$ rpki-client -vvf repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft File: 7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft (raw, json) Hash identifier: BfMW7XpnERw9yl4zv6wh9EkT3fpgKDMOHSFnatbT6Q4= Subject key identifier: 7E:8F:2E:AF:15:28:6A:BF:A7:89:38:B8:07:6F:52:27:9F:B2:EE:81 Authority key identifier: 7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C Certificate issuer: /CN=7F9ECE743A3074E61F56CD11161AA58A6BB4092C Certificate serial: 0F08E8EA537DE2718B76EAC5CC1CA435363691E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft Manifest number: 2B Signing time: Sat 06 Sep 2025 15:51:15 +0000 Manifest this update: Sat 06 Sep 2025 15:46:15 +0000 Manifest next update: Wed 10 Sep 2025 01:15:15 +0000 Files and hashes: 1: 7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl (hash: qhvjeNb4iVw+C6jMZXdk8QgsUmu8lElzo1CaKZ3n8YA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 01:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:08:e8:ea:53:7d:e2:71:8b:76:ea:c5:cc:1c:a4:35:36:36:91:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F9ECE743A3074E61F56CD11161AA58A6BB4092C Validity Not Before: Sep 6 15:46:15 2025 GMT Not After : Sep 10 01:15:15 2025 GMT Subject: CN=7E8F2EAF15286ABFA78938B8076F52279FB2EE81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:91:0d:7b:9a:69:f1:6f:8c:b7:f0:d6:e7:78: 6a:47:48:42:bf:bf:d4:06:20:c2:0a:88:42:14:8f: e4:a6:e6:36:61:8d:a4:f2:20:30:ad:b9:90:1b:75: 4f:96:38:69:89:bb:30:b4:29:0a:f3:35:b1:7c:65: 06:44:40:8d:10:1d:97:2b:eb:c0:12:50:3a:83:01: b7:84:5a:30:38:1b:4d:57:8d:55:ee:69:db:12:4c: 67:09:dc:68:ab:9a:c5:1b:be:5b:80:3b:b2:1f:f7: 1b:b6:fe:fb:47:9c:b3:d1:99:85:05:3f:2b:f1:e1: 7a:ef:cb:9e:f4:6f:73:34:9f:c1:98:4f:ce:74:bf: 25:bd:f9:10:b4:22:90:cf:00:23:71:29:86:a7:dd: 3f:fc:2b:b2:92:f6:e7:86:8d:0e:c3:55:ee:1c:4d: c2:f3:34:01:61:8b:f7:d6:9a:df:1b:f6:35:5e:6a: 8b:e9:dd:4e:f1:23:34:fa:d5:87:4b:c2:8d:56:18: 2f:fa:56:1c:25:3e:54:28:bb:4b:fa:61:0b:23:3d: ba:a7:5b:76:90:2f:ca:0e:d5:d6:20:6e:9a:e3:17: 93:8d:a6:e4:db:a4:ed:90:03:89:ea:9a:68:47:b6: b3:08:ae:e2:45:7a:cf:c3:a8:3d:bb:91:bf:67:97: 11:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8F:2E:AF:15:28:6A:BF:A7:89:38:B8:07:6F:52:27:9F:B2:EE:81 X509v3 Authority Key Identifier: keyid:7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:8c:aa:cf:f6:7e:54:ed:b3:22:70:06:2a:f0:5f:d4:3c:c0: 3b:b8:f0:c9:62:49:f8:9d:fc:ed:e7:02:2a:cf:ba:c4:c1:81: a0:55:c4:8f:66:ad:43:3d:a2:bd:cb:a2:46:01:57:a0:4e:5a: c7:20:35:c1:40:16:d6:72:b5:0a:b9:a7:de:e1:41:07:55:fb: 25:6f:af:ea:64:e0:a0:37:3e:6c:ad:19:a7:40:e0:28:30:62: 86:54:c2:ca:8a:9f:ae:9d:ab:d5:39:8c:64:36:05:24:e4:ca: 8f:b2:cd:dc:5d:17:52:20:8b:8f:94:de:fe:0b:27:57:0d:60: 65:2f:7a:01:f4:e8:58:ba:66:5e:d9:19:80:e2:9b:be:2c:ff: aa:d7:6c:7c:7d:34:1b:44:4e:50:92:42:ae:49:92:35:89:37: c4:bd:df:22:6b:ba:63:97:d5:28:97:d5:af:46:bd:c2:2f:53: 6d:c2:a4:01:8d:00:11:68:92:ce:db:9c:bc:fb:68:76:5e:23: 97:a7:d7:ec:22:52:26:16:cc:63:ad:5d:32:9b:01:86:61:16: b0:b3:26:62:18:d6:eb:73:8c:7e:e1:24:44:16:f7:5c:e4:72: d5:5f:4f:a9:eb:85:26:d0:12:b0:d5:54:28:57:ab:5b:bc:42: 91:be:eb:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDwjo6lN94nGLdurFzBykNTY2keAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1OEE2 QkI0MDkyQzAeFw0yNTA5MDYxNTQ2MTVaFw0yNTA5MTAwMTE1MTVaMDMxMTAvBgNV BAMTKDdFOEYyRUFGMTUyODZBQkZBNzg5MzhCODA3NkY1MjI3OUZCMkVFODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7kQ17mmnxb4y38NbneGpHSEK/ v9QGIMIKiEIUj+Sm5jZhjaTyIDCtuZAbdU+WOGmJuzC0KQrzNbF8ZQZEQI0QHZcr 68ASUDqDAbeEWjA4G01XjVXuadsSTGcJ3GirmsUbvluAO7If9xu2/vtHnLPRmYUF Pyvx4Xrvy570b3M0n8GYT850vyW9+RC0IpDPACNxKYan3T/8K7KS9ueGjQ7DVe4c TcLzNAFhi/fWmt8b9jVeaovp3U7xIzT61YdLwo1WGC/6VhwlPlQou0v6YQsjPbqn W3aQL8oO1dYgbprjF5ONpuTbpO2QA4nqmmhHtrMIruJFes/DqD27kb9nlxEHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfo8urxUoar+niTi4B29SJ5+y7oEwHwYDVR0j BBgwFoAUf57OdDowdOYfVs0RFhqlimu0CSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjY2YmZhNi1kYzRjLTQxMDgtOTMyYy0yMDRiNjJlODYyNzIvMC83RjlFQ0U3NDNB MzA3NEU2MUY1NkNEMTExNjFBQTU4QTZCQjQwOTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1OEE2QkI0 MDkyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmY2NmJmYTYtZGM0Yy00MTA4LTkz MmMtMjA0YjYyZTg2MjcyLzAvN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1 OEE2QkI0MDkyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALSMqs/2flTtsyJwBirwX9Q8wDu48MliSfid /O3nAirPusTBgaBVxI9mrUM9or3LokYBV6BOWscgNcFAFtZytQq5p97hQQdV+yVv r+pk4KA3PmytGadA4CgwYoZUwsqKn66dq9U5jGQ2BSTkyo+yzdxdF1Igi4+U3v4L J1cNYGUvegH06Fi6Zl7ZGYDim74s/6rXbHx9NBtETlCSQq5JkjWJN8S93yJrumOX 1SiX1a9GvcIvU23CpAGNABFoks7bnLz7aHZeI5en1+wiUiYWzGOtXTKbAYZhFrCz JmIY1utzjH7hJEQW91zkctVfT6nrhSbQErDVVChXq1u8QpG+69Y= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:46 2025 by rpki-client