$ rpki-client -vvf repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft File: 7A8364745196ADEDA32E89F410EFDC19F658815A.mft (raw, json) Hash identifier: JcfboqAc02gqy+fYqpZgFoCxpkwmnArjSaIwGtaxCBg= Subject key identifier: 4B:55:D0:2C:21:AE:86:73:55:D7:91:37:07:BB:B4:5F:6E:EE:29:37 Authority key identifier: 7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A Certificate issuer: /CN=7A8364745196ADEDA32E89F410EFDC19F658815A Certificate serial: 2C14CB073632413BCFAA4D5BB39D2A7B41C7E78C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft Manifest number: AF Signing time: Thu 21 Aug 2025 14:50:00 +0000 Manifest this update: Thu 21 Aug 2025 14:45:00 +0000 Manifest next update: Sun 24 Aug 2025 18:46:00 +0000 Files and hashes: 1: 7A8364745196ADEDA32E89F410EFDC19F658815A.crl (hash: PB8WHe4iXi2goDByXJgyQyN4BAUBA6L8HCiVMEMpmQ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 18:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:14:cb:07:36:32:41:3b:cf:aa:4d:5b:b3:9d:2a:7b:41:c7:e7:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A8364745196ADEDA32E89F410EFDC19F658815A Validity Not Before: Aug 21 14:45:00 2025 GMT Not After : Aug 24 18:46:00 2025 GMT Subject: CN=4B55D02C21AE867355D7913707BBB45F6EEE2937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5a:8b:ed:81:6a:3f:3a:bf:64:05:c8:72:3b: 8f:d5:8c:02:fd:44:9f:f4:f2:27:b4:e6:b4:b7:46: 55:b6:91:8f:ea:f2:b3:cf:93:06:e6:6d:0d:4a:f6: d6:94:8a:62:f2:00:e7:d5:03:7b:87:c7:37:55:6f: 80:57:ef:55:9e:77:44:c9:a7:1c:86:e4:1d:6d:7b: 38:d0:b2:70:57:2e:93:52:4d:7e:78:ed:af:5a:b6: 76:f1:72:05:b0:26:87:bc:d0:40:60:24:51:c8:05: bb:7f:20:aa:7c:64:78:69:19:d7:ce:c3:3f:d7:f2: ed:49:19:a7:85:44:05:70:b3:a0:44:54:ac:92:bf: 95:9a:53:15:51:0f:92:62:56:e3:c1:49:fd:4c:cb: 1c:c9:98:01:fc:f4:92:1d:bf:79:58:bf:07:d4:56: 82:7a:c0:0b:a7:70:5c:bd:32:b8:af:a9:1e:44:c8: f8:5b:05:ee:0d:9e:7a:a8:cb:23:b7:ac:ad:c7:db: ab:b3:16:fe:e4:85:e0:c9:2a:d4:2f:aa:0d:a3:59: e4:a2:62:48:2f:e0:d7:b7:83:20:81:b8:59:45:7a: ad:b2:84:d9:5a:51:34:02:ed:9d:5f:3f:45:24:fb: 96:dc:fc:61:01:15:60:6d:ae:b4:0b:ab:73:ec:6a: 91:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:55:D0:2C:21:AE:86:73:55:D7:91:37:07:BB:B4:5F:6E:EE:29:37 X509v3 Authority Key Identifier: keyid:7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:c0:9a:54:ea:90:1f:42:2d:ec:5a:d8:73:a9:24:39:00:f7: 9c:a5:39:18:95:12:d9:d2:26:7d:5c:03:ca:09:35:57:50:13: fc:9e:41:9b:1e:c5:b0:5b:20:fe:c4:60:21:73:46:e3:5f:79: a6:12:dd:e3:b4:a8:f2:b5:e5:14:be:38:c2:cf:69:dd:51:30: d3:33:b6:a9:9e:7b:a3:03:bd:59:aa:f6:25:ea:c8:42:17:f6: fd:c9:f6:97:31:5d:24:5a:0b:ec:88:6c:b0:cb:37:40:ac:2e: 9e:c7:3b:43:11:b8:a2:8e:e3:94:52:6c:25:96:c3:19:21:ec: af:68:bd:e6:d3:3c:52:c7:92:36:c0:81:ff:17:10:7c:49:c3: 7f:f4:b4:4c:3c:e8:63:5b:9a:a3:07:79:7f:a1:fa:82:6e:0b: ee:5f:3f:1b:a5:89:10:d3:45:d2:dd:dc:3e:fe:06:13:e1:b3: d4:08:80:68:51:34:fd:d1:83:05:4d:15:73:9a:1a:99:68:e9: 61:99:c8:07:72:9d:07:14:89:29:47:da:59:2b:15:4b:b6:6c: fb:13:34:4a:6b:65:4b:01:35:9b:6a:d7:f6:be:d0:f8:ab:cc: 47:60:79:e7:af:02:1b:12:3d:42:5f:b2:b5:86:fa:5f:e5:b6: c1:9a:21:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULBTLBzYyQTvPqk1bs50qe0HH54wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlG NjU4ODE1QTAeFw0yNTA4MjExNDQ1MDBaFw0yNTA4MjQxODQ2MDBaMDMxMTAvBgNV BAMTKDRCNTVEMDJDMjFBRTg2NzM1NUQ3OTEzNzA3QkJCNDVGNkVFRTI5MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqWovtgWo/Or9kBchyO4/VjAL9 RJ/08ie05rS3RlW2kY/q8rPPkwbmbQ1K9taUimLyAOfVA3uHxzdVb4BX71Wed0TJ pxyG5B1tezjQsnBXLpNSTX547a9atnbxcgWwJoe80EBgJFHIBbt/IKp8ZHhpGdfO wz/X8u1JGaeFRAVws6BEVKySv5WaUxVRD5JiVuPBSf1MyxzJmAH89JIdv3lYvwfU VoJ6wAuncFy9MrivqR5EyPhbBe4NnnqoyyO3rK3H26uzFv7kheDJKtQvqg2jWeSi Ykgv4Ne3gyCBuFlFeq2yhNlaUTQC7Z1fP0Uk+5bc/GEBFWBtrrQLq3PsapFzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS1XQLCGuhnNV15E3B7u0X27uKTcwHwYDVR0j BBgwFoAUeoNkdFGWre2jLon0EO/cGfZYgVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5YjRkMS1kNmI1LTQ4MjAtYTQ5Ny02OTNiOTNkZGY1OGUvMC83QTgzNjQ3NDUx OTZBREVEQTMyRTg5RjQxMEVGREMxOUY2NTg4MTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlGNjU4 ODE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRD MTlGNjU4ODE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMPAmlTqkB9CLexa2HOpJDkA95ylORiVEtnS Jn1cA8oJNVdQE/yeQZsexbBbIP7EYCFzRuNfeaYS3eO0qPK15RS+OMLPad1RMNMz tqmee6MDvVmq9iXqyEIX9v3J9pcxXSRaC+yIbLDLN0CsLp7HO0MRuKKO45RSbCWW wxkh7K9ovebTPFLHkjbAgf8XEHxJw3/0tEw86GNbmqMHeX+h+oJuC+5fPxuliRDT RdLd3D7+BhPhs9QIgGhRNP3RgwVNFXOaGplo6WGZyAdynQcUiSlH2lkrFUu2bPsT NEprZUsBNZtq1/a+0PirzEdgeeevAhsSPUJfsrWG+l/ltsGaIeU= -----END CERTIFICATE-----Generated at Sat Aug 23 17:54:37 2025 by rpki-client