$ rpki-client -vvf repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft File: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft (raw, json) Hash identifier: bK+ei6hxiWP5xT1bAzuSTFIjY3xsejxbR5KDYTFNyfs= Subject key identifier: 08:3D:9A:79:A1:1A:40:BF:C6:B4:97:CA:5D:D5:67:6A:3E:91:AF:D1 Authority key identifier: EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 Certificate issuer: /CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Certificate serial: 68EFED80C699F7F4B83FCE894F721C53BAC9E103 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft Manifest number: 0108 Signing time: Tue 01 Jul 2025 10:20:38 +0000 Manifest this update: Tue 01 Jul 2025 10:15:38 +0000 Manifest next update: Fri 04 Jul 2025 17:36:38 +0000 Files and hashes: 1: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl (hash: 7NSs6GLEpNVQdGbgOdOpWQWHVeFKM00/qycJr99hRFM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 17:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ef:ed:80:c6:99:f7:f4:b8:3f:ce:89:4f:72:1c:53:ba:c9:e1:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Validity Not Before: Jul 1 10:15:38 2025 GMT Not After : Jul 4 17:36:38 2025 GMT Subject: CN=083D9A79A11A40BFC6B497CA5DD5676A3E91AFD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bf:66:6b:98:fa:55:51:ae:43:c9:0a:ec:fc: 80:92:a6:d0:5b:f1:ce:85:34:96:81:15:15:fc:a8: e0:e0:b9:00:18:ce:2e:ac:67:b0:3b:a0:78:87:ed: a0:7d:75:88:7b:96:75:30:ab:42:09:a7:f4:1e:e4: 9f:01:50:28:e2:c0:60:bc:9a:1c:b4:f0:c3:c1:89: a6:6b:5f:07:39:4c:92:92:2e:ca:50:e8:2a:6d:40: c4:cb:0c:c2:61:5c:4b:84:02:58:d0:cc:bc:35:8c: 40:7f:8d:c3:20:f8:30:6c:2b:7a:d8:2a:3c:98:dd: 2b:c7:99:fa:57:2f:62:32:2c:d4:dc:4e:9a:ed:14: 9b:41:20:38:4b:c7:15:ae:25:32:dc:ba:29:9d:94: 73:bf:c8:25:b9:61:e9:c4:8e:91:e1:d4:b4:55:17: c9:a5:b2:37:28:2e:db:98:71:87:6a:11:0c:4f:86: 1a:72:17:4e:52:6e:6f:80:30:16:7b:23:50:59:5c: d5:b9:41:a9:2b:15:e9:43:40:b6:8c:51:b7:21:95: 73:f8:c9:4e:c9:f0:4f:76:5a:dd:02:24:30:61:a9: 1b:18:47:7d:31:e3:9a:af:06:0d:67:d9:81:8f:32: 18:e8:b2:18:9b:5f:4b:c3:ab:71:c0:09:99:2e:4a: 3b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3D:9A:79:A1:1A:40:BF:C6:B4:97:CA:5D:D5:67:6A:3E:91:AF:D1 X509v3 Authority Key Identifier: keyid:EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:07:f8:8d:0e:b3:da:cd:11:de:9b:54:a1:63:e1:5a:66:08: 3c:ad:63:eb:05:bc:6c:a0:0f:60:d1:00:9f:38:c6:60:da:40: d7:89:bd:73:41:d9:da:57:31:b8:fb:70:da:96:30:ac:07:93: 82:dd:a5:7c:60:43:75:03:56:7a:9b:a4:ce:a8:9f:f6:30:86: 43:dc:d6:4e:a0:64:17:07:c3:9a:c4:41:0d:86:30:3b:76:1a: ca:e4:b1:8a:22:21:ec:9d:7a:72:5c:06:10:e4:a2:95:1e:8d: c9:fc:60:99:00:6a:e6:64:db:3e:e9:2e:e6:b0:94:cb:ba:9a: bf:2c:da:e3:0d:76:89:7a:fb:39:54:29:08:55:f3:bc:94:51: 26:3f:c2:68:b7:c3:99:48:8c:5c:6b:f1:ce:25:23:4f:04:23: 46:89:13:cd:bf:ed:55:12:65:30:44:ef:72:f7:72:b4:f2:af: 58:83:99:78:bc:00:8b:75:85:9e:68:16:e0:04:a6:7a:ea:01: 71:eb:77:3f:e7:ea:a0:f4:c1:79:65:55:fb:21:ee:de:43:ce: b7:29:b2:84:42:85:f8:2f:b8:80:91:4f:01:d9:8d:fb:19:9c: cb:4b:a1:28:85:45:c1:56:cd:88:f3:4d:2b:58:06:42:61:ec: 65:61:03:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaO/tgMaZ9/S4P86JT3IcU7rJ4QMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgx RTVFRENBMTAeFw0yNTA3MDExMDE1MzhaFw0yNTA3MDQxNzM2MzhaMDMxMTAvBgNV BAMTKDA4M0Q5QTc5QTExQTQwQkZDNkI0OTdDQTVERDU2NzZBM0U5MUFGRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzv2ZrmPpVUa5DyQrs/ICSptBb 8c6FNJaBFRX8qODguQAYzi6sZ7A7oHiH7aB9dYh7lnUwq0IJp/Qe5J8BUCjiwGC8 mhy08MPBiaZrXwc5TJKSLspQ6CptQMTLDMJhXEuEAljQzLw1jEB/jcMg+DBsK3rY KjyY3SvHmfpXL2IyLNTcTprtFJtBIDhLxxWuJTLcuimdlHO/yCW5YenEjpHh1LRV F8mlsjcoLtuYcYdqEQxPhhpyF05Sbm+AMBZ7I1BZXNW5QakrFelDQLaMUbchlXP4 yU7J8E92Wt0CJDBhqRsYR30x45qvBg1n2YGPMhjoshibX0vDq3HACZkuSjt3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCD2aeaEaQL/GtJfKXdVnaj6Rr9EwHwYDVR0j BBgwFoAU7nLeOE+at/rWw7KGOl2xKB5e3KEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlNjg3OC02Y2IyLTRhNWYtYjU1My1iY2ViMmM5NWM3NmMvMC9FRTcyREUzODRG OUFCN0ZBRDZDM0IyODYzQTVEQjEyODFFNUVEQ0ExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgxRTVF RENBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTY4NzgtNmNiMi00YTVmLWI1 NTMtYmNlYjJjOTVjNzZjLzAvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIx MjgxRTVFRENBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIH+I0Os9rNEd6bVKFj4VpmCDytY+sFvGyg D2DRAJ84xmDaQNeJvXNB2dpXMbj7cNqWMKwHk4LdpXxgQ3UDVnqbpM6on/YwhkPc 1k6gZBcHw5rEQQ2GMDt2GsrksYoiIeydenJcBhDkopUejcn8YJkAauZk2z7pLuaw lMu6mr8s2uMNdol6+zlUKQhV87yUUSY/wmi3w5lIjFxr8c4lI08EI0aJE82/7VUS ZTBE73L3crTyr1iDmXi8AIt1hZ5oFuAEpnrqAXHrdz/n6qD0wXllVfsh7t5Dzrcp soRChfgvuICRTwHZjfsZnMtLoSiFRcFWzYjzTStYBkJh7GVhA6Y= -----END CERTIFICATE-----Generated at Wed Jul 2 04:23:23 2025 by rpki-client