$ rpki-client -vvf repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft File: 7AD0DDB5789DE529C8697A033978C381FFE40D83.mft (raw, json) Hash identifier: P6vioc2XEMOABjQHpGeGHApkqiJoU7mY3Tkuy6g+WwU= Subject key identifier: FE:08:F3:86:9A:EA:D4:7B:E8:01:76:2C:39:07:D7:66:1D:CD:8D:5A Authority key identifier: 7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 Certificate issuer: /CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Certificate serial: 2DB566E3E13B26A17F41F1278603B99DE7DB557B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft Manifest number: 01DE Signing time: Mon 16 Jun 2025 06:41:26 +0000 Manifest this update: Mon 16 Jun 2025 06:36:26 +0000 Manifest next update: Thu 19 Jun 2025 15:42:26 +0000 Files and hashes: 1: 7AD0DDB5789DE529C8697A033978C381FFE40D83.crl (hash: ovJ87IvaEB0epIar0YI76/7aHmIOTT83Gdi/14s7pBg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 15:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b5:66:e3:e1:3b:26:a1:7f:41:f1:27:86:03:b9:9d:e7:db:55:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Validity Not Before: Jun 16 06:36:26 2025 GMT Not After : Jun 19 15:42:26 2025 GMT Subject: CN=FE08F3869AEAD47BE801762C3907D7661DCD8D5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2e:11:58:d1:7b:4e:54:57:6f:af:76:d7:df: 74:8c:86:27:d8:e4:4a:cc:b0:af:2a:e2:07:9a:0f: 4f:00:d7:83:17:1f:69:aa:4a:fb:b9:15:4f:5b:1e: d6:0b:df:87:84:58:d9:00:44:ce:ab:5f:f2:4c:7f: fa:e9:52:30:a7:af:4c:42:9b:0a:ae:b0:1d:eb:17: 8b:d8:7e:46:a1:18:cf:8a:26:4c:a0:c9:f1:f2:6d: 1d:ea:9e:1d:1d:e6:06:90:3a:51:42:e9:35:0e:c0: bc:6a:a0:3f:ed:01:1a:e8:c4:32:a7:d3:c1:6d:40: 9d:78:f5:15:05:8b:84:f6:23:87:75:5c:d1:55:72: be:f0:ba:c5:45:41:a9:28:10:6c:c1:05:e0:80:ef: a4:58:fc:5e:66:d4:c0:85:67:54:da:aa:d4:c9:d0: a3:81:04:c5:39:1a:6f:17:d7:f5:de:7a:f0:d6:c8: 70:c1:4c:cc:90:dd:2a:d2:3e:d8:66:1c:20:9d:a6: 0f:2a:3e:37:87:0f:2b:a9:17:66:e7:f7:66:04:c0: d7:48:03:a6:4c:ea:e3:37:b7:c8:a4:0c:fd:7a:d1: 10:2e:2a:97:bc:d1:b4:1d:90:e7:35:7d:4d:6b:ad: ab:3f:2e:31:7c:6a:3d:65:65:e1:98:e1:87:ee:db: 19:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:08:F3:86:9A:EA:D4:7B:E8:01:76:2C:39:07:D7:66:1D:CD:8D:5A X509v3 Authority Key Identifier: keyid:7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:78:cc:42:14:c7:ee:e9:af:e8:e0:d6:bc:6c:7d:00:3f:de: d2:2c:81:ae:b6:8b:01:a5:f4:be:45:38:82:84:6f:a5:6a:6d: d0:97:fa:fd:51:1c:3c:84:1a:ec:d0:69:13:a7:60:c8:57:89: c6:59:a6:ed:03:18:ce:70:07:d7:7c:d2:ef:8d:9d:53:03:a3: 8b:bf:a5:fc:ba:7e:ed:cb:6a:c9:2f:85:34:4d:89:7d:81:a2: 59:b1:92:da:ee:49:34:d9:dc:96:68:5b:17:13:76:96:10:dc: cd:37:2d:2b:c6:54:5d:4e:a3:40:24:3c:b1:1f:92:6f:fc:28: 28:c6:84:c4:a0:a1:4e:a6:05:a2:a2:01:a9:28:90:a0:47:49: dd:a1:c5:5f:1d:dd:32:01:3c:e7:68:11:c1:61:3b:d4:e2:f1: 58:08:bb:66:2d:5d:0d:8f:9a:29:3c:9d:5b:b5:4c:db:45:5f: f8:fe:92:90:4c:78:c0:d7:db:de:d7:30:7c:83:96:43:eb:10: c2:8e:e5:8f:72:75:67:8e:31:9a:9f:ee:be:40:ac:0b:be:6a: ee:65:a9:01:74:ae:28:67:e2:fc:6f:dd:bb:45:38:eb:79:1f: 93:20:bf:d7:88:f0:cf:44:5a:1e:02:32:f3:a7:51:0e:08:7b: 80:ad:86:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULbVm4+E7JqF/QfEnhgO5nefbVXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFG RkU0MEQ4MzAeFw0yNTA2MTYwNjM2MjZaFw0yNTA2MTkxNTQyMjZaMDMxMTAvBgNV BAMTKEZFMDhGMzg2OUFFQUQ0N0JFODAxNzYyQzM5MDdENzY2MURDRDhENUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDELhFY0XtOVFdvr3bX33SMhifY 5ErMsK8q4geaD08A14MXH2mqSvu5FU9bHtYL34eEWNkARM6rX/JMf/rpUjCnr0xC mwqusB3rF4vYfkahGM+KJkygyfHybR3qnh0d5gaQOlFC6TUOwLxqoD/tARroxDKn 08FtQJ149RUFi4T2I4d1XNFVcr7wusVFQakoEGzBBeCA76RY/F5m1MCFZ1TaqtTJ 0KOBBMU5Gm8X1/XeevDWyHDBTMyQ3SrSPthmHCCdpg8qPjeHDyupF2bn92YEwNdI A6ZM6uM3t8ikDP160RAuKpe80bQdkOc1fU1rras/LjF8aj1lZeGY4Yfu2xmFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/gjzhprq1HvoAXYsOQfXZh3NjVowHwYDVR0j BBgwFoAUetDdtXid5SnIaXoDOXjDgf/kDYMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjJiMTc4Ni0xODMzLTRkMGEtYTEzOS00NjQ0MzMzOTNkNzgvMC83QUQwRERCNTc4 OURFNTI5Qzg2OTdBMDMzOTc4QzM4MUZGRTQwRDgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFGRkU0 MEQ4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYyYjE3ODYtMTgzMy00ZDBhLWEx MzktNDY0NDMzMzkzZDc4LzAvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMz ODFGRkU0MEQ4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADl4zEIUx+7pr+jg1rxsfQA/3tIsga62iwGl 9L5FOIKEb6VqbdCX+v1RHDyEGuzQaROnYMhXicZZpu0DGM5wB9d80u+NnVMDo4u/ pfy6fu3LaskvhTRNiX2BolmxktruSTTZ3JZoWxcTdpYQ3M03LSvGVF1Oo0AkPLEf km/8KCjGhMSgoU6mBaKiAakokKBHSd2hxV8d3TIBPOdoEcFhO9Ti8VgIu2YtXQ2P mik8nVu1TNtFX/j+kpBMeMDX297XMHyDlkPrEMKO5Y9ydWeOMZqf7r5ArAu+au5l qQF0rihn4vxv3btFOOt5H5Mgv9eI8M9EWh4CMvOnUQ4Ie4Cthqw= -----END CERTIFICATE-----Generated at Tue Jun 17 20:14:22 2025 by rpki-client