$ rpki-client -vvf repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft File: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft (raw, json) Hash identifier: V7YhsnqiN3FmjrVjfQsNIWY4tYE7RW0iL4YgJzbHFI8= Subject key identifier: 8F:91:9A:00:9D:AD:9F:E3:F6:43:23:62:45:80:9F:E6:74:56:F8:F9 Authority key identifier: E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 Certificate issuer: /CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Certificate serial: 42A3C001136E06FC41BC019FDB8C0EA8F2B74676 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft Manifest number: 04EC Signing time: Sat 14 Jun 2025 20:22:23 +0000 Manifest this update: Sat 14 Jun 2025 20:17:23 +0000 Manifest next update: Wed 18 Jun 2025 06:21:23 +0000 Files and hashes: 1: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl (hash: OUEeA0DrXK278ypJGCP8oMw9FfgMykEkGxf6CvpIYGs=) 2: 323430323a366163303a3a2f33332d3333203d3e20313337333036.roa (hash: +LtGD0I+CcS2FlJTjK9Ti6xX24NgEqNHjvhmLsu4MGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 06:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a3:c0:01:13:6e:06:fc:41:bc:01:9f:db:8c:0e:a8:f2:b7:46:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Validity Not Before: Jun 14 20:17:23 2025 GMT Not After : Jun 18 06:21:23 2025 GMT Subject: CN=8F919A009DAD9FE3F643236245809FE67456F8F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c2:18:9b:9b:f7:da:aa:94:89:7c:80:ed:54: a9:a1:9f:9d:01:bf:0e:b6:d6:ea:b7:94:54:89:43: 89:80:f1:b9:3d:54:73:2a:4a:28:d0:af:5d:cd:7e: 56:fa:43:3f:a6:3c:40:e8:e5:8e:47:da:98:5a:06: 06:4f:65:c2:b0:de:d4:30:76:e6:fc:c9:83:3f:83: de:d1:b6:74:5d:b8:75:e8:53:e2:3b:76:a8:5f:1a: 2f:c8:f5:66:b7:f1:3f:57:a2:85:77:e9:91:9b:28: 97:10:cc:58:df:83:9d:71:91:f8:85:58:1f:64:6f: 48:ca:8d:d6:89:bd:5f:db:a1:df:b9:22:7e:b9:72: c7:25:ce:67:33:2e:6c:96:2b:04:1a:12:62:78:7f: 04:6f:ea:4f:e0:5e:f2:ae:e7:f3:f8:07:85:db:70: 3b:91:02:7a:38:80:5c:8b:dc:1c:ff:89:d5:07:5d: b2:9b:96:cb:38:29:0a:c7:90:66:c8:ed:01:94:b9: 0f:8d:ff:00:46:ab:19:09:f0:86:59:e1:99:ea:46: 1a:af:aa:10:fe:9d:a2:f6:e1:a1:e0:b9:00:46:6c: 6c:96:41:86:50:2c:e3:55:93:56:b6:cf:ce:00:21: f7:4f:15:b7:1a:0d:7a:a5:8f:28:eb:a3:16:ba:75: 6a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:91:9A:00:9D:AD:9F:E3:F6:43:23:62:45:80:9F:E6:74:56:F8:F9 X509v3 Authority Key Identifier: keyid:E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:4e:bf:fc:a9:77:10:dd:f9:27:4a:91:97:07:1e:43:f8:fb: 56:07:4a:6a:b2:f0:3e:3b:dd:7b:8f:c3:e7:c7:84:2e:1d:7a: 6d:13:74:e1:82:f7:c9:e6:22:db:d5:bb:59:dd:c5:45:65:3b: fd:63:39:83:ba:ea:30:04:8f:2a:0c:82:b5:67:fa:eb:88:38: ba:ac:a9:0d:9f:4f:fe:ae:e2:03:6e:98:a2:5e:29:74:26:97: 52:6a:92:c0:5d:66:85:03:9b:a4:b0:8d:7f:47:22:51:ab:79: 75:8b:7d:59:e7:78:ff:33:d2:51:04:eb:27:58:09:45:ed:6d: 1b:6e:5c:f3:d7:38:95:36:29:a7:ae:c8:cc:cd:87:48:37:06: a3:8c:5f:2e:9b:11:93:8f:57:56:d7:3f:52:87:c4:84:2b:6e: 25:07:bc:7b:bd:3a:ee:10:55:c5:9f:17:c2:77:13:f3:c1:75: 50:ca:4b:5a:a8:2c:8c:cb:4c:ca:20:e8:d0:dc:27:24:db:b0: 87:f1:5e:2e:49:bf:ad:a2:73:9d:bd:7a:9e:6e:08:bb:d2:5b: 65:1b:44:08:8c:be:42:19:d5:85:56:7b:15:1c:87:64:2d:d8: 48:3e:a4:e5:e1:c0:4a:a9:bd:b1:2e:3e:08:28:b1:02:6d:44: da:3d:6e:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQqPAARNuBvxBvAGf24wOqPK3RnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdE QzVFMTAxNDAeFw0yNTA2MTQyMDE3MjNaFw0yNTA2MTgwNjIxMjNaMDMxMTAvBgNV BAMTKDhGOTE5QTAwOURBRDlGRTNGNjQzMjM2MjQ1ODA5RkU2NzQ1NkY4RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdwhibm/faqpSJfIDtVKmhn50B vw621uq3lFSJQ4mA8bk9VHMqSijQr13Nflb6Qz+mPEDo5Y5H2phaBgZPZcKw3tQw dub8yYM/g97RtnRduHXoU+I7dqhfGi/I9Wa38T9XooV36ZGbKJcQzFjfg51xkfiF WB9kb0jKjdaJvV/bod+5In65csclzmczLmyWKwQaEmJ4fwRv6k/gXvKu5/P4B4Xb cDuRAno4gFyL3Bz/idUHXbKblss4KQrHkGbI7QGUuQ+N/wBGqxkJ8IZZ4ZnqRhqv qhD+naL24aHguQBGbGyWQYZQLONVk1a2z84AIfdPFbcaDXqljyjroxa6dWpxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj5GaAJ2tn+P2QyNiRYCf5nRW+PkwHwYDVR0j BBgwFoAU5yYirg9ptM2ryc0iOz4Gx9xeEBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1YmY3OS1lODRhLTQwZTAtOGZkNC1mMTY5YzE4NmJlOGYvMC9FNzI2MjJBRTBG NjlCNENEQUJDOUNEMjIzQjNFMDZDN0RDNUUxMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdEQzVF MTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNWJmNzktZTg0YS00MGUwLThm ZDQtZjE2OWMxODZiZThmLzAvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2 QzdEQzVFMTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5Ov/ypdxDd+SdKkZcHHkP4+1YHSmqy8D47 3XuPw+fHhC4dem0TdOGC98nmItvVu1ndxUVlO/1jOYO66jAEjyoMgrVn+uuIOLqs qQ2fT/6u4gNumKJeKXQml1JqksBdZoUDm6SwjX9HIlGreXWLfVnneP8z0lEE6ydY CUXtbRtuXPPXOJU2KaeuyMzNh0g3BqOMXy6bEZOPV1bXP1KHxIQrbiUHvHu9Ou4Q VcWfF8J3E/PBdVDKS1qoLIzLTMog6NDcJyTbsIfxXi5Jv62ic529ep5uCLvSW2Ub RAiMvkIZ1YVWexUch2Qt2Eg+pOXhwEqpvbEuPggosQJtRNo9bso= -----END CERTIFICATE-----Generated at Sun Jun 15 22:24:21 2025 by rpki-client