$ rpki-client -vvf repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft File: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft (raw, json) Hash identifier: rxM/4hBDmP9mN0mbRu+4nYakbodGMYBdxWbUVl/Lf4g= Subject key identifier: F1:6D:BC:79:76:66:20:F3:3B:0C:4F:0F:A5:35:44:82:82:B1:A8:69 Authority key identifier: AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 Certificate issuer: /CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Certificate serial: 6D3A72533294F937EDDA626E1E2AFA270DC3617B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft Manifest number: 93 Signing time: Thu 05 Jun 2025 00:32:09 +0000 Manifest this update: Thu 05 Jun 2025 00:27:09 +0000 Manifest next update: Sun 08 Jun 2025 12:19:09 +0000 Files and hashes: 1: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl (hash: 8pGUpyYqBHZ5zsICZBz1f8aNLeIrh7RypuFgffKhPbQ=) 2: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: Yq8Q6JYOVHESjvKiauFlSKUKL9dSlIZbiu5ayrjEea4=) 3: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: UbbhlYQNDi6JszbpEsabaohj0lI6X/p1NOF16+0hgH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 12:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:3a:72:53:32:94:f9:37:ed:da:62:6e:1e:2a:fa:27:0d:c3:61:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Validity Not Before: Jun 5 00:27:09 2025 GMT Not After : Jun 8 12:19:09 2025 GMT Subject: CN=F16DBC79766620F33B0C4F0FA535448282B1A869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7c:54:4c:3a:03:83:7b:3f:f7:d5:19:00:24: e7:f4:50:bc:06:74:95:5e:71:ab:02:ff:54:f0:0a: 5e:96:6f:64:47:6f:c7:2e:43:5c:9a:d0:73:59:99: e9:14:b9:68:48:7b:31:02:59:91:ae:86:06:de:df: 39:15:99:1b:2f:82:b8:ad:c5:09:62:2e:ff:4f:7e: d1:13:50:04:58:20:74:00:d9:0e:d0:b0:36:aa:34: cf:b8:fb:ce:e4:cc:7c:84:27:24:e2:34:33:7e:bd: 10:72:12:f1:12:9f:26:cc:fd:bb:41:a3:30:13:4d: 0e:bf:c3:34:2a:0a:5e:6e:07:7f:c5:d1:06:22:b8: aa:e7:f6:b9:02:d0:34:6c:93:08:37:4c:50:f8:1b: 4f:e7:e1:d6:0b:43:21:ba:a4:99:6a:39:29:df:70: 9e:e4:c7:35:ef:5c:c8:62:73:b4:8c:77:15:19:c2: 9d:2c:33:fb:5e:b7:f6:01:55:3f:67:81:f8:9d:ea: d9:eb:12:99:d4:de:f1:38:a8:f2:5e:22:cd:48:12: a6:4d:77:ca:0f:fc:3b:d1:7b:00:5f:08:fe:f9:14: af:7e:f3:71:aa:fd:a8:91:5f:ea:e2:69:67:f7:ce: 82:da:05:46:41:68:9a:ed:aa:b9:13:48:51:f0:10: a1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6D:BC:79:76:66:20:F3:3B:0C:4F:0F:A5:35:44:82:82:B1:A8:69 X509v3 Authority Key Identifier: keyid:AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:3a:c7:45:44:02:01:51:5c:d5:e5:d9:43:c0:1f:0d:07:ad: 12:16:ca:1f:2c:8f:78:3f:12:47:12:af:39:1c:4a:6c:36:7a: 7b:ae:53:82:a5:9e:82:9e:39:1c:ce:a6:26:44:57:7d:3e:ee: d4:ea:6a:82:a7:41:54:d6:51:40:be:b0:4b:0f:38:31:35:14: 64:2c:c4:83:94:41:37:3a:e2:75:37:70:89:28:87:03:0b:e0: 1e:e1:38:61:fd:95:1d:e5:cf:ff:0b:5f:a3:99:48:e7:8d:e4: f3:33:1c:c8:67:de:35:6a:cf:fa:24:69:32:2f:91:c8:b3:d6: 94:1c:ff:ca:83:01:9a:4b:c6:52:4b:c7:2e:b7:d0:f1:38:ef: 44:af:06:6e:6c:e8:dd:c1:e1:b9:be:24:62:66:51:a2:86:e4: 93:34:bb:14:2b:78:5e:e9:1c:b7:35:1a:24:e7:b4:89:8b:f7: dc:f0:e0:fb:84:87:50:d2:f8:13:39:a3:9d:c6:b0:ac:7f:37: 64:90:4b:17:21:94:a1:57:29:94:3b:cb:9e:05:4d:92:79:eb: fc:75:61:3b:8e:35:4c:2c:4e:82:71:49:7f:27:b0:3e:86:75: 9d:eb:13:67:59:9c:f1:fc:a2:ee:9c:b6:56:92:83:e9:9a:e7: bc:98:96:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbTpyUzKU+Tft2mJuHir6Jw3DYXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVD QTdFMEQ5MzAeFw0yNTA2MDUwMDI3MDlaFw0yNTA2MDgxMjE5MDlaMDMxMTAvBgNV BAMTKEYxNkRCQzc5NzY2NjIwRjMzQjBDNEYwRkE1MzU0NDgyODJCMUE4NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFfFRMOgODez/31RkAJOf0ULwG dJVecasC/1TwCl6Wb2RHb8cuQ1ya0HNZmekUuWhIezECWZGuhgbe3zkVmRsvgrit xQliLv9PftETUARYIHQA2Q7QsDaqNM+4+87kzHyEJyTiNDN+vRByEvESnybM/btB ozATTQ6/wzQqCl5uB3/F0QYiuKrn9rkC0DRskwg3TFD4G0/n4dYLQyG6pJlqOSnf cJ7kxzXvXMhic7SMdxUZwp0sM/tet/YBVT9ngfid6tnrEpnU3vE4qPJeIs1IEqZN d8oP/DvRewBfCP75FK9+83Gq/aiRX+riaWf3zoLaBUZBaJrtqrkTSFHwEKF3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8W28eXZmIPM7DE8PpTVEgoKxqGkwHwYDVR0j BBgwFoAUqnJ2j90MYVoF5KMqBvnMtcp+DZMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzcyZWUzYy1lMTgwLTQyOTYtOWRhZC05NTAwZWZkOTQ4OTAvMC9BQTcyNzY4RkRE MEM2MTVBMDVFNEEzMkEwNkY5Q0NCNUNBN0UwRDkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVDQTdF MEQ5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3MmVlM2MtZTE4MC00Mjk2LTlk YWQtOTUwMGVmZDk0ODkwLzAvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUND QjVDQTdFMEQ5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJk6x0VEAgFRXNXl2UPAHw0HrRIWyh8sj3g/ EkcSrzkcSmw2enuuU4KlnoKeORzOpiZEV30+7tTqaoKnQVTWUUC+sEsPODE1FGQs xIOUQTc64nU3cIkohwML4B7hOGH9lR3lz/8LX6OZSOeN5PMzHMhn3jVqz/okaTIv kciz1pQc/8qDAZpLxlJLxy630PE470SvBm5s6N3B4bm+JGJmUaKG5JM0uxQreF7p HLc1GiTntImL99zw4PuEh1DS+BM5o53GsKx/N2SQSxchlKFXKZQ7y54FTZJ56/x1 YTuONUwsToJxSX8nsD6GdZ3rE2dZnPH8ou6ctlaSg+ma57yYlmc= -----END CERTIFICATE-----Generated at Fri Jun 6 18:09:17 2025 by rpki-client