$ rpki-client -vvf repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft File: 1072AD17A8EDB1513AED95A258088F480ADA492B.mft (raw, json) Hash identifier: oDCTegD2X9jctdjaSjggF42LvluSkhZHiT292XQqwPs= Subject key identifier: E7:B2:DA:1D:3C:8C:1D:81:A0:39:60:10:FA:94:80:5C:BB:9C:6B:8A Authority key identifier: 10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B Certificate issuer: /CN=1072AD17A8EDB1513AED95A258088F480ADA492B Certificate serial: 0CF8B9326CFC7F5BC85F1560AB9F456A816378C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft Manifest number: 019D Signing time: Sat 06 Sep 2025 18:10:41 +0000 Manifest this update: Sat 06 Sep 2025 18:05:41 +0000 Manifest next update: Tue 09 Sep 2025 22:59:41 +0000 Files and hashes: 1: 1072AD17A8EDB1513AED95A258088F480ADA492B.crl (hash: xuFFw7F/J/i2knJthY3izSLTaN52BEaE10CzKErFHlQ=) 2: 3130332e3232302e3131342e302f32332d3234203d3e20313335343436.roa (hash: rmtw0G0gq68lr7jcdH8MQxUIP+1AwEpTMYMONzRXapE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 22:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f8:b9:32:6c:fc:7f:5b:c8:5f:15:60:ab:9f:45:6a:81:63:78:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1072AD17A8EDB1513AED95A258088F480ADA492B Validity Not Before: Sep 6 18:05:41 2025 GMT Not After : Sep 9 22:59:41 2025 GMT Subject: CN=E7B2DA1D3C8C1D81A0396010FA94805CBB9C6B8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:10:2f:0d:4d:c0:1e:1f:9f:06:7a:53:4a: c2:36:9c:4a:ee:52:16:4f:e4:4f:e2:25:c9:3a:28: 3e:c8:fc:31:98:24:b6:df:21:33:30:ca:bb:7a:f6: 23:bd:22:86:a5:d4:bb:a8:ab:25:3d:80:a8:59:ba: 5f:e6:82:f0:6f:66:5d:49:42:ab:33:82:1b:09:ea: fd:65:5b:30:f8:65:a8:59:dc:2a:98:48:5a:25:3d: f2:a3:02:18:42:1f:90:8a:b2:3a:39:fa:0b:6b:f8: 1b:05:50:c5:8d:cb:d5:73:c2:de:ae:30:20:5a:38: 11:bb:79:c7:9b:1c:15:e5:c5:b9:97:2b:5a:54:8c: ba:7b:15:e5:3a:3b:8a:80:84:d4:59:6f:0c:4e:db: a1:b0:ad:64:2f:95:79:95:18:14:b6:32:11:39:9c: 9f:bb:65:9f:b0:3c:8b:a8:4b:27:c2:fd:37:a7:9c: b6:00:14:f7:ff:73:a7:0e:66:fd:5b:97:d3:74:8d: f8:c7:a5:4f:e3:6e:ea:98:3c:09:b3:56:71:d9:ea: 3b:3c:1e:a8:e1:04:3d:1f:50:87:6b:2c:0b:d4:1e: b0:74:e2:bb:f6:79:c0:bb:14:a9:84:e7:ee:67:95: e6:27:2a:6b:29:b9:67:53:8c:77:29:eb:6d:57:5d: df:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B2:DA:1D:3C:8C:1D:81:A0:39:60:10:FA:94:80:5C:BB:9C:6B:8A X509v3 Authority Key Identifier: keyid:10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:2d:63:96:cb:61:02:59:af:cd:85:e6:ec:b5:dc:46:ff:f2: f6:b7:53:fc:16:57:ca:72:40:ee:99:ff:03:e8:7a:d8:b5:81: 2e:b2:a0:10:7e:1b:c1:b5:58:d3:01:cd:1e:02:15:ec:9e:62: d7:83:95:64:20:ff:f0:73:d2:7f:da:67:25:27:1d:35:4b:57: a3:25:70:5b:90:df:32:54:36:82:35:85:f1:9e:10:36:21:d8: c2:8e:f6:7e:a3:57:52:da:fd:8b:a5:e4:ab:fd:08:cf:d9:f7: 68:fa:8c:68:d1:84:e0:d4:b2:a0:cf:50:af:05:8f:00:aa:94: 47:06:bb:0a:cb:29:3a:46:df:f6:a9:70:ef:26:e5:d3:f3:a1: 66:56:aa:58:19:ea:31:af:10:57:d1:6f:4d:4b:44:c0:c6:d3: 29:46:fb:f0:52:78:22:7a:c2:7b:64:04:a7:d7:9a:9e:f4:bb: f0:39:23:5c:d6:1f:86:3a:18:e3:9c:5b:8a:28:e0:d3:da:c2: e8:1e:1f:64:dd:8a:18:f6:0f:1d:f4:c4:bf:a5:3e:31:ef:32: a2:15:cf:57:3d:ac:a5:93:93:66:02:b7:03:70:86:d0:28:5e: 65:8b:5a:60:ee:6e:cb:cb:71:1a:ff:da:6b:f3:55:ba:b4:7e: 52:2a:73:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDPi5Mmz8f1vIXxVgq59FaoFjeMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgw QURBNDkyQjAeFw0yNTA5MDYxODA1NDFaFw0yNTA5MDkyMjU5NDFaMDMxMTAvBgNV BAMTKEU3QjJEQTFEM0M4QzFEODFBMDM5NjAxMEZBOTQ4MDVDQkI5QzZCOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ihAvDU3AHh+fBnpTSsI2nEru UhZP5E/iJck6KD7I/DGYJLbfITMwyrt69iO9Ioal1LuoqyU9gKhZul/mgvBvZl1J QqszghsJ6v1lWzD4ZahZ3CqYSFolPfKjAhhCH5CKsjo5+gtr+BsFUMWNy9Vzwt6u MCBaOBG7ecebHBXlxbmXK1pUjLp7FeU6O4qAhNRZbwxO26GwrWQvlXmVGBS2MhE5 nJ+7ZZ+wPIuoSyfC/TennLYAFPf/c6cOZv1bl9N0jfjHpU/jbuqYPAmzVnHZ6js8 HqjhBD0fUIdrLAvUHrB04rv2ecC7FKmE5+5nleYnKmspuWdTjHcp621XXd+bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU57LaHTyMHYGgOWAQ+pSAXLuca4owHwYDVR0j BBgwFoAUEHKtF6jtsVE67ZWiWAiPSAraSSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTRiOWQzMi0zYzVhLTQwZTItYjc4OC0wNjlkZTBjM2QyZGUvMC8xMDcyQUQxN0E4 RURCMTUxM0FFRDk1QTI1ODA4OEY0ODBBREE0OTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgwQURB NDkyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU0YjlkMzItM2M1YS00MGUyLWI3 ODgtMDY5ZGUwYzNkMmRlLzAvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhG NDgwQURBNDkyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAtY5bLYQJZr82F5uy13Eb/8va3U/wWV8py QO6Z/wPoeti1gS6yoBB+G8G1WNMBzR4CFeyeYteDlWQg//Bz0n/aZyUnHTVLV6Ml cFuQ3zJUNoI1hfGeEDYh2MKO9n6jV1La/Yul5Kv9CM/Z92j6jGjRhODUsqDPUK8F jwCqlEcGuwrLKTpG3/apcO8m5dPzoWZWqlgZ6jGvEFfRb01LRMDG0ylG+/BSeCJ6 wntkBKfXmp70u/A5I1zWH4Y6GOOcW4oo4NPawugeH2Tdihj2Dx30xL+lPjHvMqIV z1c9rKWTk2YCtwNwhtAoXmWLWmDubsvLcRr/2mvzVbq0flIqc58= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:46 2025 by rpki-client