4f:88:73: 8a:8d:ae:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDuAOSmRWbYLIn/WaDvKP+quMlCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdC NzU3QkQyMzAeFw0yNTA3MDMxMDE2NTRaFw0yNTA3MDYxNTM3NTRaMDMxMTAvBgNV BAMTKDNGOUI1RjBFRUJFMEZFQzgxNEM0NjdERTQ5QkNCQjdDNDc1MTBEMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjrOlIKYUL0u5TP/bHb8osMyEP dXZEtKuwgrPBabHOypNhDcUdL2xFF3MB62v79lYMBlMSufC8qwUjxdnty7dWRuss uR/Fu84WljFrd/qu3pShBbVMlMUHFjFBZ90njZXDgckAO+xfKZmFp2YyWmeQmIa7 Ss0Ede8Y6CICM+c+icpkrtcPYycKk97OyxR5v7oaA3y7K1neYjtXfW68dPD7YjkB Ac4mhQIgqldHGz8pYv/lcy6DFXDNrU67JJmJ2tVgADAicag8ppAZ1ra0za1GATbl IOV6hyxYDwoGXQt5feEfMqXdLnhDEtktt0izvyEBw9LgBLXyi8jWcUZQF7PlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP5tfDuvg/sgUxGfeSby7fEdRDRcwHwYDVR0j BBgwFoAUEAfRXLvqq94Zmu+8Kj/jF7dXvSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWExNmVjNS01ODdlLTQ3YTQtOGFmZS1kMWJlY2Y1NmI2MTQvMC8xMDA3RDE1Q0JC RUFBQkRFMTk5QUVGQkMyQTNGRTMxN0I3NTdCRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdCNzU3 QkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUz MTdCNzU3QkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHljKzSH9DZVWacF7Jogs8TPUA5ZRMD3pSm9 UE+0Y9EOarwFh4tM4I+DGypkEceNh1Px8mPqTnm+J5lIJ40NZ/j5aYEAEpUnhB7B /M4vdUnoKYTc5XRJeS94u66C7mzYzkeVa3h8VxjIJNRM2FCJY5bsSF+bES2n58l8 7vcsQwbLvA3W8UHxQr4IX3Y/tTdq5VWNHIOtP+s4vkIiXBplQvts/wqUUtaFonZX A4L8xglhiqRlxmxBXvodVcBLFxKBb7dKh6Jh0Kjdhr2prZjE3RnCtvWd89YODhnx 4NbQOPTyzit0PNdpPZUfL34ac9cQLXIUTVIu2Eiz50+Ic4qNrtM= -----END CERTIFICATE-----Generated at Fri Jul 4 13:33:16 2025 by rpki-client