$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft File: 7F6E3BF22135CE510C383A9D95C74D2175B70558.mft (raw, json) Hash identifier: E2Pcv1pgaFVfn+Oq7CSVAfVSF2GzA/a3wEj9w+/V29s= Subject key identifier: 77:44:51:5F:F7:54:C3:60:63:36:20:EF:BF:4D:24:C4:3A:51:0D:D9 Authority key identifier: 7F:6E:3B:F2:21:35:CE:51:0C:38:3A:9D:95:C7:4D:21:75:B7:05:58 Certificate issuer: /CN=7F6E3BF22135CE510C383A9D95C74D2175B70558 Certificate serial: 2CEC1768D863ABA914FC50DCAF4A232CEBF02EAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer Subject info access: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft Manifest number: 8B Signing time: Sun 19 Oct 2025 12:01:18 +0000 Manifest this update: Sun 19 Oct 2025 11:56:18 +0000 Manifest next update: Wed 22 Oct 2025 20:44:18 +0000 Files and hashes: 1: 7F6E3BF22135CE510C383A9D95C74D2175B70558.crl (hash: yylvL+4lSlOLwHOMKtw6ccphh9ukhZtksFUZJA9O2k0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.crl rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ec:17:68:d8:63:ab:a9:14:fc:50:dc:af:4a:23:2c:eb:f0:2e:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F6E3BF22135CE510C383A9D95C74D2175B70558 Validity Not Before: Oct 19 11:56:18 2025 GMT Not After : Oct 22 20:44:18 2025 GMT Subject: CN=7744515FF754C360633620EFBF4D24C43A510DD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d1:f2:00:ea:9f:a1:e2:6b:66:dd:88:e5:8e: f0:3e:9c:3a:44:2b:2c:ac:d1:00:13:de:dd:d3:9e: 72:50:bf:b5:b4:94:bd:cc:d5:1a:ea:cd:67:10:72: 10:d2:84:e8:ef:40:7f:3d:21:ce:6c:b2:4e:6e:eb: 15:b8:70:31:61:48:ab:7c:6e:cd:98:d9:01:33:0a: 99:36:47:00:41:76:9e:1e:80:f8:b4:c1:44:a8:b9: 21:21:1f:4b:a4:07:5c:a3:70:57:66:81:91:2f:9a: f9:70:55:2d:b9:ee:df:72:f4:55:6e:71:d8:1f:0c: bb:e2:f6:69:04:3a:cc:9b:54:02:ee:17:8a:42:d6: c4:21:72:ba:79:55:a1:ce:f7:ea:15:1b:22:8f:63: cf:29:72:63:4c:14:e1:c4:7e:b0:8c:13:2a:82:4e: 36:df:1e:4a:cb:62:c4:1e:cb:af:34:ea:e9:84:e6: 76:00:cb:99:f7:84:c8:6f:d8:04:1f:08:05:81:88: 3b:c9:65:cb:af:57:9d:81:0d:46:bf:31:3b:81:58: 32:9d:b9:69:c1:38:ac:64:23:41:f9:1e:63:4c:f8: 1b:84:8a:3d:8d:95:a7:27:f5:eb:3e:d4:5b:41:d4: 0c:a6:5b:84:a4:1e:89:53:41:31:5d:ba:d7:c9:bd: 87:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:44:51:5F:F7:54:C3:60:63:36:20:EF:BF:4D:24:C4:3A:51:0D:D9 X509v3 Authority Key Identifier: keyid:7F:6E:3B:F2:21:35:CE:51:0C:38:3A:9D:95:C7:4D:21:75:B7:05:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0c:dc:78:cf:90:a5:19:cf:af:45:27:9a:fd:6b:27:44:0e: c6:30:bc:d4:3a:0b:49:b9:43:84:cc:be:a1:96:b4:c0:75:ec: e5:62:7a:bc:61:5a:60:a1:64:1a:14:86:e1:97:fc:9b:ee:c7: e2:82:5c:bb:3a:b8:49:f9:91:54:dc:6e:9e:43:af:bf:07:7f: 73:be:02:27:1a:53:c9:3e:54:e3:a9:85:f3:1a:22:7c:a9:a6: 60:84:af:e6:b7:54:fd:b6:77:50:b1:a4:15:9d:1f:9d:13:80: 48:80:bd:f9:c8:1d:94:16:f1:2a:89:21:c7:4a:6e:46:8f:00: 35:12:7a:cd:da:56:1b:cc:e1:0b:d5:69:8c:a2:9c:59:63:ed: 26:d8:ea:86:41:61:f7:32:a6:4e:c7:50:85:02:f8:73:b9:10: e4:97:0f:50:0a:f7:db:c9:6e:29:60:af:65:68:bb:92:86:04: 5f:3b:db:8e:2c:c0:72:d5:00:01:78:06:b6:97:75:af:fe:27: 17:86:97:2b:0d:97:a5:13:b3:50:0a:13:d5:7d:18:3f:dd:67: 6d:cd:d1:04:1b:22:05:5e:31:e0:af:4a:b4:3b:3d:1b:75:eb: 72:50:72:5d:a9:bf:ec:76:c5:43:83:8c:54:ad:77:b4:fd:bb: 1d:3b:9f:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULOwXaNhjq6kU/FDcr0ojLOvwLq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y2RTNCRjIyMTM1Q0U1MTBDMzgzQTlEOTVDNzREMjE3 NUI3MDU1ODAeFw0yNTEwMTkxMTU2MThaFw0yNTEwMjIyMDQ0MThaMDMxMTAvBgNV BAMTKDc3NDQ1MTVGRjc1NEMzNjA2MzM2MjBFRkJGNEQyNEM0M0E1MTBERDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy0fIA6p+h4mtm3YjljvA+nDpE Kyys0QAT3t3TnnJQv7W0lL3M1RrqzWcQchDShOjvQH89Ic5ssk5u6xW4cDFhSKt8 bs2Y2QEzCpk2RwBBdp4egPi0wUSouSEhH0ukB1yjcFdmgZEvmvlwVS257t9y9FVu cdgfDLvi9mkEOsybVALuF4pC1sQhcrp5VaHO9+oVGyKPY88pcmNMFOHEfrCMEyqC TjbfHkrLYsQey6806umE5nYAy5n3hMhv2AQfCAWBiDvJZcuvV52BDUa/MTuBWDKd uWnBOKxkI0H5HmNM+BuEij2Nlacn9es+1FtB1AymW4SkHolTQTFdutfJvYdJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd0RRX/dUw2BjNiDvv00kxDpRDdkwHwYDVR0j BBgwFoAUf2478iE1zlEMODqdlcdNIXW3BVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjlmOGFhOC04OTcxLTRlNTEtOGI1MS04MDNiNDliMzJhNGYvMS83RjZFM0JGMjIx MzVDRTUxMEMzODNBOUQ5NUM3NEQyMTc1QjcwNTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Y2RTNCRjIyMTM1Q0U1MTBDMzgzQTlEOTVDNzREMjE3NUI3 MDU1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY5ZjhhYTgtODk3MS00ZTUxLThi NTEtODAzYjQ5YjMyYTRmLzEvN0Y2RTNCRjIyMTM1Q0U1MTBDMzgzQTlEOTVDNzRE MjE3NUI3MDU1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4M3HjPkKUZz69FJ5r9aydEDsYwvNQ6C0m5 Q4TMvqGWtMB17OVierxhWmChZBoUhuGX/Jvux+KCXLs6uEn5kVTcbp5Dr78Hf3O+ AicaU8k+VOOphfMaInyppmCEr+a3VP22d1CxpBWdH50TgEiAvfnIHZQW8SqJIcdK bkaPADUSes3aVhvM4QvVaYyinFlj7SbY6oZBYfcypk7HUIUC+HO5EOSXD1AK99vJ bilgr2Vou5KGBF87244swHLVAAF4BraXda/+JxeGlysNl6UTs1AKE9V9GD/dZ23N 0QQbIgVeMeCvSrQ7PRt163JQcl2pv+x2xUODjFStd7T9ux07n7M= -----END CERTIFICATE-----Generated at Mon Oct 20 22:21:57 2025 by rpki-client