$ rpki-client -vvf repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft File: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft (raw, json) Hash identifier: gsnGBymQiK2oCwZhSudU4oHThiC2IScCeSBGghT8vWQ= Subject key identifier: 11:12:B4:30:D5:85:F3:DC:A0:E0:5F:A9:A3:A0:1E:F7:67:35:2E:5C Authority key identifier: AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 Certificate issuer: /CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Certificate serial: 54166B85DE8C81DD6F0CA9DB2D6054C2501D3B19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft Manifest number: BA Signing time: Sun 31 Aug 2025 00:42:05 +0000 Manifest this update: Sun 31 Aug 2025 00:37:05 +0000 Manifest next update: Wed 03 Sep 2025 08:53:05 +0000 Files and hashes: 1: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: Yq8Q6JYOVHESjvKiauFlSKUKL9dSlIZbiu5ayrjEea4=) 2: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl (hash: hmO/LXRTERwA4aGWkB5GKrl/aU4/svJfqH4x/6pM08w=) 3: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: UbbhlYQNDi6JszbpEsabaohj0lI6X/p1NOF16+0hgH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:16:6b:85:de:8c:81:dd:6f:0c:a9:db:2d:60:54:c2:50:1d:3b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Validity Not Before: Aug 31 00:37:05 2025 GMT Not After : Sep 3 08:53:05 2025 GMT Subject: CN=1112B430D585F3DCA0E05FA9A3A01EF767352E5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:27:e2:b1:21:ba:09:35:d4:8d:69:39:06:33: a1:90:62:6c:0a:d8:f4:24:84:32:54:69:9e:9f:48: 17:cd:c9:13:12:31:9a:26:5b:b1:d7:96:85:7f:bd: 28:d6:55:d8:3f:34:19:db:4b:3e:f2:33:82:dd:5a: de:9d:dd:aa:a1:e2:b8:b0:29:43:92:08:cd:33:0e: f7:84:e6:2e:bc:1c:9d:9c:e2:f2:02:27:d8:93:a2: ef:ef:2b:6d:3f:5c:98:14:98:5a:2b:1a:9f:ed:64: 3c:9a:c1:8b:28:d1:dc:0c:92:26:d4:cd:36:18:88: ba:52:52:0e:1a:b3:58:f3:5d:aa:a8:fe:09:89:e8: 6b:d1:f6:00:a9:89:3b:ff:ee:c6:c9:f4:c8:2a:97: aa:6f:c8:79:e1:86:0c:80:82:2a:33:04:a7:b7:5f: 03:33:6d:02:a9:b8:bd:24:a8:34:3f:71:33:79:94: f9:22:9d:a7:09:94:2d:52:d3:19:fa:41:c4:4f:c6: d7:bf:54:fd:65:5c:22:0f:16:b7:3f:34:4a:0e:e0: 75:bb:3c:4c:41:be:3d:ae:5e:24:46:67:6c:76:09: 65:cf:6b:c7:e6:9d:6e:14:43:b0:17:9e:48:a1:d2: 99:ef:fd:98:29:30:38:f6:cc:1b:a5:fd:15:a5:46: b2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:12:B4:30:D5:85:F3:DC:A0:E0:5F:A9:A3:A0:1E:F7:67:35:2E:5C X509v3 Authority Key Identifier: keyid:AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:9b:df:d0:3a:07:57:6c:5f:36:7b:c1:fc:20:98:52:cb:80: 2a:5d:ca:1f:5f:01:b9:38:ea:33:45:b5:63:4b:b0:5e:0f:91: b5:5b:10:25:ee:7d:be:91:01:52:d1:24:f8:d1:bf:84:b6:7e: 5c:a2:95:9c:c8:f1:14:f0:65:a2:62:ef:f7:b6:53:61:53:3e: d8:a3:e0:80:6f:d4:d6:fd:11:cb:38:dd:4d:17:3a:27:a2:ab: f2:3f:ce:5c:7b:9b:bb:6e:ce:3e:55:e7:14:96:54:4d:98:36: 99:d8:3e:a9:57:70:07:45:d0:90:e3:b5:f3:12:49:de:39:e6: b1:37:07:d0:be:65:70:c5:fc:8e:db:ad:c5:1b:81:d8:04:1b: b7:e6:a5:87:18:89:bf:7c:20:9e:c3:dd:19:04:cf:25:0c:15: 94:50:a7:e9:5e:24:61:4c:4b:d6:22:89:8a:ae:15:02:d9:1b: 23:9c:19:fd:4c:4f:6b:72:98:42:c8:f5:41:38:e8:16:e6:f2: 25:d5:54:49:fb:49:0e:1c:86:28:dc:1a:f6:ac:32:8f:70:fc: e6:06:d3:45:04:16:2a:63:ca:c6:7b:91:f2:c6:8e:f7:ce:4a: c5:a5:74:04:64:75:7f:6b:0a:89:36:e9:4c:84:c7:76:61:29: 3a:d6:5e:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVBZrhd6Mgd1vDKnbLWBUwlAdOxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVD QTdFMEQ5MzAeFw0yNTA4MzEwMDM3MDVaFw0yNTA5MDMwODUzMDVaMDMxMTAvBgNV BAMTKDExMTJCNDMwRDU4NUYzRENBMEUwNUZBOUEzQTAxRUY3NjczNTJFNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEJ+KxIboJNdSNaTkGM6GQYmwK 2PQkhDJUaZ6fSBfNyRMSMZomW7HXloV/vSjWVdg/NBnbSz7yM4LdWt6d3aqh4riw KUOSCM0zDveE5i68HJ2c4vICJ9iTou/vK20/XJgUmForGp/tZDyawYso0dwMkibU zTYYiLpSUg4as1jzXaqo/gmJ6GvR9gCpiTv/7sbJ9Mgql6pvyHnhhgyAgiozBKe3 XwMzbQKpuL0kqDQ/cTN5lPkinacJlC1S0xn6QcRPxte/VP1lXCIPFrc/NEoO4HW7 PExBvj2uXiRGZ2x2CWXPa8fmnW4UQ7AXnkih0pnv/ZgpMDj2zBul/RWlRrKpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUERK0MNWF89yg4F+po6Ae92c1LlwwHwYDVR0j BBgwFoAUqnJ2j90MYVoF5KMqBvnMtcp+DZMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzcyZWUzYy1lMTgwLTQyOTYtOWRhZC05NTAwZWZkOTQ4OTAvMC9BQTcyNzY4RkRE MEM2MTVBMDVFNEEzMkEwNkY5Q0NCNUNBN0UwRDkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVDQTdF MEQ5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3MmVlM2MtZTE4MC00Mjk2LTlk YWQtOTUwMGVmZDk0ODkwLzAvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUND QjVDQTdFMEQ5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCb39A6B1dsXzZ7wfwgmFLLgCpdyh9fAbk4 6jNFtWNLsF4PkbVbECXufb6RAVLRJPjRv4S2flyilZzI8RTwZaJi7/e2U2FTPtij 4IBv1Nb9Ecs43U0XOieiq/I/zlx7m7tuzj5V5xSWVE2YNpnYPqlXcAdF0JDjtfMS Sd455rE3B9C+ZXDF/I7brcUbgdgEG7fmpYcYib98IJ7D3RkEzyUMFZRQp+leJGFM S9YiiYquFQLZGyOcGf1MT2tymELI9UE46Bbm8iXVVEn7SQ4chijcGvasMo9w/OYG 00UEFipjysZ7kfLGjvfOSsWldARkdX9rCok26UyEx3ZhKTrWXtA= -----END CERTIFICATE-----Generated at Mon Sep 1 00:18:51 2025 by rpki-client