$ rpki-client -vvf repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft File: B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft (raw, json) Hash identifier: /hSuX4/P1NV8as7HvAwra3ENjqw3HjMAHFJLD1tMovY= Subject key identifier: AC:3E:53:1F:CD:6A:CF:E1:10:75:4B:CE:A0:86:EE:D5:A9:B9:24:BE Authority key identifier: B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56 Certificate issuer: /CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56 Certificate serial: 7DB715B2EF84DF22E20A2354556F88CE18DF4A16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft Manifest number: E3 Signing time: Mon 20 Oct 2025 03:31:17 +0000 Manifest this update: Mon 20 Oct 2025 03:26:17 +0000 Manifest next update: Thu 23 Oct 2025 12:46:17 +0000 Files and hashes: 1: B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl (hash: vELgGYwyA/6fHXobLt1i1a/2a2c576tDbcwtoRg2YsI=) 2: 3135372e36362e35302e302f32332d3234203d3e20313532343338.roa (hash: 0z+OlDe1hua3zv7OtVHMMPyi/MvPOJjdEV9nI71654g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:b7:15:b2:ef:84:df:22:e2:0a:23:54:55:6f:88:ce:18:df:4a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56 Validity Not Before: Oct 20 03:26:17 2025 GMT Not After : Oct 23 12:46:17 2025 GMT Subject: CN=AC3E531FCD6ACFE110754BCEA086EED5A9B924BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:19:f9:70:ca:88:2e:1f:ce:f0:91:c3:d6:26: f4:5a:52:31:6c:bb:4c:da:43:39:42:47:e4:bc:43: 71:0a:db:42:c5:fc:62:ba:23:f3:8c:ba:d8:6d:cd: 17:c5:58:c3:ad:39:4f:20:94:b2:70:99:c7:71:65: de:9f:e9:09:5c:0d:ae:96:ea:e9:06:83:4f:e3:79: 25:62:13:ae:c3:d4:56:33:bc:98:f4:28:b4:f2:ec: 3e:f8:e9:e3:3a:7a:2d:f3:77:7c:91:af:b7:36:2b: 98:36:21:45:e0:07:1f:8c:ea:17:13:38:a9:66:b2: 25:34:08:20:77:3c:87:5d:0f:b4:2f:4d:58:89:41: 40:9b:68:b6:0e:eb:19:00:80:45:0b:2b:35:c6:dd: 81:19:e5:84:d3:17:1d:09:23:db:5b:17:10:6c:70: 72:60:33:38:6b:00:48:ef:e0:04:d6:24:d4:64:bd: 5f:f6:39:9a:5a:20:32:01:50:ef:9d:00:e9:5b:e9: 39:a6:34:eb:2f:4a:0a:a4:e1:c3:ba:8f:f4:c0:ac: b2:c2:20:a4:b1:f8:4c:5b:90:87:fd:1c:4c:25:03: 45:eb:d5:6b:ca:4c:4a:b6:e0:29:42:25:b3:99:60: f6:ad:a8:66:5f:5a:ef:f6:19:81:23:32:43:b2:ee: 49:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3E:53:1F:CD:6A:CF:E1:10:75:4B:CE:A0:86:EE:D5:A9:B9:24:BE X509v3 Authority Key Identifier: keyid:B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:1f:29:cf:40:75:21:0e:3c:c3:af:8c:e1:87:75:7a:d9:b9: 64:4c:46:05:41:01:29:03:45:b8:28:64:34:c1:71:70:ed:bd: 9e:95:ad:a3:9d:30:b8:28:5b:d5:30:a4:dd:f2:73:b0:fb:01: b3:fc:0d:64:33:12:4b:09:9c:ac:54:1e:e6:86:ea:1a:9d:d4: 58:a7:e7:fe:d3:fd:61:a1:15:f4:f3:a4:7d:81:cf:84:6d:e4: e6:27:d8:77:10:9e:8e:8c:d8:1a:f6:72:3b:0f:bb:e8:0a:71: d1:a2:6c:74:22:f5:31:a0:fe:c7:e8:a3:af:9d:28:1c:1f:a4: ef:b5:7e:52:84:10:bb:19:9b:20:60:79:35:b6:57:e4:73:95: 9b:41:e1:53:bc:38:61:ad:a4:59:3f:0c:cd:19:7b:e5:cb:80: 1b:78:f7:4d:ef:27:9b:ed:d6:10:5a:c1:c8:48:e5:2d:7d:93: f9:b3:f3:06:0d:ee:33:6b:a9:97:4d:cc:84:fb:c1:f7:92:dd: 8b:9b:1f:7e:21:41:93:6b:01:9d:98:95:c4:5c:48:f7:ab:9a: 50:99:19:97:d8:88:c1:a5:d7:ca:16:11:b5:f6:a4:da:28:08: 5d:04:81:3a:19:73:7f:b5:f4:f3:75:cf:df:c0:80:57:fa:70: 96:a6:b9:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfbcVsu+E3yLiCiNUVW+IzhjfShYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNFNEU2 NDkxNEM1NjAeFw0yNTEwMjAwMzI2MTdaFw0yNTEwMjMxMjQ2MTdaMDMxMTAvBgNV BAMTKEFDM0U1MzFGQ0Q2QUNGRTExMDc1NEJDRUEwODZFRUQ1QTlCOTI0QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxGflwyoguH87wkcPWJvRaUjFs u0zaQzlCR+S8Q3EK20LF/GK6I/OMuthtzRfFWMOtOU8glLJwmcdxZd6f6QlcDa6W 6ukGg0/jeSViE67D1FYzvJj0KLTy7D746eM6ei3zd3yRr7c2K5g2IUXgBx+M6hcT OKlmsiU0CCB3PIddD7QvTViJQUCbaLYO6xkAgEULKzXG3YEZ5YTTFx0JI9tbFxBs cHJgMzhrAEjv4ATWJNRkvV/2OZpaIDIBUO+dAOlb6TmmNOsvSgqk4cO6j/TArLLC IKSx+ExbkIf9HEwlA0Xr1WvKTEq24ClCJbOZYPatqGZfWu/2GYEjMkOy7kkbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrD5TH81qz+EQdUvOoIbu1am5JL4wHwYDVR0j BBgwFoAUtyU15OuLMcZ5TE3zH/U+TmSRTFYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmZhOTU4NC02Zjk3LTQwNDEtOWM4ZC04YjM5NTllNGY5YjMvMC9CNzI1MzVFNEVC OEIzMUM2Nzk0QzRERjMxRkY1M0U0RTY0OTE0QzU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNFNEU2NDkx NEM1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZmYTk1ODQtNmY5Ny00MDQxLTlj OGQtOGIzOTU5ZTRmOWIzLzAvQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNF NEU2NDkxNEM1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcfKc9AdSEOPMOvjOGHdXrZuWRMRgVBASkD RbgoZDTBcXDtvZ6VraOdMLgoW9UwpN3yc7D7AbP8DWQzEksJnKxUHuaG6hqd1Fin 5/7T/WGhFfTzpH2Bz4Rt5OYn2HcQno6M2Br2cjsPu+gKcdGibHQi9TGg/sfoo6+d KBwfpO+1flKEELsZmyBgeTW2V+RzlZtB4VO8OGGtpFk/DM0Ze+XLgBt4903vJ5vt 1hBawchI5S19k/mz8wYN7jNrqZdNzIT7wfeS3YubH34hQZNrAZ2YlcRcSPermlCZ GZfYiMGl18oWEbX2pNooCF0EgToZc3+19PN1z9/AgFf6cJamuak= -----END CERTIFICATE-----Generated at Tue Oct 21 00:14:10 2025 by rpki-client