$ rpki-client -vvf repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft File: 7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft (raw, json) Hash identifier: cpgy1Q4hpJY4n+0PmJJcl6PLxReFmWQthYWdPSA9m2U= Subject key identifier: 92:DF:D9:8A:C7:EB:61:FE:EE:20:8D:FD:FB:F2:56:8E:0C:22:E6:22 Authority key identifier: 7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C Certificate issuer: /CN=7F9ECE743A3074E61F56CD11161AA58A6BB4092C Certificate serial: 5053F527AF2810B8B29D4BF3C51947B4EE2DA63C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft Manifest number: 0C Signing time: Sun 29 Jun 2025 17:01:24 +0000 Manifest this update: Sun 29 Jun 2025 16:56:24 +0000 Manifest next update: Wed 02 Jul 2025 19:43:24 +0000 Files and hashes: 1: 7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl (hash: skwCsBU7Gx+JgR1fLmwOT3QWXRJzvhxVCVU0Zwou+c4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:53:f5:27:af:28:10:b8:b2:9d:4b:f3:c5:19:47:b4:ee:2d:a6:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F9ECE743A3074E61F56CD11161AA58A6BB4092C Validity Not Before: Jun 29 16:56:24 2025 GMT Not After : Jul 2 19:43:24 2025 GMT Subject: CN=92DFD98AC7EB61FEEE208DFDFBF2568E0C22E622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1c:6e:63:53:c7:96:99:53:db:42:e1:40:1a: 0f:c6:0d:48:c6:9f:8a:a5:28:48:4e:d3:8d:e1:7f: 90:15:a1:3f:79:dd:2b:40:df:05:72:ef:45:02:e6: e1:0d:d7:b0:57:83:b6:0d:df:01:0c:22:c0:a3:d3: d7:73:e3:4b:58:61:c1:16:6c:95:d7:4a:63:9f:28: 24:45:59:f4:ad:8a:12:25:74:3d:20:23:35:22:7c: d4:13:35:2a:62:02:86:16:cf:e4:f2:c2:ba:04:2d: 9e:c4:d8:c3:5c:db:9b:36:4d:14:8c:28:43:d2:35: 45:0d:61:98:7e:32:fd:3f:20:f4:66:33:df:07:52: d6:bf:96:da:18:ef:80:05:6a:df:72:85:3e:ce:43: c6:a4:03:fd:24:e2:0d:38:5d:55:24:b9:cc:43:78: 51:d7:2b:58:3d:be:d8:de:dd:90:4c:cd:ce:27:2c: 2c:21:77:dc:11:cd:44:d3:80:da:c1:26:dc:6a:16: 08:60:5d:32:87:91:e3:6b:4f:64:7a:78:72:16:9f: 25:31:b4:a7:69:98:ab:99:e4:2d:74:a9:bb:0d:75: 35:93:8d:04:c8:43:1a:40:cc:6e:fd:f4:8b:c5:4c: 71:ea:d9:7a:78:2d:95:30:75:76:0f:d1:d2:ea:0c: 57:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DF:D9:8A:C7:EB:61:FE:EE:20:8D:FD:FB:F2:56:8E:0C:22:E6:22 X509v3 Authority Key Identifier: keyid:7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:be:b7:11:d2:af:63:af:1a:88:b8:59:17:43:8f:41:4a:10: c8:79:ce:2e:52:50:80:e0:e3:3a:69:81:06:11:31:ec:cf:4d: d1:23:c4:ed:bd:0a:2e:ac:90:c0:cb:af:af:a0:fb:94:1f:f9: 2e:69:16:49:a3:89:0e:73:38:03:20:14:67:83:96:86:54:35: 0a:4d:51:ef:a9:b4:9c:55:7d:25:1c:7c:f2:9b:32:db:ed:6b: 95:e4:00:e9:de:44:2c:e3:7c:84:f7:c6:9a:6b:3f:81:fd:b9: 39:9d:2e:1c:bc:0c:01:38:eb:1a:02:61:a2:55:36:69:5d:06: 02:b9:ee:c6:aa:95:02:e4:f7:3e:34:a9:d7:4e:c9:da:74:4d: 86:a2:b0:e3:a3:e5:22:fe:f2:7b:ca:c8:76:91:67:dc:9d:7b: 94:ba:6a:10:a7:cd:7f:d0:37:c4:22:03:b6:b8:8a:09:8c:0c: 55:70:17:2e:01:c5:84:7b:95:b8:3f:31:16:41:e8:85:b9:60: 61:c2:35:23:2f:25:f6:38:64:61:9d:f4:2e:f9:25:9e:1b:0c: ce:d7:a4:c6:e1:37:13:dd:01:96:b7:4e:47:f6:8e:08:3a:24: 6a:da:ae:ad:fd:bc:3a:06:73:3e:5b:83:a7:b2:c3:cc:0d:96: 57:30:53:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUFP1J68oELiynUvzxRlHtO4tpjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1OEE2 QkI0MDkyQzAeFw0yNTA2MjkxNjU2MjRaFw0yNTA3MDIxOTQzMjRaMDMxMTAvBgNV BAMTKDkyREZEOThBQzdFQjYxRkVFRTIwOERGREZCRjI1NjhFMEMyMkU2MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrHG5jU8eWmVPbQuFAGg/GDUjG n4qlKEhO043hf5AVoT953StA3wVy70UC5uEN17BXg7YN3wEMIsCj09dz40tYYcEW bJXXSmOfKCRFWfStihIldD0gIzUifNQTNSpiAoYWz+TywroELZ7E2MNc25s2TRSM KEPSNUUNYZh+Mv0/IPRmM98HUta/ltoY74AFat9yhT7OQ8akA/0k4g04XVUkucxD eFHXK1g9vtje3ZBMzc4nLCwhd9wRzUTTgNrBJtxqFghgXTKHkeNrT2R6eHIWnyUx tKdpmKuZ5C10qbsNdTWTjQTIQxpAzG799IvFTHHq2Xp4LZUwdXYP0dLqDFfNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkt/ZisfrYf7uII39+/JWjgwi5iIwHwYDVR0j BBgwFoAUf57OdDowdOYfVs0RFhqlimu0CSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjY2YmZhNi1kYzRjLTQxMDgtOTMyYy0yMDRiNjJlODYyNzIvMC83RjlFQ0U3NDNB MzA3NEU2MUY1NkNEMTExNjFBQTU4QTZCQjQwOTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1OEE2QkI0 MDkyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmY2NmJmYTYtZGM0Yy00MTA4LTkz MmMtMjA0YjYyZTg2MjcyLzAvN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1 OEE2QkI0MDkyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIG+txHSr2OvGoi4WRdDj0FKEMh5zi5SUIDg 4zppgQYRMezPTdEjxO29Ci6skMDLr6+g+5Qf+S5pFkmjiQ5zOAMgFGeDloZUNQpN Ue+ptJxVfSUcfPKbMtvta5XkAOneRCzjfIT3xpprP4H9uTmdLhy8DAE46xoCYaJV NmldBgK57saqlQLk9z40qddOydp0TYaisOOj5SL+8nvKyHaRZ9yde5S6ahCnzX/Q N8QiA7a4igmMDFVwFy4BxYR7lbg/MRZB6IW5YGHCNSMvJfY4ZGGd9C75JZ4bDM7X pMbhNxPdAZa3Tkf2jgg6JGrarq39vDoGcz5bg6eyw8wNllcwU6Q= -----END CERTIFICATE-----Generated at Sun Jun 29 18:29:10 2025 by rpki-client