
$ rpki-client -vvf repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft
File: 7769348B43C31740A116F7F9EEA09178E4104B66.mft (raw, json)
Hash identifier: LOEfXAZAlbi+yL2f5rB0JGrjgSRFftjOeLcrHNfEweo=
Subject key identifier: 18:FF:ED:3B:98:CE:58:EC:2F:B1:75:D9:50:88:0D:03:A4:74:CA:31
Authority key identifier: 77:69:34:8B:43:C3:17:40:A1:16:F7:F9:EE:A0:91:78:E4:10:4B:66
Certificate issuer: /CN=7769348B43C31740A116F7F9EEA09178E4104B66
Certificate serial: 626A5E49D90F23111641D77394E9611B64F0386B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7769348B43C31740A116F7F9EEA09178E4104B66.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft
Manifest number: 85
Signing time: Tue 04 Nov 2025 12:42:03 +0000
Manifest this update: Tue 04 Nov 2025 12:37:03 +0000
Manifest next update: Fri 07 Nov 2025 14:38:03 +0000
Files and hashes: 1: 7769348B43C31740A116F7F9EEA09178E4104B66.crl (hash: dqUmF/B+65cZqb/2id+EqEqCw/A/2kJh4v/c/t9OwAc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.crl
rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7769348B43C31740A116F7F9EEA09178E4104B66.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 14:38:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:6a:5e:49:d9:0f:23:11:16:41:d7:73:94:e9:61:1b:64:f0:38:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7769348B43C31740A116F7F9EEA09178E4104B66
Validity
Not Before: Nov 4 12:37:03 2025 GMT
Not After : Nov 7 14:38:03 2025 GMT
Subject: CN=18FFED3B98CE58EC2FB175D950880D03A474CA31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:fb:09:f9:47:df:08:59:58:87:b9:0a:0e:
21:0a:c6:45:54:c0:5c:4a:a4:29:39:30:db:7e:1f:
54:1d:63:8d:3a:84:89:0e:04:49:6c:64:4e:07:36:
ea:47:a3:c4:56:dd:18:b8:f0:60:1b:8a:e3:37:77:
c7:34:51:66:18:5e:c7:53:41:71:a4:33:f9:02:9d:
33:03:a9:02:c2:34:1a:45:33:96:aa:db:5e:27:9b:
b4:be:c1:cd:18:a0:a0:9a:63:b3:ed:b6:c2:a3:80:
5b:c3:95:0f:f5:a0:46:cf:f1:0b:95:7c:f1:27:01:
ae:35:c0:a2:a4:d2:0d:08:16:43:00:f2:21:1a:28:
9f:69:fc:f8:9a:6c:71:f9:07:41:0a:b8:65:ea:25:
ff:40:6d:bb:52:9f:ae:d6:ed:6f:28:f3:c5:ec:b1:
a0:8d:26:fc:16:d1:1f:3c:62:33:4b:df:3c:aa:24:
0b:da:95:e5:d9:f3:13:0a:f8:ce:a8:1c:5d:f4:c1:
36:32:ce:ed:04:2d:b2:51:55:45:0d:86:96:27:77:
b6:f5:13:f3:73:89:03:43:2b:c6:4d:ea:d2:00:95:
b4:20:5c:f2:40:b7:98:4a:de:83:eb:2d:1b:4c:8f:
37:eb:4f:74:d3:1f:08:fa:26:de:59:24:ec:bd:2d:
60:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FF:ED:3B:98:CE:58:EC:2F:B1:75:D9:50:88:0D:03:A4:74:CA:31
X509v3 Authority Key Identifier:
keyid:77:69:34:8B:43:C3:17:40:A1:16:F7:F9:EE:A0:91:78:E4:10:4B:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7769348B43C31740A116F7F9EEA09178E4104B66.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c2:58:12:c5:85:d1:ab:a2:72:1f:28:76:af:3a:22:31:15:
80:c6:82:a2:ed:eb:0c:41:ea:3e:53:4b:4a:d4:99:46:7a:45:
b3:c3:64:6e:83:a3:1c:b3:6e:3d:b5:cb:2c:69:a8:06:97:92:
94:99:62:ee:3d:b1:00:be:06:3c:e0:7a:2a:6a:a2:89:8f:0c:
04:15:18:1a:bd:b4:97:d3:63:66:9d:5a:50:c7:45:9f:df:84:
d6:e4:cc:4b:ae:ce:58:0b:6f:94:e6:43:e7:9e:a5:da:db:7a:
80:1f:6a:d1:97:ee:a9:2b:04:35:db:4a:76:b9:db:57:78:40:
ba:ec:2d:8c:55:60:bd:a6:c1:8a:ab:5a:a6:e4:96:89:41:09:
88:37:3a:33:07:8c:a0:cd:5d:de:9d:a1:02:f2:1f:88:99:3e:
b9:b9:41:30:ec:a4:e8:4c:8b:22:01:6a:38:bf:7d:0f:33:50:
a6:af:d3:a0:71:be:0c:1d:67:39:94:a8:57:ca:dd:23:6a:f3:
69:b4:63:5d:33:7c:eb:c2:37:39:59:56:89:57:4a:a5:3b:06:
12:92:f3:6b:d4:90:14:2b:df:a1:06:f5:de:8e:c7:c1:c3:32:
1f:2a:57:1d:2e:b3:88:09:6b:05:58:3b:7b:9f:12:9f:2c:9c:
16:d9:29:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:22:32 2025 by rpki-client