$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft File: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft (raw, json) Hash identifier: mJZe7Py/0L+2HAXL9XcgRI/kCCTdq5VkNRgD6uI6RZI= Subject key identifier: 70:E4:D5:BA:82:7E:05:19:25:30:91:3D:C3:A8:40:B7:73:24:8D:B1 Authority key identifier: 78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 Certificate issuer: /CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Certificate serial: 4403E90D6A441AAA5503D435BA408C10B5824B7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft Manifest number: 68 Signing time: Wed 04 Jun 2025 04:50:58 +0000 Manifest this update: Wed 04 Jun 2025 04:45:58 +0000 Manifest next update: Sat 07 Jun 2025 14:11:58 +0000 Files and hashes: 1: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl (hash: uroBMQIdEO3IXZBsFOQzI6NTy0/604bAt2gVXVLdqLg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:03:e9:0d:6a:44:1a:aa:55:03:d4:35:ba:40:8c:10:b5:82:4b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Validity Not Before: Jun 4 04:45:58 2025 GMT Not After : Jun 7 14:11:58 2025 GMT Subject: CN=70E4D5BA827E05192530913DC3A840B773248DB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:61:c5:f6:f9:61:ec:cb:53:c7:52:b0:44:98: 21:03:37:47:1b:a7:2e:ba:76:a8:47:a1:c8:a1:42: 2f:ae:65:19:9a:df:54:a2:58:1c:d2:6f:cb:4e:f9: ce:18:37:0f:b7:67:83:ec:54:cb:0d:14:50:0f:1b: 01:78:fb:4f:26:8b:c1:98:db:fe:13:f1:0b:bb:a0: d4:ee:a0:8f:8c:70:db:8f:87:4b:08:76:42:de:de: bd:b7:8c:2a:c9:89:cf:31:9f:e3:95:9c:e4:95:0a: 94:08:9b:e6:7e:38:b2:cd:aa:91:ca:d9:07:31:ec: c4:1b:7b:43:43:2a:6c:d6:d2:dd:1e:7a:57:66:85: 0b:f7:81:f7:52:32:f8:7b:c2:93:d2:a2:3c:d4:a0: e4:5d:5a:07:3b:aa:cf:f7:89:96:06:45:03:9d:41: a0:f6:d7:cd:5f:c0:2c:1b:bb:cc:07:8e:5d:86:20: 89:8c:79:65:98:d8:b6:a8:60:49:45:1c:71:25:83: 18:c6:ac:8a:d8:cf:0c:c9:eb:f3:b8:f0:07:61:40: e9:fa:6b:1a:e4:57:20:2f:1e:fb:2c:f8:fa:75:41: 41:1c:c7:06:06:d1:55:77:bf:32:9f:72:f5:2e:50: b5:97:54:fc:f0:c6:75:f2:54:13:97:34:b6:72:fd: d4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E4:D5:BA:82:7E:05:19:25:30:91:3D:C3:A8:40:B7:73:24:8D:B1 X509v3 Authority Key Identifier: keyid:78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ce:2c:69:77:6d:21:1d:c9:46:20:38:b7:3e:95:96:87:b6: 4d:87:35:f0:5a:31:5e:fa:9b:6a:65:bb:63:43:2a:42:33:11: 91:2e:af:42:34:b4:be:1e:2d:a8:e7:61:19:6a:ba:d9:5f:26: b7:1e:40:ad:ca:7c:b9:13:fc:8c:d8:64:d6:35:a5:56:d5:c5: f5:4a:85:88:f7:d4:75:69:8f:d3:3d:a2:16:d1:46:2b:2a:7c: fd:a2:3f:7a:b1:a4:15:b0:6d:93:bc:a5:69:11:a0:a5:40:da: 7a:b5:eb:4a:f3:a6:c1:29:e0:7d:c4:26:c2:34:5c:78:bf:06: a3:15:2f:40:d7:9e:be:69:84:ec:6b:9f:94:ca:cf:f9:62:39: d1:47:f4:01:97:44:2c:85:45:1c:15:ab:d6:95:12:b0:af:8e: 50:58:dd:54:e5:52:8b:3f:87:62:c5:cf:8c:15:1e:a2:a5:67: 02:e1:d6:2a:cc:e0:08:81:28:d3:30:4e:46:6d:19:55:bd:9e: 45:bf:67:07:6d:56:b1:92:8d:5d:2b:0b:bd:38:ac:83:65:78: 79:b2:25:c1:38:0e:f4:3d:d0:07:cf:6d:d9:c9:27:87:0a:a8: df:c1:eb:e7:db:b4:83:44:52:cd:f3:96:e1:ec:cb:37:33:3a: af:2f:6c:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURAPpDWpEGqpVA9Q1ukCMELWCS38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJC NDFFMDQwODAeFw0yNTA2MDQwNDQ1NThaFw0yNTA2MDcxNDExNThaMDMxMTAvBgNV BAMTKDcwRTRENUJBODI3RTA1MTkyNTMwOTEzREMzQTg0MEI3NzMyNDhEQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkYcX2+WHsy1PHUrBEmCEDN0cb py66dqhHocihQi+uZRma31SiWBzSb8tO+c4YNw+3Z4PsVMsNFFAPGwF4+08mi8GY 2/4T8Qu7oNTuoI+McNuPh0sIdkLe3r23jCrJic8xn+OVnOSVCpQIm+Z+OLLNqpHK 2Qcx7MQbe0NDKmzW0t0eeldmhQv3gfdSMvh7wpPSojzUoORdWgc7qs/3iZYGRQOd QaD2181fwCwbu8wHjl2GIImMeWWY2LaoYElFHHElgxjGrIrYzwzJ6/O48AdhQOn6 axrkVyAvHvss+Pp1QUEcxwYG0VV3vzKfcvUuULWXVPzwxnXyVBOXNLZy/dRbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcOTVuoJ+BRklMJE9w6hAt3MkjbEwHwYDVR0j BBgwFoAUeE3ZNzt7CxjUUTnu/vSfG7QeBAgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTlhZjRkYi1jZjZmLTQ5YjMtYTA1Yi02MWE3YjljODE3YzEvMC83ODRERDkzNzNC N0IwQjE4RDQ1MTM5RUVGRUY0OUYxQkI0MUUwNDA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJCNDFF MDQwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5YWY0ZGItY2Y2Zi00OWIzLWEw NWItNjFhN2I5YzgxN2MxLzAvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlG MUJCNDFFMDQwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXOLGl3bSEdyUYgOLc+lZaHtk2HNfBaMV76 m2plu2NDKkIzEZEur0I0tL4eLajnYRlqutlfJrceQK3KfLkT/IzYZNY1pVbVxfVK hYj31HVpj9M9ohbRRisqfP2iP3qxpBWwbZO8pWkRoKVA2nq160rzpsEp4H3EJsI0 XHi/BqMVL0DXnr5phOxrn5TKz/liOdFH9AGXRCyFRRwVq9aVErCvjlBY3VTlUos/ h2LFz4wVHqKlZwLh1irM4AiBKNMwTkZtGVW9nkW/ZwdtVrGSjV0rC704rINleHmy JcE4DvQ90AfPbdnJJ4cKqN/B6+fbtINEUs3zluHsyzczOq8vbL0= -----END CERTIFICATE-----Generated at Fri Jun 6 04:56:09 2025 by rpki-client