$ rpki-client -vvf repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft File: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft (raw, json) Hash identifier: AmQqscj54l3UJH2FA4tHL/T/wLpdf31r91RhxL3ZaO4= Subject key identifier: BB:75:6A:1B:2E:58:28:F9:E7:3D:76:7A:94:4A:32:C5:32:11:9A:6D Authority key identifier: 72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 Certificate issuer: /CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Certificate serial: 623BCCEA38350EE3AB7022CDF4EB0CED837DBC6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft Manifest number: 7E Signing time: Mon 04 Aug 2025 11:10:38 +0000 Manifest this update: Mon 04 Aug 2025 11:05:38 +0000 Manifest next update: Thu 07 Aug 2025 23:08:38 +0000 Files and hashes: 1: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: Mh2qAtV9OXmT8dkxySa/tVQuTPHOj1MMmtUTif0IndI=) 2: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl (hash: BsgUEfETD0FA2MiAlDz/dfIDx4qOTkxp4n7fVvlSg5o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 23:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:3b:cc:ea:38:35:0e:e3:ab:70:22:cd:f4:eb:0c:ed:83:7d:bc:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Validity Not Before: Aug 4 11:05:38 2025 GMT Not After : Aug 7 23:08:38 2025 GMT Subject: CN=BB756A1B2E5828F9E73D767A944A32C532119A6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:90:0d:87:70:d3:13:d4:b5:a7:00:b0:dd:e6: 22:4f:c2:02:86:9b:73:0b:73:c8:96:f0:69:13:d2: 32:0e:6a:9c:26:f0:dc:a5:29:77:3f:bb:2a:f9:cb: 8f:ff:d7:7f:9b:fc:4f:3f:e2:41:7d:d0:39:22:76: d1:53:d8:57:ef:6d:59:95:09:4d:55:0a:32:b3:cd: 6a:49:d6:02:b4:ea:7f:dc:8a:0f:3d:be:a4:57:4a: ff:db:41:d5:aa:95:e8:30:25:76:80:38:13:f5:aa: 75:d4:63:0a:46:33:f3:a5:f4:d3:5c:77:fc:3a:15: 86:eb:f2:0c:8d:b5:b8:99:fb:b8:dc:85:d4:ff:a4: ae:8a:2c:9d:63:eb:cf:c9:1a:ee:db:cf:64:b2:54: e4:67:cb:af:90:66:d1:51:c7:de:17:52:70:12:b8: ce:03:0d:35:89:82:d0:d2:fa:44:18:e6:65:30:5f: a0:bc:1d:d1:0e:ea:6c:f6:a1:ce:69:d8:1a:3c:58: 9b:6e:3f:c3:a1:1a:40:28:53:a5:fe:38:92:40:6d: d7:1b:49:18:3b:dc:00:cd:f7:60:82:d7:90:5f:2c: c2:47:8e:a6:4b:29:bb:63:44:c4:dd:5a:02:0f:57: 34:f0:12:94:9c:02:81:6e:3d:8e:21:f7:d5:03:e5: fb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:75:6A:1B:2E:58:28:F9:E7:3D:76:7A:94:4A:32:C5:32:11:9A:6D X509v3 Authority Key Identifier: keyid:72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:6c:4d:07:df:e6:84:4e:8d:ad:cb:b7:73:0f:8f:51:63:98: b7:ff:73:a5:61:2d:00:43:4e:93:00:8d:66:0b:d0:03:58:9b: 1d:38:cf:8a:0b:b9:b1:7b:bb:26:f4:60:48:b8:88:51:4e:a8: d0:33:01:46:39:37:77:4c:ce:2c:8a:5e:21:cf:57:b2:b3:02: 48:d2:0e:35:63:b1:c9:29:ff:cf:f5:fb:8b:4f:1f:77:a2:81: b8:ce:e0:18:50:b9:44:25:dc:b8:57:d2:97:ea:c7:fc:8d:4d: 66:bf:40:83:b8:ef:19:47:56:a4:c3:dd:23:42:33:aa:07:d2: 7c:e1:fa:53:e5:82:4b:7d:57:57:56:94:dc:82:2c:b6:b2:d4: e3:68:4a:20:75:6e:7f:12:5e:d5:00:f3:0c:b9:ff:07:b6:a7: 58:93:35:df:2e:aa:2f:72:e4:62:d8:49:86:5d:b1:e9:c1:57: 93:2b:64:79:b1:8c:08:61:48:ce:bb:e4:22:65:22:04:1c:5d: cc:42:fc:95:1e:4f:91:8b:b6:44:a4:c6:45:1d:2f:0c:b5:cb: fc:37:80:8a:7f:02:d2:36:3a:6b:06:b1:be:0e:c0:74:af:e6: 5d:e0:1e:88:b8:48:23:07:23:07:25:56:61:86:b5:b0:44:fb: b9:73:9c:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYjvM6jg1DuOrcCLN9OsM7YN9vGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURG QTNGNEUxNjAeFw0yNTA4MDQxMTA1MzhaFw0yNTA4MDcyMzA4MzhaMDMxMTAvBgNV BAMTKEJCNzU2QTFCMkU1ODI4RjlFNzNENzY3QTk0NEEzMkM1MzIxMTlBNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUkA2HcNMT1LWnALDd5iJPwgKG m3MLc8iW8GkT0jIOapwm8NylKXc/uyr5y4//13+b/E8/4kF90DkidtFT2FfvbVmV CU1VCjKzzWpJ1gK06n/cig89vqRXSv/bQdWqlegwJXaAOBP1qnXUYwpGM/Ol9NNc d/w6FYbr8gyNtbiZ+7jchdT/pK6KLJ1j68/JGu7bz2SyVORny6+QZtFRx94XUnAS uM4DDTWJgtDS+kQY5mUwX6C8HdEO6mz2oc5p2Bo8WJtuP8OhGkAoU6X+OJJAbdcb SRg73ADN92CC15BfLMJHjqZLKbtjRMTdWgIPVzTwEpScAoFuPY4h99UD5fvZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu3VqGy5YKPnnPXZ6lEoyxTIRmm0wHwYDVR0j BBgwFoAUctja/UgbP4+sKyWZyePs7fo/ThYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDdmNmNmNi1kZDJiLTQ4MjMtYjI2NC1lMmJmNGYzMGFiZmUvMC83MkQ4REFGRDQ4 MUIzRjhGQUMyQjI1OTlDOUUzRUNFREZBM0Y0RTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURGQTNG NEUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ3ZjZjZjYtZGQyYi00ODIzLWIy NjQtZTJiZjRmMzBhYmZlLzAvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VD RURGQTNGNEUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVsTQff5oROja3Lt3MPj1FjmLf/c6VhLQBD TpMAjWYL0ANYmx04z4oLubF7uyb0YEi4iFFOqNAzAUY5N3dMziyKXiHPV7KzAkjS DjVjsckp/8/1+4tPH3eigbjO4BhQuUQl3LhX0pfqx/yNTWa/QIO47xlHVqTD3SNC M6oH0nzh+lPlgkt9V1dWlNyCLLay1ONoSiB1bn8SXtUA8wy5/we2p1iTNd8uqi9y 5GLYSYZdsenBV5MrZHmxjAhhSM675CJlIgQcXcxC/JUeT5GLtkSkxkUdLwy1y/w3 gIp/AtI2OmsGsb4OwHSv5l3gHoi4SCMHIwclVmGGtbBE+7lznCk= -----END CERTIFICATE-----Generated at Wed Aug 6 09:23:56 2025 by rpki-client