$ rpki-client -vvf repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft File: 7A8364745196ADEDA32E89F410EFDC19F658815A.mft (raw, json) Hash identifier: LkUmPXJ6uSARGi6mWcuN6OOzkqoAbKLglT95PUD2P7Y= Subject key identifier: C8:6A:09:10:00:F4:6C:64:84:EB:FA:EA:1E:5B:3D:BD:97:8D:42:B9 Authority key identifier: 7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A Certificate issuer: /CN=7A8364745196ADEDA32E89F410EFDC19F658815A Certificate serial: 165DF42D859BF6960766804418C9C34CD9370A74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft Manifest number: A8 Signing time: Tue 05 Aug 2025 08:20:00 +0000 Manifest this update: Tue 05 Aug 2025 08:15:00 +0000 Manifest next update: Fri 08 Aug 2025 13:37:00 +0000 Files and hashes: 1: 7A8364745196ADEDA32E89F410EFDC19F658815A.crl (hash: FejdMQhU/wD2qrIPqRQzrDuKGIkoVRAvkqAmXodPQ2E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 13:37:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:5d:f4:2d:85:9b:f6:96:07:66:80:44:18:c9:c3:4c:d9:37:0a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A8364745196ADEDA32E89F410EFDC19F658815A Validity Not Before: Aug 5 08:15:00 2025 GMT Not After : Aug 8 13:37:00 2025 GMT Subject: CN=C86A091000F46C6484EBFAEA1E5B3DBD978D42B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b1:6c:a0:1f:f2:64:1b:c0:53:29:2c:14:0f: 7c:1c:62:25:c8:59:ff:fa:99:99:63:30:85:7e:bb: 0b:01:f9:37:4f:7f:05:c7:28:78:66:14:26:7d:02: 4d:a6:13:14:e3:02:e4:03:99:ea:2a:af:59:b0:cb: b6:cd:07:8f:f9:c4:30:71:fd:25:c7:b8:79:83:31: 5a:a7:65:99:3c:8f:be:a9:c2:15:93:9d:fa:1a:17: d4:ee:92:f8:44:73:cc:42:93:2a:e3:98:44:07:dd: cb:30:cb:14:e5:45:68:89:74:bf:4c:96:06:86:76: 50:0f:f9:b9:cb:c6:83:ca:14:29:5c:88:63:d4:ad: 3f:7a:4d:d9:ce:5b:39:7a:c9:7c:44:85:eb:bc:93: 06:ef:0d:ed:c2:e5:d8:dd:95:e4:e8:6e:de:50:52: a8:ce:92:ba:86:1c:65:6e:28:5b:68:78:73:04:93: 65:fd:d2:38:a3:6e:be:fc:ae:2a:0d:66:66:52:0b: ca:7f:9b:86:67:32:8f:51:a1:dd:16:81:8f:be:f8: ae:34:ad:47:e6:ac:f8:54:4b:8f:4f:f0:7c:dd:83: 77:17:71:c5:48:b3:b1:35:9c:0f:3a:ea:7e:b3:1f: a0:46:ec:bb:1b:c6:bc:6d:da:e9:21:2b:b7:2c:98: a5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6A:09:10:00:F4:6C:64:84:EB:FA:EA:1E:5B:3D:BD:97:8D:42:B9 X509v3 Authority Key Identifier: keyid:7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:31:75:da:19:b9:24:26:43:9c:61:4d:a6:19:4e:4a:da:b4: 78:69:95:42:f1:c2:eb:80:97:45:7e:de:64:e4:42:4c:e0:e8: 97:2e:f4:1b:69:ad:4c:74:52:fa:7b:6f:63:d6:1b:97:29:64: 98:9c:be:59:73:7b:09:69:75:83:c8:07:18:0d:b7:7d:8c:2e: aa:91:57:2f:d9:01:a6:a3:73:f7:29:18:21:bc:dd:de:70:45: 67:e8:c5:cb:67:2b:40:bc:86:d7:da:0a:4d:8f:14:4e:9b:44: 68:06:2c:ad:70:c5:04:b9:90:ad:5a:a2:e7:13:2e:aa:0c:a2: 57:a3:89:84:76:bd:91:59:c5:9a:f5:f0:7c:b7:06:bb:bf:28: 75:d8:7d:e1:23:0e:49:6d:f1:4e:1e:a0:5b:bb:d8:9a:f6:92: 78:2a:ba:7f:bb:dd:4c:1e:37:9f:07:8c:37:a5:18:b1:39:79: 34:1f:6d:2c:b5:8e:64:44:28:aa:fa:42:9e:b9:ad:bf:e9:c2: 02:8a:6b:b7:2f:75:50:3e:ac:aa:cd:e6:73:e3:6a:bb:13:4e: df:81:58:6a:92:65:7b:1e:4d:dd:f0:b7:0a:5b:58:0f:42:46: d1:e8:64:bf:06:09:31:ec:8b:f8:2f:80:5b:9d:e2:7b:34:e8: fa:31:8d:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFl30LYWb9pYHZoBEGMnDTNk3CnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlG NjU4ODE1QTAeFw0yNTA4MDUwODE1MDBaFw0yNTA4MDgxMzM3MDBaMDMxMTAvBgNV BAMTKEM4NkEwOTEwMDBGNDZDNjQ4NEVCRkFFQTFFNUIzREJEOTc4RDQyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVsWygH/JkG8BTKSwUD3wcYiXI Wf/6mZljMIV+uwsB+TdPfwXHKHhmFCZ9Ak2mExTjAuQDmeoqr1mwy7bNB4/5xDBx /SXHuHmDMVqnZZk8j76pwhWTnfoaF9TukvhEc8xCkyrjmEQH3cswyxTlRWiJdL9M lgaGdlAP+bnLxoPKFClciGPUrT96TdnOWzl6yXxEheu8kwbvDe3C5djdleTobt5Q UqjOkrqGHGVuKFtoeHMEk2X90jijbr78rioNZmZSC8p/m4ZnMo9Rod0WgY+++K40 rUfmrPhUS49P8Hzdg3cXccVIs7E1nA866n6zH6BG7Lsbxrxt2ukhK7csmKXHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyGoJEAD0bGSE6/rqHls9vZeNQrkwHwYDVR0j BBgwFoAUeoNkdFGWre2jLon0EO/cGfZYgVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5YjRkMS1kNmI1LTQ4MjAtYTQ5Ny02OTNiOTNkZGY1OGUvMC83QTgzNjQ3NDUx OTZBREVEQTMyRTg5RjQxMEVGREMxOUY2NTg4MTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlGNjU4 ODE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRD MTlGNjU4ODE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsxddoZuSQmQ5xhTaYZTkratHhplULxwuuA l0V+3mTkQkzg6Jcu9BtprUx0Uvp7b2PWG5cpZJicvllzewlpdYPIBxgNt32MLqqR Vy/ZAaajc/cpGCG83d5wRWfoxctnK0C8htfaCk2PFE6bRGgGLK1wxQS5kK1aoucT LqoMolejiYR2vZFZxZr18Hy3Bru/KHXYfeEjDklt8U4eoFu72Jr2kngqun+73Uwe N58HjDelGLE5eTQfbSy1jmREKKr6Qp65rb/pwgKKa7cvdVA+rKrN5nPjarsTTt+B WGqSZXseTd3wtwpbWA9CRtHoZL8GCTHsi/gvgFud4ns06PoxjdI= -----END CERTIFICATE-----Generated at Thu Aug 7 14:33:06 2025 by rpki-client