$ rpki-client -vvf repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft File: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft (raw, json) Hash identifier: lbb1u517SFSyGLD+s6VaZ3z2Td1XBahs39D3rARaOlE= Subject key identifier: 20:8E:F9:DD:29:72:D0:88:41:85:31:55:87:88:54:A9:0A:C6:90:04 Authority key identifier: 72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 Certificate issuer: /CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Certificate serial: 2C35BE959480A11A553965E1349154E139B8C648 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft Manifest number: 68 Signing time: Sun 15 Jun 2025 04:00:36 +0000 Manifest this update: Sun 15 Jun 2025 03:55:36 +0000 Manifest next update: Wed 18 Jun 2025 15:48:36 +0000 Files and hashes: 1: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: Mh2qAtV9OXmT8dkxySa/tVQuTPHOj1MMmtUTif0IndI=) 2: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl (hash: p8uzZjD3tFQFMuGe6gtU//LWYFJ99EcW4fbYnQOcHZA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 15:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:35:be:95:94:80:a1:1a:55:39:65:e1:34:91:54:e1:39:b8:c6:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Validity Not Before: Jun 15 03:55:36 2025 GMT Not After : Jun 18 15:48:36 2025 GMT Subject: CN=208EF9DD2972D08841853155878854A90AC69004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bd:c3:94:a8:a3:9f:ba:0e:a8:27:f6:60:6f: 17:04:a8:84:89:90:5f:d6:1c:3d:d8:eb:97:25:54: 79:4f:c3:18:21:8d:1f:8a:2c:75:06:07:25:3b:a7: 47:05:04:ea:67:9e:a4:2e:83:63:5f:d1:a3:28:af: d3:89:bd:be:00:2b:fc:8f:b4:74:23:54:75:6d:83: 5c:3e:48:29:f8:d1:49:3c:97:ff:b5:a3:3f:70:28: 55:e0:12:d8:8f:e7:a7:43:f0:17:df:74:1e:9f:d6: ca:52:1b:25:51:fc:2b:fe:ed:1d:8a:0b:70:4a:70: 09:25:fd:f3:e1:d5:04:4f:f8:59:38:c8:11:b8:9c: f8:04:b7:b3:31:ae:bb:ec:c6:7d:a0:07:e1:25:1f: e2:49:d1:88:e0:dc:3d:d9:2c:b7:34:07:68:d8:c2: 38:25:cc:71:9f:5f:c5:f3:b4:2e:98:f8:ab:75:69: bb:b1:b6:51:17:d2:d9:2e:7e:bb:3c:d2:98:c0:0c: a1:4d:50:7a:3b:b8:37:99:6f:4e:99:c9:dc:b6:d9: 99:4c:7e:53:05:65:27:bb:f1:cb:f8:8b:8f:a2:77: af:f3:87:84:08:68:e5:7b:fb:90:32:b9:c0:2e:dd: fa:be:2a:70:06:e6:10:31:ee:cd:a9:02:51:fe:02: cf:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8E:F9:DD:29:72:D0:88:41:85:31:55:87:88:54:A9:0A:C6:90:04 X509v3 Authority Key Identifier: keyid:72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:1f:3a:b7:e7:fa:9c:a2:d1:f7:5b:34:10:5f:ac:46:79:7b: 03:7d:15:b6:89:1e:4b:ac:46:be:16:b3:43:b9:f6:90:18:51: 4c:61:7b:e9:e1:c4:5c:51:8d:f1:3f:b7:a0:bf:35:3a:2d:39: a0:5b:96:9d:45:7a:56:7f:72:95:f8:48:af:5a:87:e3:f7:d8: 03:71:81:72:10:2e:b2:97:bf:02:ce:ad:ff:88:f8:a2:b8:61: 6e:f0:27:4f:6b:58:eb:48:49:f1:8a:21:b7:e0:0e:3b:02:19: d0:54:2a:6f:fc:82:31:40:7c:8e:8b:87:5b:ad:e8:50:38:da: 29:6f:5f:fc:3e:10:88:02:18:69:92:1e:aa:e5:23:fe:46:1d: e6:0b:8a:4c:19:ee:86:c3:55:a4:54:27:e9:8b:18:ed:53:ce: a1:2e:5c:5e:c2:ed:f8:af:69:8c:0c:83:b2:9a:4e:ad:a9:85: 47:55:74:85:cb:d2:23:5e:05:40:fe:7c:e1:e1:85:b1:cb:c2: 71:74:cf:48:71:43:47:cb:ac:fc:0d:fa:ce:79:b8:c2:ee:9a: 2d:14:01:da:ce:df:f7:7e:a1:6d:b3:05:00:39:fa:7c:23:63: 50:31:f4:0d:36:d4:79:63:f2:f3:16:97:fa:36:79:d4:ef:20: 9e:7b:a1:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULDW+lZSAoRpVOWXhNJFU4Tm4xkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURG QTNGNEUxNjAeFw0yNTA2MTUwMzU1MzZaFw0yNTA2MTgxNTQ4MzZaMDMxMTAvBgNV BAMTKDIwOEVGOUREMjk3MkQwODg0MTg1MzE1NTg3ODg1NEE5MEFDNjkwMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJvcOUqKOfug6oJ/ZgbxcEqISJ kF/WHD3Y65clVHlPwxghjR+KLHUGByU7p0cFBOpnnqQug2Nf0aMor9OJvb4AK/yP tHQjVHVtg1w+SCn40Uk8l/+1oz9wKFXgEtiP56dD8BffdB6f1spSGyVR/Cv+7R2K C3BKcAkl/fPh1QRP+Fk4yBG4nPgEt7Mxrrvsxn2gB+ElH+JJ0Yjg3D3ZLLc0B2jY wjglzHGfX8XztC6Y+Kt1abuxtlEX0tkufrs80pjADKFNUHo7uDeZb06Zydy22ZlM flMFZSe78cv4i4+id6/zh4QIaOV7+5AyucAu3fq+KnAG5hAx7s2pAlH+As+1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUII753Sly0IhBhTFVh4hUqQrGkAQwHwYDVR0j BBgwFoAUctja/UgbP4+sKyWZyePs7fo/ThYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDdmNmNmNi1kZDJiLTQ4MjMtYjI2NC1lMmJmNGYzMGFiZmUvMC83MkQ4REFGRDQ4 MUIzRjhGQUMyQjI1OTlDOUUzRUNFREZBM0Y0RTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURGQTNG NEUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ3ZjZjZjYtZGQyYi00ODIzLWIy NjQtZTJiZjRmMzBhYmZlLzAvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VD RURGQTNGNEUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkfOrfn+pyi0fdbNBBfrEZ5ewN9FbaJHkus Rr4Ws0O59pAYUUxhe+nhxFxRjfE/t6C/NTotOaBblp1FelZ/cpX4SK9ah+P32ANx gXIQLrKXvwLOrf+I+KK4YW7wJ09rWOtISfGKIbfgDjsCGdBUKm/8gjFAfI6Lh1ut 6FA42ilvX/w+EIgCGGmSHqrlI/5GHeYLikwZ7obDVaRUJ+mLGO1TzqEuXF7C7fiv aYwMg7KaTq2phUdVdIXL0iNeBUD+fOHhhbHLwnF0z0hxQ0fLrPwN+s55uMLumi0U AdrO3/d+oW2zBQA5+nwjY1Ax9A021Hlj8vMWl/o2edTvIJ57oUQ= -----END CERTIFICATE-----Generated at Tue Jun 17 15:37:40 2025 by rpki-client