$ rpki-client -vvf repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft File: 7188210EAEFBA7947009E19B6219830752F542A9.mft (raw, json) Hash identifier: SoxHmE4ffB1XujXOF8/ziqMAnmb+E0VMz/gpfJJSmBU= Subject key identifier: 7F:5A:26:C2:FA:A0:46:C4:0A:6B:92:DC:FF:B4:8D:20:41:67:15:BD Authority key identifier: 71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 Certificate issuer: /CN=7188210EAEFBA7947009E19B6219830752F542A9 Certificate serial: 57B60518AC2C0FDA49DDD1D99FBD95CBBB32B167 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft Manifest number: 016D Signing time: Mon 12 May 2025 22:11:06 +0000 Manifest this update: Mon 12 May 2025 22:06:06 +0000 Manifest next update: Fri 16 May 2025 07:01:06 +0000 Files and hashes: 1: 7188210EAEFBA7947009E19B6219830752F542A9.crl (hash: m+ES3F3DTFdWlpfRS2cShcZVlNJyL5jiv9BmTVe5dGk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 07:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b6:05:18:ac:2c:0f:da:49:dd:d1:d9:9f:bd:95:cb:bb:32:b1:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7188210EAEFBA7947009E19B6219830752F542A9 Validity Not Before: May 12 22:06:06 2025 GMT Not After : May 16 07:01:06 2025 GMT Subject: CN=7F5A26C2FAA046C40A6B92DCFFB48D20416715BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e7:72:db:43:96:a0:ca:60:28:66:db:50:d0: 4d:a1:08:5c:31:60:12:aa:a2:67:15:f8:7f:b3:78: 70:5f:0d:32:75:a0:70:4a:3c:87:5a:a2:65:87:f5: f2:8f:0a:71:9c:59:c9:11:09:16:c6:c7:bd:98:7d: da:76:28:5e:28:ee:5f:2a:5d:b3:98:5c:04:9e:49: 84:e0:a2:33:c2:e8:cd:04:92:13:2a:2e:e9:0e:5b: 83:bb:c5:e3:16:27:34:6a:1e:cb:8c:50:d0:b4:d2: be:b4:f2:ca:9d:12:57:e9:35:21:26:11:cb:1d:99: f3:c1:7f:7c:ee:ca:7f:27:80:d2:a9:a5:fc:68:f6: 15:7f:ca:00:ae:2c:17:89:fd:04:f5:5e:fb:f6:7e: 21:97:34:70:45:96:eb:4a:3c:02:1e:6d:11:72:ff: 37:6e:8c:dd:b0:b4:f2:8d:66:ae:3d:50:22:f6:00: 31:af:a5:53:22:d5:a0:7f:d9:38:a5:bf:a3:52:1d: 50:21:73:38:86:9d:81:d9:e5:cf:eb:19:50:07:b9: 13:f6:29:f7:ee:d5:2b:79:3e:a9:ea:05:db:5f:82: c1:44:b1:75:8e:8a:10:67:fb:62:15:d5:12:e1:05: 77:69:66:29:ad:f7:7d:c0:6d:9f:b2:a7:5d:13:6f: c8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5A:26:C2:FA:A0:46:C4:0A:6B:92:DC:FF:B4:8D:20:41:67:15:BD X509v3 Authority Key Identifier: keyid:71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:f0:ae:06:60:50:a1:f3:8e:f9:4d:79:36:c9:c8:36:db:f9: 1b:59:df:7d:86:d4:98:fa:97:16:f0:a1:93:64:da:af:1a:9b: e4:a0:48:b5:d5:a2:b9:ba:63:c1:f1:cf:9d:af:69:ec:5b:1a: 9a:53:2a:4b:48:1c:94:b7:50:92:3e:82:52:19:dd:ce:ae:f8: 99:db:48:11:db:75:d7:74:d5:7e:d6:3c:78:78:24:a7:00:7c: bd:ec:88:3d:35:63:84:46:58:9b:46:64:86:5e:b0:a3:9a:f4: 9a:ef:4a:68:5d:87:e1:f3:b6:08:5a:17:ca:5f:cf:08:ac:16: 52:42:ad:10:2e:9d:a0:5a:0b:f1:43:ea:8b:4e:c5:27:af:e3: 15:fe:4b:af:90:96:4d:32:e7:64:c6:3d:b7:fc:d7:ce:02:e4: ba:f3:f7:53:ea:b0:2e:ee:dd:43:5c:cb:88:fe:34:17:57:7d: cc:e1:64:83:ac:29:71:fa:b5:16:b1:52:38:53:38:fa:77:b7: 53:f5:43:93:e1:d6:96:98:e8:9c:04:85:82:1c:3e:3b:32:56: 0a:6b:a2:90:69:0f:d4:f6:9f:6c:07:81:63:fe:73:37:53:f3: 29:e0:9d:58:4d:ff:35:18:42:ed:06:0a:86:9a:b9:ee:19:9e: ee:2c:a5:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV7YFGKwsD9pJ3dHZn72Vy7sysWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1 MkY1NDJBOTAeFw0yNTA1MTIyMjA2MDZaFw0yNTA1MTYwNzAxMDZaMDMxMTAvBgNV BAMTKDdGNUEyNkMyRkFBMDQ2QzQwQTZCOTJEQ0ZGQjQ4RDIwNDE2NzE1QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU53LbQ5agymAoZttQ0E2hCFwx YBKqomcV+H+zeHBfDTJ1oHBKPIdaomWH9fKPCnGcWckRCRbGx72Yfdp2KF4o7l8q XbOYXASeSYTgojPC6M0EkhMqLukOW4O7xeMWJzRqHsuMUNC00r608sqdElfpNSEm EcsdmfPBf3zuyn8ngNKppfxo9hV/ygCuLBeJ/QT1Xvv2fiGXNHBFlutKPAIebRFy /zdujN2wtPKNZq49UCL2ADGvpVMi1aB/2Tilv6NSHVAhcziGnYHZ5c/rGVAHuRP2 Kffu1St5PqnqBdtfgsFEsXWOihBn+2IV1RLhBXdpZimt933AbZ+yp10Tb8hrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf1omwvqgRsQKa5Lc/7SNIEFnFb0wHwYDVR0j BBgwFoAUcYghDq77p5RwCeGbYhmDB1L1QqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTdkN2IzOC1kNjZiLTQzYjMtOTFmYi00YmI5ZTY2MzdlMmEvMC83MTg4MjEwRUFF RkJBNzk0NzAwOUUxOUI2MjE5ODMwNzUyRjU0MkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1MkY1 NDJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE3ZDdiMzgtZDY2Yi00M2IzLTkx ZmItNGJiOWU2NjM3ZTJhLzAvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgz MDc1MkY1NDJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfwrgZgUKHzjvlNeTbJyDbb+RtZ332G1Jj6 lxbwoZNk2q8am+SgSLXVorm6Y8Hxz52vaexbGppTKktIHJS3UJI+glIZ3c6u+Jnb SBHbddd01X7WPHh4JKcAfL3siD01Y4RGWJtGZIZesKOa9JrvSmhdh+HztghaF8pf zwisFlJCrRAunaBaC/FD6otOxSev4xX+S6+Qlk0y52TGPbf8184C5Lrz91PqsC7u 3UNcy4j+NBdXfczhZIOsKXH6tRaxUjhTOPp3t1P1Q5Ph1paY6JwEhYIcPjsyVgpr opBpD9T2n2wHgWP+czdT8yngnVhN/zUYQu0GCoaaue4Znu4spbk= -----END CERTIFICATE-----Generated at Wed May 14 21:51:59 2025 by rpki-client