$ rpki-client -vvf repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft File: 75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft (raw, json) Hash identifier: fhp0bLu62b+ChBLDEN5qHZESq9+56Jwv+CAFfi23mPg= Subject key identifier: 5B:17:D7:38:30:EB:F9:00:F1:0C:AA:53:B6:60:8F:14:44:E0:FF:7B Authority key identifier: 75:F8:7E:19:F3:D7:CA:12:8A:64:BB:06:95:F7:DD:41:6C:17:CC:96 Certificate issuer: /CN=75F87E19F3D7CA128A64BB0695F7DD416C17CC96 Certificate serial: 1CCA76EBBB859FA2002091AA5D44EE2FAE42FF6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft Manifest number: 01BD Signing time: Tue 04 Nov 2025 09:12:02 +0000 Manifest this update: Tue 04 Nov 2025 09:07:02 +0000 Manifest next update: Fri 07 Nov 2025 19:20:02 +0000 Files and hashes: 1: 75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl (hash: xH7gktDYajyDZjsR0HYd9NwnqSjVX7XjzvL9gmRmbFM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 19:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ca:76:eb:bb:85:9f:a2:00:20:91:aa:5d:44:ee:2f:ae:42:ff:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75F87E19F3D7CA128A64BB0695F7DD416C17CC96 Validity Not Before: Nov 4 09:07:02 2025 GMT Not After : Nov 7 19:20:02 2025 GMT Subject: CN=5B17D73830EBF900F10CAA53B6608F1444E0FF7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:32:67:25:28:1c:90:e2:64:5a:3b:f8:3f:33: de:a1:da:a8:f7:0c:58:02:ae:5e:75:11:51:56:9b: ba:7b:7d:72:28:56:2d:56:44:b9:7d:33:5f:7a:2b: 8e:82:7d:cd:e7:35:9a:5d:e0:ca:c0:c9:21:a2:ec: 4f:a7:c2:ac:fc:2c:88:3b:fa:78:a5:1b:c7:08:84: 2a:3f:66:af:4b:44:ca:1d:16:22:0c:ef:3e:61:c0: c3:cb:b3:8b:eb:a9:87:72:74:73:12:86:75:a8:86: 82:a7:ef:86:27:81:ea:18:f2:ac:b3:fd:50:58:29: 7a:8c:6e:b0:a7:3b:b4:d0:71:d6:0c:d1:86:69:0b: 46:34:52:72:39:fa:c0:83:22:8d:42:c0:77:e6:b6: 28:60:50:c7:63:87:98:e6:ef:31:16:35:0f:ef:88: f5:fa:45:06:ac:d4:54:a4:4d:68:8b:c8:8e:d0:0f: 2b:e2:67:3e:77:9c:43:d9:21:95:fd:13:32:f9:49: 78:1a:e3:c2:b6:97:dd:7c:a9:ff:5a:a8:9b:56:c7: b7:08:60:f4:67:bd:66:e1:5d:14:65:75:ad:f8:1c: b5:3e:cd:b0:3a:54:22:2e:a3:94:be:12:28:c7:b2: 20:80:32:ec:74:55:0e:31:25:12:af:77:f0:df:eb: 5f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:17:D7:38:30:EB:F9:00:F1:0C:AA:53:B6:60:8F:14:44:E0:FF:7B X509v3 Authority Key Identifier: keyid:75:F8:7E:19:F3:D7:CA:12:8A:64:BB:06:95:F7:DD:41:6C:17:CC:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e0:5f:5a:68:64:6a:63:48:61:03:b0:71:83:15:43:a4:5d: f3:d7:6e:b2:ab:74:9a:a6:29:08:eb:cc:15:33:ed:6c:9a:49: fb:76:e4:a3:6b:96:69:6f:08:b9:30:80:62:be:b4:a2:83:4c: 03:e9:6a:ec:b3:5b:de:03:9d:7a:97:d8:b6:e9:6c:4f:73:c7: 05:8c:fe:34:17:5e:5e:07:be:6b:9e:ba:1f:51:13:5a:0d:22: ef:9c:c4:2d:98:fa:32:c9:29:0c:ae:35:e8:f2:36:02:8a:ce: 38:56:97:51:68:d9:b7:f1:80:9d:82:5f:cd:39:90:3b:ed:d2: 51:71:b1:38:b2:a6:f4:03:0e:3d:d9:62:60:4c:fc:77:8d:bb: c4:b6:fe:09:ca:94:84:1d:b5:db:c3:d6:20:de:83:0a:96:0d: 74:8f:0d:c5:85:44:c9:3e:4d:91:d5:3b:2c:17:03:52:71:b9: 12:75:77:b4:6a:1a:46:eb:dd:31:3a:57:11:ee:f2:1a:9b:3f: 11:48:18:3d:e8:fe:00:18:c5:4f:4b:7f:af:9b:18:82:44:5d: 68:27:a6:46:54:0a:56:57:bb:5e:da:4b:29:1d:e2:57:18:92: 4e:db:98:fb:ef:ed:5a:4a:d8:f7:2d:5f:2e:9d:1d:74:82:6e: 4f:bd:3c:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHMp267uFn6IAIJGqXUTuL65C/2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVGODdFMTlGM0Q3Q0ExMjhBNjRCQjA2OTVGN0RENDE2 QzE3Q0M5NjAeFw0yNTExMDQwOTA3MDJaFw0yNTExMDcxOTIwMDJaMDMxMTAvBgNV BAMTKDVCMTdENzM4MzBFQkY5MDBGMTBDQUE1M0I2NjA4RjE0NDRFMEZGN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzMmclKByQ4mRaO/g/M96h2qj3 DFgCrl51EVFWm7p7fXIoVi1WRLl9M196K46Cfc3nNZpd4MrAySGi7E+nwqz8LIg7 +nilG8cIhCo/Zq9LRModFiIM7z5hwMPLs4vrqYdydHMShnWohoKn74YngeoY8qyz /VBYKXqMbrCnO7TQcdYM0YZpC0Y0UnI5+sCDIo1CwHfmtihgUMdjh5jm7zEWNQ/v iPX6RQas1FSkTWiLyI7QDyviZz53nEPZIZX9EzL5SXga48K2l918qf9aqJtWx7cI YPRnvWbhXRRlda34HLU+zbA6VCIuo5S+EijHsiCAMux0VQ4xJRKvd/Df61+TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWxfXODDr+QDxDKpTtmCPFETg/3swHwYDVR0j BBgwFoAUdfh+GfPXyhKKZLsGlffdQWwXzJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmNhZWEzYi1iZDdmLTQ4MWEtOWJjNy1hYTE2MGQwNWQyNjIvMC83NUY4N0UxOUYz RDdDQTEyOEE2NEJCMDY5NUY3REQ0MTZDMTdDQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzVGODdFMTlGM0Q3Q0ExMjhBNjRCQjA2OTVGN0RENDE2QzE3 Q0M5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJjYWVhM2ItYmQ3Zi00ODFhLTli YzctYWExNjBkMDVkMjYyLzAvNzVGODdFMTlGM0Q3Q0ExMjhBNjRCQjA2OTVGN0RE NDE2QzE3Q0M5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIngX1poZGpjSGEDsHGDFUOkXfPXbrKrdJqm KQjrzBUz7WyaSft25KNrlmlvCLkwgGK+tKKDTAPpauyzW94DnXqX2LbpbE9zxwWM /jQXXl4Hvmueuh9RE1oNIu+cxC2Y+jLJKQyuNejyNgKKzjhWl1Fo2bfxgJ2CX805 kDvt0lFxsTiypvQDDj3ZYmBM/HeNu8S2/gnKlIQdtdvD1iDegwqWDXSPDcWFRMk+ TZHVOywXA1JxuRJ1d7RqGkbr3TE6VxHu8hqbPxFIGD3o/gAYxU9Lf6+bGIJEXWgn pkZUClZXu17aSykd4lcYkk7bmPvv7VpK2PctXy6dHXSCbk+9PII= -----END CERTIFICATE-----Generated at Wed Nov 5 22:12:54 2025 by rpki-client