$ rpki-client -vvf repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft File: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft (raw, json) Hash identifier: EhdhconQ6kPBvkplQJdZj9lYRaeSPrjEZMk+YaVquCU= Subject key identifier: CD:09:1B:F2:A4:C4:2A:57:50:32:6C:D0:6A:C9:9D:EE:B2:15:1D:CD Authority key identifier: EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 Certificate issuer: /CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Certificate serial: 5E311F11F77CE386A631E2E671BB45AF42F8A0DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft Manifest number: 0111 Signing time: Mon 21 Jul 2025 09:50:39 +0000 Manifest this update: Mon 21 Jul 2025 09:45:39 +0000 Manifest next update: Thu 24 Jul 2025 11:34:39 +0000 Files and hashes: 1: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl (hash: 1ExcMMP97lR+GJUyf2vQ4SETU53+Fv7ZsyTrR2RuXiw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 11:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:31:1f:11:f7:7c:e3:86:a6:31:e2:e6:71:bb:45:af:42:f8:a0:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Validity Not Before: Jul 21 09:45:39 2025 GMT Not After : Jul 24 11:34:39 2025 GMT Subject: CN=CD091BF2A4C42A5750326CD06AC99DEEB2151DCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bd:3d:96:8d:8a:9a:6f:b2:7c:86:ae:e4:86: b8:ad:ac:bc:27:81:9d:59:bc:dd:54:04:8d:4d:a2: d0:b1:53:ca:87:bc:a3:8a:57:63:2e:8a:4a:19:74: 6c:42:ad:c9:35:69:b5:08:cb:9c:58:72:b7:1e:cf: a2:8e:6d:c9:82:d7:50:aa:59:ad:b0:cd:56:87:84: d9:17:8f:43:73:ad:2f:ab:cb:f7:53:f5:a3:c1:03: c8:4e:c8:0d:3f:8a:fa:83:e2:ff:48:f2:01:fc:d9: 75:f0:bb:02:e0:e9:07:e7:c0:42:12:03:c7:13:e3: 28:19:4d:40:6b:50:b2:89:b5:50:d9:34:0a:55:f5: ca:05:2d:74:a5:9b:7b:58:64:a7:f3:1f:26:d9:51: f4:88:fd:8d:3f:80:0b:24:34:22:04:d7:b0:0b:e3: 91:de:9d:19:0f:ac:49:18:3d:a5:a8:eb:6e:05:9f: 74:09:60:f5:2f:16:2c:72:f8:80:bb:c5:ff:c7:a7: 65:ec:cd:b8:15:1e:55:ff:50:b0:99:81:b4:07:72: 65:f0:9a:23:c4:e4:ca:a7:6a:d3:f1:cf:9f:c7:4b: 4d:cc:b0:94:de:5d:80:51:6b:0e:ce:12:90:b5:4d: 7a:d5:ba:84:28:23:b6:26:6f:4d:4d:58:dc:56:9f: 8e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:09:1B:F2:A4:C4:2A:57:50:32:6C:D0:6A:C9:9D:EE:B2:15:1D:CD X509v3 Authority Key Identifier: keyid:EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:3d:f2:1d:64:fc:84:e3:e1:7a:31:62:c3:fd:cf:0f:76:a2: 49:30:ec:b1:10:ea:22:9b:4f:d1:43:e0:14:4b:d6:d3:1e:43: 03:e8:a4:91:e9:64:da:a9:74:ca:26:a3:f7:bd:d2:75:31:5e: 47:57:7f:ce:e1:39:d7:2e:9c:16:3a:5e:99:53:91:e6:4c:1a: 12:8b:2b:b9:44:98:d1:ff:c9:5e:2d:cb:00:61:a7:e3:bd:1c: 7f:d4:5a:59:8a:e1:80:7f:8d:74:e2:93:ab:63:e0:c4:11:c1: 32:65:a2:73:a4:e1:bf:1e:96:bb:bf:3f:40:88:4a:e0:1e:80: e8:94:5f:90:08:73:9a:eb:2c:81:55:29:4f:9f:84:5d:ac:2b: 43:37:a8:7f:b0:70:b3:be:d7:05:b2:e8:2b:c2:9c:01:78:8d: ff:53:99:d1:80:78:a6:c8:5c:f2:b4:25:c9:51:a4:b4:a0:1b: 3c:4e:ba:83:8f:66:1b:20:95:b0:a6:78:26:b5:71:bc:0e:91: b0:09:4b:a9:12:b8:80:81:ac:0e:d7:22:0a:9b:6d:ef:d2:f8: f1:f9:f9:01:5e:ca:c1:92:a7:e4:9f:a5:f9:a2:fc:1e:e0:dd: ee:ec:bd:70:fe:4f:eb:d9:18:28:e9:a7:f7:ba:cb:58:d0:b6: 93:79:ad:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXjEfEfd844amMeLmcbtFr0L4oN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgx RTVFRENBMTAeFw0yNTA3MjEwOTQ1MzlaFw0yNTA3MjQxMTM0MzlaMDMxMTAvBgNV BAMTKENEMDkxQkYyQTRDNDJBNTc1MDMyNkNEMDZBQzk5REVFQjIxNTFEQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLvT2WjYqab7J8hq7khritrLwn gZ1ZvN1UBI1NotCxU8qHvKOKV2MuikoZdGxCrck1abUIy5xYcrcez6KObcmC11Cq Wa2wzVaHhNkXj0NzrS+ry/dT9aPBA8hOyA0/ivqD4v9I8gH82XXwuwLg6QfnwEIS A8cT4ygZTUBrULKJtVDZNApV9coFLXSlm3tYZKfzHybZUfSI/Y0/gAskNCIE17AL 45HenRkPrEkYPaWo624Fn3QJYPUvFixy+IC7xf/Hp2XszbgVHlX/ULCZgbQHcmXw miPE5MqnatPxz5/HS03MsJTeXYBRaw7OEpC1TXrVuoQoI7Ymb01NWNxWn45nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzQkb8qTEKldQMmzQasmd7rIVHc0wHwYDVR0j BBgwFoAU7nLeOE+at/rWw7KGOl2xKB5e3KEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlNjg3OC02Y2IyLTRhNWYtYjU1My1iY2ViMmM5NWM3NmMvMC9FRTcyREUzODRG OUFCN0ZBRDZDM0IyODYzQTVEQjEyODFFNUVEQ0ExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgxRTVF RENBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTY4NzgtNmNiMi00YTVmLWI1 NTMtYmNlYjJjOTVjNzZjLzAvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIx MjgxRTVFRENBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADg98h1k/ITj4XoxYsP9zw92okkw7LEQ6iKb T9FD4BRL1tMeQwPopJHpZNqpdMomo/e90nUxXkdXf87hOdcunBY6XplTkeZMGhKL K7lEmNH/yV4tywBhp+O9HH/UWlmK4YB/jXTik6tj4MQRwTJlonOk4b8elru/P0CI SuAegOiUX5AIc5rrLIFVKU+fhF2sK0M3qH+wcLO+1wWy6CvCnAF4jf9TmdGAeKbI XPK0JclRpLSgGzxOuoOPZhsglbCmeCa1cbwOkbAJS6kSuICBrA7XIgqbbe/S+PH5 +QFeysGSp+Sfpfmi/B7g3e7svXD+T+vZGCjpp/e6y1jQtpN5rVg= -----END CERTIFICATE-----Generated at Wed Jul 23 12:14:33 2025 by rpki-client