$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft File: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft (raw, json) Hash identifier: TRksx7P7EF5wCshbGDgtdafUOg7GJ1MookvlweDKZ8A= Subject key identifier: 9E:04:6B:71:4E:42:6B:1D:C2:D0:B9:48:9A:1E:0B:D5:62:91:43:06 Authority key identifier: A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 Certificate issuer: /CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Certificate serial: 77E90A596045F4B1A048AEB64816BC6562932338 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft Manifest number: 01AE Signing time: Sun 29 Jun 2025 01:21:24 +0000 Manifest this update: Sun 29 Jun 2025 01:16:24 +0000 Manifest next update: Wed 02 Jul 2025 05:54:24 +0000 Files and hashes: 1: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl (hash: xQWLOXURkeO1r08NGPVfTkXJ6f/6U+LJczAkU/CMZ7U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 05:54:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:e9:0a:59:60:45:f4:b1:a0:48:ae:b6:48:16:bc:65:62:93:23:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Validity Not Before: Jun 29 01:16:24 2025 GMT Not After : Jul 2 05:54:24 2025 GMT Subject: CN=9E046B714E426B1DC2D0B9489A1E0BD562914306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:19:d0:7e:74:00:f8:d2:da:3b:fa:29:39:f5: fe:c4:2d:35:8d:22:ad:74:74:af:f8:2e:18:4b:e0: 7f:cc:3e:ab:3e:16:e2:c1:56:5c:f7:09:00:10:10: 88:09:e7:d6:e2:a0:12:40:98:a2:cd:09:c3:76:9f: d8:d5:83:e3:50:c2:a6:4d:a0:f0:e3:d6:2a:cd:6b: 80:08:93:6d:43:f9:8d:04:f1:ec:82:18:24:65:b5: 19:b8:fa:da:b8:f9:55:6e:24:51:6d:0f:8e:f0:db: 29:f0:24:e6:ab:ef:72:f6:41:e1:49:61:56:cc:fa: 12:03:4a:f2:70:fe:f8:f3:12:f8:77:9d:57:b0:a3: b6:d4:75:53:e2:b8:6e:44:f1:82:6f:9f:ae:9b:0d: ff:f1:44:a7:66:93:8b:97:de:17:79:5d:93:1f:83: 1f:f8:66:35:fb:99:c7:fb:b2:56:e2:ba:d2:e6:a7: 65:2b:c4:94:5b:60:08:c3:0a:ba:de:11:a0:bc:bd: a7:00:f9:1e:21:c4:6e:50:51:44:4a:66:53:20:06: a5:e7:fe:d9:ff:03:40:e8:f9:85:6f:64:ec:1d:ee: 9a:28:39:f9:c8:86:9d:ef:f2:74:68:c2:7a:7d:dc: 8c:f3:30:43:74:31:9a:2c:61:1a:1d:a8:9c:9c:b1: b2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:04:6B:71:4E:42:6B:1D:C2:D0:B9:48:9A:1E:0B:D5:62:91:43:06 X509v3 Authority Key Identifier: keyid:A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c1:a3:13:56:ad:0a:44:e4:58:39:19:af:71:e1:97:ec:16: 1c:ef:10:2f:73:73:d2:67:51:7c:3d:a6:36:69:6a:6d:ae:85: 79:03:61:1e:bd:71:1f:da:84:fb:dc:d7:9d:38:86:b9:67:7a: 4f:47:9e:8b:14:d4:84:77:bb:c8:c8:cf:2e:31:f7:7f:b9:3b: bd:cf:40:f4:89:35:03:ce:38:22:6a:72:3e:7b:35:5c:ee:04: 16:61:b2:84:cb:f3:47:0a:40:70:89:64:f4:b4:04:d8:c6:ba: 58:1e:ca:82:d0:06:5a:9b:6f:19:9d:3d:05:38:c5:c7:e7:28: e9:bc:bd:39:b5:6a:e1:54:00:2e:9a:38:ce:71:d8:d8:f4:e0: 19:2c:4c:9d:97:bd:d6:5f:d9:4c:57:5e:f4:fd:4c:a3:9f:fa: 3b:92:89:8b:5a:66:23:a0:28:83:68:39:23:47:0b:f6:fc:c7: f2:9b:5b:97:29:34:1b:5f:f6:ba:fa:ec:a4:85:32:b5:b9:6b: 5a:7d:be:dc:cc:99:00:c3:b9:b3:26:0e:7d:db:9b:d6:2f:aa: b3:3e:bc:7f:71:4d:85:25:a9:b2:cb:55:cf:1e:66:cc:ba:15: f6:27:b2:0a:fe:72:b5:7b:bb:38:d6:9a:75:f6:97:95:4c:b5: f2:fd:0d:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd+kKWWBF9LGgSK62SBa8ZWKTIzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4 RjM2NjlGODAeFw0yNTA2MjkwMTE2MjRaFw0yNTA3MDIwNTU0MjRaMDMxMTAvBgNV BAMTKDlFMDQ2QjcxNEU0MjZCMURDMkQwQjk0ODlBMUUwQkQ1NjI5MTQzMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyGdB+dAD40to7+ik59f7ELTWN Iq10dK/4LhhL4H/MPqs+FuLBVlz3CQAQEIgJ59bioBJAmKLNCcN2n9jVg+NQwqZN oPDj1irNa4AIk21D+Y0E8eyCGCRltRm4+tq4+VVuJFFtD47w2ynwJOar73L2QeFJ YVbM+hIDSvJw/vjzEvh3nVewo7bUdVPiuG5E8YJvn66bDf/xRKdmk4uX3hd5XZMf gx/4ZjX7mcf7slbiutLmp2UrxJRbYAjDCrreEaC8vacA+R4hxG5QUURKZlMgBqXn /tn/A0Do+YVvZOwd7pooOfnIhp3v8nRownp93IzzMEN0MZosYRodqJycsbL7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUngRrcU5Cax3C0LlImh4L1WKRQwYwHwYDVR0j BBgwFoAUp9znZH+ndafp30Tq76xSEY82afgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2YzMGUyNy1iOTVlLTRkNzUtOTY4ZC01MzhmYjc5MTg4MjkvMC9BN0RDRTc2NDdG QTc3NUE3RTlERjQ0RUFFRkFDNTIxMThGMzY2OUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4RjM2 NjlGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmMzBlMjctYjk1ZS00ZDc1LTk2 OGQtNTM4ZmI3OTE4ODI5LzAvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUy MTE4RjM2NjlGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3BoxNWrQpE5Fg5Ga9x4ZfsFhzvEC9zc9Jn UXw9pjZpam2uhXkDYR69cR/ahPvc1504hrlnek9HnosU1IR3u8jIzy4x93+5O73P QPSJNQPOOCJqcj57NVzuBBZhsoTL80cKQHCJZPS0BNjGulgeyoLQBlqbbxmdPQU4 xcfnKOm8vTm1auFUAC6aOM5x2Nj04BksTJ2XvdZf2UxXXvT9TKOf+juSiYtaZiOg KINoOSNHC/b8x/KbW5cpNBtf9rr67KSFMrW5a1p9vtzMmQDDubMmDn3bm9YvqrM+ vH9xTYUlqbLLVc8eZsy6FfYnsgr+crV7uzjWmnX2l5VMtfL9DaQ= -----END CERTIFICATE-----Generated at Mon Jun 30 00:38:03 2025 by rpki-client