$ rpki-client -vvf repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft File: 7188210EAEFBA7947009E19B6219830752F542A9.mft (raw, json) Hash identifier: xd4dHSdIEs01pHBfowc47h6A3QQxf5oV9TlATe9BFo0= Subject key identifier: 74:2B:09:48:57:A1:70:32:18:78:4E:29:15:25:B1:CC:F6:55:8E:10 Authority key identifier: 71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 Certificate issuer: /CN=7188210EAEFBA7947009E19B6219830752F542A9 Certificate serial: 35F4D488779C6B26A3674271D77DFF38247815CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft Manifest number: 017C Signing time: Sun 15 Jun 2025 14:31:06 +0000 Manifest this update: Sun 15 Jun 2025 14:26:06 +0000 Manifest next update: Wed 18 Jun 2025 23:05:06 +0000 Files and hashes: 1: 7188210EAEFBA7947009E19B6219830752F542A9.crl (hash: Y41lQTO0tetodPlaOSV3/VFkQRDX3i9BNKeIXvTS9yE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f4:d4:88:77:9c:6b:26:a3:67:42:71:d7:7d:ff:38:24:78:15:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7188210EAEFBA7947009E19B6219830752F542A9 Validity Not Before: Jun 15 14:26:06 2025 GMT Not After : Jun 18 23:05:06 2025 GMT Subject: CN=742B094857A1703218784E291525B1CCF6558E10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9c:82:f5:58:fe:42:28:fd:58:32:0a:39:e3: 94:3e:78:cb:b6:98:93:00:ba:dd:5c:cd:e1:c5:81: cf:66:55:fd:16:2a:c9:09:ca:a3:75:26:e0:a8:7e: 5c:57:db:d2:07:0c:01:2d:91:27:bc:9c:9b:37:21: ee:9e:bc:72:89:34:e4:da:82:52:93:d6:ca:35:58: ba:15:f1:6a:97:3d:88:05:f9:fa:6a:42:9f:85:e9: 9d:c0:86:2c:b5:fa:a8:c8:ad:13:55:98:dc:c6:f2: b2:bd:4b:11:c6:09:73:a3:29:c9:67:71:db:02:5b: f4:df:e6:bc:8c:24:9c:34:4c:46:59:16:ce:59:65: da:69:bc:e4:bb:7d:37:52:6d:08:05:94:2a:ae:b3: 18:f1:66:16:3d:cf:35:76:7a:16:1e:a1:8b:f1:da: 2a:ce:95:13:53:9d:36:6a:9b:20:53:30:a8:6b:56: 46:12:53:29:61:cb:59:1f:32:83:f4:8b:34:1c:54: 8e:49:8b:c5:74:63:c7:1e:f1:d9:61:c1:c9:f6:03: de:8c:ef:97:c1:6b:59:82:8c:64:6f:cb:d1:d8:45: af:15:c8:77:83:36:ee:30:23:af:d4:0e:35:27:29: 83:c8:3d:55:78:09:f4:0d:99:82:7c:d8:77:48:3a: 2f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2B:09:48:57:A1:70:32:18:78:4E:29:15:25:B1:CC:F6:55:8E:10 X509v3 Authority Key Identifier: keyid:71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:9c:7d:1d:92:26:ff:6f:70:51:c5:48:c7:5d:f9:88:87:cd: 9c:a2:de:4e:ac:18:6e:18:da:22:ca:66:bb:92:0d:c1:80:75: 88:0e:95:36:4b:36:1f:a2:2d:e3:bb:7f:3d:2c:b0:e5:b1:4c: d0:ee:b7:0f:69:73:1f:af:20:60:2d:d5:c7:2c:cc:67:77:62: f1:4f:f7:87:15:5f:f9:bd:e3:c8:81:49:56:79:34:a7:aa:bc: 61:0e:3c:61:c3:cb:97:e4:4c:35:02:9a:91:e2:55:20:05:68: 4b:80:47:c0:b0:18:f3:c0:34:20:de:73:5e:ac:85:cd:40:27: bf:f3:0d:a7:e7:37:d5:11:22:16:41:83:ae:9b:07:7b:c7:6e: 69:55:e5:b7:e6:ad:a9:36:48:f4:e6:a6:90:65:e3:3c:8a:f4: 48:e8:32:a1:09:c0:ca:38:9e:44:26:05:17:e0:66:95:a1:25: 90:16:ac:4a:76:4c:f7:3e:71:00:23:9f:b0:b0:a8:c3:15:d4: 82:5c:56:96:a3:99:97:fe:b2:5e:0d:4b:00:e3:52:e8:46:19: 52:bc:33:dc:b3:f9:51:e7:ab:d0:a4:aa:fb:76:c3:75:fc:84: 45:7d:ad:0c:ad:3c:09:a1:7f:92:4a:31:5d:f4:79:87:24:50: f8:56:e9:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNfTUiHecayajZ0Jx133/OCR4FcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1 MkY1NDJBOTAeFw0yNTA2MTUxNDI2MDZaFw0yNTA2MTgyMzA1MDZaMDMxMTAvBgNV BAMTKDc0MkIwOTQ4NTdBMTcwMzIxODc4NEUyOTE1MjVCMUNDRjY1NThFMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYnIL1WP5CKP1YMgo545Q+eMu2 mJMAut1czeHFgc9mVf0WKskJyqN1JuCoflxX29IHDAEtkSe8nJs3Ie6evHKJNOTa glKT1so1WLoV8WqXPYgF+fpqQp+F6Z3Ahiy1+qjIrRNVmNzG8rK9SxHGCXOjKcln cdsCW/Tf5ryMJJw0TEZZFs5ZZdppvOS7fTdSbQgFlCqusxjxZhY9zzV2ehYeoYvx 2irOlRNTnTZqmyBTMKhrVkYSUylhy1kfMoP0izQcVI5Ji8V0Y8ce8dlhwcn2A96M 75fBa1mCjGRvy9HYRa8VyHeDNu4wI6/UDjUnKYPIPVV4CfQNmYJ82HdIOi81AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdCsJSFehcDIYeE4pFSWxzPZVjhAwHwYDVR0j BBgwFoAUcYghDq77p5RwCeGbYhmDB1L1QqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTdkN2IzOC1kNjZiLTQzYjMtOTFmYi00YmI5ZTY2MzdlMmEvMC83MTg4MjEwRUFF RkJBNzk0NzAwOUUxOUI2MjE5ODMwNzUyRjU0MkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1MkY1 NDJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE3ZDdiMzgtZDY2Yi00M2IzLTkx ZmItNGJiOWU2NjM3ZTJhLzAvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgz MDc1MkY1NDJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqcfR2SJv9vcFHFSMdd+YiHzZyi3k6sGG4Y 2iLKZruSDcGAdYgOlTZLNh+iLeO7fz0ssOWxTNDutw9pcx+vIGAt1ccszGd3YvFP 94cVX/m948iBSVZ5NKeqvGEOPGHDy5fkTDUCmpHiVSAFaEuAR8CwGPPANCDec16s hc1AJ7/zDafnN9URIhZBg66bB3vHbmlV5bfmrak2SPTmppBl4zyK9EjoMqEJwMo4 nkQmBRfgZpWhJZAWrEp2TPc+cQAjn7CwqMMV1IJcVpajmZf+sl4NSwDjUuhGGVK8 M9yz+VHnq9Ckqvt2w3X8hEV9rQytPAmhf5JKMV30eYckUPhW6cU= -----END CERTIFICATE-----Generated at Sun Jun 15 19:02:05 2025 by rpki-client