$ rpki-client -vvf repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft File: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft (raw, json) Hash identifier: dtxNv18bWFrlKjMiwVqXHewRwD/0wleWAcPiS7dCUI4= Subject key identifier: 6D:B4:82:5C:C0:98:13:36:27:A3:3D:DF:7B:62:A0:42:E2:ED:2D:0B Authority key identifier: 72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 Certificate issuer: /CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Certificate serial: 55FDAD8B4E10435963FDB9BC187F05D4170ECF08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft Manifest number: 89 Signing time: Fri 29 Aug 2025 23:10:38 +0000 Manifest this update: Fri 29 Aug 2025 23:05:38 +0000 Manifest next update: Tue 02 Sep 2025 06:28:38 +0000 Files and hashes: 1: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: Mh2qAtV9OXmT8dkxySa/tVQuTPHOj1MMmtUTif0IndI=) 2: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl (hash: 5I4aKymeIHB8dUqKTG+71hdOqlqm4gBEDIuqtuJFHnE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:fd:ad:8b:4e:10:43:59:63:fd:b9:bc:18:7f:05:d4:17:0e:cf:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Validity Not Before: Aug 29 23:05:38 2025 GMT Not After : Sep 2 06:28:38 2025 GMT Subject: CN=6DB4825CC098133627A33DDF7B62A042E2ED2D0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:39:ee:1e:e8:e6:d4:31:f9:07:90:be:0c:21: 1c:52:30:aa:46:c1:22:cb:a1:5f:ff:c5:37:b9:dc: ab:ed:1a:5f:e9:c7:0a:3b:28:42:15:8d:a1:93:37: 84:6e:1e:be:5b:a6:c7:d0:58:35:e3:51:7d:bd:0d: c9:16:e7:bc:06:ad:9a:59:20:10:c3:55:d9:ae:a5: 72:2e:17:63:bf:77:be:5f:0b:cb:03:d8:bc:3b:5c: 7b:31:31:59:ed:86:eb:88:40:73:6f:5a:82:46:ea: 09:46:c3:b2:40:7e:24:01:01:7f:61:80:15:28:c2: bd:0b:16:4e:7d:e2:aa:25:61:d6:f5:35:4b:ec:df: 6a:3c:65:3b:43:06:9a:78:a9:5e:fd:8c:9b:13:c9: 13:9a:81:d1:cd:16:a9:fd:b3:bc:c4:bd:76:37:aa: a9:36:1d:23:80:8b:98:29:b7:7c:bf:2e:c0:ec:01: 10:13:bb:9e:c4:e4:b7:cb:d0:15:d1:9e:54:04:ce: 4d:47:82:5e:54:c5:9b:b5:f2:23:aa:44:dd:dd:d3: e1:d5:c5:b5:e5:07:21:b9:20:1c:39:69:91:ba:81: b5:e2:51:e2:0d:46:91:35:48:b0:23:5d:1a:c1:a9: 9c:bf:04:92:d4:b1:a0:80:a7:35:95:db:c4:a1:25: 86:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B4:82:5C:C0:98:13:36:27:A3:3D:DF:7B:62:A0:42:E2:ED:2D:0B X509v3 Authority Key Identifier: keyid:72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e4:b0:0b:aa:cb:3f:69:da:a3:cf:43:8d:87:75:96:1f:bf: 81:56:d9:7c:25:0c:5e:e2:35:5e:27:d6:52:4e:5f:65:32:50: 41:4d:85:71:87:26:31:a4:7c:82:16:36:52:e0:77:38:f7:4b: 67:15:57:45:fd:7f:0f:52:43:af:f2:36:06:0a:3f:2c:23:2c: f9:21:74:b8:7a:60:da:e5:1e:60:35:8a:4d:99:d2:49:7d:76: 66:ce:f9:3d:f8:6a:e4:5f:2c:ba:ae:c6:79:bb:53:fb:4f:59: 29:83:a9:2c:0f:4a:42:4d:27:ff:2e:1e:02:cb:d7:40:47:f5: dd:47:17:e0:99:91:61:17:22:60:2c:d1:43:34:51:7b:c1:e3: dc:ef:58:d8:b7:64:6f:a2:f5:c0:5a:c0:89:29:f2:b6:ac:32: ef:36:8b:07:a1:88:41:51:df:cc:df:c3:80:c8:20:65:f5:b5: 73:8c:0e:4d:cc:d9:e2:9e:2e:36:16:89:42:97:0e:48:64:6b: 55:ad:69:d2:58:95:06:fc:95:e6:1a:3d:ca:ca:eb:fc:4b:ee: dc:44:21:80:d9:a0:a1:35:82:ae:61:57:8d:04:39:42:46:fb: 3f:2d:94:f1:74:5a:28:ac:df:24:af:7e:7f:6d:3f:62:c6:31: ae:95:8b:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVf2ti04QQ1lj/bm8GH8F1BcOzwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURG QTNGNEUxNjAeFw0yNTA4MjkyMzA1MzhaFw0yNTA5MDIwNjI4MzhaMDMxMTAvBgNV BAMTKDZEQjQ4MjVDQzA5ODEzMzYyN0EzM0RERjdCNjJBMDQyRTJFRDJEMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZOe4e6ObUMfkHkL4MIRxSMKpG wSLLoV//xTe53KvtGl/pxwo7KEIVjaGTN4RuHr5bpsfQWDXjUX29DckW57wGrZpZ IBDDVdmupXIuF2O/d75fC8sD2Lw7XHsxMVnthuuIQHNvWoJG6glGw7JAfiQBAX9h gBUowr0LFk594qolYdb1NUvs32o8ZTtDBpp4qV79jJsTyROagdHNFqn9s7zEvXY3 qqk2HSOAi5gpt3y/LsDsARATu57E5LfL0BXRnlQEzk1Hgl5UxZu18iOqRN3d0+HV xbXlByG5IBw5aZG6gbXiUeINRpE1SLAjXRrBqZy/BJLUsaCApzWV28ShJYZxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbbSCXMCYEzYnoz3fe2KgQuLtLQswHwYDVR0j BBgwFoAUctja/UgbP4+sKyWZyePs7fo/ThYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDdmNmNmNi1kZDJiLTQ4MjMtYjI2NC1lMmJmNGYzMGFiZmUvMC83MkQ4REFGRDQ4 MUIzRjhGQUMyQjI1OTlDOUUzRUNFREZBM0Y0RTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURGQTNG NEUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ3ZjZjZjYtZGQyYi00ODIzLWIy NjQtZTJiZjRmMzBhYmZlLzAvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VD RURGQTNGNEUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrksAuqyz9p2qPPQ42HdZYfv4FW2XwlDF7i NV4n1lJOX2UyUEFNhXGHJjGkfIIWNlLgdzj3S2cVV0X9fw9SQ6/yNgYKPywjLPkh dLh6YNrlHmA1ik2Z0kl9dmbO+T34auRfLLquxnm7U/tPWSmDqSwPSkJNJ/8uHgLL 10BH9d1HF+CZkWEXImAs0UM0UXvB49zvWNi3ZG+i9cBawIkp8rasMu82iwehiEFR 38zfw4DIIGX1tXOMDk3M2eKeLjYWiUKXDkhka1WtadJYlQb8leYaPcrK6/xL7txE IYDZoKE1gq5hV40EOUJG+z8tlPF0Wiis3ySvfn9tP2LGMa6Vi2A= -----END CERTIFICATE-----Generated at Sun Aug 31 20:28:30 2025 by rpki-client