$ rpki-client -vvf repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft File: 7AD0DDB5789DE529C8697A033978C381FFE40D83.mft (raw, json) Hash identifier: N1bKMqRkiXj2iyd1iAXfyV8PA2QMt4bDvwysliHMsIk= Subject key identifier: 10:D3:B1:88:29:DB:20:04:C5:04:DE:D7:2A:31:4E:A3:3E:D1:5E:B4 Authority key identifier: 7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 Certificate issuer: /CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Certificate serial: 58F3388C4C3D6C28441DCCDCA98F208CE9085122 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft Manifest number: 01C9 Signing time: Wed 30 Apr 2025 14:01:25 +0000 Manifest this update: Wed 30 Apr 2025 13:56:25 +0000 Manifest next update: Sat 03 May 2025 17:06:25 +0000 Files and hashes: 1: 7AD0DDB5789DE529C8697A033978C381FFE40D83.crl (hash: UPjGRNxyEBAnkQFNj7WqiAjvm2F697o/DuXBHePYFtM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 17:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f3:38:8c:4c:3d:6c:28:44:1d:cc:dc:a9:8f:20:8c:e9:08:51:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Validity Not Before: Apr 30 13:56:25 2025 GMT Not After : May 3 17:06:25 2025 GMT Subject: CN=10D3B18829DB2004C504DED72A314EA33ED15EB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:57:b3:e6:d3:4e:1c:85:1d:50:64:97:22:09: b3:3a:99:a7:5f:6a:0a:71:55:ff:62:9c:9f:3f:ce: 64:42:ce:ef:e3:12:38:d2:ab:03:18:75:bf:b9:44: c5:be:dc:b9:24:35:1e:b1:f0:7b:3e:50:5e:7d:7d: b1:c6:90:51:b0:41:c0:eb:23:5f:78:f5:22:8e:75: 33:d9:c5:24:d0:68:2c:01:9f:f8:83:dc:04:b8:65: 09:17:48:e7:a8:04:f8:d2:01:a5:00:70:9a:1a:41: 20:9f:90:e6:6c:c1:ee:99:cb:e7:10:40:b7:29:5d: 0b:ec:4d:17:a1:7a:29:2a:f1:98:a6:7c:84:12:dc: b0:4c:12:37:80:17:f5:01:d0:a0:94:f1:cd:fb:45: bf:8b:e7:02:c5:94:18:3b:51:7c:db:ea:6e:01:f1: fe:d2:bf:a4:16:1b:be:2d:51:47:8a:3b:b1:66:7b: e9:ff:71:0a:7b:79:1c:3f:74:a4:14:91:5f:02:0c: 0a:fe:c5:5f:28:70:87:55:ca:91:57:2c:ac:24:1d: e4:be:51:a1:b9:5e:aa:e7:e9:25:9d:6a:31:c2:45: b6:5b:cf:af:b5:8a:70:03:dd:9b:e3:51:dc:bc:73: 18:0b:83:42:af:2a:22:89:22:6d:72:2c:15:d6:e6: 22:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D3:B1:88:29:DB:20:04:C5:04:DE:D7:2A:31:4E:A3:3E:D1:5E:B4 X509v3 Authority Key Identifier: keyid:7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d7:4f:4f:71:bb:a2:aa:a3:ab:54:ec:0a:e4:1d:94:40:3c: 22:f5:76:53:1a:b7:9a:7c:d1:0e:42:d7:6f:11:f1:8b:8a:44: 75:fb:89:37:e2:5d:64:ad:6b:18:dd:c6:ab:e6:31:4e:c9:1c: 0e:21:30:f6:e9:69:85:06:72:90:d9:3e:65:8f:24:76:26:ab: 2e:c0:7b:0c:4d:6a:45:bb:bf:c0:df:48:21:af:ef:b3:8f:7e: 44:6d:7c:f8:82:84:fe:30:40:5d:f9:c2:fa:98:7a:94:cf:9e: 24:89:6f:e7:f4:7f:47:3d:7c:ab:ee:7c:57:8d:62:3a:9c:66: 42:1c:cc:03:e8:f7:ae:5c:fd:d5:bb:7e:c2:2f:86:1f:0a:4d: 8b:74:1c:64:ec:e0:d6:ed:67:07:f7:74:5e:5d:2f:31:1c:73: 77:85:07:ef:4e:72:10:c0:93:83:41:b1:d8:b1:e5:15:fd:66: 97:e5:23:c4:93:0e:91:cd:e8:7f:5a:de:8f:e1:3e:8c:60:c4: a9:7a:06:c5:62:2d:45:57:07:4e:47:2b:ae:45:45:55:10:b2: 00:3c:23:7a:2a:ff:d1:7c:44:48:92:f3:2d:55:c0:8f:11:66: 89:ef:e3:04:2c:b6:9a:8a:3d:e8:00:99:6e:32:6c:22:ea:3e: 2e:0f:fd:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWPM4jEw9bChEHczcqY8gjOkIUSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFG RkU0MEQ4MzAeFw0yNTA0MzAxMzU2MjVaFw0yNTA1MDMxNzA2MjVaMDMxMTAvBgNV BAMTKDEwRDNCMTg4MjlEQjIwMDRDNTA0REVENzJBMzE0RUEzM0VEMTVFQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGV7Pm004chR1QZJciCbM6madf agpxVf9inJ8/zmRCzu/jEjjSqwMYdb+5RMW+3LkkNR6x8Hs+UF59fbHGkFGwQcDr I1949SKOdTPZxSTQaCwBn/iD3AS4ZQkXSOeoBPjSAaUAcJoaQSCfkOZswe6Zy+cQ QLcpXQvsTReheikq8ZimfIQS3LBMEjeAF/UB0KCU8c37Rb+L5wLFlBg7UXzb6m4B 8f7Sv6QWG74tUUeKO7Fme+n/cQp7eRw/dKQUkV8CDAr+xV8ocIdVypFXLKwkHeS+ UaG5Xqrn6SWdajHCRbZbz6+1inAD3ZvjUdy8cxgLg0KvKiKJIm1yLBXW5iJjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUENOxiCnbIATFBN7XKjFOoz7RXrQwHwYDVR0j BBgwFoAUetDdtXid5SnIaXoDOXjDgf/kDYMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjJiMTc4Ni0xODMzLTRkMGEtYTEzOS00NjQ0MzMzOTNkNzgvMC83QUQwRERCNTc4 OURFNTI5Qzg2OTdBMDMzOTc4QzM4MUZGRTQwRDgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFGRkU0 MEQ4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYyYjE3ODYtMTgzMy00ZDBhLWEx MzktNDY0NDMzMzkzZDc4LzAvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMz ODFGRkU0MEQ4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7XT09xu6Kqo6tU7ArkHZRAPCL1dlMat5p8 0Q5C128R8YuKRHX7iTfiXWStaxjdxqvmMU7JHA4hMPbpaYUGcpDZPmWPJHYmqy7A ewxNakW7v8DfSCGv77OPfkRtfPiChP4wQF35wvqYepTPniSJb+f0f0c9fKvufFeN YjqcZkIczAPo965c/dW7fsIvhh8KTYt0HGTs4NbtZwf3dF5dLzEcc3eFB+9OchDA k4NBsdix5RX9ZpflI8STDpHN6H9a3o/hPoxgxKl6BsViLUVXB05HK65FRVUQsgA8 I3oq/9F8REiS8y1VwI8RZonv4wQstpqKPegAmW4ybCLqPi4P/cA= -----END CERTIFICATE-----Generated at Thu May 1 11:16:48 2025 by rpki-client