$ rpki-client -vvf repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft File: 7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft (raw, json) Hash identifier: As8JTJq32HRiLfHlyM8YyzV9nDDTUxhKIwEGhZRa7yM= Subject key identifier: 58:FD:F4:6E:41:08:7C:7B:8C:05:28:1B:2D:67:1C:CB:FA:2E:6B:9E Authority key identifier: 7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C Certificate issuer: /CN=7F9ECE743A3074E61F56CD11161AA58A6BB4092C Certificate serial: 4CB32E879E33EAC9BE6A368BC29BEEBBEAE1ADF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft Manifest number: 3E Signing time: Sun 19 Oct 2025 05:31:16 +0000 Manifest this update: Sun 19 Oct 2025 05:26:16 +0000 Manifest next update: Wed 22 Oct 2025 13:58:16 +0000 Files and hashes: 1: 7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl (hash: AWoGF1RFjlIl0aOopEj0xCNGPnZYP/TMCaT1l8n2QEs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:b3:2e:87:9e:33:ea:c9:be:6a:36:8b:c2:9b:ee:bb:ea:e1:ad:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F9ECE743A3074E61F56CD11161AA58A6BB4092C Validity Not Before: Oct 19 05:26:16 2025 GMT Not After : Oct 22 13:58:16 2025 GMT Subject: CN=58FDF46E41087C7B8C05281B2D671CCBFA2E6B9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:78:63:95:ea:d5:73:29:c1:20:62:bc:af:ec: 4a:45:15:0f:06:8a:a7:cb:41:63:d5:dc:a2:92:0a: ed:cd:7c:20:83:96:e6:2b:1d:6e:64:54:cf:04:0a: 0a:44:99:84:ae:91:b0:6a:da:12:c5:be:2f:10:c7: 62:a1:50:84:3d:ab:92:26:2f:a7:1b:d2:3a:36:44: cb:74:0c:5b:6d:96:eb:b9:69:e6:12:dc:52:ef:b8: 5d:6e:ea:ec:d1:da:fc:ae:cf:a7:c6:5c:bf:c7:8a: a9:1c:60:fa:9a:38:8e:c4:32:bd:b2:b3:62:79:0d: 2a:6b:b3:d9:6b:69:5f:60:ae:24:2d:96:ce:30:8d: be:d0:a8:be:61:52:c3:2e:e3:64:f4:ff:88:b2:39: eb:3d:a8:8b:aa:f8:5a:81:dd:8f:2a:fb:44:ad:2e: 31:2f:fb:34:cd:60:b9:0b:17:9b:b6:c8:24:51:90: df:76:6a:d3:bc:14:88:82:e1:c5:c0:61:1f:8b:e8: 48:07:28:b2:8d:67:a1:74:a5:05:18:05:36:1c:fc: f1:53:b6:a0:5c:36:b1:73:80:12:34:a4:dd:20:0c: 54:9a:94:7a:8c:0c:d9:85:f4:f9:a0:ad:db:4c:44: 30:31:0e:41:de:5d:0c:3f:09:96:6a:cb:1d:5c:ca: fc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FD:F4:6E:41:08:7C:7B:8C:05:28:1B:2D:67:1C:CB:FA:2E:6B:9E X509v3 Authority Key Identifier: keyid:7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:6f:d4:d1:d3:f9:10:2e:17:3f:4d:0f:60:e7:88:e6:3e:9b: a5:40:85:df:9d:cf:14:9b:ab:22:81:b3:ec:38:da:45:96:02: 30:c4:d0:bf:15:0f:a9:02:1e:51:b0:e9:97:36:0a:8a:5c:b2: 20:b4:dd:55:74:1c:63:1a:f7:5d:85:89:e0:59:22:61:cf:eb: 0d:5d:60:ba:d0:9f:2e:18:8b:79:6f:05:80:e9:de:74:cb:5e: b9:60:38:0d:15:0d:49:cf:66:15:03:c8:21:5b:77:2e:53:db: aa:1e:d7:a7:c4:ff:74:2c:31:af:a6:b7:e0:e5:45:48:ce:44: 97:7d:95:d0:79:11:4f:e1:49:19:a0:18:23:60:f7:01:6d:ae: de:df:59:38:14:cb:2b:8e:d5:64:8c:46:fe:cd:4a:7d:6e:d1: ac:23:89:4c:3c:7c:9e:f8:cc:8f:37:e6:a6:73:58:93:ef:56: a3:23:f6:b5:c5:74:34:20:96:c6:f8:74:43:d2:39:6d:6d:d8: 43:16:7f:d3:ac:4a:80:ad:ee:64:48:b2:82:c4:b6:f7:e4:e7: bc:02:05:e7:79:d2:b4:9d:7e:8e:3b:1d:19:cd:09:ef:ce:02: c4:3e:e4:8f:69:24:2c:a8:56:9b:69:16:53:ff:a9:fc:9e:97: 47:4e:10:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTLMuh54z6sm+ajaLwpvuu+rhrfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1OEE2 QkI0MDkyQzAeFw0yNTEwMTkwNTI2MTZaFw0yNTEwMjIxMzU4MTZaMDMxMTAvBgNV BAMTKDU4RkRGNDZFNDEwODdDN0I4QzA1MjgxQjJENjcxQ0NCRkEyRTZCOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgeGOV6tVzKcEgYryv7EpFFQ8G iqfLQWPV3KKSCu3NfCCDluYrHW5kVM8ECgpEmYSukbBq2hLFvi8Qx2KhUIQ9q5Im L6cb0jo2RMt0DFttluu5aeYS3FLvuF1u6uzR2vyuz6fGXL/HiqkcYPqaOI7EMr2y s2J5DSprs9lraV9griQtls4wjb7QqL5hUsMu42T0/4iyOes9qIuq+FqB3Y8q+0St LjEv+zTNYLkLF5u2yCRRkN92atO8FIiC4cXAYR+L6EgHKLKNZ6F0pQUYBTYc/PFT tqBcNrFzgBI0pN0gDFSalHqMDNmF9PmgrdtMRDAxDkHeXQw/CZZqyx1cyvzzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWP30bkEIfHuMBSgbLWccy/oua54wHwYDVR0j BBgwFoAUf57OdDowdOYfVs0RFhqlimu0CSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjY2YmZhNi1kYzRjLTQxMDgtOTMyYy0yMDRiNjJlODYyNzIvMC83RjlFQ0U3NDNB MzA3NEU2MUY1NkNEMTExNjFBQTU4QTZCQjQwOTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1OEE2QkI0 MDkyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmY2NmJmYTYtZGM0Yy00MTA4LTkz MmMtMjA0YjYyZTg2MjcyLzAvN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1 OEE2QkI0MDkyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANxv1NHT+RAuFz9ND2DniOY+m6VAhd+dzxSb qyKBs+w42kWWAjDE0L8VD6kCHlGw6Zc2CopcsiC03VV0HGMa912FieBZImHP6w1d YLrQny4Yi3lvBYDp3nTLXrlgOA0VDUnPZhUDyCFbdy5T26oe16fE/3QsMa+mt+Dl RUjORJd9ldB5EU/hSRmgGCNg9wFtrt7fWTgUyyuO1WSMRv7NSn1u0awjiUw8fJ74 zI835qZzWJPvVqMj9rXFdDQglsb4dEPSOW1t2EMWf9OsSoCt7mRIsoLEtvfk57wC Bed50rSdfo47HRnNCe/OAsQ+5I9pJCyoVptpFlP/qfyel0dOEKs= -----END CERTIFICATE-----Generated at Mon Oct 20 12:32:47 2025 by rpki-client