$ rpki-client -vvf repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft File: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft (raw, json) Hash identifier: Cdyf7mJA9kwnbaiphgR9YTc7XIYxog/VMcMXyR2b2mQ= Subject key identifier: 75:F0:79:E1:46:11:F9:11:21:39:F9:FC:67:B8:11:9B:8D:16:5B:04 Authority key identifier: E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 Certificate issuer: /CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Certificate serial: 05A0761A74DDF53579D89F7DE5C20325598D0D14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft Manifest number: 0503 Signing time: Tue 05 Aug 2025 10:12:25 +0000 Manifest this update: Tue 05 Aug 2025 10:07:25 +0000 Manifest next update: Fri 08 Aug 2025 20:36:25 +0000 Files and hashes: 1: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl (hash: U2kw8fIRgVzcpVGxY+PRfKDfBiS2wQuFrpzAHogCeZs=) 2: 323430323a366163303a3a2f33332d3333203d3e20313337333036.roa (hash: +LtGD0I+CcS2FlJTjK9Ti6xX24NgEqNHjvhmLsu4MGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 20:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a0:76:1a:74:dd:f5:35:79:d8:9f:7d:e5:c2:03:25:59:8d:0d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Validity Not Before: Aug 5 10:07:25 2025 GMT Not After : Aug 8 20:36:25 2025 GMT Subject: CN=75F079E14611F9112139F9FC67B8119B8D165B04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8f:53:99:fb:06:65:9a:fd:5d:c4:08:05:f7: 76:1d:70:97:a0:69:92:84:a8:cb:b2:b8:03:cf:2d: 60:66:d7:74:58:a2:63:f5:76:c9:58:a4:75:7f:05: f4:9c:71:ee:f0:cf:be:7d:b2:9f:76:11:47:68:71: 1f:cd:39:c1:b3:56:4f:13:31:52:b9:cf:63:3e:33: 0f:4f:22:e0:67:8d:5d:cb:ea:1b:49:66:c7:fd:7c: 4c:25:6f:af:f2:66:fb:c6:33:47:81:30:3e:39:5e: 90:fa:82:9b:aa:00:c3:e5:1d:29:54:a0:37:5d:31: df:3f:ee:50:dd:28:6c:73:44:f0:dc:f3:3e:a8:f7: 95:df:7c:d7:ee:1d:ca:76:4f:6d:61:2f:5d:08:5b: bb:ec:42:75:70:b0:41:a2:c7:3c:71:c2:7a:f1:75: 24:c4:d7:65:5c:df:f8:61:83:8f:ee:cf:da:bf:a4: ee:ac:0c:0d:57:c6:b0:ac:42:99:dd:d9:fe:8f:1c: b3:30:c8:8c:5b:d0:9c:17:3b:bd:12:61:44:22:f7: b4:3a:fe:6c:88:09:fc:af:01:f7:fb:c8:90:9b:2d: 7d:d9:f8:a4:ba:60:70:3c:a6:14:86:e5:d5:77:1b: 41:79:b8:ce:69:99:9d:3d:5b:22:d6:61:83:c7:bf: 3d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F0:79:E1:46:11:F9:11:21:39:F9:FC:67:B8:11:9B:8D:16:5B:04 X509v3 Authority Key Identifier: keyid:E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:56:30:26:fb:bb:cb:89:65:0f:38:78:70:9d:1e:f5:a6:0d: fb:04:a8:53:23:c6:52:57:2b:69:a6:7e:26:38:2f:45:13:86: 95:c0:d9:c1:87:4c:50:22:80:26:41:26:e7:2b:df:f1:ea:5b: aa:33:6a:2f:af:f0:af:f2:84:01:b6:9c:26:a1:e8:38:7f:2e: 77:91:a1:66:3f:28:79:86:1b:a1:b2:72:4e:df:b5:f7:8c:e5: 31:37:45:97:12:88:d2:43:01:8c:52:19:5b:f3:64:8f:7e:37: c8:83:89:e5:29:8e:16:7d:cb:cd:53:5c:ad:bb:1c:ed:5f:65: d4:06:c0:88:a6:85:3a:79:58:0b:a1:44:0b:c9:ba:9d:b7:16: f3:03:d9:ac:3f:5d:91:c5:09:cb:6f:69:c1:29:62:4b:b3:c5: 30:b5:36:b4:3e:81:8b:04:73:fb:9a:67:7c:ef:9c:8f:52:34: d4:55:0a:0b:66:25:2c:29:3e:40:fc:18:37:4f:8d:6b:49:93: 50:73:fb:6d:cb:f8:4b:91:85:39:3c:b9:79:4e:32:03:f1:90: c2:0e:70:f9:80:a1:01:94:1a:68:ce:e7:da:01:66:12:74:6f: 60:f5:f0:79:0e:d0:70:21:17:2a:c7:b5:43:24:25:c5:fa:d4: 39:9a:4e:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBaB2GnTd9TV52J995cIDJVmNDRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdE QzVFMTAxNDAeFw0yNTA4MDUxMDA3MjVaFw0yNTA4MDgyMDM2MjVaMDMxMTAvBgNV BAMTKDc1RjA3OUUxNDYxMUY5MTEyMTM5RjlGQzY3QjgxMTlCOEQxNjVCMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUj1OZ+wZlmv1dxAgF93YdcJeg aZKEqMuyuAPPLWBm13RYomP1dslYpHV/BfScce7wz759sp92EUdocR/NOcGzVk8T MVK5z2M+Mw9PIuBnjV3L6htJZsf9fEwlb6/yZvvGM0eBMD45XpD6gpuqAMPlHSlU oDddMd8/7lDdKGxzRPDc8z6o95XffNfuHcp2T21hL10IW7vsQnVwsEGixzxxwnrx dSTE12Vc3/hhg4/uz9q/pO6sDA1XxrCsQpnd2f6PHLMwyIxb0JwXO70SYUQi97Q6 /myICfyvAff7yJCbLX3Z+KS6YHA8phSG5dV3G0F5uM5pmZ09WyLWYYPHvz17AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdfB54UYR+REhOfn8Z7gRm40WWwQwHwYDVR0j BBgwFoAU5yYirg9ptM2ryc0iOz4Gx9xeEBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1YmY3OS1lODRhLTQwZTAtOGZkNC1mMTY5YzE4NmJlOGYvMC9FNzI2MjJBRTBG NjlCNENEQUJDOUNEMjIzQjNFMDZDN0RDNUUxMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdEQzVF MTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNWJmNzktZTg0YS00MGUwLThm ZDQtZjE2OWMxODZiZThmLzAvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2 QzdEQzVFMTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVWMCb7u8uJZQ84eHCdHvWmDfsEqFMjxlJX K2mmfiY4L0UThpXA2cGHTFAigCZBJucr3/HqW6ozai+v8K/yhAG2nCah6Dh/LneR oWY/KHmGG6Gyck7ftfeM5TE3RZcSiNJDAYxSGVvzZI9+N8iDieUpjhZ9y81TXK27 HO1fZdQGwIimhTp5WAuhRAvJup23FvMD2aw/XZHFCctvacEpYkuzxTC1NrQ+gYsE c/uaZ3zvnI9SNNRVCgtmJSwpPkD8GDdPjWtJk1Bz+23L+EuRhTk8uXlOMgPxkMIO cPmAoQGUGmjO59oBZhJ0b2D18HkO0HAhFyrHtUMkJcX61DmaTgk= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:06 2025 by rpki-client