$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft File: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft (raw, json) Hash identifier: wMVvjGdYe/gWE2tHUsQ0vMMMQq9y0WSKleAc1YfSFr8= Subject key identifier: 39:86:43:7A:DE:B1:8C:6F:42:2D:15:A4:30:22:50:23:2A:DA:BF:C3 Authority key identifier: A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 Certificate issuer: /CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Certificate serial: 68BFA1FB34E5E1A3CCF704DDE00FF1440DD94428 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft Manifest number: 0192 Signing time: Sun 27 Apr 2025 07:31:23 +0000 Manifest this update: Sun 27 Apr 2025 07:26:23 +0000 Manifest next update: Wed 30 Apr 2025 15:01:23 +0000 Files and hashes: 1: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl (hash: W1t6mSUXUQ6hmKopB/xFMlyt1P7ZnBHyfKuCu6iSQxk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 15:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:bf:a1:fb:34:e5:e1:a3:cc:f7:04:dd:e0:0f:f1:44:0d:d9:44:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Validity Not Before: Apr 27 07:26:23 2025 GMT Not After : Apr 30 15:01:23 2025 GMT Subject: CN=3986437ADEB18C6F422D15A4302250232ADABFC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d8:74:86:7f:80:79:b3:b1:89:0e:e0:61:3d: 72:6d:c6:b0:21:b6:81:12:82:58:aa:dc:83:4e:6b: 0e:14:6f:c4:f4:30:5d:36:08:74:19:65:1f:88:60: a0:a7:f3:e8:9e:9d:07:26:88:f9:ed:cc:65:ab:03: 0b:16:a1:b9:fa:e3:8c:09:04:44:f8:e0:2f:c2:4c: 24:08:bd:3a:03:b3:fd:a6:e0:f5:aa:dd:3c:d1:63: ee:aa:8c:76:34:be:45:26:69:69:fc:26:50:64:0e: c6:29:9d:79:b2:91:58:de:04:53:64:0e:fd:66:ec: 64:e1:c2:1c:a0:26:0f:6d:df:2c:d4:b5:c3:94:1c: 46:a5:70:d0:48:c3:48:1f:cb:d2:54:f3:8e:f7:58: 15:df:0c:74:08:9f:a0:ef:35:0f:24:32:c2:2a:83: 82:52:4e:fd:4f:82:3a:fa:f5:76:59:fb:09:e3:01: 5f:34:98:98:60:e4:e9:98:8c:fc:47:0f:51:ba:5b: 18:46:44:90:0a:c3:46:ec:1a:0d:c5:aa:86:b7:30: 7c:e5:b2:ce:d2:3c:21:5b:65:76:3b:5a:71:fe:60: f7:85:80:aa:3a:4e:b7:53:f4:80:d9:41:9d:25:06: 8f:58:8b:a2:55:b8:a9:4a:84:7b:e0:0b:20:e2:69: 93:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:86:43:7A:DE:B1:8C:6F:42:2D:15:A4:30:22:50:23:2A:DA:BF:C3 X509v3 Authority Key Identifier: keyid:A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:f0:c8:3f:09:db:1c:d2:ad:77:20:6d:1f:99:72:e7:44:9d: f0:d1:8d:13:98:83:80:f9:71:d6:de:cc:7a:01:02:07:9b:14: 0a:fc:87:68:a0:ec:d0:d9:84:81:43:5f:d0:ff:1f:c1:b5:25: 1d:f8:ba:de:ba:ce:ce:41:86:8a:f7:6d:72:1b:e4:b7:3b:54: 8e:74:c2:44:6a:48:2b:50:e3:1b:2d:75:5c:47:a8:08:72:d4: 94:94:a2:ef:a1:22:08:39:0f:b0:82:2d:34:e5:ee:7a:b4:e0: b0:cd:91:67:88:76:25:d8:dd:e0:66:d2:6b:96:e8:31:6c:59: e1:fc:6e:31:ad:32:56:5f:e8:60:38:c3:26:7c:6c:8b:a2:f3: c0:9a:9c:dd:68:f0:b8:26:b6:9c:2d:04:99:83:22:55:eb:23: 89:32:8f:70:96:0c:dd:67:a7:d3:62:86:86:d3:26:47:e2:63: ce:6d:16:30:f0:fc:29:9b:42:54:5a:96:cf:5d:e8:79:75:e5: d2:20:e7:52:22:de:fc:b7:0d:d3:3d:70:26:56:d4:4d:10:13: a1:14:97:82:7b:99:b3:e7:5b:68:3f:ef:55:30:45:fb:2c:98: 86:c1:c2:5c:2c:28:e8:fc:39:15:5e:88:ee:c8:41:15:d8:12: c4:b6:db:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaL+h+zTl4aPM9wTd4A/xRA3ZRCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4 RjM2NjlGODAeFw0yNTA0MjcwNzI2MjNaFw0yNTA0MzAxNTAxMjNaMDMxMTAvBgNV BAMTKDM5ODY0MzdBREVCMThDNkY0MjJEMTVBNDMwMjI1MDIzMkFEQUJGQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA2HSGf4B5s7GJDuBhPXJtxrAh toESgliq3INOaw4Ub8T0MF02CHQZZR+IYKCn8+ienQcmiPntzGWrAwsWobn644wJ BET44C/CTCQIvToDs/2m4PWq3TzRY+6qjHY0vkUmaWn8JlBkDsYpnXmykVjeBFNk Dv1m7GThwhygJg9t3yzUtcOUHEalcNBIw0gfy9JU8473WBXfDHQIn6DvNQ8kMsIq g4JSTv1Pgjr69XZZ+wnjAV80mJhg5OmYjPxHD1G6WxhGRJAKw0bsGg3Fqoa3MHzl ss7SPCFbZXY7WnH+YPeFgKo6TrdT9IDZQZ0lBo9Yi6JVuKlKhHvgCyDiaZNBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOYZDet6xjG9CLRWkMCJQIyrav8MwHwYDVR0j BBgwFoAUp9znZH+ndafp30Tq76xSEY82afgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2YzMGUyNy1iOTVlLTRkNzUtOTY4ZC01MzhmYjc5MTg4MjkvMC9BN0RDRTc2NDdG QTc3NUE3RTlERjQ0RUFFRkFDNTIxMThGMzY2OUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4RjM2 NjlGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmMzBlMjctYjk1ZS00ZDc1LTk2 OGQtNTM4ZmI3OTE4ODI5LzAvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUy MTE4RjM2NjlGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDwyD8J2xzSrXcgbR+ZcudEnfDRjROYg4D5 cdbezHoBAgebFAr8h2ig7NDZhIFDX9D/H8G1JR34ut66zs5Bhor3bXIb5Lc7VI50 wkRqSCtQ4xstdVxHqAhy1JSUou+hIgg5D7CCLTTl7nq04LDNkWeIdiXY3eBm0muW 6DFsWeH8bjGtMlZf6GA4wyZ8bIui88CanN1o8LgmtpwtBJmDIlXrI4kyj3CWDN1n p9NihobTJkfiY85tFjDw/CmbQlRals9d6Hl15dIg51Ii3vy3DdM9cCZW1E0QE6EU l4J7mbPnW2g/71UwRfssmIbBwlwsKOj8ORVeiO7IQRXYEsS22y0= -----END CERTIFICATE-----Generated at Tue Apr 29 06:28:31 2025 by rpki-client