$ rpki-client -vvf repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft File: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft (raw, json) Hash identifier: 9/SxrHomJSj6L5g0m6xCwGTpCgQFSuPv1BnXQ+r3RxU= Subject key identifier: 35:2C:21:5E:E0:A0:F2:D1:5B:14:C6:63:3F:9B:9E:65:F5:7F:34:F7 Authority key identifier: EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 Certificate issuer: /CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Certificate serial: 128003C2D4B4B59EBF3C0E4E21CAA14381AA43DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft Manifest number: 0118 Signing time: Wed 06 Aug 2025 00:10:44 +0000 Manifest this update: Wed 06 Aug 2025 00:05:44 +0000 Manifest next update: Sat 09 Aug 2025 01:02:44 +0000 Files and hashes: 1: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl (hash: SFyQ/9bO/k2/27eiWKUWL73eIMezAAliKk7Hw0RNxbo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 01:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:80:03:c2:d4:b4:b5:9e:bf:3c:0e:4e:21:ca:a1:43:81:aa:43:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Validity Not Before: Aug 6 00:05:44 2025 GMT Not After : Aug 9 01:02:44 2025 GMT Subject: CN=352C215EE0A0F2D15B14C6633F9B9E65F57F34F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0d:2e:4e:79:cd:8b:d2:4f:06:d1:4d:00:b5: 7b:6d:0e:30:fd:5f:82:ef:51:f9:08:35:60:cd:33: 66:9c:80:b0:5b:89:2f:0e:28:5f:c4:f0:9a:b1:f3: 6b:52:90:d6:ff:e4:f2:75:f8:67:ea:3b:71:37:d6: 12:ea:c5:d0:36:c4:05:2e:fe:04:94:d1:45:97:6a: 63:ab:c9:d1:7d:c1:a9:4a:6b:83:41:08:e3:7e:34: 55:b9:5e:f0:5e:80:94:cd:c9:0a:07:56:ab:c7:47: 83:70:21:3a:39:94:95:66:e5:10:ba:1e:96:6b:60: c2:ea:32:b4:ac:e3:a2:99:c4:e6:31:f8:4e:07:67: 9e:08:20:e6:7e:e2:a5:c2:54:c3:20:88:89:50:7a: 73:41:0e:9a:58:52:bf:7a:09:16:65:86:53:37:5b: 83:eb:4d:d2:e5:e3:ee:26:2e:3b:3a:27:d4:03:58: 8c:30:2e:b2:84:3b:e8:53:a8:9a:21:a0:dd:50:a2: 72:14:57:15:a7:d2:87:5d:d8:37:77:80:d4:02:81: 01:0c:4a:40:e6:fb:13:d4:67:8f:3a:83:8b:71:d8: 1a:0e:8c:15:aa:ec:ee:39:00:e6:db:f8:43:5a:d2: b1:eb:3e:05:52:58:66:75:2a:89:fd:d7:49:78:ea: 08:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2C:21:5E:E0:A0:F2:D1:5B:14:C6:63:3F:9B:9E:65:F5:7F:34:F7 X509v3 Authority Key Identifier: keyid:EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e0:1f:37:b2:05:77:05:73:e4:82:3a:e7:1e:bd:4d:e8:13: 32:dc:f9:22:54:a4:d3:8a:95:b3:29:3b:03:ee:97:d0:8e:2f: 60:3e:bb:29:db:64:a2:49:31:04:d9:59:4a:ef:95:4e:43:eb: 2b:f9:00:50:47:38:19:ff:1e:bf:ff:c1:11:da:3e:1c:42:c5: 13:8f:b1:8a:d9:95:58:e0:41:36:f4:bd:ff:44:af:3b:0a:a2: d6:80:1a:a2:1e:a4:c3:d3:93:10:a1:c2:47:84:a1:b7:b3:e1: ec:bf:84:26:fe:92:f1:ac:6c:08:71:e4:10:01:7e:6f:23:47: 9e:4a:99:cb:9f:14:0d:63:b6:01:f2:dc:13:53:a2:b4:4e:84: 3f:a8:61:d9:00:fe:a3:8e:2f:ea:84:64:2c:b0:18:f8:7b:dd: 49:e9:f4:68:9e:d2:e8:ee:d1:e3:39:c7:d2:09:b7:ef:39:f4: b9:d9:1e:07:b4:c8:21:61:28:69:04:db:d2:ec:f6:42:ff:f3: 82:6f:49:08:46:56:3b:a8:eb:bd:f5:9e:5b:a8:02:5e:47:87: f3:a2:b7:2d:3f:3a:d3:e4:02:bd:cd:70:c5:b9:98:64:17:ee: 91:bf:45:7e:a4:4b:0f:24:3e:72:36:11:be:e1:5c:76:1a:39: 96:01:60:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEoADwtS0tZ6/PA5OIcqhQ4GqQ9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgx RTVFRENBMTAeFw0yNTA4MDYwMDA1NDRaFw0yNTA4MDkwMTAyNDRaMDMxMTAvBgNV BAMTKDM1MkMyMTVFRTBBMEYyRDE1QjE0QzY2MzNGOUI5RTY1RjU3RjM0RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDS5Oec2L0k8G0U0AtXttDjD9 X4LvUfkINWDNM2acgLBbiS8OKF/E8Jqx82tSkNb/5PJ1+GfqO3E31hLqxdA2xAUu /gSU0UWXamOrydF9walKa4NBCON+NFW5XvBegJTNyQoHVqvHR4NwITo5lJVm5RC6 HpZrYMLqMrSs46KZxOYx+E4HZ54IIOZ+4qXCVMMgiIlQenNBDppYUr96CRZlhlM3 W4PrTdLl4+4mLjs6J9QDWIwwLrKEO+hTqJohoN1QonIUVxWn0odd2Dd3gNQCgQEM SkDm+xPUZ486g4tx2BoOjBWq7O45AObb+ENa0rHrPgVSWGZ1Kon910l46gg7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNSwhXuCg8tFbFMZjP5ueZfV/NPcwHwYDVR0j BBgwFoAU7nLeOE+at/rWw7KGOl2xKB5e3KEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlNjg3OC02Y2IyLTRhNWYtYjU1My1iY2ViMmM5NWM3NmMvMC9FRTcyREUzODRG OUFCN0ZBRDZDM0IyODYzQTVEQjEyODFFNUVEQ0ExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgxRTVF RENBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTY4NzgtNmNiMi00YTVmLWI1 NTMtYmNlYjJjOTVjNzZjLzAvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIx MjgxRTVFRENBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7gHzeyBXcFc+SCOucevU3oEzLc+SJUpNOK lbMpOwPul9COL2A+uynbZKJJMQTZWUrvlU5D6yv5AFBHOBn/Hr//wRHaPhxCxROP sYrZlVjgQTb0vf9ErzsKotaAGqIepMPTkxChwkeEobez4ey/hCb+kvGsbAhx5BAB fm8jR55KmcufFA1jtgHy3BNTorROhD+oYdkA/qOOL+qEZCywGPh73Unp9Gie0uju 0eM5x9IJt+859LnZHge0yCFhKGkE29Ls9kL/84JvSQhGVjuo6731nluoAl5Hh/Oi ty0/OtPkAr3NcMW5mGQX7pG/RX6kSw8kPnI2Eb7hXHYaOZYBYKA= -----END CERTIFICATE-----Generated at Thu Aug 7 13:00:02 2025 by rpki-client