$ rpki-client -vvf repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft File: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft (raw, json) Hash identifier: KRfCNyaPTVNyUx+XKVFBfWkg+aXJoPZkQOBPK9fFiUY= Subject key identifier: 67:EB:4F:C8:82:08:29:9C:4D:2A:76:81:00:40:41:74:1C:EF:D3:78 Authority key identifier: AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 Certificate issuer: /CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Certificate serial: 4BFF798FE69E8E9EB7AB60CCDEE5589E880AC39B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft Manifest number: D6 Signing time: Sun 02 Nov 2025 10:52:05 +0000 Manifest this update: Sun 02 Nov 2025 10:47:05 +0000 Manifest next update: Wed 05 Nov 2025 17:27:05 +0000 Files and hashes: 1: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: Yq8Q6JYOVHESjvKiauFlSKUKL9dSlIZbiu5ayrjEea4=) 2: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl (hash: duQGH75Tzm9xRiEN3BTifVF04XyNM5KSnS7qd8CzTls=) 3: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: UbbhlYQNDi6JszbpEsabaohj0lI6X/p1NOF16+0hgH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 17:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ff:79:8f:e6:9e:8e:9e:b7:ab:60:cc:de:e5:58:9e:88:0a:c3:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Validity Not Before: Nov 2 10:47:05 2025 GMT Not After : Nov 5 17:27:05 2025 GMT Subject: CN=67EB4FC88208299C4D2A7681004041741CEFD378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:84:39:c6:a5:a7:6f:c3:fc:15:a7:74:da:7f: 0f:8d:bd:e5:1d:d7:66:49:91:4c:2b:2a:10:2f:e6: dd:25:33:20:4b:72:89:78:ad:b3:1b:64:2a:a5:b7: 72:58:e9:1d:19:56:35:94:fb:17:e1:4b:bb:45:c5: e8:f7:4c:13:b8:7e:70:cd:ec:b1:df:9c:42:c5:12: e8:dd:3e:a8:6f:59:8b:db:c8:26:f4:7c:e1:4a:9c: c3:4a:e0:d1:04:b3:47:87:54:fd:83:02:b1:de:4d: 04:e8:b8:59:42:84:cf:06:94:20:b2:34:44:ff:bc: 9a:b3:79:0c:0e:97:a4:0e:bd:8f:ba:05:3e:ab:7f: 93:40:f2:aa:92:e6:26:64:62:ec:a9:4b:f8:2c:d5: 89:d0:54:5a:b0:16:6f:bb:b1:c0:cf:57:38:82:e6: 24:52:46:d4:e0:fa:1d:20:c9:0c:90:7e:7d:3c:52: 73:ff:67:22:da:e3:71:32:2d:2f:94:7a:61:db:ef: e7:ac:4f:c4:ce:e4:df:5c:a8:2c:56:7e:f8:67:f0: 10:70:ac:d3:c9:4a:b3:2e:c7:c7:ff:72:a3:f0:7a: 09:db:d7:ce:b0:31:6d:1a:b1:49:2a:95:c6:e7:1f: a6:b0:71:70:59:26:4e:7a:29:72:8b:ae:c3:49:6d: c3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EB:4F:C8:82:08:29:9C:4D:2A:76:81:00:40:41:74:1C:EF:D3:78 X509v3 Authority Key Identifier: keyid:AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:da:38:75:db:d8:78:a5:ca:6e:c9:a3:b0:d6:cf:3e:b0:d0: 6a:41:b7:9b:ec:89:fd:ef:24:eb:b9:7d:41:5b:58:80:fc:05: 3b:d6:2c:97:5e:56:f5:14:c6:0f:ce:4a:13:a0:5f:0d:81:89: e0:f7:b9:d5:08:31:2d:68:e7:e0:22:9b:93:9c:f4:f8:07:d7: d7:bd:52:47:2b:12:df:4b:9e:15:34:64:48:09:f1:a6:47:b4: f4:d4:9a:78:28:c0:62:3e:b5:38:39:dc:98:9a:1b:4c:6a:aa: 9a:0a:75:36:37:a8:cf:58:f2:eb:53:49:ea:21:59:fa:ba:8b: cc:16:95:b6:17:68:8a:fd:ce:1b:e5:59:d0:34:74:e7:89:05: e7:53:ba:60:5c:b9:51:22:8e:15:5a:7b:a0:c6:50:e7:b4:24: fb:76:ff:9f:76:a4:23:5c:6d:f6:18:2d:05:4f:1e:8c:c2:92: 9b:1d:f5:8e:50:a9:ec:da:c6:e6:2f:dc:fe:80:95:c4:07:1a: a0:b6:13:9a:0f:df:41:42:51:54:e5:4e:00:42:61:20:8b:2f: b9:78:4e:fe:bc:bc:23:27:64:19:ff:be:29:77:5c:c1:21:6e: 21:80:4f:26:33:ac:ed:46:21:21:b0:80:46:27:a3:b1:02:26: fe:7f:1d:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS/95j+aejp63q2DM3uVYnogKw5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVD QTdFMEQ5MzAeFw0yNTExMDIxMDQ3MDVaFw0yNTExMDUxNzI3MDVaMDMxMTAvBgNV BAMTKDY3RUI0RkM4ODIwODI5OUM0RDJBNzY4MTAwNDA0MTc0MUNFRkQzNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqhDnGpadvw/wVp3Tafw+NveUd 12ZJkUwrKhAv5t0lMyBLcol4rbMbZCqlt3JY6R0ZVjWU+xfhS7tFxej3TBO4fnDN 7LHfnELFEujdPqhvWYvbyCb0fOFKnMNK4NEEs0eHVP2DArHeTQTouFlChM8GlCCy NET/vJqzeQwOl6QOvY+6BT6rf5NA8qqS5iZkYuypS/gs1YnQVFqwFm+7scDPVziC 5iRSRtTg+h0gyQyQfn08UnP/ZyLa43EyLS+UemHb7+esT8TO5N9cqCxWfvhn8BBw rNPJSrMux8f/cqPwegnb186wMW0asUkqlcbnH6awcXBZJk56KXKLrsNJbcP/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ+tPyIIIKZxNKnaBAEBBdBzv03gwHwYDVR0j BBgwFoAUqnJ2j90MYVoF5KMqBvnMtcp+DZMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzcyZWUzYy1lMTgwLTQyOTYtOWRhZC05NTAwZWZkOTQ4OTAvMC9BQTcyNzY4RkRE MEM2MTVBMDVFNEEzMkEwNkY5Q0NCNUNBN0UwRDkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVDQTdF MEQ5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3MmVlM2MtZTE4MC00Mjk2LTlk YWQtOTUwMGVmZDk0ODkwLzAvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUND QjVDQTdFMEQ5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXaOHXb2Hilym7Jo7DWzz6w0GpBt5vsif3v JOu5fUFbWID8BTvWLJdeVvUUxg/OShOgXw2BieD3udUIMS1o5+Aim5Oc9PgH19e9 UkcrEt9LnhU0ZEgJ8aZHtPTUmngowGI+tTg53JiaG0xqqpoKdTY3qM9Y8utTSeoh Wfq6i8wWlbYXaIr9zhvlWdA0dOeJBedTumBcuVEijhVae6DGUOe0JPt2/592pCNc bfYYLQVPHozCkpsd9Y5QqezaxuYv3P6AlcQHGqC2E5oP30FCUVTlTgBCYSCLL7l4 Tv68vCMnZBn/vil3XMEhbiGATyYzrO1GISGwgEYno7ECJv5/HQc= -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:50 2025 by rpki-client