$ rpki-client -vvf repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft File: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft (raw, json) Hash identifier: vB+XlRmNN0aG78ucNRWIecI1NhM4zLl1VuVoYKvy8l0= Subject key identifier: 6C:C3:2D:C6:92:2D:CA:20:BC:F6:C6:6E:CD:B9:37:3C:C8:06:8C:5C Authority key identifier: AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 Certificate issuer: /CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Certificate serial: 28293D56DBCED5A4F21B32E52AAAADAC04740447 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft Manifest number: AF Signing time: Wed 06 Aug 2025 04:52:05 +0000 Manifest this update: Wed 06 Aug 2025 04:47:05 +0000 Manifest next update: Sat 09 Aug 2025 08:36:05 +0000 Files and hashes: 1: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl (hash: bKwqWICCCx4PUB6jUt+MmNB65hBoG6Ctk1Cb/JU97iw=) 2: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: Yq8Q6JYOVHESjvKiauFlSKUKL9dSlIZbiu5ayrjEea4=) 3: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: UbbhlYQNDi6JszbpEsabaohj0lI6X/p1NOF16+0hgH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 08:36:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:29:3d:56:db:ce:d5:a4:f2:1b:32:e5:2a:aa:ad:ac:04:74:04:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Validity Not Before: Aug 6 04:47:05 2025 GMT Not After : Aug 9 08:36:05 2025 GMT Subject: CN=6CC32DC6922DCA20BCF6C66ECDB9373CC8068C5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:33:1d:3b:54:6e:2f:38:e7:b2:cc:76:f3:cf: e3:27:c7:1c:b7:27:4a:d9:77:b6:06:8c:67:d0:e9: 77:25:db:4d:ca:0b:3c:60:20:07:2e:53:ef:50:1e: bc:c9:75:93:c2:42:37:f4:bc:bc:97:fd:e7:fd:02: f9:4b:e2:2d:a6:db:6a:45:af:8e:be:f8:4c:8c:89: 69:4d:2a:2a:97:07:7d:1c:74:35:d8:a0:c9:9a:a0: 1b:b6:fa:84:a3:ae:14:fe:42:10:30:15:5d:f0:6b: 74:ea:74:01:91:2a:52:78:fa:31:72:04:2b:a8:f0: 96:e4:2b:23:b4:33:f6:82:f6:c1:56:68:d7:89:5a: 48:34:69:6a:c3:95:e1:a6:61:31:c7:83:7a:c1:86: ed:08:18:06:1f:cd:38:e5:85:86:11:ba:80:7b:fd: 79:c0:00:22:49:e5:d7:93:34:5a:bd:fd:f3:50:94: ca:de:55:d3:7b:33:89:49:3e:f6:91:dd:d8:95:c4: 79:d7:aa:c8:d8:73:78:89:38:b7:59:b3:3a:c8:12: b2:18:02:63:d6:62:86:b5:bc:03:07:d7:ce:64:b2: 7d:43:eb:a2:02:6e:35:94:cd:ad:22:7b:e5:22:ec: 49:3c:23:94:ab:29:8f:80:5c:ed:0b:25:86:45:ef: 6b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C3:2D:C6:92:2D:CA:20:BC:F6:C6:6E:CD:B9:37:3C:C8:06:8C:5C X509v3 Authority Key Identifier: keyid:AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:5a:e6:bd:b1:80:3b:25:13:c7:47:0d:8a:aa:8b:6f:5e:36: af:f4:d4:83:ff:57:41:ce:11:e4:7c:e6:cc:e1:83:d4:58:66: 65:69:43:6d:72:8d:2e:1f:76:7f:c7:80:3c:01:ee:df:73:aa: 24:d7:a1:32:a5:eb:9e:b5:c8:33:e2:99:ac:be:2b:17:80:e1: 5b:5f:f2:0b:91:7d:53:32:a2:5b:32:3d:de:c9:4a:a2:58:68: 73:d2:52:f3:2b:89:08:97:6b:2a:f7:03:87:d9:d7:99:6f:83: a5:38:14:0c:f3:d3:37:94:fd:ed:21:5b:ad:fc:87:69:43:21: 0a:f1:bc:f4:f9:f9:fc:82:d0:ed:c5:fb:08:dc:5d:c4:9d:58: 94:7a:0b:18:e0:0d:6c:59:2f:71:66:14:2a:87:d7:e5:bd:e9: 3d:4a:28:49:d4:0e:0c:e3:94:1f:ae:32:5a:d5:dc:94:28:1c: 10:16:58:89:e1:a1:ee:a3:3c:c6:2a:c2:a4:67:a3:39:f4:da: a7:0a:fa:d9:24:0b:af:27:5c:0d:39:4d:ec:43:6a:8e:30:e5: b7:fb:44:29:3e:22:d4:ca:bc:66:6d:94:f3:8d:c7:b6:d2:f7: 88:b5:cb:ee:3e:f8:a6:51:85:19:63:5e:79:0d:ba:43:4c:e3: 0b:22:9f:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKCk9VtvO1aTyGzLlKqqtrAR0BEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVD QTdFMEQ5MzAeFw0yNTA4MDYwNDQ3MDVaFw0yNTA4MDkwODM2MDVaMDMxMTAvBgNV BAMTKDZDQzMyREM2OTIyRENBMjBCQ0Y2QzY2RUNEQjkzNzNDQzgwNjhDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtMx07VG4vOOeyzHbzz+Mnxxy3 J0rZd7YGjGfQ6Xcl203KCzxgIAcuU+9QHrzJdZPCQjf0vLyX/ef9AvlL4i2m22pF r46++EyMiWlNKiqXB30cdDXYoMmaoBu2+oSjrhT+QhAwFV3wa3TqdAGRKlJ4+jFy BCuo8JbkKyO0M/aC9sFWaNeJWkg0aWrDleGmYTHHg3rBhu0IGAYfzTjlhYYRuoB7 /XnAACJJ5deTNFq9/fNQlMreVdN7M4lJPvaR3diVxHnXqsjYc3iJOLdZszrIErIY AmPWYoa1vAMH185ksn1D66ICbjWUza0ie+Ui7Ek8I5SrKY+AXO0LJYZF72sNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbMMtxpItyiC89sZuzbk3PMgGjFwwHwYDVR0j BBgwFoAUqnJ2j90MYVoF5KMqBvnMtcp+DZMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzcyZWUzYy1lMTgwLTQyOTYtOWRhZC05NTAwZWZkOTQ4OTAvMC9BQTcyNzY4RkRE MEM2MTVBMDVFNEEzMkEwNkY5Q0NCNUNBN0UwRDkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVDQTdF MEQ5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3MmVlM2MtZTE4MC00Mjk2LTlk YWQtOTUwMGVmZDk0ODkwLzAvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUND QjVDQTdFMEQ5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRa5r2xgDslE8dHDYqqi29eNq/01IP/V0HO EeR85szhg9RYZmVpQ21yjS4fdn/HgDwB7t9zqiTXoTKl6561yDPimay+KxeA4Vtf 8guRfVMyolsyPd7JSqJYaHPSUvMriQiXayr3A4fZ15lvg6U4FAzz0zeU/e0hW638 h2lDIQrxvPT5+fyC0O3F+wjcXcSdWJR6CxjgDWxZL3FmFCqH1+W96T1KKEnUDgzj lB+uMlrV3JQoHBAWWInhoe6jPMYqwqRnozn02qcK+tkkC68nXA05TexDao4w5bf7 RCk+ItTKvGZtlPONx7bS94i1y+4++KZRhRljXnkNukNM4wsin1c= -----END CERTIFICATE-----Generated at Thu Aug 7 11:17:17 2025 by rpki-client