$ rpki-client -vvf repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft File: 7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft (raw, json) Hash identifier: OAa56g9zEh109plevSSvTab9nivglkJR52lOrp/hOQ8= Subject key identifier: 1D:2E:32:DB:B1:AF:AA:A8:8A:7E:B7:33:78:15:56:6D:FF:62:78:66 Authority key identifier: 7E:EB:EF:D1:AE:72:51:99:E4:B0:23:CD:A2:2A:30:05:EF:BF:4D:E8 Certificate issuer: /CN=7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8 Certificate serial: 6169D3A8999F4A2FC3EF8D67931A0A6FBEC3A98B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft Manifest number: 2F Signing time: Fri 08 Aug 2025 03:41:54 +0000 Manifest this update: Fri 08 Aug 2025 03:36:54 +0000 Manifest next update: Mon 11 Aug 2025 08:24:54 +0000 Files and hashes: 1: 7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl (hash: 4n1bscEns1wvR+pbWK0VU2zfi62RuqP4EUyROlP8NtM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 08:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:69:d3:a8:99:9f:4a:2f:c3:ef:8d:67:93:1a:0a:6f:be:c3:a9:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8 Validity Not Before: Aug 8 03:36:54 2025 GMT Not After : Aug 11 08:24:54 2025 GMT Subject: CN=1D2E32DBB1AFAAA88A7EB7337815566DFF627866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:90:92:5d:fc:4e:db:40:e9:75:0a:ba:80:27: 13:79:ca:6f:07:16:23:05:f2:08:fe:d6:7f:76:c5: 5a:6c:49:79:c8:e4:bf:f8:ba:96:34:3c:f2:ef:f0: 5e:74:f0:56:7a:3d:d3:72:a6:92:6c:d9:cd:3f:b1: 66:18:da:de:43:48:1f:d8:5a:73:82:64:68:87:51: 33:a5:0f:9d:42:f5:38:f5:d2:2e:e1:41:da:79:c6: 00:87:df:f3:57:fc:12:7a:ae:dd:c9:e5:28:e9:38: b9:48:84:d2:04:52:ed:fd:dd:63:8c:36:da:04:1f: 4f:aa:af:c0:4b:87:a4:ed:fb:48:39:50:57:f5:85: f7:9a:ef:33:59:18:31:c6:cd:0b:48:3a:0f:15:88: 6d:79:11:c5:c9:ac:42:e0:4d:78:c8:c0:05:ee:15: 30:33:36:f8:55:08:a8:5a:36:cd:20:2d:fe:d4:53: b7:ac:db:6b:bf:d6:db:a3:00:a3:14:b6:ad:a7:5f: a3:61:10:28:49:07:50:24:aa:94:f4:69:c1:70:37: 53:60:ca:d9:a8:76:d6:9d:d2:47:d9:e1:59:fc:02: 08:b1:d5:99:8b:9b:d8:f0:24:a8:31:5f:56:80:64: 76:5b:55:bf:79:51:82:15:62:91:d7:05:70:b5:09: 0e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2E:32:DB:B1:AF:AA:A8:8A:7E:B7:33:78:15:56:6D:FF:62:78:66 X509v3 Authority Key Identifier: keyid:7E:EB:EF:D1:AE:72:51:99:E4:B0:23:CD:A2:2A:30:05:EF:BF:4D:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:ef:85:98:a8:74:17:5c:29:2b:1a:33:57:f2:c5:f1:3d:b2: b4:c4:fa:49:4d:2c:48:79:a7:da:8e:d5:fd:24:62:38:a4:df: da:a8:a1:b7:0e:f9:53:e3:cd:56:b1:79:3c:fb:60:07:2e:8c: 7d:d9:71:f8:d5:53:91:9d:c5:be:49:53:0b:b2:29:ed:cf:bc: c0:73:72:d8:23:e4:e3:2e:20:0e:1e:11:58:8a:74:1d:c9:b6: 3e:9d:7b:19:03:fa:68:9f:77:cc:ac:59:e0:e8:18:8d:75:87: 85:15:7f:b1:07:2a:6d:1c:1e:ef:3d:aa:ea:77:76:b3:c3:18: fb:9e:fc:5f:3d:4b:30:78:0f:05:cc:3e:3c:29:41:10:bf:81: 0c:2d:bc:99:5b:3c:1d:8e:c4:f7:56:9d:e5:1d:04:0f:84:c4: 33:b8:ad:6a:4a:6f:20:90:aa:cb:0a:b7:de:ec:fd:85:f1:af: 36:da:f8:ef:28:e6:79:65:e0:7a:4a:d1:d6:a3:e0:19:42:ea: 5a:32:de:a6:91:c4:28:3a:9c:e2:b2:8e:81:09:18:e2:ec:c7: 83:50:6e:10:62:04:f4:81:bf:de:ca:94:b6:a4:91:03:8a:3e: 30:b7:83:0e:cf:5b:85:c3:6f:73:97:7b:85:18:2c:f2:79:ff: e7:66:1f:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYWnTqJmfSi/D741nkxoKb77DqYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMwMDVF RkJGNERFODAeFw0yNTA4MDgwMzM2NTRaFw0yNTA4MTEwODI0NTRaMDMxMTAvBgNV BAMTKDFEMkUzMkRCQjFBRkFBQTg4QTdFQjczMzc4MTU1NjZERkY2Mjc4NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMkJJd/E7bQOl1CrqAJxN5ym8H FiMF8gj+1n92xVpsSXnI5L/4upY0PPLv8F508FZ6PdNyppJs2c0/sWYY2t5DSB/Y WnOCZGiHUTOlD51C9Tj10i7hQdp5xgCH3/NX/BJ6rt3J5SjpOLlIhNIEUu393WOM NtoEH0+qr8BLh6Tt+0g5UFf1hfea7zNZGDHGzQtIOg8ViG15EcXJrELgTXjIwAXu FTAzNvhVCKhaNs0gLf7UU7es22u/1tujAKMUtq2nX6NhEChJB1AkqpT0acFwN1Ng ytmodtad0kfZ4Vn8Agix1ZmLm9jwJKgxX1aAZHZbVb95UYIVYpHXBXC1CQ7fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHS4y27GvqqiKfrczeBVWbf9ieGYwHwYDVR0j BBgwFoAUfuvv0a5yUZnksCPNoiowBe+/TegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTIwZTgwMC0yNWJiLTRjNzgtYThiMy1mMGViMjVjMmU4MmEvMC83RUVCRUZEMUFF NzI1MTk5RTRCMDIzQ0RBMjJBMzAwNUVGQkY0REU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMwMDVFRkJG NERFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWUyMGU4MDAtMjViYi00Yzc4LWE4 YjMtZjBlYjI1YzJlODJhLzAvN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMw MDVFRkJGNERFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKrvhZiodBdcKSsaM1fyxfE9srTE+klNLEh5 p9qO1f0kYjik39qoobcO+VPjzVaxeTz7YAcujH3ZcfjVU5Gdxb5JUwuyKe3PvMBz ctgj5OMuIA4eEViKdB3Jtj6dexkD+mifd8ysWeDoGI11h4UVf7EHKm0cHu89qup3 drPDGPue/F89SzB4DwXMPjwpQRC/gQwtvJlbPB2OxPdWneUdBA+ExDO4rWpKbyCQ qssKt97s/YXxrzba+O8o5nll4HpK0daj4BlC6loy3qaRxCg6nOKyjoEJGOLsx4NQ bhBiBPSBv97KlLakkQOKPjC3gw7PW4XDb3OXe4UYLPJ5/+dmH84= -----END CERTIFICATE-----Generated at Sat Aug 9 20:48:13 2025 by rpki-client