$ rpki-client -vvf repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft File: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft (raw, json) Hash identifier: CNQaDtaGhAtbj4SYMzwCh/JWuSI/hjU6ulvOyukJ8bg= Subject key identifier: 94:E7:D2:29:E5:45:68:DE:77:1B:1F:AF:50:A6:A7:5C:5B:06:15:D4 Authority key identifier: EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 Certificate issuer: /CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Certificate serial: 699F204362DD2D929C0E4B56A13D2165112353FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft Manifest number: 0138 Signing time: Fri 17 Oct 2025 15:00:40 +0000 Manifest this update: Fri 17 Oct 2025 14:55:40 +0000 Manifest next update: Mon 20 Oct 2025 22:35:40 +0000 Files and hashes: 1: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl (hash: lIHTBc82Q4MyfQgDSqvMDTpNYilNw9JGF1MOQ8exvjI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 22:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:9f:20:43:62:dd:2d:92:9c:0e:4b:56:a1:3d:21:65:11:23:53:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Validity Not Before: Oct 17 14:55:40 2025 GMT Not After : Oct 20 22:35:40 2025 GMT Subject: CN=94E7D229E54568DE771B1FAF50A6A75C5B0615D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f2:e7:da:54:35:f4:27:4f:6c:6f:76:23:27: 99:82:03:cd:f7:f6:23:9a:ba:39:72:a9:0b:4c:45: 5e:ed:fb:b1:a2:bf:c8:28:4f:c7:f1:f9:c5:4f:2f: 41:d5:94:29:72:bc:68:8d:ad:56:38:9b:37:03:80: 4d:05:11:f5:bc:8a:99:da:cb:79:e7:93:38:f6:68: eb:61:6e:fc:fc:3f:92:a8:f6:f2:13:cb:1f:39:f9: 83:ef:49:86:ea:c7:da:90:36:a6:c1:48:1b:bd:27: 7b:53:a3:5b:61:af:6d:1f:b2:0c:4f:5e:c4:2b:1b: 96:38:c0:10:aa:bc:25:31:d7:ec:e6:0f:7e:56:f9: f8:ba:04:0b:b4:5a:cc:45:e9:ac:6e:8c:f8:a8:6a: e9:af:1b:43:25:95:8d:33:90:85:cb:bd:da:49:40: 6d:2b:b7:d0:e2:aa:18:b2:d1:9d:c4:66:f6:ac:88: be:59:d7:5c:00:8d:2a:c2:df:3a:51:8c:55:17:57: 9e:a1:a3:38:1c:fa:98:c8:ba:3c:9a:f6:81:17:8f: 2f:66:19:e9:55:77:64:c8:7a:d2:e0:0c:4e:3c:34: 81:0a:5f:5d:f2:49:1c:00:de:06:91:87:c5:71:1d: bc:ad:5e:50:90:ed:ee:97:83:a5:42:8c:52:42:7a: 6a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E7:D2:29:E5:45:68:DE:77:1B:1F:AF:50:A6:A7:5C:5B:06:15:D4 X509v3 Authority Key Identifier: keyid:EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:b8:e0:dd:b2:7c:3c:c9:12:da:99:63:a4:cc:a2:a3:5b:eb: 40:0c:13:8f:26:5e:2b:a6:e2:7d:38:e2:d7:1f:92:9b:46:96: 5b:43:14:d1:97:f7:5a:09:fb:e9:56:b1:7d:74:a4:6a:4c:2d: 8b:fc:81:12:76:e4:c9:a7:33:6d:41:89:54:df:1d:c1:6b:9d: 83:24:97:05:ce:c9:a2:97:3b:19:3f:0e:bc:63:ff:5b:d9:e9: 61:8b:29:17:2d:c2:98:2e:02:1f:c0:a4:7e:f4:11:3e:1d:22: 1f:77:6d:0e:df:fa:17:ac:7b:fb:b2:10:66:be:75:6f:ac:b0: c6:85:8f:7a:19:94:ca:a8:f6:e0:f6:e0:da:ad:d0:71:82:b3: df:b2:83:de:de:21:e3:0b:71:99:08:89:4e:89:77:75:61:a5: 22:a3:41:99:7a:5c:78:e2:cd:85:6e:23:ac:e8:ba:6d:6c:9c: 3a:4f:1c:4b:d4:a3:3d:d8:f4:5c:e2:81:71:f1:77:bf:41:b5: f2:dd:33:a3:c6:8c:11:81:58:69:f6:54:6b:9a:fa:fe:52:9b: 61:0d:dc:5d:4e:de:ac:10:0b:05:b3:8b:af:88:27:3f:fd:ea: 13:b2:7a:8e:66:4a:2d:e9:72:cd:39:19:72:d0:cb:2c:5b:ea: 89:15:0e:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaZ8gQ2LdLZKcDktWoT0hZREjU/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgx RTVFRENBMTAeFw0yNTEwMTcxNDU1NDBaFw0yNTEwMjAyMjM1NDBaMDMxMTAvBgNV BAMTKDk0RTdEMjI5RTU0NTY4REU3NzFCMUZBRjUwQTZBNzVDNUIwNjE1RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt8ufaVDX0J09sb3YjJ5mCA833 9iOaujlyqQtMRV7t+7Giv8goT8fx+cVPL0HVlClyvGiNrVY4mzcDgE0FEfW8ipna y3nnkzj2aOthbvz8P5Ko9vITyx85+YPvSYbqx9qQNqbBSBu9J3tTo1thr20fsgxP XsQrG5Y4wBCqvCUx1+zmD35W+fi6BAu0WsxF6axujPioaumvG0MllY0zkIXLvdpJ QG0rt9Diqhiy0Z3EZvasiL5Z11wAjSrC3zpRjFUXV56hozgc+pjIujya9oEXjy9m GelVd2TIetLgDE48NIEKX13ySRwA3gaRh8VxHbytXlCQ7e6Xg6VCjFJCemqvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlOfSKeVFaN53Gx+vUKanXFsGFdQwHwYDVR0j BBgwFoAU7nLeOE+at/rWw7KGOl2xKB5e3KEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlNjg3OC02Y2IyLTRhNWYtYjU1My1iY2ViMmM5NWM3NmMvMC9FRTcyREUzODRG OUFCN0ZBRDZDM0IyODYzQTVEQjEyODFFNUVEQ0ExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgxRTVF RENBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTY4NzgtNmNiMi00YTVmLWI1 NTMtYmNlYjJjOTVjNzZjLzAvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIx MjgxRTVFRENBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACi44N2yfDzJEtqZY6TMoqNb60AME48mXium 4n044tcfkptGlltDFNGX91oJ++lWsX10pGpMLYv8gRJ25MmnM21BiVTfHcFrnYMk lwXOyaKXOxk/Drxj/1vZ6WGLKRctwpguAh/ApH70ET4dIh93bQ7f+hese/uyEGa+ dW+ssMaFj3oZlMqo9uD24Nqt0HGCs9+yg97eIeMLcZkIiU6Jd3VhpSKjQZl6XHji zYVuI6zoum1snDpPHEvUoz3Y9FzigXHxd79BtfLdM6PGjBGBWGn2VGua+v5Sm2EN 3F1O3qwQCwWzi6+IJz/96hOyeo5mSi3pcs05GXLQyyxb6okVDhI= -----END CERTIFICATE-----Generated at Sun Oct 19 17:59:52 2025 by rpki-client