$ rpki-client -vvf repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft File: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft (raw, json) Hash identifier: RZpD7HL2KZTYA2s5W4AStARPCmMUwtuVvf2sQGZnoJ8= Subject key identifier: EC:CA:17:E1:CD:11:38:72:7F:A7:3E:FD:E8:97:F3:5A:68:90:42:75 Authority key identifier: 72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 Certificate issuer: /CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Certificate serial: 3D2AB0DDA84AC8C70213736E4FC1239E4A8A67C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft Manifest number: A7 Signing time: Tue 04 Nov 2025 02:20:37 +0000 Manifest this update: Tue 04 Nov 2025 02:15:37 +0000 Manifest next update: Fri 07 Nov 2025 04:52:37 +0000 Files and hashes: 1: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl (hash: ofw+evSYK0pv4tBBUwa+7C7QASudQlvX4uYRdiVN/Mk=) 2: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: qS0Y7OvIPpcM2gAdCGVHw4DZGPjirzEO0sHYxu8EXaU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 04:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:2a:b0:dd:a8:4a:c8:c7:02:13:73:6e:4f:c1:23:9e:4a:8a:67:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Validity Not Before: Nov 4 02:15:37 2025 GMT Not After : Nov 7 04:52:37 2025 GMT Subject: CN=ECCA17E1CD1138727FA73EFDE897F35A68904275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:04:3a:9e:4a:65:ea:9e:e9:63:49:fe:33:cd: a0:54:df:32:e9:99:3f:62:6b:34:4f:17:45:24:53: 2b:c2:74:20:ff:c3:30:1a:a7:fb:45:fa:da:cd:d5: 7b:b8:c8:5d:81:aa:78:60:49:f2:6a:f5:61:a6:37: c2:9b:d7:e6:f6:68:75:83:17:d2:8b:73:12:c2:71: e2:cd:00:4c:4a:3d:fd:67:f0:06:af:33:af:d9:a3: 05:f8:b6:0a:3e:68:8b:c4:a1:54:9f:7f:49:69:81: 48:7e:ca:4e:ed:e8:c0:80:05:59:a5:c8:dd:1d:b7: 2d:56:32:6d:8c:80:86:b2:86:1b:b9:e1:2b:3f:06: a8:38:f8:ea:b9:7a:57:b0:74:97:b0:ab:e0:b6:7a: 7a:dc:ef:8f:bf:f9:75:35:81:66:7c:9d:5f:1b:00: 97:6a:cf:00:ac:95:b6:e5:17:8b:fe:f8:ca:41:2f: 5b:dc:32:08:71:10:e3:ce:47:68:bd:70:c3:21:c8: 2e:96:59:87:ff:5c:6e:75:4a:34:28:4b:88:a2:fc: 47:68:6b:86:9f:d9:14:b2:24:fe:bf:bf:15:07:ed: 91:6e:c9:70:c3:26:fe:ed:24:91:97:51:b7:3c:a2: 6f:17:fa:55:07:de:c0:98:a8:e4:a7:50:2a:d1:31: 9a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CA:17:E1:CD:11:38:72:7F:A7:3E:FD:E8:97:F3:5A:68:90:42:75 X509v3 Authority Key Identifier: keyid:72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:2a:02:86:05:54:5e:5f:c2:1a:25:90:70:c1:08:21:ed:96: 5c:5b:96:03:92:90:a3:43:5c:50:60:fa:3a:cc:29:b5:9f:6a: f9:62:c6:c4:a8:06:57:bc:55:72:4f:96:3f:a5:45:e3:6e:29: e6:3b:e1:e7:f4:8a:d7:f3:d8:f7:57:c8:5c:9c:b4:6a:b0:4d: 1b:b1:fc:81:e7:32:e1:34:5b:37:78:3c:74:88:52:8b:f1:8d: f9:ea:87:95:fd:e6:5f:29:05:af:4a:c8:6d:2a:45:a6:f3:54: 46:9f:e7:93:a3:43:1a:a2:35:89:5f:7f:69:24:55:6c:1a:63: 89:32:72:58:af:65:91:f7:7f:73:52:43:89:79:47:6e:b8:ee: 58:59:1f:9c:45:cf:26:b6:78:57:c4:86:bd:33:08:ff:39:7c: 14:07:c0:14:48:f3:c3:30:ff:3f:44:76:06:65:f4:73:06:15: f0:df:2a:f5:bf:ec:ae:c6:96:c2:cc:13:78:79:e7:94:4c:07: 0f:11:59:3a:f1:3a:a2:86:0f:bb:c1:3c:15:89:0e:e4:33:14: 1b:bd:23:7c:fe:96:c9:1b:42:e2:2d:52:ac:01:64:7b:8e:6c: 73:dc:ee:37:aa:f2:db:08:20:07:dd:f9:ed:f5:94:99:a8:2c: a0:a2:93:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPSqw3ahKyMcCE3NuT8EjnkqKZ8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURG QTNGNEUxNjAeFw0yNTExMDQwMjE1MzdaFw0yNTExMDcwNDUyMzdaMDMxMTAvBgNV BAMTKEVDQ0ExN0UxQ0QxMTM4NzI3RkE3M0VGREU4OTdGMzVBNjg5MDQyNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/BDqeSmXqnuljSf4zzaBU3zLp mT9iazRPF0UkUyvCdCD/wzAap/tF+trN1Xu4yF2BqnhgSfJq9WGmN8Kb1+b2aHWD F9KLcxLCceLNAExKPf1n8AavM6/ZowX4tgo+aIvEoVSff0lpgUh+yk7t6MCABVml yN0dty1WMm2MgIayhhu54Ss/Bqg4+Oq5elewdJewq+C2enrc74+/+XU1gWZ8nV8b AJdqzwCslbblF4v++MpBL1vcMghxEOPOR2i9cMMhyC6WWYf/XG51SjQoS4ii/Edo a4af2RSyJP6/vxUH7ZFuyXDDJv7tJJGXUbc8om8X+lUH3sCYqOSnUCrRMZpdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7MoX4c0ROHJ/pz796JfzWmiQQnUwHwYDVR0j BBgwFoAUctja/UgbP4+sKyWZyePs7fo/ThYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDdmNmNmNi1kZDJiLTQ4MjMtYjI2NC1lMmJmNGYzMGFiZmUvMC83MkQ4REFGRDQ4 MUIzRjhGQUMyQjI1OTlDOUUzRUNFREZBM0Y0RTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURGQTNG NEUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ3ZjZjZjYtZGQyYi00ODIzLWIy NjQtZTJiZjRmMzBhYmZlLzAvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VD RURGQTNGNEUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAqAoYFVF5fwholkHDBCCHtllxblgOSkKND XFBg+jrMKbWfavlixsSoBle8VXJPlj+lReNuKeY74ef0itfz2PdXyFyctGqwTRux /IHnMuE0Wzd4PHSIUovxjfnqh5X95l8pBa9KyG0qRabzVEaf55OjQxqiNYlff2kk VWwaY4kyclivZZH3f3NSQ4l5R2647lhZH5xFzya2eFfEhr0zCP85fBQHwBRI88Mw /z9EdgZl9HMGFfDfKvW/7K7GlsLME3h555RMBw8RWTrxOqKGD7vBPBWJDuQzFBu9 I3z+lskbQuItUqwBZHuObHPc7jeq8tsIIAfd+e31lJmoLKCik1A= -----END CERTIFICATE-----Generated at Wed Nov 5 00:28:28 2025 by rpki-client