$ rpki-client -vvf repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft File: 7A8364745196ADEDA32E89F410EFDC19F658815A.mft (raw, json) Hash identifier: ZMp0e56tEsMEW4SzMfsd5V/Cs354lGTWsbvkZUXtsEE= Subject key identifier: 5E:BD:76:AE:0B:BA:B4:4C:36:E3:E4:7F:A4:17:0B:23:DE:DD:54:D9 Authority key identifier: 7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A Certificate issuer: /CN=7A8364745196ADEDA32E89F410EFDC19F658815A Certificate serial: 0893C0C31B7EDBB2091E4BE61674FE766219D278 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft Manifest number: D0 Signing time: Tue 04 Nov 2025 02:40:00 +0000 Manifest this update: Tue 04 Nov 2025 02:35:00 +0000 Manifest next update: Fri 07 Nov 2025 07:33:00 +0000 Files and hashes: 1: 7A8364745196ADEDA32E89F410EFDC19F658815A.crl (hash: 9JXLb18GFtaB2nEbp6TQLCPDZrG8w0vKxNvv3SoY8dE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:93:c0:c3:1b:7e:db:b2:09:1e:4b:e6:16:74:fe:76:62:19:d2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A8364745196ADEDA32E89F410EFDC19F658815A Validity Not Before: Nov 4 02:35:00 2025 GMT Not After : Nov 7 07:33:00 2025 GMT Subject: CN=5EBD76AE0BBAB44C36E3E47FA4170B23DEDD54D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:19:85:00:92:78:5d:cd:61:45:9d:04:dc:86: 72:7c:fc:b4:aa:a2:09:e2:76:db:37:c3:43:6a:ec: c3:01:a6:99:a0:0c:8b:bd:5f:b2:31:6c:03:33:86: 93:8b:71:b7:83:94:9a:57:9d:fa:87:82:90:cc:ee: 7c:01:ea:42:cd:41:06:66:8a:f8:58:4a:1d:1f:43: 3d:e6:61:c5:5d:f3:91:36:51:1e:75:98:c2:94:73: 24:e1:22:58:92:8a:ec:33:df:78:60:8b:10:98:2c: 20:00:e1:c9:c5:63:72:e5:c8:be:df:13:6a:e6:6a: 4e:3d:ab:82:62:87:d0:37:c1:56:e2:30:75:43:2f: 08:1c:00:6c:b7:9b:00:c4:05:6d:eb:49:6f:0b:00: 35:f6:78:03:fb:f2:db:a2:30:17:1b:6d:f8:ce:b4: 86:10:36:ee:90:b5:3b:a9:1f:65:f5:ec:08:38:af: 2b:61:28:a2:cd:fe:0b:15:b8:b5:6d:f5:c1:e9:fa: 2d:21:a1:8e:24:43:fb:cb:bb:6b:c3:e5:f5:db:bc: 69:ad:cd:46:08:10:1f:ee:62:54:7b:e0:99:90:13: b6:8b:8a:e7:18:63:d4:2d:ed:65:d7:27:e1:f3:ef: 81:72:87:b1:25:b0:88:d7:32:db:28:c6:57:6e:61: 11:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:BD:76:AE:0B:BA:B4:4C:36:E3:E4:7F:A4:17:0B:23:DE:DD:54:D9 X509v3 Authority Key Identifier: keyid:7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:80:41:f0:66:e6:5c:6f:85:01:b5:1a:64:53:65:80:bb:50: 41:c4:70:8d:7b:5f:8c:88:2c:ac:f6:2d:71:2b:9d:69:ad:48: b9:04:35:f3:56:13:0e:c9:d1:41:c1:72:14:1c:85:7a:e9:df: e9:96:b7:b5:f9:33:16:3b:4e:44:4b:3a:e4:1b:f7:79:be:ce: fe:7a:6c:d9:50:8d:c9:ff:40:8e:8b:ce:85:de:98:93:49:07: 37:92:a5:e5:f5:6f:19:fe:53:e1:57:67:aa:c2:eb:c4:f1:fd: 5f:82:16:c2:84:a3:6e:64:f1:48:c8:53:1f:d3:37:6d:50:2f: e7:13:de:fe:db:1c:c1:a8:45:1f:29:40:d6:41:69:a2:57:3f: f7:62:fa:a0:59:93:ba:bf:a8:3c:e2:4a:76:24:eb:4a:ea:e6: 4e:3e:79:a6:68:f4:0f:68:bf:be:fe:58:06:27:45:dd:b0:4b: a4:a7:5c:24:30:1f:0d:04:2c:29:65:91:a0:dd:20:87:16:e9: 74:42:92:9f:22:34:13:49:ed:8d:f1:77:ef:df:13:92:b5:41: d0:52:78:8d:7d:12:a4:7d:3c:9b:f6:c2:bf:49:e7:2a:09:2c: 49:9e:47:6f:7b:e7:ae:7c:4a:ec:12:52:ac:88:46:5d:88:a3: 64:dd:54:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCJPAwxt+27IJHkvmFnT+dmIZ0ngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlG NjU4ODE1QTAeFw0yNTExMDQwMjM1MDBaFw0yNTExMDcwNzMzMDBaMDMxMTAvBgNV BAMTKDVFQkQ3NkFFMEJCQUI0NEMzNkUzRTQ3RkE0MTcwQjIzREVERDU0RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWGYUAknhdzWFFnQTchnJ8/LSq ognidts3w0Nq7MMBppmgDIu9X7IxbAMzhpOLcbeDlJpXnfqHgpDM7nwB6kLNQQZm ivhYSh0fQz3mYcVd85E2UR51mMKUcyThIliSiuwz33hgixCYLCAA4cnFY3LlyL7f E2rmak49q4Jih9A3wVbiMHVDLwgcAGy3mwDEBW3rSW8LADX2eAP78tuiMBcbbfjO tIYQNu6QtTupH2X17Ag4rythKKLN/gsVuLVt9cHp+i0hoY4kQ/vLu2vD5fXbvGmt zUYIEB/uYlR74JmQE7aLiucYY9Qt7WXXJ+Hz74Fyh7ElsIjXMtsoxlduYRGXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXr12rgu6tEw24+R/pBcLI97dVNkwHwYDVR0j BBgwFoAUeoNkdFGWre2jLon0EO/cGfZYgVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5YjRkMS1kNmI1LTQ4MjAtYTQ5Ny02OTNiOTNkZGY1OGUvMC83QTgzNjQ3NDUx OTZBREVEQTMyRTg5RjQxMEVGREMxOUY2NTg4MTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlGNjU4 ODE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRD MTlGNjU4ODE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSAQfBm5lxvhQG1GmRTZYC7UEHEcI17X4yI LKz2LXErnWmtSLkENfNWEw7J0UHBchQchXrp3+mWt7X5MxY7TkRLOuQb93m+zv56 bNlQjcn/QI6LzoXemJNJBzeSpeX1bxn+U+FXZ6rC68Tx/V+CFsKEo25k8UjIUx/T N21QL+cT3v7bHMGoRR8pQNZBaaJXP/di+qBZk7q/qDziSnYk60rq5k4+eaZo9A9o v77+WAYnRd2wS6SnXCQwHw0ELCllkaDdIIcW6XRCkp8iNBNJ7Y3xd+/fE5K1QdBS eI19EqR9PJv2wr9J5yoJLEmeR2975658SuwSUqyIRl2Io2TdVOA= -----END CERTIFICATE-----Generated at Tue Nov 4 21:06:38 2025 by rpki-client