$ rpki-client -vvf repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft File: 7A8364745196ADEDA32E89F410EFDC19F658815A.mft (raw, json) Hash identifier: jW6iBAKxcqBH60WqYqpqa+uDkK0fC0U88h7b3r1jaYg= Subject key identifier: D0:6B:16:98:AC:B2:51:12:64:C6:72:3C:5B:DB:26:17:51:05:9E:E8 Authority key identifier: 7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A Certificate issuer: /CN=7A8364745196ADEDA32E89F410EFDC19F658815A Certificate serial: 1A8B8982EE188E38A12178AA00BBD8C3A448CD9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft Manifest number: C9 Signing time: Sun 19 Oct 2025 12:10:00 +0000 Manifest this update: Sun 19 Oct 2025 12:05:00 +0000 Manifest next update: Wed 22 Oct 2025 12:57:00 +0000 Files and hashes: 1: 7A8364745196ADEDA32E89F410EFDC19F658815A.crl (hash: tCRMuF+VmnrlLyfGnmriISgjTUQUhy2JAmWk/PnEZiY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:8b:89:82:ee:18:8e:38:a1:21:78:aa:00:bb:d8:c3:a4:48:cd:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A8364745196ADEDA32E89F410EFDC19F658815A Validity Not Before: Oct 19 12:05:00 2025 GMT Not After : Oct 22 12:57:00 2025 GMT Subject: CN=D06B1698ACB2511264C6723C5BDB261751059EE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c7:9c:6d:69:39:e5:c6:7b:74:e8:72:ad:9b: 9f:52:c3:9b:24:9d:03:45:39:c0:3c:2c:ee:e1:d3: a7:da:63:64:6e:0c:0b:64:33:f8:47:38:83:73:d2: 50:ea:47:11:65:b1:3e:58:05:a5:79:54:d3:a6:d4: 27:2d:6f:d5:57:58:84:59:87:19:70:d2:b6:68:fd: e0:b1:3e:fd:c7:bf:14:11:59:d8:8d:71:67:f1:ac: e1:a9:89:bb:38:66:a7:6a:12:be:0e:c8:a1:a8:34: 64:dc:74:6e:2f:df:fd:14:1d:49:f1:5c:97:e2:cc: 3a:99:e7:5c:6f:01:12:20:bd:5a:cf:ed:40:21:00: 67:42:2b:ab:f5:22:2e:a1:a7:cf:58:e0:16:f4:cc: 2e:2a:c8:ea:75:e6:7e:9c:73:ec:86:4a:84:6b:05: 93:f5:e5:00:66:83:7c:a9:26:67:7a:77:76:40:95: af:b0:0a:e3:72:3e:fc:ed:a5:cc:a6:d1:18:5b:fd: 3c:f8:20:73:34:40:d3:12:96:97:2a:7a:58:f8:1b: b1:84:81:13:64:8b:20:8d:2c:39:2a:8a:00:a7:b8: af:b4:18:4c:cd:85:d7:d0:f2:01:3e:f1:1c:d1:22: 50:eb:8c:86:b4:40:00:61:96:81:7c:73:3e:5a:da: 70:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6B:16:98:AC:B2:51:12:64:C6:72:3C:5B:DB:26:17:51:05:9E:E8 X509v3 Authority Key Identifier: keyid:7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:8e:f5:1f:c1:23:0a:c9:a3:3a:b2:e4:70:06:00:c1:b1:81: 82:8f:49:ad:54:af:d1:ac:3c:be:9a:9d:ff:38:e9:cd:09:50: 5e:bd:12:98:25:e0:a2:46:9b:99:ec:05:e3:23:a2:a3:00:9c: 42:0e:fa:18:1c:e0:08:b3:ec:7f:63:ad:55:2c:26:26:55:0a: 36:0c:ec:a0:d9:5e:b6:05:63:37:39:02:c1:9b:35:cd:c3:90: 27:d5:0d:16:61:c7:5a:da:f2:67:bb:fe:0e:50:28:55:61:6d: c5:9e:40:e7:9b:3d:20:9b:91:c1:8e:31:92:4c:8e:00:20:d5: f5:22:bb:59:6e:40:6c:91:8e:d4:4d:3e:a1:b0:30:8b:23:bf: 7d:15:92:6a:df:91:a9:e5:20:f6:c7:00:21:f7:f5:58:e1:46: 1a:2c:e4:66:dd:aa:17:9a:81:07:d7:f0:e6:8b:db:5e:48:ef: f4:1f:3b:70:19:91:43:23:4c:86:97:c8:b3:b8:5d:14:76:c7: 70:e2:9a:e1:89:fd:29:79:9a:94:9c:0d:e8:6b:d5:d3:e9:af: 22:09:21:d0:99:c7:4b:94:cd:10:e4:1b:f9:e1:9f:c0:e7:db: 9b:9e:5a:97:b6:90:b3:fa:2c:5f:43:29:b9:64:2c:d4:3c:57: b2:eb:68:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGouJgu4YjjihIXiqALvYw6RIzZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlG NjU4ODE1QTAeFw0yNTEwMTkxMjA1MDBaFw0yNTEwMjIxMjU3MDBaMDMxMTAvBgNV BAMTKEQwNkIxNjk4QUNCMjUxMTI2NEM2NzIzQzVCREIyNjE3NTEwNTlFRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5x5xtaTnlxnt06HKtm59Sw5sk nQNFOcA8LO7h06faY2RuDAtkM/hHOINz0lDqRxFlsT5YBaV5VNOm1Cctb9VXWIRZ hxlw0rZo/eCxPv3HvxQRWdiNcWfxrOGpibs4ZqdqEr4OyKGoNGTcdG4v3/0UHUnx XJfizDqZ51xvARIgvVrP7UAhAGdCK6v1Ii6hp89Y4Bb0zC4qyOp15n6cc+yGSoRr BZP15QBmg3ypJmd6d3ZAla+wCuNyPvztpcym0Rhb/Tz4IHM0QNMSlpcqelj4G7GE gRNkiyCNLDkqigCnuK+0GEzNhdfQ8gE+8RzRIlDrjIa0QABhloF8cz5a2nD3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0GsWmKyyURJkxnI8W9smF1EFnugwHwYDVR0j BBgwFoAUeoNkdFGWre2jLon0EO/cGfZYgVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5YjRkMS1kNmI1LTQ4MjAtYTQ5Ny02OTNiOTNkZGY1OGUvMC83QTgzNjQ3NDUx OTZBREVEQTMyRTg5RjQxMEVGREMxOUY2NTg4MTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlGNjU4 ODE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRD MTlGNjU4ODE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+O9R/BIwrJozqy5HAGAMGxgYKPSa1Ur9Gs PL6anf846c0JUF69Epgl4KJGm5nsBeMjoqMAnEIO+hgc4Aiz7H9jrVUsJiZVCjYM 7KDZXrYFYzc5AsGbNc3DkCfVDRZhx1ra8me7/g5QKFVhbcWeQOebPSCbkcGOMZJM jgAg1fUiu1luQGyRjtRNPqGwMIsjv30VkmrfkanlIPbHACH39VjhRhos5Gbdqhea gQfX8OaL215I7/QfO3AZkUMjTIaXyLO4XRR2x3DimuGJ/Sl5mpScDehr1dPpryIJ IdCZx0uUzRDkG/nhn8Dn25ueWpe2kLP6LF9DKblkLNQ8V7LraFo= -----END CERTIFICATE-----Generated at Mon Oct 20 11:07:35 2025 by rpki-client