$ rpki-client -vvf repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft File: 7769348B43C31740A116F7F9EEA09178E4104B66.mft (raw, json) Hash identifier: 8L04MS0ZHq5Re+hTDhDlar3TNc0VV4uej1Ofx3z3on4= Subject key identifier: BD:79:8C:66:E4:5C:BD:E7:5D:FF:85:FC:06:F8:5C:01:64:99:41:60 Authority key identifier: 77:69:34:8B:43:C3:17:40:A1:16:F7:F9:EE:A0:91:78:E4:10:4B:66 Certificate issuer: /CN=7769348B43C31740A116F7F9EEA09178E4104B66 Certificate serial: 5CD9D460A5BCF67C46A649C0AA461C92136AB477 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7769348B43C31740A116F7F9EEA09178E4104B66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft Manifest number: 47 Signing time: Tue 17 Jun 2025 08:51:55 +0000 Manifest this update: Tue 17 Jun 2025 08:46:55 +0000 Manifest next update: Fri 20 Jun 2025 10:10:55 +0000 Files and hashes: 1: 7769348B43C31740A116F7F9EEA09178E4104B66.crl (hash: PRm/5vHjVMqXYvoXDdj2g57Iruxu+sSuFR9vfQv2yKI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.crl rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7769348B43C31740A116F7F9EEA09178E4104B66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 10:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d9:d4:60:a5:bc:f6:7c:46:a6:49:c0:aa:46:1c:92:13:6a:b4:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7769348B43C31740A116F7F9EEA09178E4104B66 Validity Not Before: Jun 17 08:46:55 2025 GMT Not After : Jun 20 10:10:55 2025 GMT Subject: CN=BD798C66E45CBDE75DFF85FC06F85C0164994160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6a:83:1c:40:d5:ee:37:15:f2:fb:dc:b5:73: c4:bb:2c:1b:7e:9a:fb:55:28:d0:59:af:c7:fc:7e: 2b:0f:0d:d6:03:46:49:14:78:c2:08:f4:21:df:27: 9a:be:4c:33:c9:f7:4f:de:8d:d6:fa:52:69:05:96: ab:06:0d:f5:43:32:69:96:8c:3c:49:3d:d3:19:f6: b9:c2:36:09:15:37:18:36:f6:d1:ad:a8:29:34:01: 42:17:f7:89:7f:b0:7a:49:24:18:b6:9b:6e:a1:c4: 9b:a8:bc:20:1b:42:55:49:8a:54:87:ff:32:15:d3: 79:ff:40:50:e9:8b:a4:08:4a:4b:7f:b0:c2:0f:ab: ac:9e:e9:14:ae:db:5c:91:84:fe:68:eb:de:ae:b4: 52:31:5e:89:37:a7:b5:14:40:00:a1:f3:40:d5:8f: 4f:60:80:a7:3e:69:c8:d9:04:22:bf:86:3b:56:63: a9:43:5d:18:bb:18:d4:ce:5a:53:a5:d5:6d:3a:13: df:93:43:c2:29:dd:37:3a:f6:5a:b1:c0:98:12:fd: 97:5a:36:ba:33:7a:ad:84:80:1f:90:e0:cf:7a:a7: 4d:48:94:79:76:23:46:b5:ab:bd:fc:e6:7e:b7:b6: 9e:72:ca:df:39:8d:80:77:3a:c8:10:7f:56:96:70: 70:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:79:8C:66:E4:5C:BD:E7:5D:FF:85:FC:06:F8:5C:01:64:99:41:60 X509v3 Authority Key Identifier: keyid:77:69:34:8B:43:C3:17:40:A1:16:F7:F9:EE:A0:91:78:E4:10:4B:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7769348B43C31740A116F7F9EEA09178E4104B66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ea:20:99:b2:fe:40:a2:19:a3:71:0f:5e:aa:40:95:c4:c8: 74:f7:90:ee:b6:4b:69:eb:c0:6f:9c:ae:56:db:f2:df:4c:47: 62:af:dd:1b:16:ed:66:6f:77:a1:f2:c7:c2:cc:d2:87:48:bb: 0b:85:d1:42:4f:cb:0d:a9:22:25:0a:5e:8c:6a:e7:46:0a:06: 0e:58:9f:25:a1:da:36:1e:b3:61:d1:15:d1:1f:6e:4a:7f:50: 87:98:d5:2d:2e:4d:26:2e:fe:4e:dc:f7:d1:17:60:c3:e8:9c: 93:04:21:91:5b:ef:c0:53:41:5e:ab:53:e9:c5:77:a3:9f:31: 01:50:61:81:5a:88:0b:14:a8:92:83:48:8e:e1:20:8a:e2:31: 4b:ce:ee:b7:99:18:57:c4:be:5c:c6:72:36:07:36:84:51:76: 4a:97:a8:05:8c:9f:b1:74:b3:22:5e:50:1f:22:72:3b:25:7f: f4:ca:08:3f:a9:14:23:07:c7:8c:0c:b1:68:ae:2f:63:1f:f7: c2:ad:55:8b:2d:58:55:b8:4e:b6:9b:27:d2:f6:d0:32:1a:59: 26:e3:0b:46:86:4e:20:43:e5:b1:ba:a7:27:7e:d5:9c:a3:27: d7:64:ef:3a:97:2e:eb:9d:44:f1:7f:18:18:a9:19:64:2d:c1: ac:39:48:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXNnUYKW89nxGpknAqkYckhNqtHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc2OTM0OEI0M0MzMTc0MEExMTZGN0Y5RUVBMDkxNzhF NDEwNEI2NjAeFw0yNTA2MTcwODQ2NTVaFw0yNTA2MjAxMDEwNTVaMDMxMTAvBgNV BAMTKEJENzk4QzY2RTQ1Q0JERTc1REZGODVGQzA2Rjg1QzAxNjQ5OTQxNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuaoMcQNXuNxXy+9y1c8S7LBt+ mvtVKNBZr8f8fisPDdYDRkkUeMII9CHfJ5q+TDPJ90/ejdb6UmkFlqsGDfVDMmmW jDxJPdMZ9rnCNgkVNxg29tGtqCk0AUIX94l/sHpJJBi2m26hxJuovCAbQlVJilSH /zIV03n/QFDpi6QISkt/sMIPq6ye6RSu21yRhP5o696utFIxXok3p7UUQACh80DV j09ggKc+acjZBCK/hjtWY6lDXRi7GNTOWlOl1W06E9+TQ8Ip3Tc69lqxwJgS/Zda Nrozeq2EgB+Q4M96p01IlHl2I0a1q7385n63tp5yyt85jYB3OsgQf1aWcHArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvXmMZuRcvedd/4X8BvhcAWSZQWAwHwYDVR0j BBgwFoAUd2k0i0PDF0ChFvf57qCReOQQS2YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWNkNDVjYi04ZDlmLTQzNTktOTZjMC02NGNmMjJhNWIwZmYvMC83NzY5MzQ4QjQz QzMxNzQwQTExNkY3RjlFRUEwOTE3OEU0MTA0QjY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzc2OTM0OEI0M0MzMTc0MEExMTZGN0Y5RUVBMDkxNzhFNDEw NEI2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2 YzAtNjRjZjIyYTViMGZmLzAvNzc2OTM0OEI0M0MzMTc0MEExMTZGN0Y5RUVBMDkx NzhFNDEwNEI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHqIJmy/kCiGaNxD16qQJXEyHT3kO62S2nr wG+crlbb8t9MR2Kv3RsW7WZvd6Hyx8LM0odIuwuF0UJPyw2pIiUKXoxq50YKBg5Y nyWh2jYes2HRFdEfbkp/UIeY1S0uTSYu/k7c99EXYMPonJMEIZFb78BTQV6rU+nF d6OfMQFQYYFaiAsUqJKDSI7hIIriMUvO7reZGFfEvlzGcjYHNoRRdkqXqAWMn7F0 syJeUB8icjslf/TKCD+pFCMHx4wMsWiuL2Mf98KtVYstWFW4TrabJ9L20DIaWSbj C0aGTiBD5bG6pyd+1ZyjJ9dk7zqXLuudRPF/GBipGWQtwaw5SEk= -----END CERTIFICATE-----Generated at Wed Jun 18 04:10:17 2025 by rpki-client