$ rpki-client -vvf repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft File: 7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft (raw, json) Hash identifier: XpaVrgo0ddp2XULNnyZZGVXcIx3h46I/pro/rBzJvGc= Subject key identifier: 78:5E:42:0F:BF:7F:EF:EC:A3:64:43:B5:52:3B:81:C2:EA:20:74:01 Authority key identifier: 7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C Certificate issuer: /CN=7F9ECE743A3074E61F56CD11161AA58A6BB4092C Certificate serial: 6B749E18A9728551766F8681ED71C18FB9D4BFD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft Manifest number: 44 Signing time: Sun 02 Nov 2025 04:21:15 +0000 Manifest this update: Sun 02 Nov 2025 04:16:15 +0000 Manifest next update: Wed 05 Nov 2025 08:12:15 +0000 Files and hashes: 1: 7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl (hash: Yr7H7K7HBlIegDdRb46ALFAkROoWWTjeUA17pqwViwc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 08:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:74:9e:18:a9:72:85:51:76:6f:86:81:ed:71:c1:8f:b9:d4:bf:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F9ECE743A3074E61F56CD11161AA58A6BB4092C Validity Not Before: Nov 2 04:16:15 2025 GMT Not After : Nov 5 08:12:15 2025 GMT Subject: CN=785E420FBF7FEFECA36443B5523B81C2EA207401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:67:b0:bf:6d:b9:e9:43:e2:3d:47:17:52:8d: 99:99:99:70:1b:db:7a:08:29:a1:9d:70:be:ae:02: be:9c:2c:2b:5a:40:41:fe:79:21:f7:ca:d1:e0:a9: 97:e2:9d:8e:e6:54:34:3f:b6:b3:5e:5b:36:11:ae: c8:5f:d1:23:73:68:61:cc:6c:5b:71:2a:db:88:78: f4:d7:21:57:5c:8c:19:a5:aa:2a:5b:12:b4:4e:c6: df:c2:20:2f:fb:9b:4b:eb:49:05:5f:53:f8:b3:cd: 3c:69:84:84:a5:c5:95:0a:e7:cc:9d:be:0c:85:04: 5a:49:95:17:b4:f8:10:8f:9d:70:71:f0:3e:fd:01: dc:d8:d8:f8:44:10:8f:3b:3b:f7:6d:f8:c9:40:7a: a5:30:36:3d:a2:b7:bc:27:73:72:0a:bc:c6:8f:55: a3:2b:3d:58:80:7c:3b:d5:87:24:f2:aa:e8:22:12: 06:21:aa:ab:95:3a:28:67:f3:84:33:a6:44:d0:78: 6a:1e:01:c1:08:78:16:3d:23:c3:43:56:b7:1e:70: 9f:38:50:f5:1e:da:de:99:b8:e6:f1:e3:75:b2:38: 8d:67:97:6f:3a:a3:02:71:7b:11:ab:e0:76:b8:02: 92:58:cf:33:54:dd:2f:b2:9b:d3:8d:cb:cd:1a:91: 95:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5E:42:0F:BF:7F:EF:EC:A3:64:43:B5:52:3B:81:C2:EA:20:74:01 X509v3 Authority Key Identifier: keyid:7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:12:f7:46:f5:43:34:33:29:9b:08:ae:ae:b6:34:06:64:de: 32:f3:64:5c:69:40:e4:6e:13:f1:68:c1:05:9d:5a:aa:9a:c4: 33:a8:c4:62:64:b2:ed:0f:2e:92:64:55:15:e8:db:39:35:fc: a4:7c:7a:6f:8d:38:a5:4f:82:51:c0:b2:99:73:72:80:db:86: 28:97:45:2f:0a:2e:64:63:48:46:ce:8c:f8:f1:e3:1c:60:32: 4b:1e:d7:76:8d:86:9f:1a:51:29:b2:61:d9:79:04:63:1a:b3: 7c:1c:5a:49:c1:63:7e:e1:7d:fa:a5:6d:54:88:b1:52:a8:ab: 2b:ed:f4:30:dc:2a:be:0d:e2:a0:92:fb:64:08:ba:4d:e5:1d: 0d:df:64:55:84:a5:b5:e3:09:8b:d6:88:a5:f5:f7:9f:8d:d6: 2d:f6:0c:e2:e6:b1:e2:c9:b4:62:46:b5:a5:68:a4:8d:15:83: b2:2a:30:75:9d:d0:ac:86:ea:7c:3f:fa:f6:b5:54:4f:bb:7b: c6:6f:84:fd:49:a0:c0:74:a3:a4:f3:f9:44:20:40:50:cb:b0: 39:08:3c:89:b9:05:63:a6:a9:35:f1:c7:e3:fa:0e:29:f3:60: 96:f7:e5:82:a6:32:bb:ab:de:89:47:e9:35:6c:a7:0a:08:d8: 32:10:5f:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa3SeGKlyhVF2b4aB7XHBj7nUv9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1OEE2 QkI0MDkyQzAeFw0yNTExMDIwNDE2MTVaFw0yNTExMDUwODEyMTVaMDMxMTAvBgNV BAMTKDc4NUU0MjBGQkY3RkVGRUNBMzY0NDNCNTUyM0I4MUMyRUEyMDc0MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Z7C/bbnpQ+I9RxdSjZmZmXAb 23oIKaGdcL6uAr6cLCtaQEH+eSH3ytHgqZfinY7mVDQ/trNeWzYRrshf0SNzaGHM bFtxKtuIePTXIVdcjBmlqipbErROxt/CIC/7m0vrSQVfU/izzTxphISlxZUK58yd vgyFBFpJlRe0+BCPnXBx8D79AdzY2PhEEI87O/dt+MlAeqUwNj2it7wnc3IKvMaP VaMrPViAfDvVhyTyqugiEgYhqquVOihn84QzpkTQeGoeAcEIeBY9I8NDVrcecJ84 UPUe2t6ZuObx43WyOI1nl286owJxexGr4Ha4ApJYzzNU3S+ym9ONy80akZXlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeF5CD79/7+yjZEO1UjuBwuogdAEwHwYDVR0j BBgwFoAUf57OdDowdOYfVs0RFhqlimu0CSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjY2YmZhNi1kYzRjLTQxMDgtOTMyYy0yMDRiNjJlODYyNzIvMC83RjlFQ0U3NDNB MzA3NEU2MUY1NkNEMTExNjFBQTU4QTZCQjQwOTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1OEE2QkI0 MDkyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmY2NmJmYTYtZGM0Yy00MTA4LTkz MmMtMjA0YjYyZTg2MjcyLzAvN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1 OEE2QkI0MDkyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQS90b1QzQzKZsIrq62NAZk3jLzZFxpQORu E/FowQWdWqqaxDOoxGJksu0PLpJkVRXo2zk1/KR8em+NOKVPglHAsplzcoDbhiiX RS8KLmRjSEbOjPjx4xxgMkse13aNhp8aUSmyYdl5BGMas3wcWknBY37hffqlbVSI sVKoqyvt9DDcKr4N4qCS+2QIuk3lHQ3fZFWEpbXjCYvWiKX195+N1i32DOLmseLJ tGJGtaVopI0Vg7IqMHWd0KyG6nw/+va1VE+7e8ZvhP1JoMB0o6Tz+UQgQFDLsDkI PIm5BWOmqTXxx+P6DinzYJb35YKmMrur3olH6TVspwoI2DIQXzE= -----END CERTIFICATE-----Generated at Tue Nov 4 01:57:09 2025 by rpki-client