$ rpki-client -vvf repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft File: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft (raw, json) Hash identifier: D7+12dXgWTt86jPqb8XDwV3Gq405DKmZq71/O5JS604= Subject key identifier: A5:5D:59:98:0C:46:F2:A4:A5:B9:5D:E4:4B:2E:BD:44:93:34:D2:95 Authority key identifier: EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 Certificate issuer: /CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Certificate serial: 49D7A8C3F31BADBA739E83344F33DAD662EDB0F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft Manifest number: 013F Signing time: Sun 02 Nov 2025 07:50:40 +0000 Manifest this update: Sun 02 Nov 2025 07:45:40 +0000 Manifest next update: Wed 05 Nov 2025 18:34:40 +0000 Files and hashes: 1: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl (hash: hUtNXFCsBHgc1h/GWPxkdx2dziVOsQmSDb7u3k9r3MA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d7:a8:c3:f3:1b:ad:ba:73:9e:83:34:4f:33:da:d6:62:ed:b0:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Validity Not Before: Nov 2 07:45:40 2025 GMT Not After : Nov 5 18:34:40 2025 GMT Subject: CN=A55D59980C46F2A4A5B95DE44B2EBD449334D295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fc:4f:9a:62:0e:e5:2e:18:eb:48:57:09:0c: 60:93:d7:85:79:81:d7:a8:e3:f6:91:86:28:f8:16: 79:a5:40:15:69:df:0b:ad:0d:1e:d1:96:f4:a9:55: 84:ba:44:42:f3:58:1e:bc:50:cf:76:34:b3:42:f3: 45:8b:3f:5a:90:0c:b5:23:61:d1:6a:d1:80:20:14: 22:8c:71:38:14:c3:12:7e:fa:5b:f9:2d:84:b2:45: 58:4b:85:1a:fd:49:4d:94:15:43:a5:2b:77:d0:d3: c0:12:36:95:24:f0:af:3a:85:f1:2f:92:85:2a:28: 46:dc:3d:b0:8c:84:ee:64:ca:65:d8:fb:64:80:c4: d9:a2:d5:16:db:3c:b0:8a:82:1c:2e:42:42:bd:1e: 7d:b5:41:3c:91:ec:e0:b5:aa:7b:05:d0:91:60:85: 5c:68:1f:07:30:63:57:54:01:bb:8c:8d:4c:55:72: 51:37:99:1f:53:47:c2:57:5b:16:3c:ee:34:95:7b: ca:d0:99:43:e9:8c:35:f8:e5:2f:5f:4e:6c:aa:6c: d2:d8:4e:52:b9:53:74:29:a5:bb:2c:60:4e:d9:03: b5:5b:41:76:4e:e3:d8:65:11:f9:22:dc:17:71:fa: f7:40:85:3b:c8:8c:48:35:63:a4:f6:79:6d:6f:9c: 4b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5D:59:98:0C:46:F2:A4:A5:B9:5D:E4:4B:2E:BD:44:93:34:D2:95 X509v3 Authority Key Identifier: keyid:EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9c:c0:cf:0b:6b:c6:d9:f4:cd:0c:5c:e2:63:79:82:40:e4: 47:2a:78:f9:fe:73:38:ff:94:4f:42:38:d3:10:9e:40:1b:ab: c1:6f:8c:15:a5:b5:a8:b8:4b:af:24:68:c6:78:de:e7:ed:25: 37:a3:3e:9f:63:3f:9f:e0:29:e5:00:23:7d:2f:72:4b:74:77: 1a:55:ba:5c:09:91:15:88:44:45:ba:30:17:fc:0a:eb:c9:68: c8:14:c5:ee:20:67:57:1e:93:6b:c7:54:66:ff:7e:3e:a7:15: 57:da:f3:85:83:97:79:37:09:14:2b:06:d0:5d:3f:91:4f:60: 55:51:3d:4d:48:0a:29:55:ce:ef:0b:09:bc:76:41:f2:d3:93: eb:6c:6f:a4:1d:5e:a3:91:26:91:7c:a4:34:cc:e9:8d:21:1e: bd:3a:be:59:62:a7:d7:a1:26:ff:a9:b0:71:09:c5:76:da:87: 6b:4a:6f:37:6c:a3:81:91:e3:cd:9d:b2:38:47:93:70:ce:8b: 9c:bc:f3:5b:85:59:a4:ba:8c:36:bc:c6:0a:90:98:2f:ea:b3: 91:8d:06:83:1b:1b:62:26:db:24:55:56:2d:01:74:ba:ad:ef: 34:fb:35:7c:01:e0:3a:e5:e8:2f:47:23:09:2b:98:34:c5:90: af:96:ca:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSdeow/MbrbpznoM0TzPa1mLtsPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgx RTVFRENBMTAeFw0yNTExMDIwNzQ1NDBaFw0yNTExMDUxODM0NDBaMDMxMTAvBgNV BAMTKEE1NUQ1OTk4MEM0NkYyQTRBNUI5NURFNDRCMkVCRDQ0OTMzNEQyOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW/E+aYg7lLhjrSFcJDGCT14V5 gdeo4/aRhij4FnmlQBVp3wutDR7RlvSpVYS6RELzWB68UM92NLNC80WLP1qQDLUj YdFq0YAgFCKMcTgUwxJ++lv5LYSyRVhLhRr9SU2UFUOlK3fQ08ASNpUk8K86hfEv koUqKEbcPbCMhO5kymXY+2SAxNmi1RbbPLCKghwuQkK9Hn21QTyR7OC1qnsF0JFg hVxoHwcwY1dUAbuMjUxVclE3mR9TR8JXWxY87jSVe8rQmUPpjDX45S9fTmyqbNLY TlK5U3QppbssYE7ZA7VbQXZO49hlEfki3Bdx+vdAhTvIjEg1Y6T2eW1vnEt/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpV1ZmAxG8qSluV3kSy69RJM00pUwHwYDVR0j BBgwFoAU7nLeOE+at/rWw7KGOl2xKB5e3KEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlNjg3OC02Y2IyLTRhNWYtYjU1My1iY2ViMmM5NWM3NmMvMC9FRTcyREUzODRG OUFCN0ZBRDZDM0IyODYzQTVEQjEyODFFNUVEQ0ExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgxRTVF RENBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTY4NzgtNmNiMi00YTVmLWI1 NTMtYmNlYjJjOTVjNzZjLzAvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIx MjgxRTVFRENBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6cwM8La8bZ9M0MXOJjeYJA5EcqePn+czj/ lE9CONMQnkAbq8FvjBWltai4S68kaMZ43uftJTejPp9jP5/gKeUAI30vckt0dxpV ulwJkRWIREW6MBf8CuvJaMgUxe4gZ1cek2vHVGb/fj6nFVfa84WDl3k3CRQrBtBd P5FPYFVRPU1ICilVzu8LCbx2QfLTk+tsb6QdXqORJpF8pDTM6Y0hHr06vllip9eh Jv+psHEJxXbah2tKbzdso4GR482dsjhHk3DOi5y881uFWaS6jDa8xgqQmC/qs5GN BoMbG2Im2yRVVi0BdLqt7zT7NXwB4Drl6C9HIwkrmDTFkK+WyjQ= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:31 2025 by rpki-client