$ rpki-client -vvf repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft File: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft (raw, json) Hash identifier: ev4gHtWfvdgYK2AMGIL+clR4DqnbfTeAHpaqkhDkiDY= Subject key identifier: 0B:45:AF:B3:66:87:8F:C9:9B:3C:7B:D7:D7:1B:C6:78:E5:4C:AA:C8 Authority key identifier: EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 Certificate issuer: /CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Certificate serial: 3C2257C15092A02C973DE8F1D3226B98CCC72807 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft Manifest number: 0139 Signing time: Sun 19 Oct 2025 22:40:40 +0000 Manifest this update: Sun 19 Oct 2025 22:35:40 +0000 Manifest next update: Thu 23 Oct 2025 01:20:40 +0000 Files and hashes: 1: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl (hash: 9H0L6v9oV/v0p9b1qL7sHYdq1FDDlpiZ1oWm3xY11oQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:22:57:c1:50:92:a0:2c:97:3d:e8:f1:d3:22:6b:98:cc:c7:28:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Validity Not Before: Oct 19 22:35:40 2025 GMT Not After : Oct 23 01:20:40 2025 GMT Subject: CN=0B45AFB366878FC99B3C7BD7D71BC678E54CAAC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e5:96:f5:94:94:74:d9:a4:3f:6f:c6:41:96: f3:aa:da:0f:4f:e0:06:68:a0:df:99:82:88:ca:75: 88:4a:6a:9e:92:41:b4:f2:01:eb:f7:f1:aa:82:a7: f4:59:d6:27:59:17:0f:56:53:d6:b2:85:8b:77:cf: 35:18:a9:11:24:fe:2e:93:de:b1:75:25:23:e4:57: fa:8a:e9:c2:3b:bf:da:ca:fb:96:00:fb:77:38:03: e2:20:b4:01:6a:01:02:ce:3e:6b:9d:7a:5c:e1:1c: a0:57:95:9e:75:32:f0:a0:1f:05:e1:8c:58:6c:36: b6:31:82:ba:3f:a4:0c:15:6c:98:b4:82:23:fa:6c: ea:fa:42:d4:e2:7d:4e:81:59:96:f0:24:2c:f7:6a: b0:99:9c:89:19:91:04:71:07:98:11:0f:f4:66:0f: 8c:ad:0c:76:41:33:a6:32:66:2b:14:cd:c5:c9:f0: 64:50:4b:1d:2f:a1:41:43:39:01:e3:bc:6f:14:06: 78:a2:ad:36:01:26:e6:f1:23:33:bf:e9:05:3a:3c: 8d:f5:cf:38:d8:5e:4f:8b:0d:ba:59:28:eb:29:0e: 79:a8:19:79:44:8e:e1:04:7e:77:75:bb:86:23:89: fe:cb:a3:75:58:7f:08:54:d9:fa:85:ae:46:79:9d: 51:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:45:AF:B3:66:87:8F:C9:9B:3C:7B:D7:D7:1B:C6:78:E5:4C:AA:C8 X509v3 Authority Key Identifier: keyid:EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:38:7e:ca:5e:79:70:a7:cf:41:68:ea:86:89:ee:b8:71:f3: 71:70:28:96:22:d7:20:5d:46:e0:41:9c:cc:18:a8:37:9e:10: c7:2f:ab:25:7e:18:07:21:e0:40:c9:b8:63:af:ee:6e:a8:4b: e6:dd:7f:b5:15:e1:d0:76:be:ef:68:8f:01:4e:d9:54:78:6a: 9f:7d:5d:9b:4f:51:f0:50:c5:40:89:ee:ef:3b:6f:fb:b1:d4: d9:fb:68:91:ac:6d:f4:76:25:7a:2a:da:ec:fa:75:76:1c:cb: f5:b6:02:c1:62:66:be:88:9b:93:0b:c9:6a:99:b3:f8:74:2f: 59:3c:3a:6f:1b:fc:5e:1a:55:b9:97:17:27:1b:aa:76:19:ba: 5c:e8:8e:05:18:d9:7c:f5:c0:22:17:54:b5:95:b9:c7:df:8e: 8d:84:a5:2d:f0:ba:53:9f:69:9a:ec:3b:1e:27:fb:71:f8:ca: 5c:5c:33:86:d1:83:f0:f0:4f:f7:cf:88:ce:4d:3e:25:26:33: db:b9:50:ad:37:8f:3d:c8:3c:f0:7a:3a:e6:9a:05:b9:3d:b3: 14:33:fc:b2:fd:ec:96:51:2b:45:d4:3e:9f:59:92:31:06:73: 3f:c9:d1:2c:45:db:03:a5:36:f6:82:3e:c4:35:bd:45:a2:54: c0:5c:c4:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPCJXwVCSoCyXPejx0yJrmMzHKAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgx RTVFRENBMTAeFw0yNTEwMTkyMjM1NDBaFw0yNTEwMjMwMTIwNDBaMDMxMTAvBgNV BAMTKDBCNDVBRkIzNjY4NzhGQzk5QjNDN0JEN0Q3MUJDNjc4RTU0Q0FBQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe5Zb1lJR02aQ/b8ZBlvOq2g9P 4AZooN+ZgojKdYhKap6SQbTyAev38aqCp/RZ1idZFw9WU9ayhYt3zzUYqREk/i6T 3rF1JSPkV/qK6cI7v9rK+5YA+3c4A+IgtAFqAQLOPmudelzhHKBXlZ51MvCgHwXh jFhsNrYxgro/pAwVbJi0giP6bOr6QtTifU6BWZbwJCz3arCZnIkZkQRxB5gRD/Rm D4ytDHZBM6YyZisUzcXJ8GRQSx0voUFDOQHjvG8UBniirTYBJubxIzO/6QU6PI31 zzjYXk+LDbpZKOspDnmoGXlEjuEEfnd1u4Yjif7Lo3VYfwhU2fqFrkZ5nVFFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC0Wvs2aHj8mbPHvX1xvGeOVMqsgwHwYDVR0j BBgwFoAU7nLeOE+at/rWw7KGOl2xKB5e3KEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlNjg3OC02Y2IyLTRhNWYtYjU1My1iY2ViMmM5NWM3NmMvMC9FRTcyREUzODRG OUFCN0ZBRDZDM0IyODYzQTVEQjEyODFFNUVEQ0ExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgxRTVF RENBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTY4NzgtNmNiMi00YTVmLWI1 NTMtYmNlYjJjOTVjNzZjLzAvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIx MjgxRTVFRENBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFo4fspeeXCnz0Fo6oaJ7rhx83FwKJYi1yBd RuBBnMwYqDeeEMcvqyV+GAch4EDJuGOv7m6oS+bdf7UV4dB2vu9ojwFO2VR4ap99 XZtPUfBQxUCJ7u87b/ux1Nn7aJGsbfR2JXoq2uz6dXYcy/W2AsFiZr6Im5MLyWqZ s/h0L1k8Om8b/F4aVbmXFycbqnYZulzojgUY2Xz1wCIXVLWVucffjo2EpS3wulOf aZrsOx4n+3H4ylxcM4bRg/DwT/fPiM5NPiUmM9u5UK03jz3IPPB6OuaaBbk9sxQz /LL97JZRK0XUPp9ZkjEGcz/J0SxF2wOlNvaCPsQ1vUWiVMBcxBU= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:27 2025 by rpki-client