$ rpki-client -vvf repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft File: 75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft (raw, json) Hash identifier: arB7RQ+k9mIVllKH9W1bslyZLeCCmdjzwV7GPwtWsJM= Subject key identifier: D1:57:A5:BC:D2:49:57:3E:4A:33:46:2C:DD:AD:5F:33:C1:B7:AD:31 Authority key identifier: 75:F8:7E:19:F3:D7:CA:12:8A:64:BB:06:95:F7:DD:41:6C:17:CC:96 Certificate issuer: /CN=75F87E19F3D7CA128A64BB0695F7DD416C17CC96 Certificate serial: 735B9668BEF03E2E79045FBEA6B2C38B8C22FB5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft Manifest number: 01A2 Signing time: Thu 04 Sep 2025 07:22:03 +0000 Manifest this update: Thu 04 Sep 2025 07:17:03 +0000 Manifest next update: Sun 07 Sep 2025 12:48:03 +0000 Files and hashes: 1: 75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl (hash: /r7ld2qDhLV94YaZCxH94WojfxJbt9Gm9yId7Sv438g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 12:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:5b:96:68:be:f0:3e:2e:79:04:5f:be:a6:b2:c3:8b:8c:22:fb:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75F87E19F3D7CA128A64BB0695F7DD416C17CC96 Validity Not Before: Sep 4 07:17:03 2025 GMT Not After : Sep 7 12:48:03 2025 GMT Subject: CN=D157A5BCD249573E4A33462CDDAD5F33C1B7AD31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e2:ff:c4:d0:98:da:64:92:26:46:69:e7:cf: 0c:04:6c:20:f7:e6:1c:19:de:70:41:d4:33:93:6a: 71:a8:8d:28:9b:9b:26:f7:42:81:c5:38:63:43:ae: 01:c2:38:ab:c3:30:e3:bc:1e:7f:63:9a:19:da:14: ba:f7:22:2f:1a:7c:77:27:ae:dc:b6:15:e0:c8:64: d4:90:84:72:96:d7:40:b9:62:46:ba:43:14:0e:2c: 07:a3:7e:66:88:ce:dc:3d:93:ef:98:64:82:c1:6f: 2a:54:10:e8:64:cf:fa:70:1d:13:bf:7b:38:21:ce: 5a:9b:18:91:3c:02:c5:f8:29:c0:6e:e2:31:6a:5c: 31:36:b1:b4:bf:a7:08:5f:ed:bf:16:ef:2c:4b:56: 70:94:59:64:3c:5d:20:ef:3b:e1:86:26:34:b9:10: 57:ae:a1:2c:24:f8:c6:c4:3a:bd:5c:bb:7b:40:ca: 70:70:ec:0f:b9:de:33:21:96:2b:67:0f:02:46:e3: 16:77:16:2b:ea:e0:bc:b0:ef:8b:7c:49:73:a7:2f: 25:d1:20:3e:6f:09:e8:84:62:c4:3d:28:cb:c2:ce: 23:a7:8f:92:c2:04:bc:1c:06:cb:40:8b:7c:53:03: 2e:be:22:05:ee:bb:e0:48:a5:5c:bf:d6:9f:71:82: ab:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:57:A5:BC:D2:49:57:3E:4A:33:46:2C:DD:AD:5F:33:C1:B7:AD:31 X509v3 Authority Key Identifier: keyid:75:F8:7E:19:F3:D7:CA:12:8A:64:BB:06:95:F7:DD:41:6C:17:CC:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ae:72:62:3a:55:5e:7e:0e:3a:9d:0d:2a:11:0c:e3:47:8e: 07:43:32:ee:64:a6:53:82:e8:75:3d:4e:af:a0:52:01:0e:ab: 24:1e:ae:c6:cd:96:bb:8c:8b:c5:73:7b:72:28:2b:31:9e:63: a8:32:10:5f:4e:2b:65:0c:22:69:9c:88:15:a8:3a:10:25:10: 24:03:39:d3:c2:d2:b4:aa:05:97:03:97:56:13:45:d0:96:49: 27:c3:d5:65:58:8e:23:37:7b:a8:08:e4:64:6c:73:db:4b:cf: 95:d2:00:0b:11:ad:a7:30:42:6b:12:68:d5:38:1a:f7:48:e3: 77:5d:cb:85:ef:a2:58:16:da:5d:91:ac:3f:d3:d2:97:6f:72: 47:e2:66:09:35:ae:81:e0:e4:30:16:b1:a0:9c:3d:f8:6f:91: a0:52:be:a2:9a:8b:fd:3f:04:f1:b8:98:38:34:d7:c5:8b:df: 15:b9:61:5f:6d:f1:cd:ab:2e:c8:db:6c:23:58:11:5e:c7:bb: 3f:30:8e:fd:cc:5d:3c:4a:11:18:fa:4b:1c:ae:fa:db:07:93: 3d:63:be:00:84:e8:7c:7b:22:84:d7:d5:a5:f6:a5:cf:f9:1f: 87:52:cf:60:df:d5:17:9d:43:0e:b0:a9:cd:b9:53:f9:4e:5b: 18:0e:1a:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc1uWaL7wPi55BF++prLDi4wi+1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVGODdFMTlGM0Q3Q0ExMjhBNjRCQjA2OTVGN0RENDE2 QzE3Q0M5NjAeFw0yNTA5MDQwNzE3MDNaFw0yNTA5MDcxMjQ4MDNaMDMxMTAvBgNV BAMTKEQxNTdBNUJDRDI0OTU3M0U0QTMzNDYyQ0REQUQ1RjMzQzFCN0FEMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe4v/E0JjaZJImRmnnzwwEbCD3 5hwZ3nBB1DOTanGojSibmyb3QoHFOGNDrgHCOKvDMOO8Hn9jmhnaFLr3Ii8afHcn rty2FeDIZNSQhHKW10C5Yka6QxQOLAejfmaIztw9k++YZILBbypUEOhkz/pwHRO/ ezghzlqbGJE8AsX4KcBu4jFqXDE2sbS/pwhf7b8W7yxLVnCUWWQ8XSDvO+GGJjS5 EFeuoSwk+MbEOr1cu3tAynBw7A+53jMhlitnDwJG4xZ3Fivq4Lyw74t8SXOnLyXR ID5vCeiEYsQ9KMvCziOnj5LCBLwcBstAi3xTAy6+IgXuu+BIpVy/1p9xgqtPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0VelvNJJVz5KM0Ys3a1fM8G3rTEwHwYDVR0j BBgwFoAUdfh+GfPXyhKKZLsGlffdQWwXzJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmNhZWEzYi1iZDdmLTQ4MWEtOWJjNy1hYTE2MGQwNWQyNjIvMC83NUY4N0UxOUYz RDdDQTEyOEE2NEJCMDY5NUY3REQ0MTZDMTdDQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzVGODdFMTlGM0Q3Q0ExMjhBNjRCQjA2OTVGN0RENDE2QzE3 Q0M5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJjYWVhM2ItYmQ3Zi00ODFhLTli YzctYWExNjBkMDVkMjYyLzAvNzVGODdFMTlGM0Q3Q0ExMjhBNjRCQjA2OTVGN0RE NDE2QzE3Q0M5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSucmI6VV5+DjqdDSoRDONHjgdDMu5kplOC 6HU9Tq+gUgEOqyQersbNlruMi8Vze3IoKzGeY6gyEF9OK2UMImmciBWoOhAlECQD OdPC0rSqBZcDl1YTRdCWSSfD1WVYjiM3e6gI5GRsc9tLz5XSAAsRracwQmsSaNU4 GvdI43ddy4XvolgW2l2RrD/T0pdvckfiZgk1roHg5DAWsaCcPfhvkaBSvqKai/0/ BPG4mDg018WL3xW5YV9t8c2rLsjbbCNYEV7Huz8wjv3MXTxKERj6Sxyu+tsHkz1j vgCE6Hx7IoTX1aX2pc/5H4dSz2Df1RedQw6wqc25U/lOWxgOGqs= -----END CERTIFICATE-----Generated at Fri Sep 5 10:29:30 2025 by rpki-client