$ rpki-client -vvf repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft File: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft (raw, json) Hash identifier: bMqnRPdBA3r5zuLUF6+VbF7f2oua1+5i6AY0RuD/DM4= Subject key identifier: F6:3C:CB:23:E4:C9:3E:B9:27:3A:8A:05:04:2E:FE:B8:62:0E:EA:35 Authority key identifier: D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 Certificate issuer: /CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Certificate serial: 496F184CD4CFD68C7C0A6422BBBC6118270393D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft Manifest number: F1 Signing time: Mon 04 Aug 2025 23:41:20 +0000 Manifest this update: Mon 04 Aug 2025 23:36:20 +0000 Manifest next update: Fri 08 Aug 2025 10:49:20 +0000 Files and hashes: 1: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl (hash: Jtf12K0fP+L9QxzgXl9HeJ3nYq0EHnjbDRrbz4lSDTk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 10:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:6f:18:4c:d4:cf:d6:8c:7c:0a:64:22:bb:bc:61:18:27:03:93:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Validity Not Before: Aug 4 23:36:20 2025 GMT Not After : Aug 8 10:49:20 2025 GMT Subject: CN=F63CCB23E4C93EB9273A8A05042EFEB8620EEA35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5e:06:07:5b:24:8e:dc:4a:c1:a0:25:cb:2c: d1:bc:ce:8a:16:ca:e4:c7:fc:14:f8:6e:6d:94:6b: 99:3c:19:aa:23:60:59:f0:3b:14:a5:67:63:a0:ce: 6c:45:b9:44:81:77:15:30:8b:d8:19:08:f5:f1:75: ec:95:c4:cb:47:5e:01:90:73:37:04:d7:e8:64:82: 47:a0:f8:fa:65:48:cc:e4:ca:3a:e3:16:b8:bf:df: 82:25:bc:ac:ad:07:39:1d:24:02:6f:a6:87:be:71: 0c:a5:97:72:b5:e5:15:4e:f7:92:77:f6:3d:80:94: 6a:47:4c:7c:a5:55:78:ef:cb:b1:bb:83:0c:37:66: 34:e9:24:8f:34:8b:93:16:fd:87:b9:1c:8b:1e:40: 6a:16:45:69:f6:ce:56:e1:0a:b3:f8:f5:98:01:ee: 55:40:7f:0b:9d:bc:1c:49:43:d4:46:ef:fa:04:32: 4f:60:68:39:c6:84:d2:7b:58:74:93:fe:22:69:d3: e9:72:96:51:00:b9:a8:fe:c0:b9:08:56:8f:f0:7b: e3:ba:2b:e5:56:ae:44:09:7f:df:53:27:02:f1:f7: b3:81:7f:c9:0a:34:e6:81:9f:c2:b5:8b:2f:0f:59: 88:c4:2e:c5:e2:1e:72:63:9c:5b:ed:a7:a6:4b:09: d9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3C:CB:23:E4:C9:3E:B9:27:3A:8A:05:04:2E:FE:B8:62:0E:EA:35 X509v3 Authority Key Identifier: keyid:D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:0f:97:e9:da:07:46:be:2f:e5:27:1c:68:73:59:3c:8f:d9: db:8e:e8:94:2b:7a:54:7d:57:f2:85:26:df:a2:11:f5:65:06: 65:11:6d:01:f8:da:24:c1:58:3c:45:59:0d:81:d2:25:c6:23: 28:8a:ab:e5:be:69:a5:43:b0:0a:09:47:6e:bd:b7:e1:fd:91: cd:a7:b8:c0:33:eb:b2:8c:2f:82:b4:47:42:67:ef:f5:54:3b: 89:39:13:96:34:62:30:58:75:7f:5a:32:17:61:e6:39:a2:55: 73:48:82:6c:63:d9:95:01:a9:9a:9c:d7:41:f2:d2:b6:88:8e: 90:62:1b:a4:bf:30:1f:2d:6d:73:f6:dd:9d:54:ad:6c:d4:32: 6b:eb:ab:b3:4c:6c:05:27:26:ed:7a:e4:9a:90:bb:d1:ab:78: 96:7a:c0:38:d9:68:29:de:0a:36:48:66:81:1f:da:c3:08:ca: 1b:6c:59:6c:10:dc:7f:2d:01:2a:49:92:ca:16:f6:5d:72:3a: 32:bd:fc:f3:f6:00:fb:5a:3d:99:c3:81:fe:7f:f9:ed:59:41: d9:64:35:ae:bf:45:83:c1:aa:4b:55:6d:34:fc:ee:2f:4d:d5: 4a:b4:f4:82:4f:9f:81:88:05:c6:68:30:31:89:bf:6a:3f:dc: 78:90:91:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSW8YTNTP1ox8CmQiu7xhGCcDk9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0 RDlCRDRDOTAeFw0yNTA4MDQyMzM2MjBaFw0yNTA4MDgxMDQ5MjBaMDMxMTAvBgNV BAMTKEY2M0NDQjIzRTRDOTNFQjkyNzNBOEEwNTA0MkVGRUI4NjIwRUVBMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0XgYHWySO3ErBoCXLLNG8zooW yuTH/BT4bm2Ua5k8GaojYFnwOxSlZ2OgzmxFuUSBdxUwi9gZCPXxdeyVxMtHXgGQ czcE1+hkgkeg+PplSMzkyjrjFri/34IlvKytBzkdJAJvpoe+cQyll3K15RVO95J3 9j2AlGpHTHylVXjvy7G7gww3ZjTpJI80i5MW/Ye5HIseQGoWRWn2zlbhCrP49ZgB 7lVAfwudvBxJQ9RG7/oEMk9gaDnGhNJ7WHST/iJp0+lyllEAuaj+wLkIVo/we+O6 K+VWrkQJf99TJwLx97OBf8kKNOaBn8K1iy8PWYjELsXiHnJjnFvtp6ZLCdlXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9jzLI+TJPrknOooFBC7+uGIO6jUwHwYDVR0j BBgwFoAU1/I9e1SJDw7s9VD/pCeZtk2b1MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Yjk4NTFiMS01YTZkLTRlNzUtOWZmZi1jMDNhOWM0OWNmNjkvMC9EN0YyM0Q3QjU0 ODkwRjBFRUNGNTUwRkZBNDI3OTlCNjREOUJENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0RDlC RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI5ODUxYjEtNWE2ZC00ZTc1LTlm ZmYtYzAzYTljNDljZjY5LzAvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5 QjY0RDlCRDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIPl+naB0a+L+UnHGhzWTyP2duO6JQrelR9 V/KFJt+iEfVlBmURbQH42iTBWDxFWQ2B0iXGIyiKq+W+aaVDsAoJR269t+H9kc2n uMAz67KML4K0R0Jn7/VUO4k5E5Y0YjBYdX9aMhdh5jmiVXNIgmxj2ZUBqZqc10Hy 0raIjpBiG6S/MB8tbXP23Z1UrWzUMmvrq7NMbAUnJu165JqQu9GreJZ6wDjZaCne CjZIZoEf2sMIyhtsWWwQ3H8tASpJksoW9l1yOjK9/PP2APtaPZnDgf5/+e1ZQdlk Na6/RYPBqktVbTT87i9N1Uq09IJPn4GIBcZoMDGJv2o/3HiQkf8= -----END CERTIFICATE-----Generated at Thu Aug 7 01:22:21 2025 by rpki-client