$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft File: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft (raw, json) Hash identifier: bicy0NyRqHfvYqIOX0dbZ01znOH9ieEDXYzfxpcr5Dc= Subject key identifier: 06:E3:FF:54:3F:96:38:5B:88:93:CE:0A:A8:16:A6:46:2E:F2:B9:DE Authority key identifier: 78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 Certificate issuer: /CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Certificate serial: 227E2D0C4DBC8A8FC094F9273E2B3E8A289F656B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft Manifest number: A4 Signing time: Sat 18 Oct 2025 02:20:59 +0000 Manifest this update: Sat 18 Oct 2025 02:15:59 +0000 Manifest next update: Tue 21 Oct 2025 13:22:59 +0000 Files and hashes: 1: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl (hash: R6z1/VVqZiWmwhKb1jrlbqe3eXTymG/tjPmyGj8wEQg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:7e:2d:0c:4d:bc:8a:8f:c0:94:f9:27:3e:2b:3e:8a:28:9f:65:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Validity Not Before: Oct 18 02:15:59 2025 GMT Not After : Oct 21 13:22:59 2025 GMT Subject: CN=06E3FF543F96385B8893CE0AA816A6462EF2B9DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:cf:14:fc:dc:22:8e:a5:b9:22:bc:22:fb:6e: f2:cb:44:46:52:a4:9c:bb:13:fe:dc:43:9e:70:19: 8e:57:43:8a:0a:dd:91:07:91:1e:74:a0:2f:e8:67: 50:38:a7:44:96:64:96:da:2e:f7:17:50:e5:93:47: e5:82:0d:fe:9a:dd:89:62:11:2c:e9:e0:b8:9a:15: 57:7f:bb:81:4f:a4:10:aa:34:28:ec:56:ad:48:37: 48:0a:2e:82:7e:03:f8:d8:a9:66:69:35:2e:05:a3: d1:06:90:99:56:cb:30:bb:19:e5:35:69:ac:e9:57: 76:3a:44:3b:b3:02:29:79:94:94:28:3f:3e:e3:6e: 88:ab:7b:11:e4:fa:21:47:53:ed:8e:36:0d:b7:d5: 3f:d6:94:da:31:8f:c9:85:81:39:c2:b2:6d:06:8d: 48:2b:7e:87:15:c1:59:03:21:a9:c6:3f:74:01:b1: a2:8c:ce:1d:84:0c:27:40:50:3c:84:09:cc:de:09: 7c:cc:21:a3:09:73:53:09:b2:f7:b9:ca:93:bb:44: d1:5e:d6:9f:14:b0:19:70:3a:c2:e6:9a:c1:4a:64: f0:f5:21:fe:eb:61:c1:63:21:90:3e:62:32:0f:53: ff:30:cb:cf:e0:94:9a:41:89:f9:f9:d2:f8:7f:52: ee:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E3:FF:54:3F:96:38:5B:88:93:CE:0A:A8:16:A6:46:2E:F2:B9:DE X509v3 Authority Key Identifier: keyid:78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:6f:07:04:09:44:c7:d8:cc:c3:bd:93:49:95:93:9e:51:4f: 56:24:c9:88:fd:c9:7d:a9:a6:83:74:8e:0d:79:f6:6b:d2:50: e5:1f:31:75:9d:14:71:eb:cd:03:49:ae:8e:91:09:11:55:76: 8a:97:e1:0e:f5:29:20:dd:6c:9e:18:eb:9a:e1:4a:13:16:ce: 6a:fc:bb:2d:e6:c7:0d:6f:6a:25:30:69:07:8e:09:9e:cc:64: 2e:f5:a8:85:89:61:e5:bc:9a:79:07:d3:83:aa:fd:df:56:99: 94:1a:15:0f:6e:28:27:31:75:e8:02:89:c3:e0:60:ef:d5:85: 5e:f1:96:99:07:36:50:18:1b:ea:e8:28:90:89:17:ff:41:31: 81:db:79:1e:d1:48:67:71:98:ff:ec:2d:af:7f:c1:95:fe:c8: 60:6d:09:6a:44:f5:24:34:3f:cd:7d:e8:17:7d:ed:6b:7c:4a: c0:c8:ea:6c:e5:40:11:7b:80:a6:29:0d:1c:12:18:fc:07:cc: cf:50:e4:bd:d3:55:75:6b:83:aa:b8:5e:b6:06:f9:f1:84:11: a2:67:16:56:0e:08:b0:92:df:62:c4:4e:ba:ac:01:b4:36:e5: 5b:be:1c:29:ba:1c:d3:14:c7:4a:72:ee:52:4b:8f:cb:76:4e: 60:11:71:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIn4tDE28io/AlPknPis+iiifZWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJC NDFFMDQwODAeFw0yNTEwMTgwMjE1NTlaFw0yNTEwMjExMzIyNTlaMDMxMTAvBgNV BAMTKDA2RTNGRjU0M0Y5NjM4NUI4ODkzQ0UwQUE4MTZBNjQ2MkVGMkI5REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3zxT83CKOpbkivCL7bvLLREZS pJy7E/7cQ55wGY5XQ4oK3ZEHkR50oC/oZ1A4p0SWZJbaLvcXUOWTR+WCDf6a3Yli ESzp4LiaFVd/u4FPpBCqNCjsVq1IN0gKLoJ+A/jYqWZpNS4Fo9EGkJlWyzC7GeU1 aazpV3Y6RDuzAil5lJQoPz7jboirexHk+iFHU+2ONg231T/WlNoxj8mFgTnCsm0G jUgrfocVwVkDIanGP3QBsaKMzh2EDCdAUDyECczeCXzMIaMJc1MJsve5ypO7RNFe 1p8UsBlwOsLmmsFKZPD1If7rYcFjIZA+YjIPU/8wy8/glJpBifn50vh/Uu7jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBuP/VD+WOFuIk84KqBamRi7yud4wHwYDVR0j BBgwFoAUeE3ZNzt7CxjUUTnu/vSfG7QeBAgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTlhZjRkYi1jZjZmLTQ5YjMtYTA1Yi02MWE3YjljODE3YzEvMC83ODRERDkzNzNC N0IwQjE4RDQ1MTM5RUVGRUY0OUYxQkI0MUUwNDA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJCNDFF MDQwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5YWY0ZGItY2Y2Zi00OWIzLWEw NWItNjFhN2I5YzgxN2MxLzAvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlG MUJCNDFFMDQwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJvBwQJRMfYzMO9k0mVk55RT1YkyYj9yX2p poN0jg159mvSUOUfMXWdFHHrzQNJro6RCRFVdoqX4Q71KSDdbJ4Y65rhShMWzmr8 uy3mxw1vaiUwaQeOCZ7MZC71qIWJYeW8mnkH04Oq/d9WmZQaFQ9uKCcxdegCicPg YO/VhV7xlpkHNlAYG+roKJCJF/9BMYHbeR7RSGdxmP/sLa9/wZX+yGBtCWpE9SQ0 P8196Bd97Wt8SsDI6mzlQBF7gKYpDRwSGPwHzM9Q5L3TVXVrg6q4XrYG+fGEEaJn FlYOCLCS32LETrqsAbQ25Vu+HCm6HNMUx0py7lJLj8t2TmARcW8= -----END CERTIFICATE-----Generated at Mon Oct 20 14:43:03 2025 by rpki-client