$ rpki-client -vvf repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft File: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft (raw, json) Hash identifier: ISAuxu+1KD7MCqjnwBQeCj+gVXjpzMACHZ17EfEiB8g= Subject key identifier: 07:58:68:1D:26:E2:D0:41:72:51:B4:00:7C:AE:32:CE:86:C8:7D:25 Authority key identifier: AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 Certificate issuer: /CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Certificate serial: 4B60B78D3E9C69FDC93137468B8882DCDB413E8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft Manifest number: 79 Signing time: Tue 08 Apr 2025 14:42:00 +0000 Manifest this update: Tue 08 Apr 2025 14:37:00 +0000 Manifest next update: Fri 11 Apr 2025 16:43:00 +0000 Files and hashes: 1: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl (hash: jN4wW7GiVSJsJ5XWt/+W+d/Qq+PpiuEVxS34pOHedrs=) 2: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: UbbhlYQNDi6JszbpEsabaohj0lI6X/p1NOF16+0hgH0=) 3: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: Yq8Q6JYOVHESjvKiauFlSKUKL9dSlIZbiu5ayrjEea4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:60:b7:8d:3e:9c:69:fd:c9:31:37:46:8b:88:82:dc:db:41:3e:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Validity Not Before: Apr 8 14:37:00 2025 GMT Not After : Apr 11 16:43:00 2025 GMT Subject: CN=0758681D26E2D0417251B4007CAE32CE86C87D25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3a:bf:d5:fb:0f:d3:6f:a0:c8:50:3d:b9:82: 62:6d:d9:76:ad:99:32:2b:9d:19:bc:a2:92:cb:05: ee:1e:3d:f8:c6:97:76:d0:b6:14:81:83:a4:c5:9a: d3:95:d4:00:31:fd:16:15:b2:da:83:4e:f7:7c:13: bd:4e:70:cf:d5:2b:83:4a:f9:2d:2e:a0:e2:24:d6: 4f:ab:e2:6d:77:5f:50:f8:f4:a1:19:20:c9:02:65: 7c:78:c3:64:42:92:f6:64:16:b5:a5:67:2e:bd:4d: 21:73:d0:cb:9b:e7:45:da:2c:b0:75:4b:da:b7:64: 3f:d9:df:4f:ac:e2:57:a4:98:a8:41:10:18:94:20: f8:a7:6d:4e:76:4e:52:f7:a6:73:b7:05:3a:20:01: 81:e0:af:41:b5:8f:f9:c1:89:bd:57:61:9b:d3:41: 73:60:c1:bd:de:fa:e2:44:6d:ac:78:d0:8e:d4:65: 9f:25:4e:d6:22:f7:2f:2f:00:a9:e3:00:1b:69:ce: 83:1b:f1:ec:c0:d2:07:de:95:17:55:57:d4:37:82: 55:e5:58:81:f7:42:b9:01:ab:13:cb:52:9d:47:5b: f1:35:0e:e1:70:fb:0a:b9:4d:1a:ff:09:ad:6d:2b: 10:68:a2:ec:11:3b:f0:30:3d:d8:d8:38:b8:69:3f: b1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:58:68:1D:26:E2:D0:41:72:51:B4:00:7C:AE:32:CE:86:C8:7D:25 X509v3 Authority Key Identifier: keyid:AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:bd:98:1a:57:ab:69:1a:9f:5e:0b:e2:fd:88:33:5a:a3:e7: 90:26:be:5c:4d:e4:81:d3:30:a8:3b:84:95:d6:04:cb:cd:dc: b2:87:ec:94:64:90:3e:0a:6e:57:47:d6:3a:28:85:bc:8d:8a: f0:69:c2:3c:a5:d6:03:2c:ce:01:c1:d1:1f:5c:8c:54:25:22: ac:d2:bc:fd:c4:5f:36:df:6b:f9:38:a9:01:17:98:b8:e8:fc: 9c:c2:1d:76:62:62:27:c6:7f:6c:c7:fe:10:9b:3b:4f:4f:21: 5e:b3:30:04:8e:9c:6c:66:db:6b:15:c8:ec:38:2d:6d:d3:75: 62:d4:2c:41:87:5f:18:a8:bc:57:dc:0c:92:05:92:e7:75:89: 3e:18:97:ff:a8:b9:d1:e7:c8:92:ba:c6:98:a4:18:a1:ca:a2: 24:12:3a:6d:92:7d:71:b1:d0:42:72:7d:22:7b:b3:11:19:da: cf:ae:91:db:7b:7e:9d:fb:09:da:50:bc:9d:69:7d:1a:fe:94: 0f:ca:d1:f7:ae:3b:b9:59:08:a7:06:85:c7:d9:8a:df:20:82: 46:08:12:0e:67:28:99:c5:0b:39:ae:78:62:52:12:0e:b5:0a: 98:53:c5:22:a5:9c:12:e5:65:3c:95:3c:f5:1a:30:f3:28:e9: 9e:e5:ca:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS2C3jT6caf3JMTdGi4iC3NtBPoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVD QTdFMEQ5MzAeFw0yNTA0MDgxNDM3MDBaFw0yNTA0MTExNjQzMDBaMDMxMTAvBgNV BAMTKDA3NTg2ODFEMjZFMkQwNDE3MjUxQjQwMDdDQUUzMkNFODZDODdEMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDROr/V+w/Tb6DIUD25gmJt2Xat mTIrnRm8opLLBe4ePfjGl3bQthSBg6TFmtOV1AAx/RYVstqDTvd8E71OcM/VK4NK +S0uoOIk1k+r4m13X1D49KEZIMkCZXx4w2RCkvZkFrWlZy69TSFz0Mub50XaLLB1 S9q3ZD/Z30+s4lekmKhBEBiUIPinbU52TlL3pnO3BTogAYHgr0G1j/nBib1XYZvT QXNgwb3e+uJEbax40I7UZZ8lTtYi9y8vAKnjABtpzoMb8ezA0gfelRdVV9Q3glXl WIH3QrkBqxPLUp1HW/E1DuFw+wq5TRr/Ca1tKxBoouwRO/AwPdjYOLhpP7H/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB1hoHSbi0EFyUbQAfK4yzobIfSUwHwYDVR0j BBgwFoAUqnJ2j90MYVoF5KMqBvnMtcp+DZMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzcyZWUzYy1lMTgwLTQyOTYtOWRhZC05NTAwZWZkOTQ4OTAvMC9BQTcyNzY4RkRE MEM2MTVBMDVFNEEzMkEwNkY5Q0NCNUNBN0UwRDkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVDQTdF MEQ5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3MmVlM2MtZTE4MC00Mjk2LTlk YWQtOTUwMGVmZDk0ODkwLzAvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUND QjVDQTdFMEQ5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJy9mBpXq2kan14L4v2IM1qj55AmvlxN5IHT MKg7hJXWBMvN3LKH7JRkkD4KbldH1joohbyNivBpwjyl1gMszgHB0R9cjFQlIqzS vP3EXzbfa/k4qQEXmLjo/JzCHXZiYifGf2zH/hCbO09PIV6zMASOnGxm22sVyOw4 LW3TdWLULEGHXxiovFfcDJIFkud1iT4Yl/+oudHnyJK6xpikGKHKoiQSOm2SfXGx 0EJyfSJ7sxEZ2s+ukdt7fp37CdpQvJ1pfRr+lA/K0feuO7lZCKcGhcfZit8ggkYI Eg5nKJnFCzmueGJSEg61CphTxSKlnBLlZTyVPPUaMPMo6Z7lyus= -----END CERTIFICATE-----Generated at Thu Apr 10 00:15:56 2025 by rpki-client