$ rpki-client -vvf repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft File: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft (raw, json) Hash identifier: 3LyKkYkdt9zOYq/bD+j2GwO/FbtnXlQ4eodO9e0O7qg= Subject key identifier: 27:E4:B6:21:C9:95:B7:A0:96:C6:53:37:60:DE:7D:FB:40:43:D0:CB Authority key identifier: EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 Certificate issuer: /CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Certificate serial: 0620ED47E01BB92F2C38F1022E68177E8501A517 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft Manifest number: 011F Signing time: Thu 21 Aug 2025 14:00:43 +0000 Manifest this update: Thu 21 Aug 2025 13:55:43 +0000 Manifest next update: Sun 24 Aug 2025 21:49:43 +0000 Files and hashes: 1: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl (hash: U189oywQ6wIHNi98fBzzgUYdU0PA8hB585rUoWeGNwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:20:ed:47:e0:1b:b9:2f:2c:38:f1:02:2e:68:17:7e:85:01:a5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Validity Not Before: Aug 21 13:55:43 2025 GMT Not After : Aug 24 21:49:43 2025 GMT Subject: CN=27E4B621C995B7A096C6533760DE7DFB4043D0CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7d:16:06:66:62:79:d1:6f:e5:fa:7d:0c:c3: 9d:b8:a6:06:e8:63:79:76:5d:22:4f:ed:69:d0:0f: 05:ba:1b:1f:9d:ed:ca:5e:e0:9d:c8:31:fd:78:57: 0d:46:0b:87:0b:ca:d6:20:57:b3:42:e0:b1:45:1b: 33:ab:14:8a:11:a2:84:1d:29:e6:9b:d6:d4:61:b6: 38:7e:be:0b:94:12:42:4c:f7:9c:ba:74:30:91:0b: 89:16:31:3c:d7:68:65:fb:a6:0c:90:cf:e5:e5:17: 45:b6:91:77:51:0f:24:20:3e:75:5c:20:b8:ad:c2: ce:73:82:0b:79:dd:a9:03:18:d8:fc:6d:b6:37:c7: 08:7d:77:25:e0:6b:e3:a5:d6:fe:ce:bf:ee:8d:4d: c8:87:aa:cc:92:f2:5e:5d:c7:fb:56:0e:cb:32:9e: 80:e0:61:e7:f2:36:c9:d6:0f:65:d2:6d:23:84:97: 1b:ae:3d:91:4c:d8:5d:37:d0:ea:af:38:d2:69:97: 03:f3:99:b5:26:f0:4d:48:f9:ab:9e:7b:98:af:2f: 99:4e:02:0f:b9:60:f7:dc:a1:1f:a2:27:df:0b:98: 07:d2:90:8b:1b:28:51:44:6e:a6:fe:b0:12:f0:f1: 50:59:2c:df:1b:86:9a:96:d3:0c:62:46:94:e5:fe: 63:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E4:B6:21:C9:95:B7:A0:96:C6:53:37:60:DE:7D:FB:40:43:D0:CB X509v3 Authority Key Identifier: keyid:EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:2d:89:d2:65:f9:fa:48:d2:fb:66:fe:14:74:88:51:f4:a6: 0f:8c:22:1a:0c:b4:94:ea:64:bb:c0:f4:e9:1b:66:42:35:15: fe:bd:0e:43:39:b5:ed:bb:00:66:1a:29:b0:93:29:2a:d0:bd: 51:2f:1c:50:16:5c:85:b1:a3:b0:8d:ef:35:1e:8b:5e:f7:7d: 3d:7d:bf:b8:cb:ca:89:c2:ad:f9:7b:55:6d:6e:0d:c8:d3:42: df:64:28:1a:56:4e:a3:9e:56:03:ce:99:07:c9:0e:45:de:5a: c2:88:59:c1:39:14:67:53:71:28:49:4b:bb:67:52:cf:6a:f1: 30:06:b6:7b:02:51:d2:4c:0d:6c:bf:93:dd:80:60:fc:3a:c6: 37:95:a0:4f:00:9d:29:46:aa:77:33:9d:7b:b8:2f:c3:f0:06: 59:e7:6e:c4:48:4d:ab:c2:33:51:89:da:88:31:88:a5:ce:7b: 3c:5c:df:04:2b:47:d9:95:7a:b7:e3:de:a7:f5:df:4a:a7:a2: e8:bf:e7:21:a0:e5:e2:49:ef:6b:ec:79:f5:06:d8:ed:15:29: db:c5:84:aa:1a:fb:b7:91:cf:34:10:21:fe:35:94:11:17:04: 20:e5:f0:ba:8d:d1:ee:4e:cc:cd:21:b5:40:7e:71:bd:51:c8: 18:7c:17:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBiDtR+AbuS8sOPECLmgXfoUBpRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgx RTVFRENBMTAeFw0yNTA4MjExMzU1NDNaFw0yNTA4MjQyMTQ5NDNaMDMxMTAvBgNV BAMTKDI3RTRCNjIxQzk5NUI3QTA5NkM2NTMzNzYwREU3REZCNDA0M0QwQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGfRYGZmJ50W/l+n0Mw524pgbo Y3l2XSJP7WnQDwW6Gx+d7cpe4J3IMf14Vw1GC4cLytYgV7NC4LFFGzOrFIoRooQd Keab1tRhtjh+vguUEkJM95y6dDCRC4kWMTzXaGX7pgyQz+XlF0W2kXdRDyQgPnVc ILitws5zggt53akDGNj8bbY3xwh9dyXga+Ol1v7Ov+6NTciHqsyS8l5dx/tWDssy noDgYefyNsnWD2XSbSOElxuuPZFM2F030OqvONJplwPzmbUm8E1I+auee5ivL5lO Ag+5YPfcoR+iJ98LmAfSkIsbKFFEbqb+sBLw8VBZLN8bhpqW0wxiRpTl/mNlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ+S2IcmVt6CWxlM3YN59+0BD0MswHwYDVR0j BBgwFoAU7nLeOE+at/rWw7KGOl2xKB5e3KEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlNjg3OC02Y2IyLTRhNWYtYjU1My1iY2ViMmM5NWM3NmMvMC9FRTcyREUzODRG OUFCN0ZBRDZDM0IyODYzQTVEQjEyODFFNUVEQ0ExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgxRTVF RENBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTY4NzgtNmNiMi00YTVmLWI1 NTMtYmNlYjJjOTVjNzZjLzAvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIx MjgxRTVFRENBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEtidJl+fpI0vtm/hR0iFH0pg+MIhoMtJTq ZLvA9OkbZkI1Ff69DkM5te27AGYaKbCTKSrQvVEvHFAWXIWxo7CN7zUei173fT19 v7jLyonCrfl7VW1uDcjTQt9kKBpWTqOeVgPOmQfJDkXeWsKIWcE5FGdTcShJS7tn Us9q8TAGtnsCUdJMDWy/k92AYPw6xjeVoE8AnSlGqncznXu4L8PwBlnnbsRITavC M1GJ2ogxiKXOezxc3wQrR9mVerfj3qf130qnoui/5yGg5eJJ72vsefUG2O0VKdvF hKoa+7eRzzQQIf41lBEXBCDl8LqN0e5OzM0htUB+cb1RyBh8F18= -----END CERTIFICATE-----Generated at Sat Aug 23 12:28:12 2025 by rpki-client