$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft File: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft (raw, json) Hash identifier: Wa6wM6gghyQqPGSSAiTcEHzEQK8MLbKCVE31pndzw+U= Subject key identifier: 50:7B:84:BC:7B:F6:94:E0:A0:FD:31:64:38:FB:3F:7C:7D:70:DF:47 Authority key identifier: 10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 Certificate issuer: /CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Certificate serial: 63BE91F489ABE3CB9D83FF1B920B2567AC1EC27B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft Manifest number: 01C8 Signing time: Sat 10 May 2025 05:11:52 +0000 Manifest this update: Sat 10 May 2025 05:06:52 +0000 Manifest next update: Tue 13 May 2025 11:19:52 +0000 Files and hashes: 1: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl (hash: o5Z20xX2RkBJfbPDQzZBPnqoSZpFs9TevSsr/VovV8o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 08:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:be:91:f4:89:ab:e3:cb:9d:83:ff:1b:92:0b:25:67:ac:1e:c2:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Validity Not Before: May 10 05:06:52 2025 GMT Not After : May 13 11:19:52 2025 GMT Subject: CN=507B84BC7BF694E0A0FD316438FB3F7C7D70DF47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:89:04:f1:e1:31:e5:6e:77:c3:f3:df:eb:25: 45:b5:e6:0a:59:ef:d7:90:0a:a3:9b:f4:88:b5:c9: f8:38:a2:97:4a:ef:d2:c1:3b:29:5c:f7:d4:0a:7f: 19:ea:a5:cd:a0:8e:08:35:20:b9:0e:04:b7:99:14: 4b:1a:97:26:0d:ef:a0:2b:81:ef:65:99:ca:56:3d: d7:80:2b:6a:d0:47:29:ec:a6:70:8c:c1:0e:b2:f0: f2:1d:e5:75:5d:fd:cf:49:eb:64:78:8a:66:64:36: 9b:86:57:1a:4c:8c:fe:e3:19:a2:e8:d5:02:f0:8e: d5:fe:ae:b2:4d:c8:a0:6e:93:10:cd:0f:71:8c:7b: d5:be:ee:b5:61:93:53:4b:5b:8d:2e:4c:dc:03:f5: 60:58:24:df:bb:3b:83:42:9d:e6:6f:7d:30:c3:8d: bf:e9:d0:28:08:b7:e7:e1:cc:ef:25:dd:73:3a:a0: c5:e1:eb:96:36:ad:1e:cb:7c:69:ea:13:6e:8e:94: 75:2c:36:37:ca:09:04:73:73:e5:6d:7f:c0:2c:8e: b3:d6:dd:06:01:10:4f:d4:31:ab:72:d3:f5:57:e6: aa:aa:27:67:08:5f:d9:28:83:93:bd:3d:8c:c5:71: 0f:54:42:c1:53:ba:a6:c2:5f:94:6f:46:9a:28:dc: 74:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7B:84:BC:7B:F6:94:E0:A0:FD:31:64:38:FB:3F:7C:7D:70:DF:47 X509v3 Authority Key Identifier: keyid:10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:75:3a:8e:d7:0d:24:a8:00:4e:f8:d1:30:9f:f2:24:99:ff: 7f:c3:29:ab:5a:9b:33:d4:97:fd:7c:bb:fc:f4:f2:69:b2:4b: fa:a5:bf:42:3c:37:5d:cf:cc:5c:24:24:f8:00:e3:de:e9:e6: 8b:7b:d9:d5:37:09:35:09:e2:66:f8:09:19:63:a7:d3:a1:48: 03:91:5d:e2:dd:15:59:4e:fe:bd:89:48:09:59:a9:20:05:1c: 81:75:12:f5:db:4c:19:cc:03:7b:4c:d8:ba:5d:6b:d4:a7:d5: 09:eb:2f:58:5f:03:7c:7b:b0:19:0d:e0:e9:a4:e7:60:c3:81: b0:d7:df:4d:15:8f:1e:aa:d0:4f:49:b3:31:c8:78:55:6f:a5: 63:2e:1e:4a:18:be:ca:89:27:50:67:fc:c4:1f:8f:4e:0b:d3: 9f:da:86:71:22:6e:d9:72:5e:b8:fd:92:ff:92:94:b8:96:e9: 8f:d3:08:e1:fe:1f:3b:24:91:36:ad:00:54:ec:17:08:92:bc: c5:02:a5:29:39:f8:00:fc:e8:de:b7:62:e6:3b:e3:6a:91:7b: 00:20:a8:5c:42:82:2f:d3:16:29:16:d2:f0:6a:ee:43:8e:4f: e9:5c:f8:03:f7:85:e9:0c:3c:7b:f1:a5:07:04:3f:57:76:b4: 5f:f9:82:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY76R9Imr48udg/8bkgslZ6wewnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdC NzU3QkQyMzAeFw0yNTA1MTAwNTA2NTJaFw0yNTA1MTMxMTE5NTJaMDMxMTAvBgNV BAMTKDUwN0I4NEJDN0JGNjk0RTBBMEZEMzE2NDM4RkIzRjdDN0Q3MERGNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4iQTx4THlbnfD89/rJUW15gpZ 79eQCqOb9Ii1yfg4opdK79LBOylc99QKfxnqpc2gjgg1ILkOBLeZFEsalyYN76Ar ge9lmcpWPdeAK2rQRynspnCMwQ6y8PId5XVd/c9J62R4imZkNpuGVxpMjP7jGaLo 1QLwjtX+rrJNyKBukxDND3GMe9W+7rVhk1NLW40uTNwD9WBYJN+7O4NCneZvfTDD jb/p0CgIt+fhzO8l3XM6oMXh65Y2rR7LfGnqE26OlHUsNjfKCQRzc+Vtf8AsjrPW 3QYBEE/UMaty0/VX5qqqJ2cIX9kog5O9PYzFcQ9UQsFTuqbCX5RvRpoo3HS/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUHuEvHv2lOCg/TFkOPs/fH1w30cwHwYDVR0j BBgwFoAUEAfRXLvqq94Zmu+8Kj/jF7dXvSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWExNmVjNS01ODdlLTQ3YTQtOGFmZS1kMWJlY2Y1NmI2MTQvMC8xMDA3RDE1Q0JC RUFBQkRFMTk5QUVGQkMyQTNGRTMxN0I3NTdCRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdCNzU3 QkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUz MTdCNzU3QkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIB1Oo7XDSSoAE740TCf8iSZ/3/DKatamzPU l/18u/z08mmyS/qlv0I8N13PzFwkJPgA497p5ot72dU3CTUJ4mb4CRljp9OhSAOR XeLdFVlO/r2JSAlZqSAFHIF1EvXbTBnMA3tM2Lpda9Sn1QnrL1hfA3x7sBkN4Omk 52DDgbDX300Vjx6q0E9JszHIeFVvpWMuHkoYvsqJJ1Bn/MQfj04L05/ahnEibtly Xrj9kv+SlLiW6Y/TCOH+HzskkTatAFTsFwiSvMUCpSk5+AD86N63YuY742qRewAg qFxCgi/TFikW0vBq7kOOT+lc+AP3hekMPHvxpQcEP1d2tF/5ggI= -----END CERTIFICATE-----Generated at Sat May 10 09:56:09 2025 by rpki-client