$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft File: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft (raw, json) Hash identifier: GpBAlSsTPWNuEOtmNN/Tenf34LzMGbkKK3xwStnIjOs= Subject key identifier: AC:61:EA:9D:64:D2:CB:73:A9:04:61:1A:E6:53:C3:47:C3:85:04:79 Authority key identifier: 78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 Certificate issuer: /CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Certificate serial: 614634FF5C86B92F9E49A54540077BFE1AEFACF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft Manifest number: AC Signing time: Tue 04 Nov 2025 22:40:59 +0000 Manifest this update: Tue 04 Nov 2025 22:35:59 +0000 Manifest next update: Sat 08 Nov 2025 00:24:59 +0000 Files and hashes: 1: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl (hash: UdbaOOK8xJaat+Ae3a8PqU8Ccaurpjiv3FpCNQ5cwRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:46:34:ff:5c:86:b9:2f:9e:49:a5:45:40:07:7b:fe:1a:ef:ac:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Validity Not Before: Nov 4 22:35:59 2025 GMT Not After : Nov 8 00:24:59 2025 GMT Subject: CN=AC61EA9D64D2CB73A904611AE653C347C3850479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:eb:38:c8:01:8b:87:69:8f:08:34:4a:a6:5c: 8c:08:fb:8e:41:08:16:9b:b3:bf:2d:3a:5c:d6:9f: 0e:29:28:90:51:3d:4a:a1:21:8f:0f:f5:7c:41:29: f9:55:6a:68:98:39:56:39:ea:ae:b1:f5:c3:d6:5d: a3:a2:c5:71:e9:33:26:48:00:0f:1d:67:88:8e:11: 3a:aa:8e:48:fe:02:c9:86:f5:8b:be:1f:99:7b:ec: 83:f4:5e:3d:24:1a:de:a1:91:f7:be:93:d6:ba:00: c6:40:82:c9:fb:68:f7:1b:5b:02:28:17:88:02:8d: 65:d9:18:b6:83:d4:35:8f:58:a5:95:b4:43:e0:b0: ad:8a:59:c3:f3:ab:7f:4d:26:19:14:2e:d5:d0:d5: f2:4e:ef:bf:46:26:ec:23:65:9f:13:53:f7:4e:cc: d4:e9:d6:ce:7e:13:0a:1e:a9:8e:a4:7e:d2:e3:e3: 7a:b4:cb:2e:ff:32:a5:06:78:db:10:ed:b7:07:3f: ee:78:25:12:49:45:d5:f9:23:cf:7c:94:44:ef:b0: 4e:19:30:1e:5a:a0:c8:6e:5e:97:b3:5d:4f:9d:c3: b2:61:1a:1c:ff:c8:65:b8:13:03:13:c9:da:9c:3b: 0c:bc:6e:85:79:3a:83:2b:5f:ab:d1:06:df:08:29: d6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:61:EA:9D:64:D2:CB:73:A9:04:61:1A:E6:53:C3:47:C3:85:04:79 X509v3 Authority Key Identifier: keyid:78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:49:2d:68:a1:8d:23:a2:9f:d3:88:5c:9f:8d:62:cc:97:ed: 42:4a:79:06:b6:ad:72:25:c1:34:8b:d1:93:53:19:95:d1:09: aa:22:dd:00:89:3b:51:f9:9f:37:61:43:48:65:00:f8:4b:a7: 1b:c7:dc:33:07:73:37:a6:16:ac:13:05:b5:ca:78:b0:8a:a1: bb:ff:4d:17:ac:a0:ce:a6:9d:36:f4:29:7c:56:3a:a9:a6:92: 93:59:3f:48:52:9d:34:ef:d9:c6:a8:c8:55:25:d3:04:2e:36: 6c:2e:74:85:df:98:de:b7:53:c3:bc:06:a8:78:2d:f7:ec:8b: 7c:9e:9a:01:64:55:5f:89:e1:6a:60:3a:d1:b9:7b:76:d0:39: 5c:0d:e2:99:a4:61:7a:ba:68:4f:8a:6f:8f:f0:90:b1:d3:a8: 64:ad:aa:cc:47:65:de:7f:2a:a1:76:b9:00:77:8a:0f:7e:e8: b5:bf:d3:b0:5e:0f:f2:e7:b5:52:60:79:10:5a:f0:fe:73:f5: 64:a1:8f:86:c1:88:a6:72:6d:f1:bb:19:a5:57:71:d7:a5:df: f3:60:27:d8:be:a0:89:59:e8:cd:19:10:aa:2a:10:ed:81:c5: a5:0f:ba:ae:70:aa:e8:0a:0e:87:65:03:e3:fb:b3:57:1f:06: 0e:46:f2:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYUY0/1yGuS+eSaVFQAd7/hrvrPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJC NDFFMDQwODAeFw0yNTExMDQyMjM1NTlaFw0yNTExMDgwMDI0NTlaMDMxMTAvBgNV BAMTKEFDNjFFQTlENjREMkNCNzNBOTA0NjExQUU2NTNDMzQ3QzM4NTA0NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg6zjIAYuHaY8INEqmXIwI+45B CBabs78tOlzWnw4pKJBRPUqhIY8P9XxBKflVamiYOVY56q6x9cPWXaOixXHpMyZI AA8dZ4iOETqqjkj+AsmG9Yu+H5l77IP0Xj0kGt6hkfe+k9a6AMZAgsn7aPcbWwIo F4gCjWXZGLaD1DWPWKWVtEPgsK2KWcPzq39NJhkULtXQ1fJO779GJuwjZZ8TU/dO zNTp1s5+EwoeqY6kftLj43q0yy7/MqUGeNsQ7bcHP+54JRJJRdX5I898lETvsE4Z MB5aoMhuXpezXU+dw7JhGhz/yGW4EwMTydqcOwy8boV5OoMrX6vRBt8IKdZDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrGHqnWTSy3OpBGEa5lPDR8OFBHkwHwYDVR0j BBgwFoAUeE3ZNzt7CxjUUTnu/vSfG7QeBAgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTlhZjRkYi1jZjZmLTQ5YjMtYTA1Yi02MWE3YjljODE3YzEvMC83ODRERDkzNzNC N0IwQjE4RDQ1MTM5RUVGRUY0OUYxQkI0MUUwNDA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJCNDFF MDQwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5YWY0ZGItY2Y2Zi00OWIzLWEw NWItNjFhN2I5YzgxN2MxLzAvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlG MUJCNDFFMDQwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBJLWihjSOin9OIXJ+NYsyX7UJKeQa2rXIl wTSL0ZNTGZXRCaoi3QCJO1H5nzdhQ0hlAPhLpxvH3DMHczemFqwTBbXKeLCKobv/ TResoM6mnTb0KXxWOqmmkpNZP0hSnTTv2caoyFUl0wQuNmwudIXfmN63U8O8Bqh4 Lffsi3yemgFkVV+J4WpgOtG5e3bQOVwN4pmkYXq6aE+Kb4/wkLHTqGStqsxHZd5/ KqF2uQB3ig9+6LW/07BeD/LntVJgeRBa8P5z9WShj4bBiKZybfG7GaVXcdel3/Ng J9i+oIlZ6M0ZEKoqEO2BxaUPuq5wqugKDodlA+P7s1cfBg5G8nQ= -----END CERTIFICATE-----Generated at Wed Nov 5 02:35:54 2025 by rpki-client