$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft File: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft (raw, json) Hash identifier: i/KScH0M9CJZbwowhiMSJe+i4yCFZxUYylZwuw01llA= Subject key identifier: A3:D5:A1:6E:22:4E:AE:A2:66:7E:27:1A:85:C9:0C:11:01:6C:D4:5B Authority key identifier: A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 Certificate issuer: /CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Certificate serial: 04594CB0364354AC673E3E3132F6BCCBD7159D96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft Manifest number: 0196 Signing time: Tue 06 May 2025 16:51:23 +0000 Manifest this update: Tue 06 May 2025 16:46:23 +0000 Manifest next update: Sat 10 May 2025 04:41:23 +0000 Files and hashes: 1: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl (hash: /ECr2K5BqOgCVze8TS0NBupedt6LQCCbODIWv71azD0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 04:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:59:4c:b0:36:43:54:ac:67:3e:3e:31:32:f6:bc:cb:d7:15:9d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Validity Not Before: May 6 16:46:23 2025 GMT Not After : May 10 04:41:23 2025 GMT Subject: CN=A3D5A16E224EAEA2667E271A85C90C11016CD45B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7e:4d:aa:8e:f7:ea:1e:3e:a7:33:f3:b3:63: 03:4d:3e:74:64:5a:ea:87:3b:77:eb:12:eb:6a:24: cc:bb:b2:dd:93:de:17:82:7c:ed:b4:4f:7c:ac:54: 9f:0e:1f:36:0e:f7:8b:6d:df:47:74:54:e3:7e:ab: 60:64:ea:b4:bd:01:a9:79:0f:3d:b8:2b:b8:ed:b2: cf:5e:45:52:02:86:9b:87:39:b8:23:6e:b4:db:2c: 05:dd:4d:6f:4a:84:d7:3d:a0:38:63:fd:5f:89:8b: 55:d3:6e:ae:ae:06:4e:73:52:cb:29:8a:ce:95:d8: 44:e9:01:fc:45:c0:63:f3:c7:a8:7a:4b:66:4b:80: a8:01:22:a2:41:b3:0d:60:a7:a8:d2:17:82:5b:79: a0:a5:55:d7:a2:20:7e:a3:26:f6:25:cf:1b:97:32: ff:46:c4:fe:33:9b:21:22:90:ce:3e:06:3f:1d:d1: 66:60:f8:52:9e:3d:a0:6e:0c:7c:6e:63:99:b4:b1: 7a:53:08:70:ce:33:57:dc:56:97:38:39:b8:6d:ac: d0:9a:a6:57:2f:4b:65:83:d3:b0:11:21:d8:af:e9: 7a:ba:14:07:69:b1:ec:c1:2e:dc:60:cc:2f:6d:c6: 39:8a:83:a3:f0:4b:2b:4a:06:e9:37:e6:e3:25:90: e7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D5:A1:6E:22:4E:AE:A2:66:7E:27:1A:85:C9:0C:11:01:6C:D4:5B X509v3 Authority Key Identifier: keyid:A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:38:12:9e:44:f8:2d:0a:65:c9:ea:87:d2:5a:1e:8e:76:0b: d1:af:2f:84:83:64:7d:de:f2:df:c4:7b:1a:2e:fc:fb:c0:e4: 6c:69:4b:05:a0:60:1f:81:3a:29:bf:e0:6a:bd:76:2c:5f:94: f4:8b:ea:d4:a1:f4:2e:92:75:1b:e7:f9:23:19:79:13:0c:31: ac:42:b9:d0:e3:1e:13:7d:16:7f:70:96:3f:73:1f:f8:d1:08: 4b:c8:46:02:88:b9:7f:60:a0:30:7f:ba:b1:9c:31:28:b5:80: 95:d5:49:17:6f:40:62:7c:3e:9d:20:76:1a:31:50:fa:73:ed: 73:fc:fb:98:e9:2f:2c:cc:2c:5d:ad:3a:57:8c:21:86:e0:99: 81:87:02:90:c1:b5:67:a5:60:07:11:f0:34:3e:d4:9d:c0:ad: 2d:a7:80:b0:19:b9:c7:a6:df:34:6b:fd:3e:7e:47:fa:05:64: f5:52:19:07:9b:fc:d6:c0:de:c8:42:7a:e7:ae:ab:b1:61:91: e8:0d:e5:51:71:8a:c0:83:43:1a:90:9c:e2:f5:f5:67:de:6c: 00:88:51:2b:0d:3c:f9:7b:25:3c:54:f6:63:8e:da:d7:8e:b8: cc:69:12:7a:72:65:35:ca:2d:3c:3f:f2:dd:70:59:90:7f:46: 82:17:86:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBFlMsDZDVKxnPj4xMva8y9cVnZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4 RjM2NjlGODAeFw0yNTA1MDYxNjQ2MjNaFw0yNTA1MTAwNDQxMjNaMDMxMTAvBgNV BAMTKEEzRDVBMTZFMjI0RUFFQTI2NjdFMjcxQTg1QzkwQzExMDE2Q0Q0NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgfk2qjvfqHj6nM/OzYwNNPnRk WuqHO3frEutqJMy7st2T3heCfO20T3ysVJ8OHzYO94tt30d0VON+q2Bk6rS9Aal5 Dz24K7jtss9eRVIChpuHObgjbrTbLAXdTW9KhNc9oDhj/V+Ji1XTbq6uBk5zUssp is6V2ETpAfxFwGPzx6h6S2ZLgKgBIqJBsw1gp6jSF4JbeaClVdeiIH6jJvYlzxuX Mv9GxP4zmyEikM4+Bj8d0WZg+FKePaBuDHxuY5m0sXpTCHDOM1fcVpc4ObhtrNCa plcvS2WD07ARIdiv6Xq6FAdpsezBLtxgzC9txjmKg6PwSytKBuk35uMlkOd5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo9WhbiJOrqJmficahckMEQFs1FswHwYDVR0j BBgwFoAUp9znZH+ndafp30Tq76xSEY82afgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2YzMGUyNy1iOTVlLTRkNzUtOTY4ZC01MzhmYjc5MTg4MjkvMC9BN0RDRTc2NDdG QTc3NUE3RTlERjQ0RUFFRkFDNTIxMThGMzY2OUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4RjM2 NjlGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmMzBlMjctYjk1ZS00ZDc1LTk2 OGQtNTM4ZmI3OTE4ODI5LzAvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUy MTE4RjM2NjlGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKo4Ep5E+C0KZcnqh9JaHo52C9GvL4SDZH3e 8t/Eexou/PvA5GxpSwWgYB+BOim/4Gq9dixflPSL6tSh9C6SdRvn+SMZeRMMMaxC udDjHhN9Fn9wlj9zH/jRCEvIRgKIuX9goDB/urGcMSi1gJXVSRdvQGJ8Pp0gdhox UPpz7XP8+5jpLyzMLF2tOleMIYbgmYGHApDBtWelYAcR8DQ+1J3ArS2ngLAZucem 3zRr/T5+R/oFZPVSGQeb/NbA3shCeueuq7FhkegN5VFxisCDQxqQnOL19WfebACI USsNPPl7JTxU9mOO2teOuMxpEnpyZTXKLTw/8t1wWZB/RoIXhmo= -----END CERTIFICATE-----Generated at Thu May 8 01:11:06 2025 by rpki-client