$ rpki-client -vvf repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft File: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft (raw, json) Hash identifier: OoFHj9qGLt8bKFcpQ3Zc4CaiIF75Dg3KTXiE8UCCem0= Subject key identifier: 16:08:93:3F:1E:76:0E:35:7B:6E:30:34:26:2F:FC:CF:ED:3E:57:F8 Authority key identifier: AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 Certificate issuer: /CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Certificate serial: 5A4F81895426528882DC46A557A7AD5091FD3E7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft Manifest number: 98 Signing time: Mon 16 Jun 2025 15:32:01 +0000 Manifest this update: Mon 16 Jun 2025 15:27:01 +0000 Manifest next update: Fri 20 Jun 2025 01:41:01 +0000 Files and hashes: 1: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl (hash: xQ0eUfeThN4B25BNPrNDs7lVzOxVRgc7hDVtg+udfUU=) 2: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: UbbhlYQNDi6JszbpEsabaohj0lI6X/p1NOF16+0hgH0=) 3: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: Yq8Q6JYOVHESjvKiauFlSKUKL9dSlIZbiu5ayrjEea4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 14:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:4f:81:89:54:26:52:88:82:dc:46:a5:57:a7:ad:50:91:fd:3e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Validity Not Before: Jun 16 15:27:01 2025 GMT Not After : Jun 20 01:41:01 2025 GMT Subject: CN=1608933F1E760E357B6E3034262FFCCFED3E57F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f1:16:c1:2c:ee:9e:da:45:f6:25:4d:e7:8f: df:23:13:60:3c:37:52:df:7e:7b:7b:fa:08:4e:5a: 40:6a:e5:b0:fb:33:25:7c:da:4b:5d:ff:c2:e3:39: 41:65:1f:bb:e2:26:06:98:92:b1:71:4b:77:50:c2: 62:d1:23:9b:e0:d0:25:ba:93:58:87:00:13:ec:20: 70:5a:fa:b4:61:1d:27:08:10:60:af:22:5f:f7:43: 75:6d:de:6a:fd:fc:a5:6a:6c:9c:bf:5a:55:c8:0c: 52:fd:93:c2:d1:8b:a4:9a:a9:89:8f:90:af:c2:7c: 8d:25:5e:29:62:3c:6c:56:a6:6e:a3:c5:7f:ed:2b: e5:fc:c9:c4:e9:8b:dd:35:3d:8d:19:02:39:80:c0: 4b:dd:6c:1f:9b:3a:f5:6f:20:ea:50:fc:34:25:d7: 4f:f7:d7:25:99:91:83:cb:ee:45:1b:c1:f2:4f:e6: 9c:6d:72:35:4b:39:02:ba:21:1f:bb:97:a8:91:51: 80:af:b7:dd:d7:4d:1d:ce:64:ff:d6:dd:59:b8:69: 77:d8:2f:92:15:4b:83:c4:8d:b9:9a:7f:9b:63:d6: d8:08:19:df:7c:0f:59:54:96:58:73:51:b5:c1:78: 98:5f:06:23:3e:62:26:d0:a2:d1:1c:3b:15:33:6d: 1f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:08:93:3F:1E:76:0E:35:7B:6E:30:34:26:2F:FC:CF:ED:3E:57:F8 X509v3 Authority Key Identifier: keyid:AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:c8:3e:cd:4e:7c:82:2a:8b:ad:ab:6f:03:da:42:1c:00:dd: 85:a6:87:b1:d9:e3:8a:5d:85:04:84:9c:8d:a7:32:58:03:fb: 80:69:79:8f:1d:07:98:1a:98:88:3f:3f:f6:dc:39:db:7a:6f: 11:67:6d:1d:32:0b:b7:18:b6:c6:5e:1a:e9:01:62:a4:72:74: 97:bd:a7:bc:bd:5d:c4:44:7f:4a:8c:d5:b0:6f:47:da:b0:71: c5:e0:6b:0c:34:57:80:0e:1a:c9:98:78:65:33:b3:91:71:24: 63:5d:9f:0b:57:89:99:37:64:90:85:70:37:5c:3d:a5:74:c6: f3:d5:8e:f8:c9:df:73:b9:7b:c1:14:d1:a9:f2:f9:4b:b8:d4: a7:da:b2:ba:49:0b:82:3a:6f:e1:36:ee:39:2f:68:ed:d3:98: 80:91:27:ab:00:99:ed:91:c9:f2:ed:64:13:08:24:8d:78:42: 70:8b:e9:43:8b:c5:c0:16:cd:ec:7f:15:33:1a:cf:6c:a5:3d: 7c:5c:5e:17:97:76:b4:4c:1b:71:bd:d7:24:cb:3a:11:12:5e: 4e:c9:86:f8:5a:3e:e0:38:70:04:e4:1e:76:11:f2:4d:85:94: 51:37:d1:3c:4c:24:42:e3:69:05:07:85:98:7e:24:8c:9d:19: 41:43:93:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWk+BiVQmUoiC3EalV6etUJH9Pn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVD QTdFMEQ5MzAeFw0yNTA2MTYxNTI3MDFaFw0yNTA2MjAwMTQxMDFaMDMxMTAvBgNV BAMTKDE2MDg5MzNGMUU3NjBFMzU3QjZFMzAzNDI2MkZGQ0NGRUQzRTU3RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD8RbBLO6e2kX2JU3nj98jE2A8 N1Lffnt7+ghOWkBq5bD7MyV82ktd/8LjOUFlH7viJgaYkrFxS3dQwmLRI5vg0CW6 k1iHABPsIHBa+rRhHScIEGCvIl/3Q3Vt3mr9/KVqbJy/WlXIDFL9k8LRi6SaqYmP kK/CfI0lXiliPGxWpm6jxX/tK+X8ycTpi901PY0ZAjmAwEvdbB+bOvVvIOpQ/DQl 10/31yWZkYPL7kUbwfJP5pxtcjVLOQK6IR+7l6iRUYCvt93XTR3OZP/W3Vm4aXfY L5IVS4PEjbmaf5tj1tgIGd98D1lUllhzUbXBeJhfBiM+YibQotEcOxUzbR8NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFgiTPx52DjV7bjA0Ji/8z+0+V/gwHwYDVR0j BBgwFoAUqnJ2j90MYVoF5KMqBvnMtcp+DZMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzcyZWUzYy1lMTgwLTQyOTYtOWRhZC05NTAwZWZkOTQ4OTAvMC9BQTcyNzY4RkRE MEM2MTVBMDVFNEEzMkEwNkY5Q0NCNUNBN0UwRDkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVDQTdF MEQ5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3MmVlM2MtZTE4MC00Mjk2LTlk YWQtOTUwMGVmZDk0ODkwLzAvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUND QjVDQTdFMEQ5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXIPs1OfIIqi62rbwPaQhwA3YWmh7HZ44pd hQSEnI2nMlgD+4BpeY8dB5gamIg/P/bcOdt6bxFnbR0yC7cYtsZeGukBYqRydJe9 p7y9XcREf0qM1bBvR9qwccXgaww0V4AOGsmYeGUzs5FxJGNdnwtXiZk3ZJCFcDdc PaV0xvPVjvjJ33O5e8EU0any+Uu41KfasrpJC4I6b+E27jkvaO3TmICRJ6sAme2R yfLtZBMIJI14QnCL6UOLxcAWzex/FTMaz2ylPXxcXheXdrRMG3G91yTLOhESXk7J hvhaPuA4cATkHnYR8k2FlFE30TxMJELjaQUHhZh+JIydGUFDkwo= -----END CERTIFICATE-----Generated at Tue Jun 17 03:33:19 2025 by rpki-client