$ rpki-client -vvf repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft File: 7188210EAEFBA7947009E19B6219830752F542A9.mft (raw, json) Hash identifier: PZdd0JNmFWauE/UMzf0Ry7uc57ZXtlvbuFxP2N4WqJo= Subject key identifier: AA:5C:AF:70:78:43:6B:75:86:94:FD:BA:51:05:71:BA:54:20:B8:13 Authority key identifier: 71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 Certificate issuer: /CN=7188210EAEFBA7947009E19B6219830752F542A9 Certificate serial: 78F599D77E7F59032BB75FA377A47907921AB4E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft Manifest number: 0195 Signing time: Mon 11 Aug 2025 01:31:09 +0000 Manifest this update: Mon 11 Aug 2025 01:26:09 +0000 Manifest next update: Thu 14 Aug 2025 05:21:09 +0000 Files and hashes: 1: 7188210EAEFBA7947009E19B6219830752F542A9.crl (hash: OKvLTkul9hK2RW8+kbrjuA+L0ddrK+kBOW8LHcULqGc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f5:99:d7:7e:7f:59:03:2b:b7:5f:a3:77:a4:79:07:92:1a:b4:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7188210EAEFBA7947009E19B6219830752F542A9 Validity Not Before: Aug 11 01:26:09 2025 GMT Not After : Aug 14 05:21:09 2025 GMT Subject: CN=AA5CAF7078436B758694FDBA510571BA5420B813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:50:a4:e0:b3:5f:f9:14:00:84:ed:fd:23: 72:bb:0c:a8:9c:1a:48:60:4c:ec:03:ad:46:c8:12: 8e:05:de:bb:3c:08:af:18:60:a4:7c:74:c5:ea:e2: 75:e3:a2:3d:38:9e:0c:28:a3:8d:dd:08:69:45:79: d8:5a:59:97:e1:3f:bc:42:a8:a4:e3:2e:85:21:7e: 81:b0:60:a4:bf:9a:0c:bc:8f:a1:04:70:1a:2d:2d: 6b:2f:65:aa:3e:b7:5b:4b:f6:c2:d4:aa:54:80:6f: c8:d1:2a:ce:a1:76:67:ba:e2:58:5f:9b:ed:c2:33: 4a:90:3e:d3:66:9e:f7:38:85:c9:80:b2:c7:c9:c9: a9:b8:9a:14:e3:5b:ae:a2:8c:ec:22:0b:cc:39:86: 37:d5:41:b2:3f:f6:3a:67:97:60:10:07:46:f6:24: d7:30:40:b2:ad:6b:4b:b0:4a:bb:7f:43:b1:a3:ac: e1:18:98:2e:ef:51:3b:94:35:4f:1f:39:87:16:ff: 70:0b:2a:7f:b6:7e:fb:be:25:56:db:fe:68:f4:4c: 2c:a1:08:48:62:06:01:a3:c0:88:0b:c6:fd:96:8c: f8:44:77:98:ce:9b:6d:5a:e0:9d:aa:03:71:92:b7: 71:17:41:91:e1:20:c3:9c:12:e3:09:d4:e4:c1:cd: ce:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5C:AF:70:78:43:6B:75:86:94:FD:BA:51:05:71:BA:54:20:B8:13 X509v3 Authority Key Identifier: keyid:71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:79:a1:99:f4:44:1f:86:6e:dd:3c:aa:74:1a:3d:d4:36:0f: 1e:0d:45:d9:21:11:f9:5b:3f:53:3e:d2:e1:d8:ee:7a:08:22: 8d:f6:ee:71:d9:40:8d:49:3e:f0:5a:fa:d5:d4:74:a1:d6:b5: 34:e2:53:6f:50:66:7c:c0:6c:03:fb:04:07:6c:00:c9:c6:d4: d3:9f:f9:4f:c7:85:f0:2a:00:9f:e1:0b:3b:ee:df:5f:bf:64: 2a:17:de:b2:d1:a8:49:7c:de:ef:fc:c0:d1:1b:36:7a:78:9f: 0b:d5:52:2b:32:10:46:87:41:3c:ba:12:8e:13:37:5a:a9:96: e3:5c:1e:f1:a5:fd:f6:c1:91:b5:cf:5c:c3:c3:65:ee:b7:1e: 26:90:ce:e2:d8:2f:ea:89:4f:dd:34:2c:8c:5a:0e:b3:91:af: 77:d9:c5:37:bd:3c:55:65:8b:5f:93:5c:69:82:e8:46:5f:38: e6:12:49:4b:02:cb:d1:2d:5b:ee:07:dd:cc:a9:31:e7:36:cf: 72:4e:26:40:c5:5f:28:98:88:cb:b9:08:fc:a7:9b:12:59:7b: d6:8c:48:5f:61:8a:42:28:7b:5e:0b:93:63:ac:e7:e7:f9:de: 8f:0e:94:fe:50:0a:c0:91:20:0c:9d:88:7c:02:c1:13:f6:5c: 7f:26:1d:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUePWZ135/WQMrt1+jd6R5B5IatOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1 MkY1NDJBOTAeFw0yNTA4MTEwMTI2MDlaFw0yNTA4MTQwNTIxMDlaMDMxMTAvBgNV BAMTKEFBNUNBRjcwNzg0MzZCNzU4Njk0RkRCQTUxMDU3MUJBNTQyMEI4MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC651Ck4LNf+RQAhO39I3K7DKic GkhgTOwDrUbIEo4F3rs8CK8YYKR8dMXq4nXjoj04ngwoo43dCGlFedhaWZfhP7xC qKTjLoUhfoGwYKS/mgy8j6EEcBotLWsvZao+t1tL9sLUqlSAb8jRKs6hdme64lhf m+3CM0qQPtNmnvc4hcmAssfJyam4mhTjW66ijOwiC8w5hjfVQbI/9jpnl2AQB0b2 JNcwQLKta0uwSrt/Q7GjrOEYmC7vUTuUNU8fOYcW/3ALKn+2fvu+JVbb/mj0TCyh CEhiBgGjwIgLxv2WjPhEd5jOm21a4J2qA3GSt3EXQZHhIMOcEuMJ1OTBzc51AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqlyvcHhDa3WGlP26UQVxulQguBMwHwYDVR0j BBgwFoAUcYghDq77p5RwCeGbYhmDB1L1QqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTdkN2IzOC1kNjZiLTQzYjMtOTFmYi00YmI5ZTY2MzdlMmEvMC83MTg4MjEwRUFF RkJBNzk0NzAwOUUxOUI2MjE5ODMwNzUyRjU0MkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1MkY1 NDJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE3ZDdiMzgtZDY2Yi00M2IzLTkx ZmItNGJiOWU2NjM3ZTJhLzAvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgz MDc1MkY1NDJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFh5oZn0RB+Gbt08qnQaPdQ2Dx4NRdkhEflb P1M+0uHY7noIIo327nHZQI1JPvBa+tXUdKHWtTTiU29QZnzAbAP7BAdsAMnG1NOf +U/HhfAqAJ/hCzvu31+/ZCoX3rLRqEl83u/8wNEbNnp4nwvVUisyEEaHQTy6Eo4T N1qpluNcHvGl/fbBkbXPXMPDZe63HiaQzuLYL+qJT900LIxaDrORr3fZxTe9PFVl i1+TXGmC6EZfOOYSSUsCy9EtW+4H3cypMec2z3JOJkDFXyiYiMu5CPynmxJZe9aM SF9hikIoe14Lk2Os5+f53o8OlP5QCsCRIAydiHwCwRP2XH8mHaE= -----END CERTIFICATE-----Generated at Wed Aug 13 00:39:37 2025 by rpki-client