$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft File: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft (raw, json) Hash identifier: uASv49jB3tvTOv3eQNP8IXv4uDwuM/o/4g/OrsBAfAw= Subject key identifier: B4:26:69:66:C0:18:81:26:AA:AA:42:45:36:E7:74:9B:8A:73:74:0F Authority key identifier: 78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 Certificate issuer: /CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Certificate serial: 0C5F691848F4A913B1981729C36227C5A017AA2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft Manifest number: 74 Signing time: Tue 01 Jul 2025 15:30:57 +0000 Manifest this update: Tue 01 Jul 2025 15:25:57 +0000 Manifest next update: Fri 04 Jul 2025 18:09:57 +0000 Files and hashes: 1: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl (hash: GFs3Xiit3NU0s38SgsBJSjyEPf5t6/H2aSsw//io++Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 18:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:5f:69:18:48:f4:a9:13:b1:98:17:29:c3:62:27:c5:a0:17:aa:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Validity Not Before: Jul 1 15:25:57 2025 GMT Not After : Jul 4 18:09:57 2025 GMT Subject: CN=B4266966C0188126AAAA424536E7749B8A73740F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f8:0a:c9:cb:8e:43:57:2d:94:27:8e:0a:61: 23:9c:11:1b:38:46:07:e2:24:f4:32:1d:76:1b:12: 27:a5:cb:0f:6b:a9:13:f9:ce:2b:77:7d:ff:24:2c: bc:4c:46:ee:0d:19:ac:3b:de:cd:ef:7a:41:77:26: 37:7e:01:bc:db:a3:91:da:e6:10:f2:1e:bb:92:9a: ec:10:b7:24:bb:8e:48:d6:44:da:20:7d:c4:d6:dc: 1a:17:4a:b5:27:b5:05:9f:3c:d1:c8:cd:5b:97:8a: 93:77:b2:13:8b:7f:e8:e8:0a:17:fd:4e:e9:7e:c1: c5:12:6e:6b:0d:fb:fa:f5:61:27:73:39:ff:95:c7: bf:b2:d4:84:03:c7:ea:4a:67:7c:9d:07:7f:09:b3: 79:db:c9:9a:ef:78:f5:c7:14:18:35:94:9e:ca:2f: 2a:24:27:5d:19:a8:f8:18:2a:78:6c:a0:23:e7:4f: b4:3b:b2:5c:f9:41:81:5c:57:7a:c8:66:5f:b7:98: 8d:11:1a:83:24:98:a7:8f:b0:e3:25:44:eb:ac:b2: aa:f3:b8:f8:44:fb:07:ca:ca:a7:43:61:5e:2c:38: 06:9c:3b:ed:d5:7a:1e:12:67:2b:30:a2:27:e3:86: d0:7b:ff:1c:5d:66:e5:b7:92:90:f4:a3:ca:9b:99: 4f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:26:69:66:C0:18:81:26:AA:AA:42:45:36:E7:74:9B:8A:73:74:0F X509v3 Authority Key Identifier: keyid:78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:35:58:90:a5:9a:ab:01:47:a6:76:47:ec:73:40:73:8b:19: be:d0:62:ca:bf:b7:3c:27:02:9e:1d:ff:82:98:71:6e:46:1a: 63:96:a4:f1:44:4a:a1:04:19:a8:3c:0a:62:8a:3d:21:c2:c2: 36:84:6e:a5:44:ad:c4:6c:93:7e:f4:e8:28:04:f6:4b:33:cf: e7:21:30:e0:90:17:33:27:ce:cf:e9:f1:6b:f5:62:ad:7a:1c: 46:59:c9:7c:56:15:a0:bc:9e:1a:95:d6:49:22:54:fa:dc:46: 9e:ba:23:1c:4f:af:65:3d:c0:e6:a3:d1:7f:87:d4:07:4f:23: e9:e0:35:d4:ca:c3:64:9a:ea:94:6a:ea:58:d6:37:e7:e1:95: 63:0a:5f:5f:07:0d:56:cc:9e:07:0b:53:38:64:b7:da:e4:3e: b9:0e:09:f8:bf:60:49:3b:44:c0:b1:79:c2:0f:63:23:f5:95: a2:1a:76:d7:81:57:9f:7f:d2:db:34:65:b5:0b:a0:38:23:7b: 91:98:27:3f:96:88:88:b3:55:f1:86:60:aa:bc:28:ed:69:35: 2b:2a:83:e4:59:1f:d4:5b:d7:5f:04:2f:fb:81:25:24:d6:e7: 4f:ef:c6:38:19:73:72:71:1c:aa:10:30:37:f9:0d:5a:07:b9: 0a:4b:db:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDF9pGEj0qROxmBcpw2InxaAXqi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJC NDFFMDQwODAeFw0yNTA3MDExNTI1NTdaFw0yNTA3MDQxODA5NTdaMDMxMTAvBgNV BAMTKEI0MjY2OTY2QzAxODgxMjZBQUFBNDI0NTM2RTc3NDlCOEE3Mzc0MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0+ArJy45DVy2UJ44KYSOcERs4 RgfiJPQyHXYbEielyw9rqRP5zit3ff8kLLxMRu4NGaw73s3vekF3Jjd+Abzbo5Ha 5hDyHruSmuwQtyS7jkjWRNogfcTW3BoXSrUntQWfPNHIzVuXipN3shOLf+joChf9 Tul+wcUSbmsN+/r1YSdzOf+Vx7+y1IQDx+pKZ3ydB38Js3nbyZrvePXHFBg1lJ7K LyokJ10ZqPgYKnhsoCPnT7Q7slz5QYFcV3rIZl+3mI0RGoMkmKePsOMlROussqrz uPhE+wfKyqdDYV4sOAacO+3Veh4SZyswoifjhtB7/xxdZuW3kpD0o8qbmU+xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtCZpZsAYgSaqqkJFNud0m4pzdA8wHwYDVR0j BBgwFoAUeE3ZNzt7CxjUUTnu/vSfG7QeBAgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTlhZjRkYi1jZjZmLTQ5YjMtYTA1Yi02MWE3YjljODE3YzEvMC83ODRERDkzNzNC N0IwQjE4RDQ1MTM5RUVGRUY0OUYxQkI0MUUwNDA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJCNDFF MDQwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5YWY0ZGItY2Y2Zi00OWIzLWEw NWItNjFhN2I5YzgxN2MxLzAvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlG MUJCNDFFMDQwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQ1WJClmqsBR6Z2R+xzQHOLGb7QYsq/tzwn Ap4d/4KYcW5GGmOWpPFESqEEGag8CmKKPSHCwjaEbqVErcRsk3706CgE9kszz+ch MOCQFzMnzs/p8Wv1Yq16HEZZyXxWFaC8nhqV1kkiVPrcRp66IxxPr2U9wOaj0X+H 1AdPI+ngNdTKw2Sa6pRq6ljWN+fhlWMKX18HDVbMngcLUzhkt9rkPrkOCfi/YEk7 RMCxecIPYyP1laIadteBV59/0ts0ZbULoDgje5GYJz+WiIizVfGGYKq8KO1pNSsq g+RZH9Rb118EL/uBJSTW50/vxjgZc3JxHKoQMDf5DVoHuQpL2+U= -----END CERTIFICATE-----Generated at Thu Jul 3 16:00:54 2025 by rpki-client