$ rpki-client -vvf repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft File: 7AD0DDB5789DE529C8697A033978C381FFE40D83.mft (raw, json) Hash identifier: Rl+bX9+7t3IdCtfOXwxbxz6RrlDaJ9uxghrhl9jFKqs= Subject key identifier: 4B:69:22:36:33:1E:E2:1A:E4:86:D9:1E:62:C2:B3:73:A9:9D:95:3E Authority key identifier: 7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 Certificate issuer: /CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Certificate serial: 06946D73A797BEDAA259E5F29C947E0ABD42B8AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft Manifest number: 0202 Signing time: Fri 05 Sep 2025 04:21:29 +0000 Manifest this update: Fri 05 Sep 2025 04:16:29 +0000 Manifest next update: Mon 08 Sep 2025 15:27:29 +0000 Files and hashes: 1: 7AD0DDB5789DE529C8697A033978C381FFE40D83.crl (hash: pP3Zp63a03Ahxx+yzscBInxS0BkO7NLk1D41tWRf+cI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:94:6d:73:a7:97:be:da:a2:59:e5:f2:9c:94:7e:0a:bd:42:b8:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Validity Not Before: Sep 5 04:16:29 2025 GMT Not After : Sep 8 15:27:29 2025 GMT Subject: CN=4B692236331EE21AE486D91E62C2B373A99D953E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:24:ab:46:fa:6c:22:df:4a:66:e1:2c:cb:4e: 91:fd:d0:82:5e:91:2d:7e:c8:dc:fa:dd:e5:c2:f7: 7a:02:0b:58:09:eb:67:c5:f5:06:f4:d1:cc:f4:66: 7e:73:5f:43:66:1c:89:ce:35:fb:23:9d:6b:bd:49: f0:f2:db:28:ce:42:ef:4b:b8:2a:57:ff:34:a7:14: da:e4:40:94:7d:35:62:f5:7b:fe:35:96:8f:fc:98: e9:56:23:05:17:dc:64:5f:06:1f:27:97:c2:bb:53: 48:3f:51:29:cc:58:87:18:29:8e:d4:d7:3c:76:d2: 01:16:fa:11:8e:f9:b5:97:b0:9c:ac:44:7d:40:3a: 8f:78:f4:d2:6c:85:41:00:4f:96:49:21:1b:85:11: ac:4b:97:cf:cd:7f:84:e5:ab:69:b2:50:0a:2a:ee: 0c:77:92:27:40:5f:86:86:59:e3:6d:57:8e:93:59: 54:77:db:a5:25:a0:9e:f1:f2:67:4c:2f:44:b8:43: 99:af:6e:e4:9a:81:69:cf:83:16:85:e6:2d:31:9d: 7c:a4:ba:b1:ff:35:98:27:d6:9c:3b:e9:15:9a:66: fc:5c:a7:56:94:92:03:f9:49:7b:86:92:87:bc:46: 45:35:fd:32:17:d7:81:35:86:5e:02:1f:bb:f7:82: 48:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:69:22:36:33:1E:E2:1A:E4:86:D9:1E:62:C2:B3:73:A9:9D:95:3E X509v3 Authority Key Identifier: keyid:7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:fc:29:71:fb:41:39:6c:e5:8b:77:c2:f1:be:e2:55:d7:b2: 87:85:f9:9d:29:7e:66:8b:86:5b:0f:d4:08:f4:65:64:d9:9b: 98:16:7f:e8:2d:70:2a:60:68:78:16:2f:d3:f7:80:dd:b4:66: ab:ae:32:21:9c:e2:ee:fc:0f:a3:17:47:67:e0:26:7f:58:71: c2:94:35:69:7f:e4:eb:ab:4c:41:88:ea:bb:1c:02:b0:9a:72: 07:40:32:31:67:eb:f0:dc:39:89:98:33:63:ac:e1:37:8b:fe: a0:8c:db:58:64:c5:9c:63:3a:8f:e5:e5:52:94:c0:cc:4e:1a: 6e:25:7f:8e:a1:8d:c2:a9:70:2d:91:91:de:15:14:70:fd:3c: 97:25:ca:87:b0:22:b0:10:d0:35:56:28:ac:d5:86:62:bd:0b: 63:1f:1d:32:4c:65:fc:6f:82:56:1b:b1:32:3e:7d:60:c8:b8: 9a:02:96:22:47:66:89:fe:45:5e:9b:9c:94:a1:5d:f2:46:f2: 62:bd:21:9d:dc:f4:d1:77:e1:fc:54:8c:f8:81:44:e1:07:01: e0:32:66:57:2c:b8:5d:87:d8:08:ee:62:e3:a2:02:92:8e:05: eb:d8:ae:32:7c:7f:b3:1b:fe:12:cd:ec:e0:f6:35:a0:ca:37: 23:e9:b9:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBpRtc6eXvtqiWeXynJR+Cr1CuKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFG RkU0MEQ4MzAeFw0yNTA5MDUwNDE2MjlaFw0yNTA5MDgxNTI3MjlaMDMxMTAvBgNV BAMTKDRCNjkyMjM2MzMxRUUyMUFFNDg2RDkxRTYyQzJCMzczQTk5RDk1M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvJKtG+mwi30pm4SzLTpH90IJe kS1+yNz63eXC93oCC1gJ62fF9Qb00cz0Zn5zX0NmHInONfsjnWu9SfDy2yjOQu9L uCpX/zSnFNrkQJR9NWL1e/41lo/8mOlWIwUX3GRfBh8nl8K7U0g/USnMWIcYKY7U 1zx20gEW+hGO+bWXsJysRH1AOo949NJshUEAT5ZJIRuFEaxLl8/Nf4Tlq2myUAoq 7gx3kidAX4aGWeNtV46TWVR326UloJ7x8mdML0S4Q5mvbuSagWnPgxaF5i0xnXyk urH/NZgn1pw76RWaZvxcp1aUkgP5SXuGkoe8RkU1/TIX14E1hl4CH7v3gkj/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS2kiNjMe4hrkhtkeYsKzc6mdlT4wHwYDVR0j BBgwFoAUetDdtXid5SnIaXoDOXjDgf/kDYMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjJiMTc4Ni0xODMzLTRkMGEtYTEzOS00NjQ0MzMzOTNkNzgvMC83QUQwRERCNTc4 OURFNTI5Qzg2OTdBMDMzOTc4QzM4MUZGRTQwRDgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFGRkU0 MEQ4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYyYjE3ODYtMTgzMy00ZDBhLWEx MzktNDY0NDMzMzkzZDc4LzAvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMz ODFGRkU0MEQ4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAH8KXH7QTls5Yt3wvG+4lXXsoeF+Z0pfmaL hlsP1Aj0ZWTZm5gWf+gtcCpgaHgWL9P3gN20ZquuMiGc4u78D6MXR2fgJn9YccKU NWl/5OurTEGI6rscArCacgdAMjFn6/DcOYmYM2Os4TeL/qCM21hkxZxjOo/l5VKU wMxOGm4lf46hjcKpcC2Rkd4VFHD9PJclyoewIrAQ0DVWKKzVhmK9C2MfHTJMZfxv glYbsTI+fWDIuJoCliJHZon+RV6bnJShXfJG8mK9IZ3c9NF34fxUjPiBROEHAeAy ZlcsuF2H2AjuYuOiApKOBevYrjJ8f7Mb/hLN7OD2NaDKNyPpuX0= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:54 2025 by rpki-client