$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft File: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft (raw, json) Hash identifier: /51DkR/oUQW8cp5T1KwdPuXk2ElNJ1jqMVSMgAVx7kM= Subject key identifier: 7D:A2:50:B1:79:85:CC:28:27:81:AF:1A:C1:EB:D2:68:BE:74:4A:77 Authority key identifier: 7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 Certificate issuer: /CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Certificate serial: 67F7F7D86132D4F6D6958C4424815DB5DFF6E259 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft Manifest number: A3 Signing time: Wed 06 Aug 2025 19:12:03 +0000 Manifest this update: Wed 06 Aug 2025 19:07:03 +0000 Manifest next update: Sun 10 Aug 2025 05:33:03 +0000 Files and hashes: 1: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl (hash: JvcjoPPiH7SiGLOtfzh1ZRN4JCNOc1cYq5/8bncJ4Xo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 05:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f7:f7:d8:61:32:d4:f6:d6:95:8c:44:24:81:5d:b5:df:f6:e2:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Validity Not Before: Aug 6 19:07:03 2025 GMT Not After : Aug 10 05:33:03 2025 GMT Subject: CN=7DA250B17985CC282781AF1AC1EBD268BE744A77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b8:7c:3c:39:87:9a:f6:63:58:e8:d9:2a:f2: c7:11:3a:06:3c:4e:b4:b0:20:4b:50:f5:d5:2e:d2: f6:4c:b7:d8:86:45:da:dd:c3:76:75:b8:3b:35:2b: 5a:d5:10:25:87:d8:0c:2b:0f:f0:5f:97:88:87:7d: b1:72:9b:12:be:ed:ab:e0:6e:09:5b:db:37:80:19: d1:0f:5a:ac:8c:b5:ad:98:b6:ea:1e:ad:ff:95:bb: c7:04:22:b0:bc:50:49:af:e0:0e:df:f1:3f:f7:78: 60:97:e8:2c:33:aa:15:03:f0:2f:a9:b8:fe:f2:fd: 59:ca:73:bd:f9:36:a6:b2:aa:1c:4a:ff:ce:bd:a9: ba:ef:f4:24:82:75:4e:ec:1a:96:5d:99:13:e1:5e: d6:dd:89:cc:31:32:6b:5a:b5:3d:de:7f:ab:47:f6: f4:dc:34:cb:d3:5c:f1:3a:90:23:f7:7b:68:51:1b: 54:d5:e3:5a:d7:77:d6:5e:5a:60:01:cb:57:c0:56: 37:d8:c6:2b:d7:75:64:a3:7d:a8:0e:0a:3b:d5:43: f2:a9:36:43:32:35:55:45:60:97:05:93:a1:a8:8f: 08:52:95:99:27:ad:56:c2:37:ed:af:1a:78:ef:c7: b6:a7:56:ca:89:7f:02:8e:16:b5:6b:f1:29:56:b4: 52:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A2:50:B1:79:85:CC:28:27:81:AF:1A:C1:EB:D2:68:BE:74:4A:77 X509v3 Authority Key Identifier: keyid:7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:18:11:a3:86:f1:c9:cc:cd:21:27:b8:49:f5:eb:ed:d9:b8: 17:06:35:5a:ec:c9:2b:fa:09:df:0d:e8:dc:b2:5e:d1:30:06: c4:f3:55:13:9a:c5:df:d3:0f:14:d6:80:45:67:51:59:bb:18: bb:aa:2b:bd:51:5c:54:e6:72:da:4c:c1:9f:be:73:40:10:9c: 8f:1f:5f:ae:4c:00:8d:b6:b3:28:c5:78:b0:53:51:d5:59:e8: d6:bf:85:12:2e:03:d8:1e:de:e6:7e:fb:a5:b1:47:43:2b:e9: 51:90:0e:63:e0:91:c9:b9:a0:2a:94:d2:2e:fd:6e:db:dd:c1: ae:f8:2b:19:87:e6:e1:65:e0:73:74:a4:39:f5:df:ee:35:f8: 66:30:f1:db:df:5a:63:74:f1:f9:c3:4a:18:21:aa:a1:a2:97: fb:2c:f3:e1:14:e8:f3:90:76:27:3f:09:d2:f7:3f:79:68:2d: 8a:1e:1f:43:7a:12:9b:35:4a:23:42:7d:2b:db:9d:2f:21:bb: 45:9a:d2:e1:dd:e0:ff:29:03:7f:0e:d3:97:51:0a:80:1c:b9: fc:c3:55:ca:38:be:f3:98:0e:7c:8b:a3:c1:83:2a:f9:4a:5d: 62:d1:df:22:2f:a4:c5:0a:cf:38:92:7d:24:0d:09:c6:33:a2: 58:a0:c8:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ/f32GEy1PbWlYxEJIFdtd/24lkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2 QUM0RkMzMTAeFw0yNTA4MDYxOTA3MDNaFw0yNTA4MTAwNTMzMDNaMDMxMTAvBgNV BAMTKDdEQTI1MEIxNzk4NUNDMjgyNzgxQUYxQUMxRUJEMjY4QkU3NDRBNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+uHw8OYea9mNY6Nkq8scROgY8 TrSwIEtQ9dUu0vZMt9iGRdrdw3Z1uDs1K1rVECWH2AwrD/Bfl4iHfbFymxK+7avg bglb2zeAGdEPWqyMta2Ytuoerf+Vu8cEIrC8UEmv4A7f8T/3eGCX6CwzqhUD8C+p uP7y/VnKc735NqayqhxK/869qbrv9CSCdU7sGpZdmRPhXtbdicwxMmtatT3ef6tH 9vTcNMvTXPE6kCP3e2hRG1TV41rXd9ZeWmABy1fAVjfYxivXdWSjfagOCjvVQ/Kp NkMyNVVFYJcFk6GojwhSlZknrVbCN+2vGnjvx7anVsqJfwKOFrVr8SlWtFJHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfaJQsXmFzCgnga8awevSaL50SncwHwYDVR0j BBgwFoAUfVCLIlNQsNIE8ZQ/T1PU2GrE/DEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjNiMjMwYS1mZmYxLTQ3ZjAtYmY5MS03Y2ViOGQzNjA5NmUvMC83RDUwOEIyMjUz NTBCMEQyMDRGMTk0M0Y0RjUzRDREODZBQzRGQzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2QUM0 RkMzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0 RDg2QUM0RkMzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEYEaOG8cnMzSEnuEn16+3ZuBcGNVrsySv6 Cd8N6NyyXtEwBsTzVROaxd/TDxTWgEVnUVm7GLuqK71RXFTmctpMwZ++c0AQnI8f X65MAI22syjFeLBTUdVZ6Na/hRIuA9ge3uZ++6WxR0Mr6VGQDmPgkcm5oCqU0i79 btvdwa74KxmH5uFl4HN0pDn13+41+GYw8dvfWmN08fnDShghqqGil/ss8+EU6POQ dic/CdL3P3loLYoeH0N6Eps1SiNCfSvbnS8hu0Wa0uHd4P8pA38O05dRCoAcufzD Vco4vvOYDnyLo8GDKvlKXWLR3yIvpMUKzziSfSQNCcYzoligyMo= -----END CERTIFICATE-----Generated at Thu Aug 7 04:27:25 2025 by rpki-client