$ rpki-client -vvf repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft File: 7A8364745196ADEDA32E89F410EFDC19F658815A.mft (raw, json) Hash identifier: 5XDdeXXxqbwQRHjqhcykBki6S8Q2/jKdi0Am4WsWcy0= Subject key identifier: 60:82:D9:C5:8F:ED:1C:5E:53:10:77:9F:28:20:58:0C:82:7B:C3:97 Authority key identifier: 7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A Certificate issuer: /CN=7A8364745196ADEDA32E89F410EFDC19F658815A Certificate serial: 5B899BFA199EAFDD03EF5F24A154514BB3591D21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft Manifest number: A1 Signing time: Sun 20 Jul 2025 13:30:00 +0000 Manifest this update: Sun 20 Jul 2025 13:25:00 +0000 Manifest next update: Thu 24 Jul 2025 00:52:00 +0000 Files and hashes: 1: 7A8364745196ADEDA32E89F410EFDC19F658815A.crl (hash: XhWGFTqoHFe2i2cRdUbWSKC7sHyzoKFQ6B4waPV5oVU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:89:9b:fa:19:9e:af:dd:03:ef:5f:24:a1:54:51:4b:b3:59:1d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A8364745196ADEDA32E89F410EFDC19F658815A Validity Not Before: Jul 20 13:25:00 2025 GMT Not After : Jul 24 00:52:00 2025 GMT Subject: CN=6082D9C58FED1C5E5310779F2820580C827BC397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:05:da:93:5f:64:21:73:91:77:a8:3b:09:d6: f2:40:4b:de:a6:cc:a0:24:b5:b5:91:14:01:3e:4e: 79:d2:8a:a9:d6:5c:6a:76:9c:40:b6:ae:58:47:82: a8:6f:e8:cf:13:49:b9:f3:dc:be:54:5f:15:e9:32: 92:2e:b3:ed:95:ed:9a:06:a9:e7:ce:9d:dd:e0:5e: 31:2c:d6:76:4c:48:0e:a0:c4:33:88:3f:74:be:1a: 07:74:54:ab:a4:41:b7:5a:b6:68:74:26:8f:07:fd: 6f:a6:ac:02:47:5f:f4:f4:62:4b:57:9e:b5:36:ce: f2:49:2f:27:ed:5b:0a:fb:aa:d7:4e:7b:c4:44:61: d4:a4:5e:b4:5e:57:dd:be:8e:34:0e:55:4c:45:cf: de:db:af:d6:99:10:d5:f5:9b:8b:80:3e:2c:98:c9: c4:56:f0:5a:af:dd:bf:d4:bd:3a:df:ef:cf:e0:32: db:de:0b:0b:8b:3c:a2:8d:70:50:72:8d:93:ee:ad: 7c:2d:d9:e2:bb:18:eb:46:85:d9:e1:97:4f:25:e5: 2e:55:80:02:f7:0a:64:03:91:40:a5:58:3c:1f:7f: d7:43:20:e1:28:86:31:47:88:9b:1d:3e:86:52:35: eb:17:44:d1:66:11:2b:6a:9d:eb:f4:2f:6e:91:5e: 03:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:82:D9:C5:8F:ED:1C:5E:53:10:77:9F:28:20:58:0C:82:7B:C3:97 X509v3 Authority Key Identifier: keyid:7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:b3:fd:b8:25:df:77:9e:e1:8d:a6:80:cf:e0:aa:8b:48:3e: 45:e5:32:5c:dd:1c:d4:3a:ff:33:91:98:6b:89:1f:2b:2c:49: 05:6f:87:46:1c:f6:fc:a2:fb:52:a7:5f:ac:d9:f9:f8:e7:f5: 04:d6:90:9b:f9:3b:a2:73:50:92:6f:42:06:75:6f:e9:01:97: 66:bb:55:b8:c2:aa:1a:c7:1f:70:99:0a:f6:c5:92:7d:e3:d8: cb:98:ec:a6:e0:b0:df:ac:9c:11:57:ec:8c:ec:51:08:fc:97: c7:aa:b9:33:37:ba:1b:ac:a5:23:4f:02:18:32:1c:36:cb:53: 8b:f5:e1:0f:d9:4b:02:04:2d:2f:09:e2:97:dc:98:5f:66:a9: e9:b1:f7:30:63:fb:02:14:c1:a4:1f:80:2a:b8:77:ba:da:ec: 53:f1:7f:6f:74:ba:dc:87:ab:08:79:6b:bb:24:43:11:15:77: 19:54:02:ea:de:6a:b6:b4:c9:d1:f1:ee:2a:8c:f1:cc:f0:65: 44:09:94:eb:cd:73:d5:c1:ae:75:2f:b6:84:63:12:64:fa:74: ee:e3:d3:57:cb:ea:45:ad:e8:52:f5:db:f6:ba:f2:60:66:e3: 99:0f:b5:34:bb:ad:46:e9:3a:90:d6:25:bd:44:80:ff:9f:d1: c0:32:87:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW4mb+hmer90D718koVRRS7NZHSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlG NjU4ODE1QTAeFw0yNTA3MjAxMzI1MDBaFw0yNTA3MjQwMDUyMDBaMDMxMTAvBgNV BAMTKDYwODJEOUM1OEZFRDFDNUU1MzEwNzc5RjI4MjA1ODBDODI3QkMzOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6BdqTX2Qhc5F3qDsJ1vJAS96m zKAktbWRFAE+TnnSiqnWXGp2nEC2rlhHgqhv6M8TSbnz3L5UXxXpMpIus+2V7ZoG qefOnd3gXjEs1nZMSA6gxDOIP3S+Ggd0VKukQbdatmh0Jo8H/W+mrAJHX/T0YktX nrU2zvJJLyftWwr7qtdOe8REYdSkXrReV92+jjQOVUxFz97br9aZENX1m4uAPiyY ycRW8Fqv3b/UvTrf78/gMtveCwuLPKKNcFByjZPurXwt2eK7GOtGhdnhl08l5S5V gAL3CmQDkUClWDwff9dDIOEohjFHiJsdPoZSNesXRNFmEStqnev0L26RXgNBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYILZxY/tHF5TEHefKCBYDIJ7w5cwHwYDVR0j BBgwFoAUeoNkdFGWre2jLon0EO/cGfZYgVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5YjRkMS1kNmI1LTQ4MjAtYTQ5Ny02OTNiOTNkZGY1OGUvMC83QTgzNjQ3NDUx OTZBREVEQTMyRTg5RjQxMEVGREMxOUY2NTg4MTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlGNjU4 ODE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRD MTlGNjU4ODE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACz/bgl33ee4Y2mgM/gqotIPkXlMlzdHNQ6 /zORmGuJHyssSQVvh0Yc9vyi+1KnX6zZ+fjn9QTWkJv5O6JzUJJvQgZ1b+kBl2a7 VbjCqhrHH3CZCvbFkn3j2MuY7KbgsN+snBFX7IzsUQj8l8equTM3uhuspSNPAhgy HDbLU4v14Q/ZSwIELS8J4pfcmF9mqemx9zBj+wIUwaQfgCq4d7ra7FPxf290utyH qwh5a7skQxEVdxlUAureara0ydHx7iqM8czwZUQJlOvNc9XBrnUvtoRjEmT6dO7j 01fL6kWt6FL12/a68mBm45kPtTS7rUbpOpDWJb1EgP+f0cAyh+g= -----END CERTIFICATE-----Generated at Mon Jul 21 10:36:52 2025 by rpki-client