$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft File: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft (raw, json) Hash identifier: nXMXHg1q+mhaav1DjPgiCKQpiIefzX0f0rVgX5/iAL4= Subject key identifier: 1E:FF:B5:C0:4E:88:C5:27:EF:85:06:F7:46:1A:01:56:0A:D4:6B:20 Authority key identifier: 7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 Certificate issuer: /CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Certificate serial: 2FEBEBE3F2C15A543B39DF533BB46632A277470B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft Manifest number: 8C Signing time: Tue 17 Jun 2025 08:12:02 +0000 Manifest this update: Tue 17 Jun 2025 08:07:02 +0000 Manifest next update: Fri 20 Jun 2025 17:24:02 +0000 Files and hashes: 1: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl (hash: HsriNJhWzuv98S4IFZRRMX1ffTirmx9XlDyOamfTYrI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:eb:eb:e3:f2:c1:5a:54:3b:39:df:53:3b:b4:66:32:a2:77:47:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Validity Not Before: Jun 17 08:07:02 2025 GMT Not After : Jun 20 17:24:02 2025 GMT Subject: CN=1EFFB5C04E88C527EF8506F7461A01560AD46B20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f6:01:d6:b2:c1:11:bb:92:e3:47:8b:43:5e: bc:fc:2b:07:f0:bb:2d:0f:d5:ce:06:0a:fa:cf:d6: e1:39:64:a0:dc:61:8e:ac:0e:ca:df:73:05:a4:25: ff:28:66:9c:e4:a3:37:d6:f3:db:c4:05:1d:b0:64: 3f:3f:b3:ba:09:ed:8c:97:3d:19:52:c0:a0:85:45: 65:d2:0d:bd:d1:19:10:fc:a1:b9:ac:a1:ff:23:6e: bd:8c:b0:f5:31:3d:34:0f:b2:a7:8e:cc:0c:28:53: 15:a7:15:89:f7:36:f9:20:bd:5c:66:85:bc:6c:93: d0:6d:65:b0:c8:f4:50:3f:c8:aa:38:98:7f:6a:50: be:b7:57:b6:6b:4b:b4:e2:25:6d:de:99:08:cd:6d: 86:29:18:d4:1b:3d:16:8e:31:e4:92:3f:27:cb:dd: 08:36:ba:56:1a:3b:cc:d8:76:cb:6a:da:bb:d8:be: ce:58:b5:3a:9a:30:1c:c5:12:06:33:07:18:0c:e0: 1b:10:f3:ec:64:58:42:27:c9:07:9c:b1:59:56:75: 7d:9f:52:15:81:0d:a3:51:98:c2:76:75:01:3d:c8: de:89:63:94:65:a1:36:30:3a:e4:1f:96:90:2e:01: 1d:52:9e:bd:4a:e0:13:88:35:e6:c3:b6:06:2a:71: 4f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FF:B5:C0:4E:88:C5:27:EF:85:06:F7:46:1A:01:56:0A:D4:6B:20 X509v3 Authority Key Identifier: keyid:7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:b6:2a:ed:4d:ec:13:d8:e4:7c:92:85:59:76:1f:dc:3f:c7: a7:74:38:bf:4a:f5:6b:c3:e7:d6:1d:5d:c5:d5:4d:2c:eb:7f: 4d:6f:ad:f3:5a:29:e9:2d:cd:c5:c3:7d:55:b5:25:1a:96:bc: 62:35:2d:b1:39:5c:7d:8b:4a:a5:43:5c:02:56:31:c2:74:08: c1:c4:6e:39:37:c6:38:d6:a2:8b:46:9f:e7:87:80:de:c1:7a: 23:1e:0d:6a:73:48:72:7f:58:87:01:12:57:9b:f0:85:6d:6e: a8:9c:6a:42:44:a4:a6:33:4b:e8:4e:9e:37:fd:fa:3b:ae:a7: a3:aa:f3:85:e5:f7:67:8f:9f:64:6b:cb:36:f7:1d:3f:2b:e0: a4:cc:0b:d9:d5:5b:df:c9:f2:c9:4c:58:05:b2:eb:59:1a:f5: 3f:13:d1:a2:84:79:2a:ed:83:0b:6a:50:de:f0:df:97:ae:69: 39:a9:49:6b:73:ad:ac:60:f2:cb:b0:55:b0:c8:4e:5a:6c:1a: 81:7f:7e:f9:19:78:a3:e6:f3:bb:b2:a4:2d:61:19:5f:fd:76: a5:46:bc:30:35:e6:22:7f:39:06:09:2a:e3:f2:94:d5:86:44: 0b:58:1a:64:9c:b0:2b:8b:14:b8:01:86:8d:c7:48:81:ba:a9: 32:6d:85:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+vr4/LBWlQ7Od9TO7RmMqJ3RwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2 QUM0RkMzMTAeFw0yNTA2MTcwODA3MDJaFw0yNTA2MjAxNzI0MDJaMDMxMTAvBgNV BAMTKDFFRkZCNUMwNEU4OEM1MjdFRjg1MDZGNzQ2MUEwMTU2MEFENDZCMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt9gHWssERu5LjR4tDXrz8Kwfw uy0P1c4GCvrP1uE5ZKDcYY6sDsrfcwWkJf8oZpzkozfW89vEBR2wZD8/s7oJ7YyX PRlSwKCFRWXSDb3RGRD8obmsof8jbr2MsPUxPTQPsqeOzAwoUxWnFYn3NvkgvVxm hbxsk9BtZbDI9FA/yKo4mH9qUL63V7ZrS7TiJW3emQjNbYYpGNQbPRaOMeSSPyfL 3Qg2ulYaO8zYdstq2rvYvs5YtTqaMBzFEgYzBxgM4BsQ8+xkWEInyQecsVlWdX2f UhWBDaNRmMJ2dQE9yN6JY5RloTYwOuQflpAuAR1Snr1K4BOINebDtgYqcU8rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHv+1wE6IxSfvhQb3RhoBVgrUayAwHwYDVR0j BBgwFoAUfVCLIlNQsNIE8ZQ/T1PU2GrE/DEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjNiMjMwYS1mZmYxLTQ3ZjAtYmY5MS03Y2ViOGQzNjA5NmUvMC83RDUwOEIyMjUz NTBCMEQyMDRGMTk0M0Y0RjUzRDREODZBQzRGQzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2QUM0 RkMzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0 RDg2QUM0RkMzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ62Ku1N7BPY5HyShVl2H9w/x6d0OL9K9WvD 59YdXcXVTSzrf01vrfNaKektzcXDfVW1JRqWvGI1LbE5XH2LSqVDXAJWMcJ0CMHE bjk3xjjWootGn+eHgN7BeiMeDWpzSHJ/WIcBEleb8IVtbqicakJEpKYzS+hOnjf9 +juup6Oq84Xl92ePn2Rryzb3HT8r4KTMC9nVW9/J8slMWAWy61ka9T8T0aKEeSrt gwtqUN7w35euaTmpSWtzraxg8suwVbDITlpsGoF/fvkZeKPm87uypC1hGV/9dqVG vDA15iJ/OQYJKuPylNWGRAtYGmScsCuLFLgBho3HSIG6qTJthTk= -----END CERTIFICATE-----Generated at Tue Jun 17 10:03:26 2025 by rpki-client