$ rpki-client -vvf repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft File: 7AD0DDB5789DE529C8697A033978C381FFE40D83.mft (raw, json) Hash identifier: 2s41VsYqAsPqmyUDM2ZP4xtcqG/jOPbY6rbvbS3OCEA= Subject key identifier: 9A:A2:F6:72:0D:69:13:4E:A4:53:B6:A1:5D:07:88:A5:67:82:C8:18 Authority key identifier: 7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 Certificate issuer: /CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Certificate serial: 427EF363D69ED29EE7F5F7961D68FF0E8D15B65B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft Manifest number: 01CE Signing time: Sun 11 May 2025 12:11:27 +0000 Manifest this update: Sun 11 May 2025 12:06:27 +0000 Manifest next update: Wed 14 May 2025 17:00:27 +0000 Files and hashes: 1: 7AD0DDB5789DE529C8697A033978C381FFE40D83.crl (hash: vYgq9Jg0vPgtLbQaEE1Zwmq3+xjQbEG01iXryQ3mp/I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 17:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:7e:f3:63:d6:9e:d2:9e:e7:f5:f7:96:1d:68:ff:0e:8d:15:b6:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Validity Not Before: May 11 12:06:27 2025 GMT Not After : May 14 17:00:27 2025 GMT Subject: CN=9AA2F6720D69134EA453B6A15D0788A56782C818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bb:28:8f:f9:e4:5b:82:8c:91:70:73:11:82: 54:0c:f2:af:34:e8:a5:00:80:2f:bd:9f:08:84:51: 21:66:df:38:8e:b2:5b:b7:ad:1d:75:b6:47:69:e1: e4:b8:5c:45:e4:a1:16:41:70:3f:c5:04:16:23:45: 0a:12:55:bd:6f:ed:f4:0e:2d:93:30:36:c8:83:64: 65:99:16:b0:0d:65:0c:af:15:77:e5:45:6f:d4:46: a6:1a:0b:c7:80:9d:7c:56:89:9c:a4:85:4e:17:84: 22:60:bd:37:39:47:bd:82:5a:48:a4:27:80:b1:ec: d5:d8:a2:12:30:f8:de:78:9d:7e:c9:3b:dc:d5:08: 2e:75:be:33:2b:86:a0:67:0f:6c:8f:12:7a:c9:ca: a5:e3:a2:4e:27:00:fc:d5:c4:a8:15:ce:26:56:31: 11:63:89:37:77:60:05:ef:1f:0d:4d:ae:e9:18:84: 31:6b:76:98:f3:91:8d:a9:a2:98:c1:4e:63:e2:95: 53:e7:02:1c:77:e8:48:9d:3d:c4:76:72:84:dd:c8: 84:3c:0a:57:26:16:70:c7:96:41:00:4d:47:34:3b: 6e:21:54:05:ad:86:d2:fe:50:68:7c:4f:d6:49:5e: 43:65:0d:10:24:0f:a2:2d:d8:13:95:b4:cd:bb:c5: 3a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A2:F6:72:0D:69:13:4E:A4:53:B6:A1:5D:07:88:A5:67:82:C8:18 X509v3 Authority Key Identifier: keyid:7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:24:21:a1:be:32:27:ff:e0:51:8b:a9:6f:b3:73:30:38:ff: ef:fd:83:44:d0:15:86:dc:65:82:2c:d2:48:84:54:8b:c7:59: ca:5b:6e:9f:00:49:a4:e2:ba:f4:0e:c9:e3:eb:22:c7:ca:d1: c9:54:7c:59:ab:63:16:8e:37:51:8a:f6:1b:df:19:ce:cb:0d: c1:02:11:da:2e:b8:eb:50:5a:3c:81:98:2b:27:3a:7c:cc:f4: e9:8b:c0:86:9e:a0:54:14:fb:c4:4a:a5:e8:22:60:2a:83:74: ef:75:a7:c4:44:0f:83:41:a8:dc:c7:85:cc:ce:a2:35:70:33: 57:22:d7:d2:71:aa:02:82:46:02:f7:20:e3:90:8f:5c:9c:f5: 55:de:d3:02:3e:d1:78:71:14:79:fa:d9:cf:8f:74:d9:1b:93: 9d:e3:4b:c7:b7:ee:30:f9:bd:e5:11:3b:0d:a4:94:77:d4:06: 2a:1b:0e:4f:0c:5b:80:5f:17:4c:80:85:97:1d:b0:db:f3:1d: 40:b1:dd:82:4e:d7:42:00:58:9a:98:9c:14:16:c9:e5:53:30: 28:fe:52:0f:b7:57:f9:01:79:e0:cb:8a:91:29:52:db:a4:cd: 37:96:81:ef:1b:23:d1:dc:3c:72:b3:a9:00:bc:da:cc:5e:38: d3:04:30:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQn7zY9ae0p7n9feWHWj/Do0VtlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFG RkU0MEQ4MzAeFw0yNTA1MTExMjA2MjdaFw0yNTA1MTQxNzAwMjdaMDMxMTAvBgNV BAMTKDlBQTJGNjcyMEQ2OTEzNEVBNDUzQjZBMTVEMDc4OEE1Njc4MkM4MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0uyiP+eRbgoyRcHMRglQM8q80 6KUAgC+9nwiEUSFm3ziOslu3rR11tkdp4eS4XEXkoRZBcD/FBBYjRQoSVb1v7fQO LZMwNsiDZGWZFrANZQyvFXflRW/URqYaC8eAnXxWiZykhU4XhCJgvTc5R72CWkik J4Cx7NXYohIw+N54nX7JO9zVCC51vjMrhqBnD2yPEnrJyqXjok4nAPzVxKgVziZW MRFjiTd3YAXvHw1NrukYhDFrdpjzkY2popjBTmPilVPnAhx36EidPcR2coTdyIQ8 ClcmFnDHlkEATUc0O24hVAWthtL+UGh8T9ZJXkNlDRAkD6It2BOVtM27xTrRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmqL2cg1pE06kU7ahXQeIpWeCyBgwHwYDVR0j BBgwFoAUetDdtXid5SnIaXoDOXjDgf/kDYMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjJiMTc4Ni0xODMzLTRkMGEtYTEzOS00NjQ0MzMzOTNkNzgvMC83QUQwRERCNTc4 OURFNTI5Qzg2OTdBMDMzOTc4QzM4MUZGRTQwRDgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFGRkU0 MEQ4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYyYjE3ODYtMTgzMy00ZDBhLWEx MzktNDY0NDMzMzkzZDc4LzAvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMz ODFGRkU0MEQ4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADokIaG+Mif/4FGLqW+zczA4/+/9g0TQFYbc ZYIs0kiEVIvHWcpbbp8ASaTiuvQOyePrIsfK0clUfFmrYxaON1GK9hvfGc7LDcEC EdouuOtQWjyBmCsnOnzM9OmLwIaeoFQU+8RKpegiYCqDdO91p8RED4NBqNzHhczO ojVwM1ci19JxqgKCRgL3IOOQj1yc9VXe0wI+0XhxFHn62c+PdNkbk53jS8e37jD5 veUROw2klHfUBiobDk8MW4BfF0yAhZcdsNvzHUCx3YJO10IAWJqYnBQWyeVTMCj+ Ug+3V/kBeeDLipEpUtukzTeWge8bI9HcPHKzqQC82sxeONMEMDc= -----END CERTIFICATE-----Generated at Sun May 11 22:14:49 2025 by rpki-client