$ rpki-client -vvf repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft File: 7A8364745196ADEDA32E89F410EFDC19F658815A.mft (raw, json) Hash identifier: Vi4BqB/0AcVCTFrv5butpXEURFovx6XpbjTC/6PB7+Y= Subject key identifier: D4:13:ED:1F:F4:5A:15:12:90:E8:98:94:A8:65:08:2E:25:48:57:9D Authority key identifier: 7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A Certificate issuer: /CN=7A8364745196ADEDA32E89F410EFDC19F658815A Certificate serial: 3389AD9F54D95B3C0BF8AD5C3495A51E65F15E73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft Manifest number: B6 Signing time: Sat 06 Sep 2025 05:40:00 +0000 Manifest this update: Sat 06 Sep 2025 05:35:00 +0000 Manifest next update: Tue 09 Sep 2025 14:48:00 +0000 Files and hashes: 1: 7A8364745196ADEDA32E89F410EFDC19F658815A.crl (hash: Xm7d9dyeYHtwXV23mqedH7IjOy4APBjKvRsx7R6pDP0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 14:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:89:ad:9f:54:d9:5b:3c:0b:f8:ad:5c:34:95:a5:1e:65:f1:5e:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A8364745196ADEDA32E89F410EFDC19F658815A Validity Not Before: Sep 6 05:35:00 2025 GMT Not After : Sep 9 14:48:00 2025 GMT Subject: CN=D413ED1FF45A151290E89894A865082E2548579D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2c:68:f4:13:e0:f3:b0:ea:e0:81:6c:34:3d: ea:72:9c:78:e2:c4:59:00:24:4e:02:43:da:8d:f6: 93:68:9a:4e:b3:db:8f:71:7e:a8:89:85:fa:e0:94: 76:61:cd:1d:85:ab:3f:b2:06:b2:06:89:f5:f9:b1: 55:15:3e:81:e3:ff:0c:72:16:36:b8:fc:59:1a:6d: ce:d0:ab:04:84:c3:63:ee:f3:2b:91:19:dd:c9:99: c9:07:c2:30:a8:a8:b0:a1:e3:47:cd:e2:b2:e9:b6: ce:0c:a9:d9:eb:9c:73:4d:fb:a6:8d:4e:a8:a2:c7: 5f:66:d5:48:34:ca:af:2c:bc:0f:27:e9:d1:17:9a: 70:ec:bd:ed:87:53:fd:ec:d8:68:92:16:72:68:3c: 84:2d:90:68:37:2f:c4:b8:4b:4e:ce:3a:61:ec:4a: c1:35:b2:b3:4a:80:79:5e:a1:33:cc:43:e0:4a:4b: 40:bf:7a:56:9e:4a:12:47:bc:fa:b4:4b:45:95:d2: e5:da:bb:e8:07:3d:cd:ca:c4:1a:5e:0d:ea:4f:60: cb:2e:d5:89:56:99:1c:3a:25:cc:45:40:2b:8e:e4: e1:2c:2e:d6:cd:83:6c:e6:1d:8f:cf:ac:57:de:d5: 19:d0:a1:ba:ff:74:e5:a8:5a:34:50:15:dc:cc:2d: 35:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:13:ED:1F:F4:5A:15:12:90:E8:98:94:A8:65:08:2E:25:48:57:9D X509v3 Authority Key Identifier: keyid:7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:5c:f3:c0:b9:55:f4:b4:19:8f:ff:87:d9:d0:8b:60:d8:a5: 66:39:3b:89:6b:1a:28:52:84:4f:3d:e0:7e:0c:03:ab:5b:37: c2:db:28:53:25:b6:f7:32:2a:48:22:b8:32:51:c0:18:18:4d: cf:95:a5:ed:37:6e:36:95:28:ea:3d:b8:74:ab:7e:2a:d4:b7: 5d:51:6a:5d:a8:0f:82:d1:a3:ed:40:8e:43:57:4d:5d:86:00: 6b:96:62:df:dd:8a:35:17:65:db:12:45:19:9e:f3:41:90:eb: ef:85:c9:ba:d4:76:54:76:24:bf:07:46:1a:aa:45:9d:14:f0: 9e:39:05:e5:79:f8:65:de:af:a8:2a:54:26:39:d0:f9:20:4a: 92:d6:0d:1c:ac:7b:10:c4:c1:a7:e0:02:48:15:7f:7b:57:1c: 68:5d:f8:c9:38:72:f7:70:a8:c0:c8:2b:48:28:30:16:bd:61: 5b:ba:96:10:59:a9:ff:87:8a:ae:83:7d:f4:89:32:3c:78:fb: 25:d7:7f:ad:fc:99:88:ed:3e:4f:ad:d4:e5:ed:0c:d6:b1:05: 79:2d:1e:2d:c5:93:b9:bd:22:59:9a:83:9e:a7:96:d1:ef:dd: 98:0f:34:1c:dd:72:db:f5:ac:aa:66:14:a4:b5:94:5d:ec:58: 7c:04:45:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM4mtn1TZWzwL+K1cNJWlHmXxXnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlG NjU4ODE1QTAeFw0yNTA5MDYwNTM1MDBaFw0yNTA5MDkxNDQ4MDBaMDMxMTAvBgNV BAMTKEQ0MTNFRDFGRjQ1QTE1MTI5MEU4OTg5NEE4NjUwODJFMjU0ODU3OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHLGj0E+DzsOrggWw0PepynHji xFkAJE4CQ9qN9pNomk6z249xfqiJhfrglHZhzR2Fqz+yBrIGifX5sVUVPoHj/wxy Fja4/Fkabc7QqwSEw2Pu8yuRGd3JmckHwjCoqLCh40fN4rLpts4MqdnrnHNN+6aN Tqiix19m1Ug0yq8svA8n6dEXmnDsve2HU/3s2GiSFnJoPIQtkGg3L8S4S07OOmHs SsE1srNKgHleoTPMQ+BKS0C/elaeShJHvPq0S0WV0uXau+gHPc3KxBpeDepPYMsu 1YlWmRw6JcxFQCuO5OEsLtbNg2zmHY/PrFfe1RnQobr/dOWoWjRQFdzMLTUXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1BPtH/RaFRKQ6JiUqGUILiVIV50wHwYDVR0j BBgwFoAUeoNkdFGWre2jLon0EO/cGfZYgVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5YjRkMS1kNmI1LTQ4MjAtYTQ5Ny02OTNiOTNkZGY1OGUvMC83QTgzNjQ3NDUx OTZBREVEQTMyRTg5RjQxMEVGREMxOUY2NTg4MTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlGNjU4 ODE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRD MTlGNjU4ODE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVc88C5VfS0GY//h9nQi2DYpWY5O4lrGihS hE894H4MA6tbN8LbKFMltvcyKkgiuDJRwBgYTc+Vpe03bjaVKOo9uHSrfirUt11R al2oD4LRo+1AjkNXTV2GAGuWYt/dijUXZdsSRRme80GQ6++FybrUdlR2JL8HRhqq RZ0U8J45BeV5+GXer6gqVCY50PkgSpLWDRysexDEwafgAkgVf3tXHGhd+Mk4cvdw qMDIK0goMBa9YVu6lhBZqf+Hiq6DffSJMjx4+yXXf638mYjtPk+t1OXtDNaxBXkt Hi3Fk7m9Ilmag56nltHv3ZgPNBzdctv1rKpmFKS1lF3sWHwERb4= -----END CERTIFICATE-----Generated at Mon Sep 8 05:11:55 2025 by rpki-client