$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft File: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft (raw, json) Hash identifier: zNSwmBMiFRSIArJhhe6D7ITeABnsC8iCMu+jYnJKpIU= Subject key identifier: C4:DC:8B:EB:C9:36:0C:47:96:3C:68:E8:0A:D9:46:2A:76:92:0C:17 Authority key identifier: 78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 Certificate issuer: /CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Certificate serial: 385C1363DEEA6819321E683B3FE4EF3D23C3415B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft Manifest number: 85 Signing time: Sat 09 Aug 2025 02:10:58 +0000 Manifest this update: Sat 09 Aug 2025 02:05:58 +0000 Manifest next update: Tue 12 Aug 2025 04:16:58 +0000 Files and hashes: 1: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl (hash: HH/d++hLe9arRYhOx68Km6UjgAeR/NyX3OybqBCR83U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:5c:13:63:de:ea:68:19:32:1e:68:3b:3f:e4:ef:3d:23:c3:41:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Validity Not Before: Aug 9 02:05:58 2025 GMT Not After : Aug 12 04:16:58 2025 GMT Subject: CN=C4DC8BEBC9360C47963C68E80AD9462A76920C17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e6:5e:ed:8a:52:e8:4b:5c:45:08:31:29:fa: 6b:0e:59:eb:55:ef:f7:ba:8f:a0:7f:3f:ef:da:fe: a6:5d:a7:b8:96:13:ac:a0:13:5a:6b:41:89:69:ef: 1e:94:fe:f7:86:16:4d:b4:1b:73:c3:d2:d4:66:c2: 17:44:0e:91:19:0e:fa:30:5e:2d:82:bb:f4:c0:49: 38:a7:da:fd:7f:29:4a:ab:56:18:7e:89:43:4f:68: 82:61:6e:92:d0:a8:97:4b:40:1e:cb:39:c9:ed:b7: 6a:2f:59:b5:0d:65:36:26:75:81:35:e5:46:44:cf: 1d:59:3a:57:74:a2:f0:a5:ba:c6:6d:3e:20:ac:85: c0:9e:68:42:0c:cc:7e:37:99:35:f0:fa:e2:30:a9: d8:75:19:07:57:dc:0e:1c:1c:06:c5:a5:08:92:41: 24:88:37:67:58:29:97:92:0b:b2:93:80:cd:ef:5d: cb:33:bd:38:1e:96:06:c5:0a:19:d7:8b:4f:5c:b2: 4b:64:d8:d1:da:15:de:c5:17:53:33:a6:6b:ff:9a: cb:d7:75:78:cc:bb:d8:fa:6b:9c:41:de:4c:9d:e0: a7:b8:e7:ea:84:f9:84:ae:0e:20:bf:66:2b:e7:9e: ba:0b:66:b6:13:26:7b:7a:f2:f2:25:9b:c9:0e:7c: e2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DC:8B:EB:C9:36:0C:47:96:3C:68:E8:0A:D9:46:2A:76:92:0C:17 X509v3 Authority Key Identifier: keyid:78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:42:c3:57:d5:92:e1:52:b0:3f:09:b0:31:da:bc:35:9b:b0: 73:0b:87:8d:84:89:69:9b:67:c9:fc:7b:92:26:f2:f5:05:3e: ee:72:db:f4:45:32:ca:fb:7c:eb:98:ad:3e:45:7c:91:bd:72: e4:45:04:2b:7a:cf:cf:69:7f:9b:3b:64:c9:b0:6e:df:91:76: 6e:0d:03:9c:31:42:b6:91:28:01:e3:41:03:7d:5b:c5:aa:d7: 63:cf:97:f7:3d:29:90:20:3e:05:4b:8d:26:0f:c2:dc:f7:59: e7:b7:25:04:13:78:71:5f:03:4e:f3:86:e7:6d:e8:76:54:b9: c7:ce:8d:e5:a9:09:c7:6a:ab:08:dc:fd:bf:c3:a6:b9:eb:39: 72:88:50:5c:1f:77:15:f1:6f:4b:74:5c:5a:4d:6b:1c:7f:1a: 20:48:a0:09:ce:05:fc:46:ae:8e:4b:e7:fa:b0:3a:92:c2:42: 91:01:44:e6:d9:0e:95:e8:7d:de:ba:d9:b7:d0:c7:a9:78:c3: 43:50:00:d8:ee:f2:d4:f9:65:7d:df:e3:61:e2:74:83:77:99: 0f:3e:13:08:9d:45:3c:6e:fe:e7:79:96:0e:3e:57:2e:81:60: 36:fc:51:e4:df:69:c6:cb:a7:67:83:38:44:29:02:2e:da:05: ba:92:ed:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOFwTY97qaBkyHmg7P+TvPSPDQVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJC NDFFMDQwODAeFw0yNTA4MDkwMjA1NThaFw0yNTA4MTIwNDE2NThaMDMxMTAvBgNV BAMTKEM0REM4QkVCQzkzNjBDNDc5NjNDNjhFODBBRDk0NjJBNzY5MjBDMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV5l7tilLoS1xFCDEp+msOWetV 7/e6j6B/P+/a/qZdp7iWE6ygE1prQYlp7x6U/veGFk20G3PD0tRmwhdEDpEZDvow Xi2Cu/TASTin2v1/KUqrVhh+iUNPaIJhbpLQqJdLQB7LOcntt2ovWbUNZTYmdYE1 5UZEzx1ZOld0ovClusZtPiCshcCeaEIMzH43mTXw+uIwqdh1GQdX3A4cHAbFpQiS QSSIN2dYKZeSC7KTgM3vXcszvTgelgbFChnXi09csktk2NHaFd7FF1Mzpmv/msvX dXjMu9j6a5xB3kyd4Ke45+qE+YSuDiC/ZivnnroLZrYTJnt68vIlm8kOfOLLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxNyL68k2DEeWPGjoCtlGKnaSDBcwHwYDVR0j BBgwFoAUeE3ZNzt7CxjUUTnu/vSfG7QeBAgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTlhZjRkYi1jZjZmLTQ5YjMtYTA1Yi02MWE3YjljODE3YzEvMC83ODRERDkzNzNC N0IwQjE4RDQ1MTM5RUVGRUY0OUYxQkI0MUUwNDA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJCNDFF MDQwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5YWY0ZGItY2Y2Zi00OWIzLWEw NWItNjFhN2I5YzgxN2MxLzAvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlG MUJCNDFFMDQwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhCw1fVkuFSsD8JsDHavDWbsHMLh42EiWmb Z8n8e5Im8vUFPu5y2/RFMsr7fOuYrT5FfJG9cuRFBCt6z89pf5s7ZMmwbt+Rdm4N A5wxQraRKAHjQQN9W8Wq12PPl/c9KZAgPgVLjSYPwtz3Wee3JQQTeHFfA07zhudt 6HZUucfOjeWpCcdqqwjc/b/DprnrOXKIUFwfdxXxb0t0XFpNaxx/GiBIoAnOBfxG ro5L5/qwOpLCQpEBRObZDpXofd662bfQx6l4w0NQANju8tT5ZX3f42HidIN3mQ8+ EwidRTxu/ud5lg4+Vy6BYDb8UeTfacbLp2eDOEQpAi7aBbqS7Ys= -----END CERTIFICATE-----Generated at Mon Aug 11 01:44:47 2025 by rpki-client