$ rpki-client -vvf repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft File: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft (raw, json) Hash identifier: L6Y0oxFG5dC5slwxn9Pt173I8JyoTIl7sdg90A+cSIk= Subject key identifier: DD:9E:70:72:72:0A:71:DD:0B:D6:5B:B4:C2:3A:AD:59:9F:3E:B9:53 Authority key identifier: D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 Certificate issuer: /CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Certificate serial: 510D0AAADCD70102CECF3DF2EAC27E6186A4C3CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft Manifest number: E1 Signing time: Sun 29 Jun 2025 08:41:18 +0000 Manifest this update: Sun 29 Jun 2025 08:36:18 +0000 Manifest next update: Wed 02 Jul 2025 20:04:18 +0000 Files and hashes: 1: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl (hash: MRYUartQtAZ+mQvMFZcxYK5lSVVJeh/3DmcbEX+3a3I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 20:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:0d:0a:aa:dc:d7:01:02:ce:cf:3d:f2:ea:c2:7e:61:86:a4:c3:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Validity Not Before: Jun 29 08:36:18 2025 GMT Not After : Jul 2 20:04:18 2025 GMT Subject: CN=DD9E7072720A71DD0BD65BB4C23AAD599F3EB953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:1d:e7:6e:f2:71:3e:4e:77:7f:c7:a1:79:98: 72:26:df:ba:f4:36:9b:82:70:8e:99:f3:40:ab:1a: 86:59:07:86:31:de:c6:7d:39:ff:97:e7:e9:70:7d: 57:a8:52:bc:2e:a7:47:b5:e9:b5:dd:02:6a:41:18: 0b:13:b4:92:fc:70:18:af:bb:82:22:86:76:3d:41: 88:7f:86:2c:76:7b:aa:08:28:37:57:00:26:61:ea: 9f:6c:0a:db:fb:13:85:21:3e:a7:15:37:2c:dd:ae: 9f:69:de:52:12:32:d4:03:5b:6a:37:81:3a:1a:95: fa:81:b8:c9:96:ab:a2:ba:47:e5:7d:42:e4:ee:cf: 91:2c:00:cd:79:46:2b:55:7d:84:72:d6:a7:3a:9c: 1e:2a:53:26:69:49:95:6d:fd:bb:86:92:4c:2b:01: 5c:3d:6a:e5:da:e5:83:02:15:cc:3e:6a:42:be:15: ac:28:4a:e8:9e:aa:bb:11:c1:64:0e:a9:38:7c:d2: 5d:7d:ab:bb:78:5d:93:67:0c:cf:2f:ec:15:6d:ac: ef:ca:cc:db:0e:63:b8:e2:25:8b:62:73:f9:5f:40: 13:3a:cd:62:a1:2c:b2:9f:ff:35:70:bf:14:4a:a2: 6e:9d:18:e7:f6:6d:7a:f5:23:cf:54:be:33:49:ac: a9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9E:70:72:72:0A:71:DD:0B:D6:5B:B4:C2:3A:AD:59:9F:3E:B9:53 X509v3 Authority Key Identifier: keyid:D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:c4:6a:07:46:2b:3f:ec:8e:50:b0:73:13:b5:88:ec:39:5b: f7:eb:93:60:b0:4c:9c:0e:b6:33:7b:80:a6:4b:54:02:a2:7b: c6:ba:42:8c:3b:e4:18:10:ae:86:2b:e7:43:51:f9:df:36:02: cc:c6:b8:b3:9d:81:d6:93:39:40:86:b1:e0:ac:b9:a5:3d:c0: ee:11:8f:9c:9b:f6:92:81:f8:6e:49:cb:9a:79:58:a2:2e:79: 30:8e:90:7d:f5:53:bc:9e:bd:64:52:bd:c5:ed:08:0e:38:bf: 8d:3b:62:0d:3a:81:b8:e8:49:4b:8a:eb:50:43:fb:e0:45:7b: 4c:8b:68:d6:5a:e6:6d:14:1c:27:1e:bf:06:02:c3:71:24:91: de:0a:dc:51:6d:b4:7a:3f:b2:93:52:42:a5:2e:d7:58:7b:42: 33:ff:88:5e:40:ac:3e:23:81:62:48:3d:d6:f8:55:d8:7c:60: 53:9a:ea:4f:33:6f:db:25:3b:1c:de:b5:a7:30:8e:c3:e0:16: dd:cc:91:4d:88:94:a4:05:75:56:78:1c:84:18:d2:b6:47:39: 44:c7:d8:4e:00:c0:59:17:4b:42:41:c0:68:6c:de:4e:86:6d: 69:0c:83:b7:28:0c:f4:25:1f:7e:4c:5d:3b:a4:4e:d3:2c:2e: d6:a1:ca:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUQ0KqtzXAQLOzz3y6sJ+YYakw8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0 RDlCRDRDOTAeFw0yNTA2MjkwODM2MThaFw0yNTA3MDIyMDA0MThaMDMxMTAvBgNV BAMTKEREOUU3MDcyNzIwQTcxREQwQkQ2NUJCNEMyM0FBRDU5OUYzRUI5NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3Hedu8nE+Tnd/x6F5mHIm37r0 NpuCcI6Z80CrGoZZB4Yx3sZ9Of+X5+lwfVeoUrwup0e16bXdAmpBGAsTtJL8cBiv u4IihnY9QYh/hix2e6oIKDdXACZh6p9sCtv7E4UhPqcVNyzdrp9p3lISMtQDW2o3 gToalfqBuMmWq6K6R+V9QuTuz5EsAM15RitVfYRy1qc6nB4qUyZpSZVt/buGkkwr AVw9auXa5YMCFcw+akK+FawoSuieqrsRwWQOqTh80l19q7t4XZNnDM8v7BVtrO/K zNsOY7jiJYtic/lfQBM6zWKhLLKf/zVwvxRKom6dGOf2bXr1I89UvjNJrKmfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Z5wcnIKcd0L1lu0wjqtWZ8+uVMwHwYDVR0j BBgwFoAU1/I9e1SJDw7s9VD/pCeZtk2b1MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Yjk4NTFiMS01YTZkLTRlNzUtOWZmZi1jMDNhOWM0OWNmNjkvMC9EN0YyM0Q3QjU0 ODkwRjBFRUNGNTUwRkZBNDI3OTlCNjREOUJENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0RDlC RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI5ODUxYjEtNWE2ZC00ZTc1LTlm ZmYtYzAzYTljNDljZjY5LzAvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5 QjY0RDlCRDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMfEagdGKz/sjlCwcxO1iOw5W/frk2CwTJwO tjN7gKZLVAKie8a6Qow75BgQroYr50NR+d82AszGuLOdgdaTOUCGseCsuaU9wO4R j5yb9pKB+G5Jy5p5WKIueTCOkH31U7yevWRSvcXtCA44v407Yg06gbjoSUuK61BD ++BFe0yLaNZa5m0UHCcevwYCw3Ekkd4K3FFttHo/spNSQqUu11h7QjP/iF5ArD4j gWJIPdb4Vdh8YFOa6k8zb9slOxzetacwjsPgFt3MkU2IlKQFdVZ4HIQY0rZHOUTH 2E4AwFkXS0JBwGhs3k6GbWkMg7coDPQlH35MXTukTtMsLtahymQ= -----END CERTIFICATE-----Generated at Mon Jun 30 11:54:23 2025 by rpki-client