$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft File: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft (raw, json) Hash identifier: MX0Vr7GAEnh/Zqyq5RN6YiR8OSVwbTEJ1E7/cdXDYZY= Subject key identifier: 94:14:51:7F:FE:C3:13:ED:BF:94:E8:03:E1:13:88:9D:F5:DB:05:09 Authority key identifier: 78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 Certificate issuer: /CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Certificate serial: 37F6C2870651C8337A2B85E7D8769C95AA995F5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft Manifest number: 8B Signing time: Fri 22 Aug 2025 16:41:01 +0000 Manifest this update: Fri 22 Aug 2025 16:36:01 +0000 Manifest next update: Mon 25 Aug 2025 22:21:01 +0000 Files and hashes: 1: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl (hash: CNM6IN5x01iZAO05A/UX3BC5b6FOQUl2ATIVB5Ea8eE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:f6:c2:87:06:51:c8:33:7a:2b:85:e7:d8:76:9c:95:aa:99:5f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Validity Not Before: Aug 22 16:36:01 2025 GMT Not After : Aug 25 22:21:01 2025 GMT Subject: CN=9414517FFEC313EDBF94E803E113889DF5DB0509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:75:39:fe:9e:dc:b0:6b:95:3d:bf:55:d2:e8: 5c:de:c1:5e:dd:76:2e:74:bc:4b:ca:31:f5:01:84: 6a:f9:88:aa:b8:fc:9c:f4:a1:e3:ca:8b:36:0c:7c: 08:8b:8b:bb:39:08:33:78:19:b4:fb:1b:39:d8:c1: 1d:37:25:3a:f8:45:61:f7:bf:39:cd:62:2d:af:f0: 45:4e:58:1a:b7:23:a2:49:9f:3b:ca:5f:01:fc:0d: ff:e3:41:c7:ed:f3:98:db:3e:d9:72:86:a6:94:f7: 54:bf:80:2f:5d:e6:6e:7c:60:9c:e6:dc:de:95:ae: 98:a0:ad:96:a1:3a:1e:62:5d:69:e9:c5:b7:d6:30: 50:60:cd:fc:b2:72:d1:54:bb:b7:a2:42:28:b8:2e: 1f:d9:72:7b:aa:ef:a0:a1:76:b7:9f:da:9c:c4:35: de:86:f1:83:26:9b:78:1c:73:fc:98:90:aa:99:6d: 10:bc:46:4c:98:fc:62:25:c1:58:d2:28:29:9c:34: 25:02:87:96:e0:fd:f5:7b:30:2d:43:0f:ef:52:25: ef:c5:75:63:4d:5b:ca:10:7b:11:5f:a5:b8:4b:e5: 0e:36:ca:62:9c:67:09:9b:61:a0:53:8f:76:cb:0c: b9:4c:4c:dc:21:b3:9f:99:93:bb:69:8c:4b:76:14: d1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:14:51:7F:FE:C3:13:ED:BF:94:E8:03:E1:13:88:9D:F5:DB:05:09 X509v3 Authority Key Identifier: keyid:78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:76:31:4d:a0:17:35:eb:b2:73:1a:30:33:77:36:6f:f4:b9: bb:c5:54:4c:37:12:85:c0:2e:16:d7:3f:2d:6b:87:5e:34:35: a1:89:d0:75:37:1d:50:79:68:13:6f:11:3d:fa:2b:52:a5:a8: b1:2a:f6:54:77:aa:f3:18:b8:bf:ca:07:5b:3d:37:1c:05:c7: fa:a2:4a:c0:81:b9:09:37:c7:9b:d9:90:9b:40:c2:0f:2d:f1: 92:d3:6c:8a:06:9c:f7:4d:cb:f1:ed:3c:12:fc:3e:1e:b9:62: 4d:ec:9b:c5:f3:d0:fd:ac:07:2c:6b:7a:db:a3:07:16:96:63: f9:b3:b1:ab:97:98:38:ad:64:ee:b1:6a:d6:28:6a:c4:a5:45: 4c:4c:c0:ef:93:2b:2e:6a:47:fb:d3:c7:49:b0:d9:17:6e:bb: 78:38:a4:fe:e1:51:7d:80:0d:d1:8c:d6:9b:6e:4e:d5:ea:d8: 6d:3b:fd:2d:78:97:bc:30:8d:b5:e7:78:c9:91:23:c0:22:af: 55:69:3a:e4:d8:dc:8b:ac:46:45:2d:66:a8:25:6d:e3:6a:da: ca:a6:5b:aa:70:7b:6d:bb:9d:0a:0e:17:a1:3a:93:d8:21:4d: 47:34:dc:86:13:9a:2e:88:40:22:89:38:5f:84:7b:ae:8d:f8: ab:66:36:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN/bChwZRyDN6K4Xn2HaclaqZX1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJC NDFFMDQwODAeFw0yNTA4MjIxNjM2MDFaFw0yNTA4MjUyMjIxMDFaMDMxMTAvBgNV BAMTKDk0MTQ1MTdGRkVDMzEzRURCRjk0RTgwM0UxMTM4ODlERjVEQjA1MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1dTn+ntywa5U9v1XS6FzewV7d di50vEvKMfUBhGr5iKq4/Jz0oePKizYMfAiLi7s5CDN4GbT7GznYwR03JTr4RWH3 vznNYi2v8EVOWBq3I6JJnzvKXwH8Df/jQcft85jbPtlyhqaU91S/gC9d5m58YJzm 3N6VrpigrZahOh5iXWnpxbfWMFBgzfyyctFUu7eiQii4Lh/Zcnuq76Chdref2pzE Nd6G8YMmm3gcc/yYkKqZbRC8RkyY/GIlwVjSKCmcNCUCh5bg/fV7MC1DD+9SJe/F dWNNW8oQexFfpbhL5Q42ymKcZwmbYaBTj3bLDLlMTNwhs5+Zk7tpjEt2FNHHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlBRRf/7DE+2/lOgD4ROInfXbBQkwHwYDVR0j BBgwFoAUeE3ZNzt7CxjUUTnu/vSfG7QeBAgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTlhZjRkYi1jZjZmLTQ5YjMtYTA1Yi02MWE3YjljODE3YzEvMC83ODRERDkzNzNC N0IwQjE4RDQ1MTM5RUVGRUY0OUYxQkI0MUUwNDA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJCNDFF MDQwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5YWY0ZGItY2Y2Zi00OWIzLWEw NWItNjFhN2I5YzgxN2MxLzAvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlG MUJCNDFFMDQwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKF2MU2gFzXrsnMaMDN3Nm/0ubvFVEw3EoXA LhbXPy1rh140NaGJ0HU3HVB5aBNvET36K1KlqLEq9lR3qvMYuL/KB1s9NxwFx/qi SsCBuQk3x5vZkJtAwg8t8ZLTbIoGnPdNy/HtPBL8Ph65Yk3sm8Xz0P2sByxretuj BxaWY/mzsauXmDitZO6xatYoasSlRUxMwO+TKy5qR/vTx0mw2Rduu3g4pP7hUX2A DdGM1ptuTtXq2G07/S14l7wwjbXneMmRI8Air1VpOuTY3IusRkUtZqglbeNq2sqm W6pwe227nQoOF6E6k9ghTUc03IYTmi6IQCKJOF+Ee66N+KtmNu4= -----END CERTIFICATE-----Generated at Sun Aug 24 04:18:35 2025 by rpki-client