$ rpki-client -vvf repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft File: 7B29BAF4812476761482CE1C3A92188A2A8334CE.mft (raw, json) Hash identifier: poihA2tNo/F5siyeoNtTNzs3SOdc94oaj920UBA5/eU= Subject key identifier: 95:3D:8F:12:EA:7D:F5:7A:9B:95:BE:BD:67:A9:DD:4F:4E:2D:36:42 Authority key identifier: 7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE Certificate issuer: /CN=7B29BAF4812476761482CE1C3A92188A2A8334CE Certificate serial: 1FD4EDB6988C26B78F3DB4E14FD4313B0C428FD1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft Manifest number: 026E Signing time: Sun 15 Jun 2025 23:40:46 +0000 Manifest this update: Sun 15 Jun 2025 23:35:46 +0000 Manifest next update: Thu 19 Jun 2025 02:04:46 +0000 Files and hashes: 1: 7B29BAF4812476761482CE1C3A92188A2A8334CE.crl (hash: a6O9Al46hFUXy5PsVPh64GcKJJVvMBw3UkMkRpha4Sg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.crl rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 02:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:d4:ed:b6:98:8c:26:b7:8f:3d:b4:e1:4f:d4:31:3b:0c:42:8f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B29BAF4812476761482CE1C3A92188A2A8334CE Validity Not Before: Jun 15 23:35:46 2025 GMT Not After : Jun 19 02:04:46 2025 GMT Subject: CN=953D8F12EA7DF57A9B95BEBD67A9DD4F4E2D3642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:07:19:4c:9d:56:bd:aa:77:59:dc:22:53:c1: a8:55:7a:ef:2e:11:5b:69:0f:91:8b:d3:07:95:0b: 14:f4:47:32:c0:f7:c5:4c:80:1e:df:c3:8d:95:d6: 0c:5c:ee:b8:99:cf:87:d2:ed:43:19:ca:ad:24:3c: 40:28:9e:6d:6a:d0:3b:26:84:d8:ff:5f:55:df:ca: 59:d1:8b:80:27:c6:98:35:71:cf:4b:e0:04:32:f7: 5a:5f:67:13:7a:2b:20:84:43:7a:f1:7e:28:3e:a6: cd:84:58:03:19:88:c2:1c:5b:e5:29:fa:90:d4:df: 76:bc:0f:9c:a9:09:d6:15:df:d2:59:ab:d6:96:b5: c2:aa:4a:cd:0e:95:03:4e:7f:8c:06:8c:50:57:53: 6f:93:6c:a3:41:8e:62:ce:37:6b:ea:aa:b6:08:60: dc:07:26:21:33:cb:e5:43:c8:1f:04:75:d4:69:9b: 58:63:86:ad:f9:09:ea:ee:75:78:59:5e:16:d3:42: f8:1a:12:71:05:b5:ef:e7:30:6e:69:8e:38:03:da: ec:bd:eb:f1:29:51:0c:50:97:59:cc:e4:e9:2b:ec: 68:aa:09:b3:b3:17:42:8d:a8:fe:1c:78:af:47:f5: 2b:1f:89:f3:9c:3d:39:4d:ad:4f:53:94:33:18:8f: bc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3D:8F:12:EA:7D:F5:7A:9B:95:BE:BD:67:A9:DD:4F:4E:2D:36:42 X509v3 Authority Key Identifier: keyid:7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:49:9f:84:27:36:f4:02:42:8a:aa:3b:08:67:98:76:e4:48: a5:f0:9d:40:47:a4:15:fc:3c:cc:9b:2b:ea:b0:6a:e5:ab:79: b9:b8:8e:be:37:a7:87:7e:31:ff:eb:a1:7e:f4:78:6f:81:9c: 1b:74:28:3a:81:65:99:18:7d:0a:3e:14:e2:07:9d:29:1d:69: 3a:46:35:64:7a:b1:e7:49:07:a3:55:46:56:20:5d:fe:16:5d: 48:7c:6a:b2:b4:93:ae:10:bb:15:93:e3:21:1a:36:9d:0b:87: f4:23:a7:a4:ab:e8:db:3a:92:93:b9:50:fb:32:68:42:ad:22: 34:fe:b5:e2:d6:bd:a1:6a:df:ce:b1:ca:24:28:d5:3a:3d:8f: 47:7c:63:e0:15:09:eb:a3:4d:a9:a8:d2:16:85:28:9c:39:72: 39:33:68:07:f2:33:0a:a8:c2:9d:4a:77:bf:01:16:99:cf:62: cb:c9:99:7e:ca:a6:9e:97:a9:17:fc:fa:dc:f5:ec:dc:f3:33: 23:75:e6:46:1d:cf:4d:c2:ee:22:82:fb:a4:6b:70:32:72:f4: f6:7b:c1:b2:e6:4b:a3:12:58:ce:61:c5:4e:a7:fa:8e:05:6f: 81:32:1d:37:ed:02:41:bf:3f:e3:e4:c3:fa:10:85:74:c2:0e: 94:5e:85:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH9TttpiMJrePPbThT9QxOwxCj9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4OEEy QTgzMzRDRTAeFw0yNTA2MTUyMzM1NDZaFw0yNTA2MTkwMjA0NDZaMDMxMTAvBgNV BAMTKDk1M0Q4RjEyRUE3REY1N0E5Qjk1QkVCRDY3QTlERDRGNEUyRDM2NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBxlMnVa9qndZ3CJTwahVeu8u EVtpD5GL0weVCxT0RzLA98VMgB7fw42V1gxc7riZz4fS7UMZyq0kPEAonm1q0Dsm hNj/X1XfylnRi4Anxpg1cc9L4AQy91pfZxN6KyCEQ3rxfig+ps2EWAMZiMIcW+Up +pDU33a8D5ypCdYV39JZq9aWtcKqSs0OlQNOf4wGjFBXU2+TbKNBjmLON2vqqrYI YNwHJiEzy+VDyB8EddRpm1hjhq35CerudXhZXhbTQvgaEnEFte/nMG5pjjgD2uy9 6/EpUQxQl1nM5Okr7GiqCbOzF0KNqP4ceK9H9SsfifOcPTlNrU9TlDMYj7ylAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlT2PEup99Xqblb69Z6ndT04tNkIwHwYDVR0j BBgwFoAUeym69IEkdnYUgs4cOpIYiiqDNM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzJmM2RiNC00MWUyLTQwMjgtOTA4Yi01MDk3YzliMWMxZjUvMC83QjI5QkFGNDgx MjQ3Njc2MTQ4MkNFMUMzQTkyMTg4QTJBODMzNENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4OEEyQTgz MzRDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzcyZjNkYjQtNDFlMi00MDI4LTkw OGItNTA5N2M5YjFjMWY1LzAvN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4 OEEyQTgzMzRDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlJn4QnNvQCQoqqOwhnmHbkSKXwnUBHpBX8 PMybK+qwauWrebm4jr43p4d+Mf/roX70eG+BnBt0KDqBZZkYfQo+FOIHnSkdaTpG NWR6sedJB6NVRlYgXf4WXUh8arK0k64QuxWT4yEaNp0Lh/Qjp6Sr6Ns6kpO5UPsy aEKtIjT+teLWvaFq386xyiQo1To9j0d8Y+AVCeujTamo0haFKJw5cjkzaAfyMwqo wp1Kd78BFpnPYsvJmX7Kpp6XqRf8+tz17NzzMyN15kYdz03C7iKC+6RrcDJy9PZ7 wbLmS6MSWM5hxU6n+o4Fb4EyHTftAkG/P+Pkw/oQhXTCDpRehRI= -----END CERTIFICATE-----Generated at Mon Jun 16 04:23:01 2025 by rpki-client