$ rpki-client -vvf repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft File: 7AD0DDB5789DE529C8697A033978C381FFE40D83.mft (raw, json) Hash identifier: ILtuZXzgHVBERbjS7hABqjeacCGUzimfUw7GisR0Eos= Subject key identifier: 8D:18:CC:CC:E4:71:D5:08:C6:30:DB:F4:EA:F0:56:69:61:C1:8E:D6 Authority key identifier: 7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 Certificate issuer: /CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Certificate serial: 381E1492D1B0EF7937346488F0F86E97E7E87B39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft Manifest number: 01FC Signing time: Fri 22 Aug 2025 23:11:30 +0000 Manifest this update: Fri 22 Aug 2025 23:06:30 +0000 Manifest next update: Tue 26 Aug 2025 01:38:30 +0000 Files and hashes: 1: 7AD0DDB5789DE529C8697A033978C381FFE40D83.crl (hash: WYixo01qW5TzblI3QIqJvvX2SbKYvPOBVGG516W9vG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1e:14:92:d1:b0:ef:79:37:34:64:88:f0:f8:6e:97:e7:e8:7b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Validity Not Before: Aug 22 23:06:30 2025 GMT Not After : Aug 26 01:38:30 2025 GMT Subject: CN=8D18CCCCE471D508C630DBF4EAF0566961C18ED6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:96:c7:b0:b4:36:22:99:32:e8:14:ae:e9:08: f3:af:1f:d0:65:d3:2e:cc:d7:f6:0c:ae:73:b9:dd: 32:d5:61:4d:62:79:f3:3f:79:67:aa:59:3f:1a:c8: 5b:9a:1e:e8:a7:ba:a9:5c:ff:dd:88:99:5a:25:16: 4e:92:08:03:21:c4:b5:90:02:91:cb:ea:cf:f0:51: 8a:57:cb:d4:d4:70:70:79:42:31:4e:98:d2:e6:0e: 68:c3:5f:87:a0:fb:9c:da:da:c9:5d:74:2f:07:46: 71:65:e7:d3:b9:41:93:0b:24:46:1d:31:de:27:50: bd:db:e3:48:a0:e3:8e:7a:77:03:7b:96:f7:58:cd: d5:dc:f6:49:a5:44:31:13:d4:fa:a7:89:c3:b1:30: 16:15:10:43:7e:8e:0c:27:58:1c:e2:92:57:6e:5c: 8a:f1:ac:3c:72:95:86:6b:cf:df:26:a9:96:24:71: db:a8:33:3b:0b:1a:64:c5:a8:13:f5:47:6d:1d:35: ee:c2:ea:a2:77:9e:00:ba:c5:a9:92:a6:b0:ec:56: 23:0a:30:d4:53:75:25:a8:d1:d2:17:4a:6b:9b:fb: 63:24:bc:0a:28:b2:8e:6e:07:d0:9c:1e:fd:fe:f7: 01:39:52:1f:c0:a4:c9:5e:cb:dd:27:85:70:bf:60: 43:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:18:CC:CC:E4:71:D5:08:C6:30:DB:F4:EA:F0:56:69:61:C1:8E:D6 X509v3 Authority Key Identifier: keyid:7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:93:49:e6:cd:ec:a0:6b:0e:74:e4:5f:1a:c4:49:1b:27:5b: 8d:22:8a:0d:3b:bb:aa:34:47:20:c5:49:82:20:22:5a:f6:39: c2:19:fd:2e:1a:44:5c:fb:00:2c:ae:62:55:69:0a:ae:1c:5a: f5:63:33:59:3a:e9:7a:db:28:77:34:ea:86:18:3b:1c:9d:04: 02:df:0b:ee:48:6c:e5:5c:33:b1:b3:bd:e9:9c:c8:ba:c2:5c: 41:0d:c5:5d:aa:69:8f:f2:2b:09:1a:cc:61:ae:0d:06:b0:56: 71:b5:18:2e:97:5b:aa:f5:1f:c2:86:df:c7:65:90:e9:fa:7f: 3b:2c:4f:8f:12:2a:84:fe:41:a2:fd:b7:e4:26:2e:ae:41:fc: 41:ec:01:a1:11:4b:5c:47:ba:d7:20:9c:75:4d:7a:1e:fb:57: d6:51:ba:23:22:ef:3a:89:0b:63:bf:41:2d:82:89:7f:65:44: 1e:0d:01:6f:55:ed:71:04:14:28:ef:13:5c:ae:e9:30:e8:0d: 31:22:65:87:92:33:e4:23:30:e8:59:51:7d:a2:ed:a5:da:e3: 78:d5:1e:a4:f2:85:7e:b3:42:c7:35:44:25:61:8b:68:9a:44: 94:ff:38:e6:1a:97:13:b1:ed:f8:ee:48:a3:aa:bf:69:a4:40: f2:f7:09:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOB4UktGw73k3NGSI8Phul+foezkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFG RkU0MEQ4MzAeFw0yNTA4MjIyMzA2MzBaFw0yNTA4MjYwMTM4MzBaMDMxMTAvBgNV BAMTKDhEMThDQ0NDRTQ3MUQ1MDhDNjMwREJGNEVBRjA1NjY5NjFDMThFRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAlsewtDYimTLoFK7pCPOvH9Bl 0y7M1/YMrnO53TLVYU1iefM/eWeqWT8ayFuaHuinuqlc/92ImVolFk6SCAMhxLWQ ApHL6s/wUYpXy9TUcHB5QjFOmNLmDmjDX4eg+5za2slddC8HRnFl59O5QZMLJEYd Md4nUL3b40ig4456dwN7lvdYzdXc9kmlRDET1PqnicOxMBYVEEN+jgwnWBzikldu XIrxrDxylYZrz98mqZYkcduoMzsLGmTFqBP1R20dNe7C6qJ3ngC6xamSprDsViMK MNRTdSWo0dIXSmub+2MkvAooso5uB9CcHv3+9wE5Uh/ApMley90nhXC/YENvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjRjMzORx1QjGMNv06vBWaWHBjtYwHwYDVR0j BBgwFoAUetDdtXid5SnIaXoDOXjDgf/kDYMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjJiMTc4Ni0xODMzLTRkMGEtYTEzOS00NjQ0MzMzOTNkNzgvMC83QUQwRERCNTc4 OURFNTI5Qzg2OTdBMDMzOTc4QzM4MUZGRTQwRDgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFGRkU0 MEQ4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYyYjE3ODYtMTgzMy00ZDBhLWEx MzktNDY0NDMzMzkzZDc4LzAvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMz ODFGRkU0MEQ4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANWTSebN7KBrDnTkXxrESRsnW40iig07u6o0 RyDFSYIgIlr2OcIZ/S4aRFz7ACyuYlVpCq4cWvVjM1k66XrbKHc06oYYOxydBALf C+5IbOVcM7GzvemcyLrCXEENxV2qaY/yKwkazGGuDQawVnG1GC6XW6r1H8KG38dl kOn6fzssT48SKoT+QaL9t+QmLq5B/EHsAaERS1xHutcgnHVNeh77V9ZRuiMi7zqJ C2O/QS2CiX9lRB4NAW9V7XEEFCjvE1yu6TDoDTEiZYeSM+QjMOhZUX2i7aXa43jV HqTyhX6zQsc1RCVhi2iaRJT/OOYalxOx7fjuSKOqv2mkQPL3CfU= -----END CERTIFICATE-----Generated at Sat Aug 23 10:37:33 2025 by rpki-client