$ rpki-client -vvf repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft File: 7769348B43C31740A116F7F9EEA09178E4104B66.mft (raw, json) Hash identifier: Z6edyTF2dBULWbMETKK6uVRdPDUoNpo+x9t419evqIo= Subject key identifier: BE:70:8C:65:42:57:DC:E5:29:5A:54:62:E4:DB:50:5D:0A:D1:5B:0A Authority key identifier: 77:69:34:8B:43:C3:17:40:A1:16:F7:F9:EE:A0:91:78:E4:10:4B:66 Certificate issuer: /CN=7769348B43C31740A116F7F9EEA09178E4104B66 Certificate serial: 3FC9BBDFBA9F62347C05ECEB256B057C46FC65B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7769348B43C31740A116F7F9EEA09178E4104B66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft Manifest number: 68 Signing time: Fri 29 Aug 2025 07:52:01 +0000 Manifest this update: Fri 29 Aug 2025 07:47:01 +0000 Manifest next update: Mon 01 Sep 2025 19:49:01 +0000 Files and hashes: 1: 7769348B43C31740A116F7F9EEA09178E4104B66.crl (hash: UGIY+U38Yp3PCH+u/TDobqmbjDg8np4PrUfV1QFGXME=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.crl rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7769348B43C31740A116F7F9EEA09178E4104B66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 19:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c9:bb:df:ba:9f:62:34:7c:05:ec:eb:25:6b:05:7c:46:fc:65:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7769348B43C31740A116F7F9EEA09178E4104B66 Validity Not Before: Aug 29 07:47:01 2025 GMT Not After : Sep 1 19:49:01 2025 GMT Subject: CN=BE708C654257DCE5295A5462E4DB505D0AD15B0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a5:83:a8:b8:3e:73:b3:04:20:b9:ec:0c:5c: bd:f8:01:40:f0:8d:a5:e3:23:e8:89:16:31:79:ce: 8d:99:98:5f:8a:d9:4b:59:46:3b:9a:84:9d:26:cf: ce:79:33:69:0e:28:2b:12:8c:67:dd:0a:06:c6:5f: 3a:58:43:f5:47:be:b6:32:06:ab:06:91:ed:27:f2: 14:dc:31:ea:b4:0e:fe:fa:79:17:8c:49:e5:47:b9: ee:90:49:c4:96:63:f8:23:17:21:fe:95:fa:3e:3a: 3f:cc:d6:00:b1:00:2f:e5:7f:ad:49:a8:13:3c:6a: f4:28:69:cf:77:10:4d:59:60:f4:f2:f7:08:99:9b: 55:50:97:be:db:9e:3d:6c:ea:44:e5:5c:da:54:f7: 35:11:98:a2:76:10:01:be:d2:0a:78:88:4c:7b:c6: 09:d8:b5:1c:74:b6:0b:44:eb:91:54:70:c7:2e:1d: 4a:55:74:6c:b7:82:be:6e:a5:94:1d:b2:7b:be:13: 03:4d:00:b3:0b:29:ab:4c:12:9f:b5:a3:ef:9d:d6: e7:e1:71:36:88:a5:69:6b:3a:c0:a6:f1:ab:7f:35: 84:12:94:da:02:42:01:63:24:9a:ef:db:56:b4:77: e6:13:3c:5e:5e:f8:61:2a:ec:9b:a6:37:86:9b:cd: b3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:70:8C:65:42:57:DC:E5:29:5A:54:62:E4:DB:50:5D:0A:D1:5B:0A X509v3 Authority Key Identifier: keyid:77:69:34:8B:43:C3:17:40:A1:16:F7:F9:EE:A0:91:78:E4:10:4B:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7769348B43C31740A116F7F9EEA09178E4104B66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:81:33:d2:13:a3:2a:d7:90:15:8a:ce:ec:78:00:24:dc:85: e5:b1:8a:5d:80:34:1b:63:92:75:24:a8:da:2f:37:e9:49:ab: 17:30:89:38:ae:c1:8b:22:55:c9:45:7d:77:b4:bd:93:34:3b: 16:61:81:40:e3:fc:8b:74:d0:b3:8a:d8:d1:bc:28:b1:8d:52: 6f:89:fa:d4:fa:08:44:24:53:d4:f5:73:28:73:bc:53:fb:4e: 54:bf:ee:71:59:56:d2:3c:4e:01:17:eb:b6:7a:91:2c:c0:6c: a9:a3:c2:e1:4b:e1:a2:00:9b:5d:52:c5:04:48:68:06:32:23: 3f:e8:b1:62:ea:33:1b:61:b1:9b:23:71:c8:23:f0:8b:de:4e: 80:2a:eb:9b:73:9e:05:82:7b:b9:57:70:36:6e:83:99:0f:49: a7:45:48:92:5a:9f:70:09:38:b6:6f:33:fa:16:ae:71:07:33: 37:d6:b1:bf:12:76:7a:dd:b8:45:bb:20:31:62:f0:8c:6e:28: c4:fa:b3:1a:22:da:e9:89:07:fd:da:f7:16:b2:25:90:79:0d: a1:79:0a:30:42:83:6f:93:77:b8:bb:3e:75:a0:44:5d:bf:fd: 25:fe:27:ad:1a:1b:4b:b6:08:a9:a1:2c:6a:1f:8b:3b:09:e0: dc:80:15:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP8m737qfYjR8BezrJWsFfEb8ZbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc2OTM0OEI0M0MzMTc0MEExMTZGN0Y5RUVBMDkxNzhF NDEwNEI2NjAeFw0yNTA4MjkwNzQ3MDFaFw0yNTA5MDExOTQ5MDFaMDMxMTAvBgNV BAMTKEJFNzA4QzY1NDI1N0RDRTUyOTVBNTQ2MkU0REI1MDVEMEFEMTVCMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHpYOouD5zswQguewMXL34AUDw jaXjI+iJFjF5zo2ZmF+K2UtZRjuahJ0mz855M2kOKCsSjGfdCgbGXzpYQ/VHvrYy BqsGke0n8hTcMeq0Dv76eReMSeVHue6QScSWY/gjFyH+lfo+Oj/M1gCxAC/lf61J qBM8avQoac93EE1ZYPTy9wiZm1VQl77bnj1s6kTlXNpU9zURmKJ2EAG+0gp4iEx7 xgnYtRx0tgtE65FUcMcuHUpVdGy3gr5upZQdsnu+EwNNALMLKatMEp+1o++d1ufh cTaIpWlrOsCm8at/NYQSlNoCQgFjJJrv21a0d+YTPF5e+GEq7JumN4abzbPdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvnCMZUJX3OUpWlRi5NtQXQrRWwowHwYDVR0j BBgwFoAUd2k0i0PDF0ChFvf57qCReOQQS2YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWNkNDVjYi04ZDlmLTQzNTktOTZjMC02NGNmMjJhNWIwZmYvMC83NzY5MzQ4QjQz QzMxNzQwQTExNkY3RjlFRUEwOTE3OEU0MTA0QjY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzc2OTM0OEI0M0MzMTc0MEExMTZGN0Y5RUVBMDkxNzhFNDEw NEI2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2 YzAtNjRjZjIyYTViMGZmLzAvNzc2OTM0OEI0M0MzMTc0MEExMTZGN0Y5RUVBMDkx NzhFNDEwNEI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqBM9IToyrXkBWKzux4ACTcheWxil2ANBtj knUkqNovN+lJqxcwiTiuwYsiVclFfXe0vZM0OxZhgUDj/It00LOK2NG8KLGNUm+J +tT6CEQkU9T1cyhzvFP7TlS/7nFZVtI8TgEX67Z6kSzAbKmjwuFL4aIAm11SxQRI aAYyIz/osWLqMxthsZsjccgj8IveToAq65tzngWCe7lXcDZug5kPSadFSJJan3AJ OLZvM/oWrnEHMzfWsb8SdnrduEW7IDFi8IxuKMT6sxoi2umJB/3a9xayJZB5DaF5 CjBCg2+Td7i7PnWgRF2//SX+J60aG0u2CKmhLGofizsJ4NyAFW4= -----END CERTIFICATE-----Generated at Sat Aug 30 17:21:59 2025 by rpki-client