$ rpki-client -vvf repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft File: 7B29BAF4812476761482CE1C3A92188A2A8334CE.mft (raw, json) Hash identifier: HP6vOYHz3uVrdzP1kYM51gCrO2sxc6dNJ0RqUJnvso4= Subject key identifier: 68:67:24:8C:3F:8E:9F:EA:60:AC:BF:A5:1F:F6:85:DE:0A:4F:12:08 Authority key identifier: 7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE Certificate issuer: /CN=7B29BAF4812476761482CE1C3A92188A2A8334CE Certificate serial: 72D21408648A4E70319A9DE578696EA75F7E556C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft Manifest number: 025C Signing time: Tue 06 May 2025 09:10:46 +0000 Manifest this update: Tue 06 May 2025 09:05:46 +0000 Manifest next update: Fri 09 May 2025 18:23:46 +0000 Files and hashes: 1: 7B29BAF4812476761482CE1C3A92188A2A8334CE.crl (hash: 7VzoD/cvITCJuBgUFDUdjDJFc/gmrn6qQjEcGAxEEkE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.crl rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 18:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d2:14:08:64:8a:4e:70:31:9a:9d:e5:78:69:6e:a7:5f:7e:55:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B29BAF4812476761482CE1C3A92188A2A8334CE Validity Not Before: May 6 09:05:46 2025 GMT Not After : May 9 18:23:46 2025 GMT Subject: CN=6867248C3F8E9FEA60ACBFA51FF685DE0A4F1208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:51:74:03:b1:d0:e0:6e:c4:18:ab:78:fa:44: 2b:07:e1:66:ca:c9:13:03:29:b4:4d:e8:d8:a7:9e: 4f:9b:07:6e:f6:07:ab:d0:78:64:bf:ed:5f:6f:27: 77:57:37:88:5c:30:04:51:76:0b:58:8d:2e:4b:65: ef:68:6a:3c:ba:1f:5c:a5:5b:37:9b:7e:ea:0c:71: ec:09:7b:76:69:07:a6:e0:88:a1:f9:3b:4f:3b:89: 01:a6:a6:75:19:92:c4:f1:e2:56:dc:97:f6:f9:64: 7b:23:08:40:9c:14:4a:98:74:41:91:7c:e5:f8:bc: d3:86:30:f7:3e:6b:8f:55:1c:1c:59:a3:f6:1d:d8: b0:96:df:a2:27:28:a9:37:27:b6:fe:24:54:9b:47: a1:9f:1f:b8:a9:9f:61:0e:d7:86:82:a4:ff:b6:a3: d5:18:17:59:6e:59:5a:54:53:64:64:c2:81:cc:a2: 71:30:9f:6a:2b:07:0a:5b:ec:cf:2d:52:85:f9:af: 7e:bc:8d:1c:47:b1:fd:47:95:14:37:ae:5c:c8:8e: bf:f9:ba:e6:0b:d6:cd:e9:5c:60:b1:75:f4:d6:74: c8:f7:51:1c:36:4a:92:78:2a:4e:51:6c:cd:58:ea: eb:4f:6f:6e:54:7b:fa:21:8a:c7:64:6f:10:1b:c1: 98:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:67:24:8C:3F:8E:9F:EA:60:AC:BF:A5:1F:F6:85:DE:0A:4F:12:08 X509v3 Authority Key Identifier: keyid:7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f8:85:c2:1c:ec:10:ff:74:cc:0e:c5:e4:0d:59:84:99:34: aa:26:aa:64:a9:48:46:91:5e:07:0a:11:26:a5:30:86:ac:84: e7:3f:ac:20:53:39:4b:25:d8:4f:bf:c9:f2:a5:83:2b:28:8e: 60:be:cd:bc:f5:5e:d6:72:d7:51:ce:c3:95:bd:5d:3c:4f:6d: 5e:e7:7a:6a:d9:fb:3e:11:d0:ca:0d:7e:29:1e:0f:fa:9d:78: bd:95:e4:76:a3:e9:50:6e:be:de:a7:de:a5:25:2f:55:e0:61: e6:59:0d:16:ea:8b:ae:d1:2b:be:d0:c2:1b:a2:ba:65:e0:2e: 17:3e:93:c6:88:7a:f4:b1:59:ac:d7:1a:11:68:cc:35:2e:85: 96:55:42:76:49:a8:da:54:71:59:d4:47:c2:37:4e:cf:69:33: a2:ba:21:d7:63:93:dd:61:34:cd:4b:84:38:bb:21:d9:2b:71: f2:71:36:13:77:9c:0a:6a:85:13:c3:80:36:01:18:da:40:c2: e3:e5:c5:72:c8:e6:5c:64:17:0d:82:de:2d:b3:e5:ae:bd:43: 62:5a:60:cd:3f:d2:d4:85:22:94:7b:9b:f7:ae:72:8e:3b:2f: ee:d2:22:44:38:03:86:48:b4:11:5c:57:57:f5:53:7d:02:25: 15:33:5f:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUctIUCGSKTnAxmp3leGlup19+VWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4OEEy QTgzMzRDRTAeFw0yNTA1MDYwOTA1NDZaFw0yNTA1MDkxODIzNDZaMDMxMTAvBgNV BAMTKDY4NjcyNDhDM0Y4RTlGRUE2MEFDQkZBNTFGRjY4NURFMEE0RjEyMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoUXQDsdDgbsQYq3j6RCsH4WbK yRMDKbRN6Ninnk+bB272B6vQeGS/7V9vJ3dXN4hcMARRdgtYjS5LZe9oajy6H1yl WzebfuoMcewJe3ZpB6bgiKH5O087iQGmpnUZksTx4lbcl/b5ZHsjCECcFEqYdEGR fOX4vNOGMPc+a49VHBxZo/Yd2LCW36InKKk3J7b+JFSbR6GfH7ipn2EO14aCpP+2 o9UYF1luWVpUU2RkwoHMonEwn2orBwpb7M8tUoX5r368jRxHsf1HlRQ3rlzIjr/5 uuYL1s3pXGCxdfTWdMj3URw2SpJ4Kk5RbM1Y6utPb25Ue/ohisdkbxAbwZj3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaGckjD+On+pgrL+lH/aF3gpPEggwHwYDVR0j BBgwFoAUeym69IEkdnYUgs4cOpIYiiqDNM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzJmM2RiNC00MWUyLTQwMjgtOTA4Yi01MDk3YzliMWMxZjUvMC83QjI5QkFGNDgx MjQ3Njc2MTQ4MkNFMUMzQTkyMTg4QTJBODMzNENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4OEEyQTgz MzRDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzcyZjNkYjQtNDFlMi00MDI4LTkw OGItNTA5N2M5YjFjMWY1LzAvN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4 OEEyQTgzMzRDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACX4hcIc7BD/dMwOxeQNWYSZNKomqmSpSEaR XgcKESalMIashOc/rCBTOUsl2E+/yfKlgysojmC+zbz1XtZy11HOw5W9XTxPbV7n emrZ+z4R0MoNfikeD/qdeL2V5Haj6VBuvt6n3qUlL1XgYeZZDRbqi67RK77Qwhui umXgLhc+k8aIevSxWazXGhFozDUuhZZVQnZJqNpUcVnUR8I3Ts9pM6K6Iddjk91h NM1LhDi7IdkrcfJxNhN3nApqhRPDgDYBGNpAwuPlxXLI5lxkFw2C3i2z5a69Q2Ja YM0/0tSFIpR7m/euco47L+7SIkQ4A4ZItBFcV1f1U30CJRUzXxM= -----END CERTIFICATE-----Generated at Thu May 8 10:42:51 2025 by rpki-client