$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft File: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft (raw, json) Hash identifier: /A4B4nSjMpyLjNLAqp8FUWbaEssZJ4SkQyT4UEHKdgU= Subject key identifier: 5A:46:0A:A8:FE:0B:63:4E:DC:CA:81:56:4E:75:4D:46:02:D5:C1:EA Authority key identifier: 78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 Certificate issuer: /CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Certificate serial: 0938B2959352E832FEF251D1A9418BA61A585D5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft Manifest number: 7D Signing time: Mon 21 Jul 2025 08:10:56 +0000 Manifest this update: Mon 21 Jul 2025 08:05:56 +0000 Manifest next update: Thu 24 Jul 2025 15:56:56 +0000 Files and hashes: 1: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl (hash: 1KErek07sytWsQVli6DEwK0ptZ8waNOSSDyS3GuQ71M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 15:56:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:38:b2:95:93:52:e8:32:fe:f2:51:d1:a9:41:8b:a6:1a:58:5d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Validity Not Before: Jul 21 08:05:56 2025 GMT Not After : Jul 24 15:56:56 2025 GMT Subject: CN=5A460AA8FE0B634EDCCA81564E754D4602D5C1EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fd:1f:09:76:9c:b9:6e:0a:61:fa:63:b6:5f: 69:c6:52:e1:43:6c:9b:87:e7:75:c3:ef:3f:c9:0f: 8d:0b:cd:15:e0:23:0b:2f:65:ac:b8:cd:c9:ba:84: af:83:26:1c:30:b0:25:c5:eb:15:28:27:33:80:27: e7:fb:75:d5:4a:19:ba:58:51:fc:09:7f:65:83:4e: 0f:7c:18:34:68:e2:12:1c:8b:72:1a:46:2f:a6:8b: 56:1f:ad:23:bd:58:fa:40:a0:74:77:cb:e0:44:33: 97:bf:b4:1a:8e:76:d4:69:22:9c:f6:60:63:bb:d3: c2:13:28:0e:ff:ae:7d:f6:dc:6e:48:be:1f:be:c1: e5:7c:67:26:ee:76:32:52:15:e1:56:a6:3a:ec:4e: 21:ad:b7:3b:7e:13:25:70:c2:19:6c:78:1c:2e:a6: 44:8c:0d:4b:3b:2b:4b:27:c4:b8:4e:20:de:cb:c4: 06:10:e9:77:6e:09:7b:5d:f0:b3:63:f4:bf:f0:b3: b5:f7:57:4d:23:e7:1b:e0:cf:36:8b:b9:7c:cc:09: fe:13:c0:83:4a:d2:73:93:52:b1:b4:09:05:26:74: 91:15:f1:39:4d:06:14:e3:82:4d:cc:01:b2:d1:75: f3:31:09:b7:30:eb:20:7d:43:05:83:31:6f:75:d0: f2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:46:0A:A8:FE:0B:63:4E:DC:CA:81:56:4E:75:4D:46:02:D5:C1:EA X509v3 Authority Key Identifier: keyid:78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:aa:ba:07:14:fd:75:b8:61:cb:60:d1:61:61:b6:81:d7:32: 15:a3:4e:d5:c7:e4:cf:da:55:50:5a:87:2a:24:99:bb:4d:21: 26:88:5a:69:62:cc:91:7c:18:c8:bf:a3:6a:57:d1:a9:b4:51: 33:42:18:3d:38:c0:8b:40:da:dc:f9:95:25:a9:be:31:3f:ed: 7c:47:01:ed:17:7e:03:96:7c:b8:70:0f:90:4e:04:f6:02:8a: e0:c3:99:22:02:6a:91:7d:4b:cc:23:63:8e:58:28:6b:dd:5c: 98:d9:63:ba:1c:15:69:02:32:63:6f:c6:53:62:2d:12:90:7e: 0c:33:f4:cc:7f:e0:7e:39:d4:90:c3:54:c3:e9:58:33:7e:8f: fc:52:38:77:d3:70:ab:3a:a4:85:99:e0:1b:93:f9:4f:cf:91: 01:12:f0:9b:67:7f:27:7a:6f:b6:73:26:c8:96:bb:0c:47:72: 9f:cb:4d:de:dd:3d:fe:7d:3a:a0:4a:49:c8:2b:75:fc:a5:66: 6d:f6:09:17:cd:3e:9f:7a:07:48:11:7d:6b:01:b6:8b:a5:33: cf:6b:9b:45:71:aa:eb:89:41:6e:9c:c7:ab:1b:14:fe:6e:36: 5e:81:a4:c3:10:a3:24:e6:f5:f3:15:20:1e:30:73:47:b2:04: 46:f4:f2:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCTiylZNS6DL+8lHRqUGLphpYXVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJC NDFFMDQwODAeFw0yNTA3MjEwODA1NTZaFw0yNTA3MjQxNTU2NTZaMDMxMTAvBgNV BAMTKDVBNDYwQUE4RkUwQjYzNEVEQ0NBODE1NjRFNzU0RDQ2MDJENUMxRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/R8Jdpy5bgph+mO2X2nGUuFD bJuH53XD7z/JD40LzRXgIwsvZay4zcm6hK+DJhwwsCXF6xUoJzOAJ+f7ddVKGbpY UfwJf2WDTg98GDRo4hIci3IaRi+mi1YfrSO9WPpAoHR3y+BEM5e/tBqOdtRpIpz2 YGO708ITKA7/rn323G5Ivh++weV8ZybudjJSFeFWpjrsTiGttzt+EyVwwhlseBwu pkSMDUs7K0snxLhOIN7LxAYQ6XduCXtd8LNj9L/ws7X3V00j5xvgzzaLuXzMCf4T wINK0nOTUrG0CQUmdJEV8TlNBhTjgk3MAbLRdfMxCbcw6yB9QwWDMW910PKxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWkYKqP4LY07cyoFWTnVNRgLVweowHwYDVR0j BBgwFoAUeE3ZNzt7CxjUUTnu/vSfG7QeBAgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTlhZjRkYi1jZjZmLTQ5YjMtYTA1Yi02MWE3YjljODE3YzEvMC83ODRERDkzNzNC N0IwQjE4RDQ1MTM5RUVGRUY0OUYxQkI0MUUwNDA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJCNDFF MDQwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5YWY0ZGItY2Y2Zi00OWIzLWEw NWItNjFhN2I5YzgxN2MxLzAvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlG MUJCNDFFMDQwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiqugcU/XW4Yctg0WFhtoHXMhWjTtXH5M/a VVBahyokmbtNISaIWmlizJF8GMi/o2pX0am0UTNCGD04wItA2tz5lSWpvjE/7XxH Ae0XfgOWfLhwD5BOBPYCiuDDmSICapF9S8wjY45YKGvdXJjZY7ocFWkCMmNvxlNi LRKQfgwz9Mx/4H451JDDVMPpWDN+j/xSOHfTcKs6pIWZ4BuT+U/PkQES8Jtnfyd6 b7ZzJsiWuwxHcp/LTd7dPf59OqBKScgrdfylZm32CRfNPp96B0gRfWsBtoulM89r m0VxquuJQW6cx6sbFP5uNl6BpMMQoyTm9fMVIB4wc0eyBEb08rU= -----END CERTIFICATE-----Generated at Mon Jul 21 10:30:54 2025 by rpki-client