$ rpki-client -vvf repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft File: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft (raw, json) Hash identifier: fKTUdhvLuEPIHL0W3vM3iJvoRM5aVAKgANNEaX5wHZ0= Subject key identifier: 2D:A5:F6:FB:FB:0B:8A:56:D4:06:04:4D:0C:6D:04:14:2A:14:1B:D6 Authority key identifier: E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 Certificate issuer: /CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Certificate serial: 5BF2A528609EC5BFEF7418C853C890482EC95169 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft Manifest number: 0511 Signing time: Sun 07 Sep 2025 05:32:19 +0000 Manifest this update: Sun 07 Sep 2025 05:27:19 +0000 Manifest next update: Wed 10 Sep 2025 13:55:19 +0000 Files and hashes: 1: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl (hash: dX85hcX9c/p4KXQBVBn8wbI0inKolKBj3HfZ+QSKwVY=) 2: 323430323a366163303a3a2f33332d3333203d3e20313337333036.roa (hash: +LtGD0I+CcS2FlJTjK9Ti6xX24NgEqNHjvhmLsu4MGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f2:a5:28:60:9e:c5:bf:ef:74:18:c8:53:c8:90:48:2e:c9:51:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Validity Not Before: Sep 7 05:27:19 2025 GMT Not After : Sep 10 13:55:19 2025 GMT Subject: CN=2DA5F6FBFB0B8A56D406044D0C6D04142A141BD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ae:18:5c:09:9c:61:df:32:b1:79:fb:87:1c: d1:73:52:5d:03:ae:57:c6:ab:33:ac:0d:c4:44:50: 5b:a5:c6:a5:38:52:3e:54:c1:e7:08:24:b9:59:31: da:0f:30:14:5a:ce:ba:8b:91:84:ec:05:d9:35:08: 9c:65:00:76:62:d9:0a:b4:5c:7b:c8:29:a0:07:ad: e0:d6:78:6e:04:cd:51:4e:3d:45:57:c6:ed:39:ae: cc:02:c6:c7:6d:ee:80:4b:ee:a2:b7:ef:f0:9c:a5: a5:d2:2c:8e:45:dd:71:ee:5f:0a:66:90:e0:c1:aa: 6a:20:ae:65:89:bf:ac:ee:8e:75:77:40:46:23:ea: 3c:4f:bf:cf:f5:9d:5c:2c:72:a5:84:c0:0d:40:1b: c1:4b:34:6c:aa:24:83:0b:f9:1c:d0:44:c0:6b:42: ac:dc:fd:3d:2f:f3:2a:c0:36:1c:e7:98:89:8e:5f: 35:03:06:b3:0e:71:4c:c1:d4:e6:93:f5:2e:93:bd: 4f:1e:58:c3:98:66:dd:66:01:db:99:e9:19:95:4d: 15:4a:ca:98:22:c0:68:89:b6:e7:fa:1b:e8:c9:b0: fa:65:5c:54:1a:23:a1:3b:4a:1d:52:35:a0:d7:61: db:70:af:ef:4c:75:16:71:34:e4:23:88:2e:ac:24: 76:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A5:F6:FB:FB:0B:8A:56:D4:06:04:4D:0C:6D:04:14:2A:14:1B:D6 X509v3 Authority Key Identifier: keyid:E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:46:97:04:b3:c3:25:71:de:40:81:06:ba:b1:3c:0e:c6:2e: 70:37:e3:8b:a9:b0:e2:a4:2d:6f:2a:00:8e:b9:7b:0e:b1:e1: 7b:0a:a8:d6:92:e7:e9:2c:a3:b7:9d:9e:38:f3:60:46:f1:ba: 1d:63:5e:14:71:c2:a3:b9:24:86:bb:6a:fd:00:03:39:54:ed: ad:e9:fa:cd:59:b7:ad:65:1e:77:8b:e6:97:1d:7d:af:cc:bb: 64:06:b5:95:a8:b4:c8:51:8a:4c:db:ab:83:5f:85:24:f0:18: 42:c2:55:fa:5c:b9:34:63:92:2c:85:0a:d7:92:0e:e9:27:9b: 04:39:23:8f:06:a3:c9:62:2d:6c:c8:74:3f:3a:b8:41:f8:72: 5b:10:15:60:ca:89:cb:3f:84:12:3d:9c:51:1e:df:1a:5a:3c: d7:b3:0f:5c:58:a3:da:82:42:dd:ec:33:ac:6b:e3:f8:17:f1: 95:30:08:c5:af:24:39:d4:6d:68:ea:75:13:f7:99:1e:2d:9c: 37:f4:3a:f0:32:b4:34:57:ca:c6:46:1b:7d:c1:a3:80:db:10: 95:d4:74:6d:fe:00:53:9d:d3:9b:36:f6:17:47:19:af:52:5f: 3c:b6:ac:fe:c0:5f:30:78:c8:36:97:48:31:6b:a9:8a:3e:59: fd:e0:d1:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW/KlKGCexb/vdBjIU8iQSC7JUWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdE QzVFMTAxNDAeFw0yNTA5MDcwNTI3MTlaFw0yNTA5MTAxMzU1MTlaMDMxMTAvBgNV BAMTKDJEQTVGNkZCRkIwQjhBNTZENDA2MDQ0RDBDNkQwNDE0MkExNDFCRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCprhhcCZxh3zKxefuHHNFzUl0D rlfGqzOsDcREUFulxqU4Uj5UwecIJLlZMdoPMBRazrqLkYTsBdk1CJxlAHZi2Qq0 XHvIKaAHreDWeG4EzVFOPUVXxu05rswCxsdt7oBL7qK37/CcpaXSLI5F3XHuXwpm kODBqmogrmWJv6zujnV3QEYj6jxPv8/1nVwscqWEwA1AG8FLNGyqJIML+RzQRMBr Qqzc/T0v8yrANhznmImOXzUDBrMOcUzB1OaT9S6TvU8eWMOYZt1mAduZ6RmVTRVK ypgiwGiJtuf6G+jJsPplXFQaI6E7Sh1SNaDXYdtwr+9MdRZxNOQjiC6sJHatAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULaX2+/sLilbUBgRNDG0EFCoUG9YwHwYDVR0j BBgwFoAU5yYirg9ptM2ryc0iOz4Gx9xeEBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1YmY3OS1lODRhLTQwZTAtOGZkNC1mMTY5YzE4NmJlOGYvMC9FNzI2MjJBRTBG NjlCNENEQUJDOUNEMjIzQjNFMDZDN0RDNUUxMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdEQzVF MTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNWJmNzktZTg0YS00MGUwLThm ZDQtZjE2OWMxODZiZThmLzAvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2 QzdEQzVFMTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdGlwSzwyVx3kCBBrqxPA7GLnA344upsOKk LW8qAI65ew6x4XsKqNaS5+kso7ednjjzYEbxuh1jXhRxwqO5JIa7av0AAzlU7a3p +s1Zt61lHneL5pcdfa/Mu2QGtZWotMhRikzbq4NfhSTwGELCVfpcuTRjkiyFCteS DuknmwQ5I48Go8liLWzIdD86uEH4clsQFWDKics/hBI9nFEe3xpaPNezD1xYo9qC Qt3sM6xr4/gX8ZUwCMWvJDnUbWjqdRP3mR4tnDf0OvAytDRXysZGG33Bo4DbEJXU dG3+AFOd05s29hdHGa9SXzy2rP7AXzB4yDaXSDFrqYo+Wf3g0RU= -----END CERTIFICATE-----Generated at Sun Sep 7 14:03:49 2025 by rpki-client