$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft File: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft (raw, json) Hash identifier: Vt/HhFMI32h/cP+D1FvQxgd3AnOYP1KVKBl9PDzbrC4= Subject key identifier: B5:35:B2:78:07:6B:6C:11:00:29:AB:27:94:3D:4A:B4:B7:0D:FA:79 Authority key identifier: A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 Certificate issuer: /CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Certificate serial: 66EACB51920E893F1E07F1FEE9DEEE4AD55EC3B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft Manifest number: 01A8 Signing time: Sun 15 Jun 2025 09:51:24 +0000 Manifest this update: Sun 15 Jun 2025 09:46:24 +0000 Manifest next update: Wed 18 Jun 2025 15:43:24 +0000 Files and hashes: 1: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl (hash: GjjxIvNOJeBRraU31sZ5lePc3/7ckWa0B9c6jWGhopI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ea:cb:51:92:0e:89:3f:1e:07:f1:fe:e9:de:ee:4a:d5:5e:c3:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Validity Not Before: Jun 15 09:46:24 2025 GMT Not After : Jun 18 15:43:24 2025 GMT Subject: CN=B535B278076B6C110029AB27943D4AB4B70DFA79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fe:fd:7b:83:0c:96:4a:43:83:a9:eb:15:69: c5:89:fa:93:dd:f0:6e:d0:9f:2d:bc:e5:b0:e2:3b: f7:c2:01:70:d8:55:e5:c7:9e:89:20:0a:92:a2:6e: 3c:62:01:f8:69:27:38:d5:84:c0:5a:18:fb:44:0c: 82:5b:c5:99:37:f6:e6:cb:8c:7c:b9:49:af:d1:1c: 2e:b3:da:98:01:16:bc:dd:25:cf:15:0b:24:32:63: a7:da:01:ec:c1:c8:4b:5b:1a:c7:e6:33:14:9f:95: 14:26:38:8b:d0:14:48:58:b0:a6:6c:02:77:2c:4b: f1:f3:cf:d5:94:16:2d:b2:a1:f7:0c:17:67:ce:53: b5:32:d9:62:0b:a0:a4:d9:3d:25:d8:24:a9:ae:30: d1:a3:42:33:99:cb:dd:97:52:bb:f0:e6:35:87:22: e9:2d:10:27:22:18:7a:b4:5f:35:23:dd:e5:a5:5b: ae:f5:e5:2f:a1:fd:14:a4:dd:bb:2d:d7:ee:3c:a7: 02:a4:64:91:b0:9f:f7:61:38:21:b2:9c:52:00:91: 93:0e:b0:47:14:13:d0:49:5b:ce:c4:1f:fc:84:97: 3e:8c:ec:89:90:9d:42:3f:13:93:02:28:51:83:9a: 3b:f7:8a:47:62:79:85:31:46:a1:6b:8b:c7:ab:95: f8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:35:B2:78:07:6B:6C:11:00:29:AB:27:94:3D:4A:B4:B7:0D:FA:79 X509v3 Authority Key Identifier: keyid:A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:11:01:43:3a:bf:7d:75:4a:85:ef:95:92:cb:06:03:e1:b2: 5e:e3:3d:ec:6f:43:21:b8:c6:01:84:49:6f:aa:b5:1f:f6:79: ea:73:e5:e2:35:4f:f3:64:2d:d3:d5:8a:ef:98:eb:ec:a3:3d: d8:60:bd:af:af:8e:d7:e6:e5:b9:c4:81:99:cd:11:6b:15:f9: 62:ed:98:a3:4d:66:81:34:0e:8d:db:ee:05:3a:d2:69:cc:ba: c5:af:21:b8:c7:21:d1:54:d8:3d:be:90:91:30:9d:73:9a:05: d0:97:ba:f1:5e:08:dc:d9:9b:b3:f2:e7:e4:2a:06:54:34:0b: c5:8b:ab:60:b4:d4:87:42:8d:6f:17:34:94:69:d5:3e:9d:d7: 3f:cc:0c:f4:34:83:39:d8:82:21:ec:6c:cc:71:39:d7:31:6f: a2:17:15:3a:8c:62:0d:f8:09:22:bd:92:15:92:bd:fd:c2:b3: e4:c9:cb:7a:33:ad:4e:cb:23:29:3b:da:e4:3a:ea:45:fb:21: b5:67:e1:45:66:75:e9:6f:34:46:1a:05:a9:68:b6:ea:6c:34: 38:a2:d4:cf:fc:08:a6:81:d2:d1:aa:1b:f7:ef:c3:ac:bb:67: 50:12:15:48:f9:a8:6d:97:8b:be:5a:e9:22:c6:b6:a6:35:eb: 61:04:f0:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZurLUZIOiT8eB/H+6d7uStVew7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4 RjM2NjlGODAeFw0yNTA2MTUwOTQ2MjRaFw0yNTA2MTgxNTQzMjRaMDMxMTAvBgNV BAMTKEI1MzVCMjc4MDc2QjZDMTEwMDI5QUIyNzk0M0Q0QUI0QjcwREZBNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi/v17gwyWSkODqesVacWJ+pPd 8G7Qny285bDiO/fCAXDYVeXHnokgCpKibjxiAfhpJzjVhMBaGPtEDIJbxZk39ubL jHy5Sa/RHC6z2pgBFrzdJc8VCyQyY6faAezByEtbGsfmMxSflRQmOIvQFEhYsKZs AncsS/Hzz9WUFi2yofcMF2fOU7Uy2WILoKTZPSXYJKmuMNGjQjOZy92XUrvw5jWH IuktECciGHq0XzUj3eWlW6715S+h/RSk3bst1+48pwKkZJGwn/dhOCGynFIAkZMO sEcUE9BJW87EH/yElz6M7ImQnUI/E5MCKFGDmjv3ikdieYUxRqFri8erlfhvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtTWyeAdrbBEAKasnlD1KtLcN+nkwHwYDVR0j BBgwFoAUp9znZH+ndafp30Tq76xSEY82afgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2YzMGUyNy1iOTVlLTRkNzUtOTY4ZC01MzhmYjc5MTg4MjkvMC9BN0RDRTc2NDdG QTc3NUE3RTlERjQ0RUFFRkFDNTIxMThGMzY2OUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4RjM2 NjlGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmMzBlMjctYjk1ZS00ZDc1LTk2 OGQtNTM4ZmI3OTE4ODI5LzAvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUy MTE4RjM2NjlGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKARAUM6v311SoXvlZLLBgPhsl7jPexvQyG4 xgGESW+qtR/2eepz5eI1T/NkLdPViu+Y6+yjPdhgva+vjtfm5bnEgZnNEWsV+WLt mKNNZoE0Do3b7gU60mnMusWvIbjHIdFU2D2+kJEwnXOaBdCXuvFeCNzZm7Py5+Qq BlQ0C8WLq2C01IdCjW8XNJRp1T6d1z/MDPQ0gznYgiHsbMxxOdcxb6IXFTqMYg34 CSK9khWSvf3Cs+TJy3ozrU7LIyk72uQ66kX7IbVn4UVmdelvNEYaBalotupsNDii 1M/8CKaB0tGqG/fvw6y7Z1ASFUj5qG2Xi75a6SLGtqY162EE8Cg= -----END CERTIFICATE-----Generated at Sun Jun 15 15:20:44 2025 by rpki-client