$ rpki-client -vvf repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft File: 75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft (raw, json) Hash identifier: KkmS8ISruOcV1wu4aXzpzR+LlpzvgQFX3UQR2N3nFOQ= Subject key identifier: 0A:05:CC:65:E0:A1:C5:0B:3B:47:AA:06:6E:9D:10:17:4E:4C:BB:4C Authority key identifier: 75:F8:7E:19:F3:D7:CA:12:8A:64:BB:06:95:F7:DD:41:6C:17:CC:96 Certificate issuer: /CN=75F87E19F3D7CA128A64BB0695F7DD416C17CC96 Certificate serial: 3173931C59F0F2F49F3277AB037B03E856749521 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft Manifest number: 018E Signing time: Mon 21 Jul 2025 18:22:01 +0000 Manifest this update: Mon 21 Jul 2025 18:17:01 +0000 Manifest next update: Thu 24 Jul 2025 21:55:01 +0000 Files and hashes: 1: 75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl (hash: x12z22hpobaSSNXZBWW8Tk5jZYv0XT5rcfk7srvzzvo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 21:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:73:93:1c:59:f0:f2:f4:9f:32:77:ab:03:7b:03:e8:56:74:95:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75F87E19F3D7CA128A64BB0695F7DD416C17CC96 Validity Not Before: Jul 21 18:17:01 2025 GMT Not After : Jul 24 21:55:01 2025 GMT Subject: CN=0A05CC65E0A1C50B3B47AA066E9D10174E4CBB4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:46:39:28:45:04:b6:11:09:04:58:24:0a:b0: 93:4f:0c:92:94:2f:88:2c:cc:ac:31:d2:62:b0:79: a7:13:30:96:3c:d9:27:3f:3d:30:1b:8b:8f:ce:f9: 96:13:de:9e:b3:3b:c3:1b:f1:e5:80:0e:55:b2:27: f7:0b:12:9e:ed:7c:93:cd:e6:06:14:54:13:99:ec: 60:a7:96:dc:63:b7:a0:b8:19:64:c0:bd:e2:e6:e6: 2e:93:d0:e6:56:17:f9:bb:73:25:8b:9c:ef:64:fb: 8f:79:f6:38:e9:9e:15:af:bd:29:fd:03:38:b4:a1: 8d:5c:d2:94:f2:36:a7:37:41:30:6d:80:b1:e0:a0: cb:7e:ee:25:d2:d4:3b:fd:fc:47:a1:56:a6:20:ec: a4:7a:58:80:3e:cd:75:5e:39:c6:61:da:f8:fb:99: 2c:1a:94:92:2a:90:ca:72:53:f9:ae:9c:24:ba:21: 05:64:4e:5d:09:33:28:ab:02:a0:65:db:b3:96:d1: 40:a2:b5:3b:d1:2f:30:fc:e7:f7:f3:bd:c6:e8:d1: 6c:4b:96:67:c0:12:6c:11:da:0b:69:d7:c6:57:4c: b2:b8:8f:5d:35:33:3c:5e:46:4e:7b:5f:07:c8:d9: 25:7d:1f:0e:a7:8c:6a:a1:6a:26:80:10:77:af:77: ce:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:05:CC:65:E0:A1:C5:0B:3B:47:AA:06:6E:9D:10:17:4E:4C:BB:4C X509v3 Authority Key Identifier: keyid:75:F8:7E:19:F3:D7:CA:12:8A:64:BB:06:95:F7:DD:41:6C:17:CC:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:80:13:1b:15:9f:00:91:e0:0d:e4:57:58:04:41:d8:a4:b2: a6:81:20:1f:a6:70:5f:d7:8e:b8:8c:07:54:cf:2f:a1:63:99: 73:ca:a6:cb:1a:b5:e8:11:02:66:8a:f7:7f:72:9c:e7:76:cf: 7d:50:fa:e9:4f:ea:57:b4:19:74:44:31:13:01:cf:d0:00:f3: 72:1e:80:54:14:75:1e:17:4e:80:41:e6:04:b3:97:5a:12:18: f7:8a:30:51:18:67:cf:63:ea:d2:a7:41:75:dc:94:d2:8d:f2: de:3c:6e:a5:d5:ed:0b:d7:2c:64:3b:5d:68:19:f6:f6:3d:ca: dc:4e:b7:2c:79:a0:e8:c3:41:e1:f6:38:e0:8d:4d:fa:ca:64: 93:22:22:a6:d7:54:a3:9b:a8:4f:cd:d4:ed:a6:74:a8:c2:50: 3f:44:bb:7c:a0:f7:92:ca:54:30:96:ca:77:ba:b3:44:e7:3f: 43:83:98:aa:3d:6f:a7:2a:69:e6:d6:5e:25:ec:71:ca:75:a4: 52:4e:22:30:05:75:bc:88:27:88:40:2e:8e:7f:55:fb:fe:0f: 4e:8f:a0:e6:04:1c:39:9d:96:49:aa:08:f5:d1:60:33:29:a0: 0c:d0:0e:8c:46:f4:9b:d5:ba:92:97:af:a7:8d:da:57:d3:c9: ed:6d:cb:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMXOTHFnw8vSfMnerA3sD6FZ0lSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVGODdFMTlGM0Q3Q0ExMjhBNjRCQjA2OTVGN0RENDE2 QzE3Q0M5NjAeFw0yNTA3MjExODE3MDFaFw0yNTA3MjQyMTU1MDFaMDMxMTAvBgNV BAMTKDBBMDVDQzY1RTBBMUM1MEIzQjQ3QUEwNjZFOUQxMDE3NEU0Q0JCNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RjkoRQS2EQkEWCQKsJNPDJKU L4gszKwx0mKweacTMJY82Sc/PTAbi4/O+ZYT3p6zO8Mb8eWADlWyJ/cLEp7tfJPN 5gYUVBOZ7GCnltxjt6C4GWTAveLm5i6T0OZWF/m7cyWLnO9k+4959jjpnhWvvSn9 Azi0oY1c0pTyNqc3QTBtgLHgoMt+7iXS1Dv9/EehVqYg7KR6WIA+zXVeOcZh2vj7 mSwalJIqkMpyU/munCS6IQVkTl0JMyirAqBl27OW0UCitTvRLzD85/fzvcbo0WxL lmfAEmwR2gtp18ZXTLK4j101MzxeRk57XwfI2SV9Hw6njGqhaiaAEHevd87XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCgXMZeChxQs7R6oGbp0QF05Mu0wwHwYDVR0j BBgwFoAUdfh+GfPXyhKKZLsGlffdQWwXzJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmNhZWEzYi1iZDdmLTQ4MWEtOWJjNy1hYTE2MGQwNWQyNjIvMC83NUY4N0UxOUYz RDdDQTEyOEE2NEJCMDY5NUY3REQ0MTZDMTdDQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzVGODdFMTlGM0Q3Q0ExMjhBNjRCQjA2OTVGN0RENDE2QzE3 Q0M5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJjYWVhM2ItYmQ3Zi00ODFhLTli YzctYWExNjBkMDVkMjYyLzAvNzVGODdFMTlGM0Q3Q0ExMjhBNjRCQjA2OTVGN0RE NDE2QzE3Q0M5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKAExsVnwCR4A3kV1gEQdiksqaBIB+mcF/X jriMB1TPL6FjmXPKpssategRAmaK939ynOd2z31Q+ulP6le0GXREMRMBz9AA83Ie gFQUdR4XToBB5gSzl1oSGPeKMFEYZ89j6tKnQXXclNKN8t48bqXV7QvXLGQ7XWgZ 9vY9ytxOtyx5oOjDQeH2OOCNTfrKZJMiIqbXVKObqE/N1O2mdKjCUD9Eu3yg95LK VDCWyne6s0TnP0ODmKo9b6cqaebWXiXsccp1pFJOIjAFdbyIJ4hALo5/Vfv+D06P oOYEHDmdlkmqCPXRYDMpoAzQDoxG9JvVupKXr6eN2lfTye1ty/c= -----END CERTIFICATE-----Generated at Mon Jul 21 23:23:11 2025 by rpki-client