$ rpki-client -vvf repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft File: 7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft (raw, json) Hash identifier: 8iJer0HrjHWOBl8AN9xUUvuRltjppC47jXVwpNcBdHE= Subject key identifier: 78:29:53:A5:DE:B9:80:3A:08:EA:17:C5:C2:42:E4:EA:DE:C8:E4:31 Authority key identifier: 7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C Certificate issuer: /CN=7F9ECE743A3074E61F56CD11161AA58A6BB4092C Certificate serial: 2208A1BF92C5B75BF346EAB296A59F7733CCBFFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft Manifest number: 1D Signing time: Tue 05 Aug 2025 17:11:15 +0000 Manifest this update: Tue 05 Aug 2025 17:06:15 +0000 Manifest next update: Sat 09 Aug 2025 00:20:15 +0000 Files and hashes: 1: 7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl (hash: sqmS6fFGxYyIT1TotFJ9U+BGKquxiNwXo2v1ddd4x+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 00:20:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:08:a1:bf:92:c5:b7:5b:f3:46:ea:b2:96:a5:9f:77:33:cc:bf:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F9ECE743A3074E61F56CD11161AA58A6BB4092C Validity Not Before: Aug 5 17:06:15 2025 GMT Not After : Aug 9 00:20:15 2025 GMT Subject: CN=782953A5DEB9803A08EA17C5C242E4EADEC8E431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f1:cc:72:a7:f6:91:80:ed:32:62:a2:86:89: 89:c1:04:a1:4b:77:3c:08:ec:6c:d8:80:11:ba:a6: 08:29:1e:8e:e8:e1:5c:0c:35:2d:30:d4:eb:18:17: 0f:73:c7:1f:9b:e6:4c:eb:02:be:31:b1:4a:ca:e1: 8b:eb:ff:5e:be:8e:1d:a9:55:85:78:b2:8c:cb:93: 04:4a:9f:9f:71:7a:11:30:5f:b9:62:8c:0e:63:b2: ce:72:7d:3e:7c:a4:69:5a:11:4e:e0:c9:60:41:b8: 87:b7:32:02:6c:32:f6:40:31:ab:70:3c:22:e9:b0: ab:2b:76:67:dd:d0:8d:3f:58:d7:8d:88:e3:f2:bd: 36:0d:fa:1e:69:68:36:52:02:5d:1d:00:c2:29:69: 8c:30:87:70:fc:36:c5:85:f9:1a:65:88:0f:2e:cb: 8e:7e:01:ff:e5:37:cb:a2:23:99:9e:89:2b:be:02: 75:3f:bd:98:21:9f:67:4b:de:48:1c:d4:ff:78:02: a8:a4:39:e5:15:5d:d8:27:3a:93:d6:7e:89:0d:02: d3:b1:cd:17:23:7f:5b:7d:41:14:cf:6b:ad:40:b8: fe:59:b4:75:4e:f7:cb:c4:e7:d9:47:10:6e:23:fe: 61:43:5c:b1:a5:5c:14:a5:8d:6a:7f:87:b0:4e:80: d8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:29:53:A5:DE:B9:80:3A:08:EA:17:C5:C2:42:E4:EA:DE:C8:E4:31 X509v3 Authority Key Identifier: keyid:7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b7:a5:ee:e1:38:d8:d9:14:d4:35:20:98:9f:8e:09:97:65: 77:bd:40:1b:d1:13:e0:bc:ab:78:35:ef:ee:d8:54:07:77:95: 10:29:9b:e2:58:45:a2:92:24:58:8c:bf:a8:5e:70:ae:a7:59: 14:99:08:71:c3:86:9d:c9:a4:d2:06:a5:2f:c4:03:32:0d:bf: 23:a9:f8:38:e7:e1:56:af:78:7a:0f:e7:11:76:31:11:ba:ad: 99:9c:f5:f5:de:58:c9:85:af:a3:dd:33:7c:96:f1:db:8d:eb: 26:3d:cf:d8:1c:af:a3:fa:ac:92:f6:af:9b:1c:49:b4:1c:b7: fe:e3:1d:a5:2b:97:e5:2b:38:06:fe:c4:eb:9d:82:13:89:27: fc:a6:ed:fd:b4:08:1a:5f:32:c0:a8:50:8e:53:26:90:64:9c: 66:2f:1b:4c:b2:f3:5c:a1:ab:d4:7d:c8:16:82:f5:3a:e4:b0: b2:87:2e:a0:3e:26:4a:bd:8c:3a:36:79:5b:16:8f:45:9c:75: ec:16:e6:db:29:27:e7:52:bb:07:6c:d7:45:48:fc:ca:e1:37: 73:f5:43:39:23:69:1e:62:fb:94:62:96:d2:30:93:ef:e8:56: cc:25:39:58:9a:df:53:32:46:1f:96:c7:2b:8b:be:0f:4e:fe: 63:be:16:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIgihv5LFt1vzRuqylqWfdzPMv/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1OEE2 QkI0MDkyQzAeFw0yNTA4MDUxNzA2MTVaFw0yNTA4MDkwMDIwMTVaMDMxMTAvBgNV BAMTKDc4Mjk1M0E1REVCOTgwM0EwOEVBMTdDNUMyNDJFNEVBREVDOEU0MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC98cxyp/aRgO0yYqKGiYnBBKFL dzwI7GzYgBG6pggpHo7o4VwMNS0w1OsYFw9zxx+b5kzrAr4xsUrK4Yvr/16+jh2p VYV4sozLkwRKn59xehEwX7lijA5jss5yfT58pGlaEU7gyWBBuIe3MgJsMvZAMatw PCLpsKsrdmfd0I0/WNeNiOPyvTYN+h5paDZSAl0dAMIpaYwwh3D8NsWF+RpliA8u y45+Af/lN8uiI5meiSu+AnU/vZghn2dL3kgc1P94AqikOeUVXdgnOpPWfokNAtOx zRcjf1t9QRTPa61AuP5ZtHVO98vE59lHEG4j/mFDXLGlXBSljWp/h7BOgNi/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeClTpd65gDoI6hfFwkLk6t7I5DEwHwYDVR0j BBgwFoAUf57OdDowdOYfVs0RFhqlimu0CSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjY2YmZhNi1kYzRjLTQxMDgtOTMyYy0yMDRiNjJlODYyNzIvMC83RjlFQ0U3NDNB MzA3NEU2MUY1NkNEMTExNjFBQTU4QTZCQjQwOTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1OEE2QkI0 MDkyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmY2NmJmYTYtZGM0Yy00MTA4LTkz MmMtMjA0YjYyZTg2MjcyLzAvN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1 OEE2QkI0MDkyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHu3pe7hONjZFNQ1IJifjgmXZXe9QBvRE+C8 q3g17+7YVAd3lRApm+JYRaKSJFiMv6hecK6nWRSZCHHDhp3JpNIGpS/EAzINvyOp +Djn4VaveHoP5xF2MRG6rZmc9fXeWMmFr6PdM3yW8duN6yY9z9gcr6P6rJL2r5sc SbQct/7jHaUrl+UrOAb+xOudghOJJ/ym7f20CBpfMsCoUI5TJpBknGYvG0yy81yh q9R9yBaC9TrksLKHLqA+Jkq9jDo2eVsWj0WcdewW5tspJ+dSuwds10VI/MrhN3P1 QzkjaR5i+5RiltIwk+/oVswlOVia31MyRh+WxyuLvg9O/mO+Fso= -----END CERTIFICATE-----Generated at Wed Aug 6 12:25:38 2025 by rpki-client