$ rpki-client -vvf repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.mft File: 75124AA5DD7D2B53783B8C956570CF3235324A6C.mft (raw, json) Hash identifier: gB2dsAi13GgCWfB1VqSKv4reVu2/k2UFCOTdhY/VTQI= Subject key identifier: 03:42:BD:0A:CB:86:1A:83:03:33:CB:7E:58:0A:B0:E5:9C:ED:81:BE Authority key identifier: 75:12:4A:A5:DD:7D:2B:53:78:3B:8C:95:65:70:CF:32:35:32:4A:6C Certificate issuer: /CN=75124AA5DD7D2B53783B8C956570CF3235324A6C Certificate serial: 2D159059B59C1C1FBB830E636B399DE33EDEF7D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75124AA5DD7D2B53783B8C956570CF3235324A6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.mft Manifest number: 01EE Signing time: Mon 04 Aug 2025 16:01:00 +0000 Manifest this update: Mon 04 Aug 2025 15:56:00 +0000 Manifest next update: Thu 07 Aug 2025 21:18:00 +0000 Files and hashes: 1: 75124AA5DD7D2B53783B8C956570CF3235324A6C.crl (hash: EIeMr3npjTqVM1vxrp94d+3dnM5krYnFh0TwDF7gI/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.crl rsync://repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75124AA5DD7D2B53783B8C956570CF3235324A6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 21:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:15:90:59:b5:9c:1c:1f:bb:83:0e:63:6b:39:9d:e3:3e:de:f7:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75124AA5DD7D2B53783B8C956570CF3235324A6C Validity Not Before: Aug 4 15:56:00 2025 GMT Not After : Aug 7 21:18:00 2025 GMT Subject: CN=0342BD0ACB861A830333CB7E580AB0E59CED81BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:17:82:65:94:a7:ee:8c:7b:df:1d:37:ac:ba: c6:6e:52:40:f0:32:db:df:1d:62:3e:bc:f2:a0:69: 2e:3d:fd:c5:38:2c:8a:4d:37:63:9a:ba:95:3b:30: 4c:6f:59:d9:d3:99:91:b7:ba:5c:2d:c3:64:81:54: 6c:a7:0c:53:c4:c9:04:78:da:25:6f:8f:0b:82:23: 3a:68:de:0c:a3:d9:53:8b:ea:ba:92:66:ee:d0:c5: 2b:29:21:8d:9b:c4:73:c0:77:77:a4:0c:58:c6:61: f3:11:1c:2e:55:0f:d9:46:ba:71:b1:eb:b3:e2:4d: b5:64:b9:13:29:51:6c:24:85:1a:ce:4a:44:c3:72: f7:17:7d:e5:63:14:8f:37:ec:b1:21:2d:7d:43:c3: d4:0e:e7:5d:f1:17:28:1f:12:57:79:46:a9:c8:aa: 39:01:36:e1:2b:72:db:40:3b:ee:8c:40:bc:f6:6b: cf:31:bd:7b:68:87:9c:43:ac:af:9f:1b:31:5b:53: 4a:df:3f:96:eb:84:26:8c:b9:35:fe:fa:3c:26:e4: 84:0f:55:46:52:41:34:70:2c:1d:9e:6b:2f:3c:6a: 27:0e:2a:3e:5f:96:2c:0e:0b:a0:3d:b3:c8:93:d5: e8:29:fe:54:d4:b3:e0:f9:b9:0c:dd:7a:b9:be:e8: ee:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:42:BD:0A:CB:86:1A:83:03:33:CB:7E:58:0A:B0:E5:9C:ED:81:BE X509v3 Authority Key Identifier: keyid:75:12:4A:A5:DD:7D:2B:53:78:3B:8C:95:65:70:CF:32:35:32:4A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75124AA5DD7D2B53783B8C956570CF3235324A6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:5e:bd:54:63:09:9f:fe:10:d0:ae:66:5f:86:7f:94:13:45: a7:88:bf:6f:3e:ba:f0:d9:46:b7:61:b0:c7:a7:f0:c3:f4:af: 35:b7:66:18:58:9f:aa:52:81:78:cc:39:fd:1b:b1:eb:1b:69: c0:59:04:a2:20:89:c6:64:3a:b1:b2:43:32:aa:0c:52:d9:a6: 4f:4a:be:e0:9b:8a:71:92:79:61:24:22:f2:23:bb:c7:24:93: 95:79:c9:3d:92:da:c3:e7:f1:68:e2:08:a0:a4:9e:cd:6b:e9: a3:58:cf:81:05:13:1e:30:a0:37:c8:ab:2f:a0:e7:59:81:ca: bf:d8:9b:b7:bc:a7:95:54:53:32:58:1a:16:6c:8a:74:d6:0b: ca:87:1e:e4:d3:bf:73:99:8b:62:47:2a:db:3a:32:7a:ac:12: 73:f0:03:8f:97:57:49:a0:78:1d:7b:aa:ca:fc:3e:10:a7:cc: 6b:f8:91:16:6e:18:48:b5:32:99:99:c0:fd:0a:13:a4:75:9d: 96:58:09:28:3b:0a:48:06:ea:c5:e9:97:76:76:6e:f5:10:75: 4c:39:d0:0c:2a:b2:a3:8d:11:f0:10:2e:79:17:30:0a:2e:64: af:28:95:6c:a2:68:d9:2e:e5:6d:63:6b:67:87:70:02:8f:c7: 64:51:8a:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULRWQWbWcHB+7gw5jazmd4z7e99cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzUxMjRBQTVERDdEMkI1Mzc4M0I4Qzk1NjU3MENGMzIz NTMyNEE2QzAeFw0yNTA4MDQxNTU2MDBaFw0yNTA4MDcyMTE4MDBaMDMxMTAvBgNV BAMTKDAzNDJCRDBBQ0I4NjFBODMwMzMzQ0I3RTU4MEFCMEU1OUNFRDgxQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJF4JllKfujHvfHTesusZuUkDw MtvfHWI+vPKgaS49/cU4LIpNN2OaupU7MExvWdnTmZG3ulwtw2SBVGynDFPEyQR4 2iVvjwuCIzpo3gyj2VOL6rqSZu7QxSspIY2bxHPAd3ekDFjGYfMRHC5VD9lGunGx 67PiTbVkuRMpUWwkhRrOSkTDcvcXfeVjFI837LEhLX1Dw9QO513xFygfEld5RqnI qjkBNuErcttAO+6MQLz2a88xvXtoh5xDrK+fGzFbU0rfP5brhCaMuTX++jwm5IQP VUZSQTRwLB2eay88aicOKj5fliwOC6A9s8iT1egp/lTUs+D5uQzderm+6O7LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA0K9CsuGGoMDM8t+WAqw5Zztgb4wHwYDVR0j BBgwFoAUdRJKpd19K1N4O4yVZXDPMjUySmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDQ4OGQ1Ni02ZWFkLTRjZTQtOGQzMy0yZGNmMDgwZDA4NzYvMC83NTEyNEFBNURE N0QyQjUzNzgzQjhDOTU2NTcwQ0YzMjM1MzI0QTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzUxMjRBQTVERDdEMkI1Mzc4M0I4Qzk1NjU3MENGMzIzNTMy NEE2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ0ODhkNTYtNmVhZC00Y2U0LThk MzMtMmRjZjA4MGQwODc2LzAvNzUxMjRBQTVERDdEMkI1Mzc4M0I4Qzk1NjU3MENG MzIzNTMyNEE2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL9evVRjCZ/+ENCuZl+Gf5QTRaeIv28+uvDZ RrdhsMen8MP0rzW3ZhhYn6pSgXjMOf0bsesbacBZBKIgicZkOrGyQzKqDFLZpk9K vuCbinGSeWEkIvIju8ckk5V5yT2S2sPn8WjiCKCkns1r6aNYz4EFEx4woDfIqy+g 51mByr/Ym7e8p5VUUzJYGhZsinTWC8qHHuTTv3OZi2JHKts6MnqsEnPwA4+XV0mg eB17qsr8PhCnzGv4kRZuGEi1MpmZwP0KE6R1nZZYCSg7CkgG6sXpl3Z2bvUQdUw5 0AwqsqONEfAQLnkXMAouZK8olWyiaNku5W1ja2eHcAKPx2RRikQ= -----END CERTIFICATE-----Generated at Wed Aug 6 14:06:03 2025 by rpki-client