$ rpki-client -vvf repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft File: 7AD0DDB5789DE529C8697A033978C381FFE40D83.mft (raw, json) Hash identifier: jP1PJhAmqxC4VIgnlpr/uTqQH65nNM5/eBx0srdFJkM= Subject key identifier: F6:EF:83:E4:A1:A7:74:14:3A:81:41:B3:CD:79:FF:FD:FC:E3:18:50 Authority key identifier: 7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 Certificate issuer: /CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Certificate serial: 32D663CD07207B31D78F554FFC2DA463E5942360 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft Manifest number: 01E5 Signing time: Wed 02 Jul 2025 17:31:27 +0000 Manifest this update: Wed 02 Jul 2025 17:26:27 +0000 Manifest next update: Sat 05 Jul 2025 18:20:27 +0000 Files and hashes: 1: 7AD0DDB5789DE529C8697A033978C381FFE40D83.crl (hash: R4WVd3hzazPAH7OjAfjX+2PFMiWWxFO/+IREPWjfE14=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 18:20:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d6:63:cd:07:20:7b:31:d7:8f:55:4f:fc:2d:a4:63:e5:94:23:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Validity Not Before: Jul 2 17:26:27 2025 GMT Not After : Jul 5 18:20:27 2025 GMT Subject: CN=F6EF83E4A1A774143A8141B3CD79FFFDFCE31850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b5:62:9a:35:bb:0f:81:cb:1e:8b:41:dc:c2: e7:6a:b4:b1:87:c7:f3:79:dd:bd:2e:85:bc:6c:63: 69:6b:7d:31:39:4b:c6:c4:e5:0f:5c:a1:34:bb:9e: 33:7b:80:8e:c6:6f:6c:18:e4:3a:a2:40:85:ce:55: 25:da:d2:6c:0a:06:a9:b3:38:1b:ba:bb:a3:73:9c: 49:5e:a5:75:7f:f9:20:d4:89:b8:2d:1b:8d:8c:af: 12:8b:cd:d6:c5:0a:e7:5d:e1:5e:71:19:b6:ad:dc: d0:a7:0f:80:e3:b3:b3:ad:ac:c1:0e:0a:e5:15:3c: b6:3b:20:00:45:09:91:ac:c5:2f:b0:c0:f6:d3:7d: a7:b7:58:8f:ee:bd:47:5c:c4:8e:1d:08:2a:21:40: 37:f8:81:fb:cf:89:50:34:0d:6c:c1:1f:93:f4:6e: a9:2c:48:5b:28:f7:ef:6c:e0:79:1a:c0:0e:9d:9a: c5:d1:bc:cc:2b:2f:7b:ea:a5:be:13:48:99:ba:98: ea:02:f6:5e:9b:2b:b2:8a:84:16:93:26:69:e1:7b: ab:e9:30:d2:10:83:fc:48:26:1c:53:35:d8:b3:63: 08:20:f3:f5:b3:28:a6:05:11:6e:d8:f1:04:33:73: ed:1d:57:0c:81:5b:e9:65:f1:7c:04:0a:ce:0a:97: 82:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EF:83:E4:A1:A7:74:14:3A:81:41:B3:CD:79:FF:FD:FC:E3:18:50 X509v3 Authority Key Identifier: keyid:7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:cc:21:12:f0:dc:49:36:10:2a:f9:77:76:9a:54:99:b0:c6: 56:bd:36:a5:1b:a1:1e:04:96:11:2f:b1:b9:18:35:57:2e:77: a9:62:84:a7:40:a8:61:62:01:0a:0d:2c:8c:96:af:a9:1e:03: 12:2e:3a:76:8f:1e:49:e8:fe:19:9b:66:a9:8e:0a:39:76:fe: 6a:8e:03:5b:05:7d:30:e5:28:f1:4a:c8:55:1c:dc:8e:a2:00: b6:a0:8e:da:56:03:b9:e0:32:20:81:68:c6:f8:12:a7:30:a3: cb:4f:ae:79:dc:01:d5:d5:e9:da:53:5d:29:e9:f5:35:b0:da: 07:f6:db:2a:2f:3e:a0:90:c5:9d:da:2a:4f:60:1d:34:71:e9: 27:31:89:f5:8f:d0:c4:79:2f:d1:54:51:2e:2f:00:4b:ea:1a: 73:e9:9d:f9:3e:c8:c3:51:61:73:70:43:2d:23:c3:6d:be:07: 35:65:a3:6e:2d:f7:fd:96:48:55:94:5c:26:c0:c4:bd:99:28: b6:d7:88:84:89:3d:11:b9:6a:64:ee:01:f6:74:2a:57:16:03: d3:a9:7e:95:0a:8f:8d:cc:7b:b3:a4:1e:6c:9d:8c:cb:11:d7: c5:57:c3:ce:95:d3:fd:f5:ae:34:2c:d5:cb:5f:b7:bd:bd:7c: 16:68:3f:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMtZjzQcgezHXj1VP/C2kY+WUI2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFG RkU0MEQ4MzAeFw0yNTA3MDIxNzI2MjdaFw0yNTA3MDUxODIwMjdaMDMxMTAvBgNV BAMTKEY2RUY4M0U0QTFBNzc0MTQzQTgxNDFCM0NENzlGRkZERkNFMzE4NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgtWKaNbsPgcsei0HcwudqtLGH x/N53b0uhbxsY2lrfTE5S8bE5Q9coTS7njN7gI7Gb2wY5DqiQIXOVSXa0mwKBqmz OBu6u6NznElepXV/+SDUibgtG42MrxKLzdbFCudd4V5xGbat3NCnD4Djs7OtrMEO CuUVPLY7IABFCZGsxS+wwPbTfae3WI/uvUdcxI4dCCohQDf4gfvPiVA0DWzBH5P0 bqksSFso9+9s4HkawA6dmsXRvMwrL3vqpb4TSJm6mOoC9l6bK7KKhBaTJmnhe6vp MNIQg/xIJhxTNdizYwgg8/WzKKYFEW7Y8QQzc+0dVwyBW+ll8XwECs4Kl4IzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9u+D5KGndBQ6gUGzzXn//fzjGFAwHwYDVR0j BBgwFoAUetDdtXid5SnIaXoDOXjDgf/kDYMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjJiMTc4Ni0xODMzLTRkMGEtYTEzOS00NjQ0MzMzOTNkNzgvMC83QUQwRERCNTc4 OURFNTI5Qzg2OTdBMDMzOTc4QzM4MUZGRTQwRDgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFGRkU0 MEQ4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYyYjE3ODYtMTgzMy00ZDBhLWEx MzktNDY0NDMzMzkzZDc4LzAvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMz ODFGRkU0MEQ4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3MIRLw3Ek2ECr5d3aaVJmwxla9NqUboR4E lhEvsbkYNVcud6lihKdAqGFiAQoNLIyWr6keAxIuOnaPHkno/hmbZqmOCjl2/mqO A1sFfTDlKPFKyFUc3I6iALagjtpWA7ngMiCBaMb4Eqcwo8tPrnncAdXV6dpTXSnp 9TWw2gf22yovPqCQxZ3aKk9gHTRx6ScxifWP0MR5L9FUUS4vAEvqGnPpnfk+yMNR YXNwQy0jw22+BzVlo24t9/2WSFWUXCbAxL2ZKLbXiISJPRG5amTuAfZ0KlcWA9Op fpUKj43Me7OkHmydjMsR18VXw86V0/31rjQs1ctft729fBZoP1A= -----END CERTIFICATE-----Generated at Fri Jul 4 02:20:43 2025 by rpki-client