$ rpki-client -vvf repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft File: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft (raw, json) Hash identifier: LFcpmkAPrIAtOOXlMVKESTXFbZeIBycudo7zjRSXFvg= Subject key identifier: 99:91:53:9F:ED:40:6A:66:0F:67:9D:A9:9B:3C:89:F7:9A:34:CD:27 Authority key identifier: E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 Certificate issuer: /CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Certificate serial: 75F2BB29AA79BAC4293FA530B2BF760580E745F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft Manifest number: 0524 Signing time: Sun 19 Oct 2025 16:02:20 +0000 Manifest this update: Sun 19 Oct 2025 15:57:20 +0000 Manifest next update: Thu 23 Oct 2025 00:38:20 +0000 Files and hashes: 1: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl (hash: LGzEn5VDU2/WItDnkgpewryXSzT57lHeiuFhrScusxI=) 2: 323430323a366163303a3a2f33332d3333203d3e20313337333036.roa (hash: +LtGD0I+CcS2FlJTjK9Ti6xX24NgEqNHjvhmLsu4MGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f2:bb:29:aa:79:ba:c4:29:3f:a5:30:b2:bf:76:05:80:e7:45:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Validity Not Before: Oct 19 15:57:20 2025 GMT Not After : Oct 23 00:38:20 2025 GMT Subject: CN=9991539FED406A660F679DA99B3C89F79A34CD27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9a:44:07:d9:7a:e0:2b:f2:1d:5c:b9:b3:9f: 9a:51:82:1d:9d:0d:5c:20:e2:f5:97:61:73:82:1c: e8:1f:f4:29:13:7f:e4:1f:6e:1b:a6:35:05:4a:75: 84:ab:d1:a4:5b:d0:15:62:2d:55:8a:80:6e:43:17: 11:2f:6b:96:2a:4b:78:c7:27:b2:c2:9a:61:ca:94: 5e:13:d5:20:ee:a3:e8:4d:e9:a5:61:c6:42:98:e3: 75:53:05:3a:d6:24:e9:38:3b:4a:f2:2c:cd:02:df: bb:bf:c8:19:82:09:8e:3c:89:4d:f2:95:89:57:19: cf:08:0c:b6:77:22:c8:a5:87:11:45:3b:42:65:7f: 56:3b:e6:3c:82:6d:a4:ae:e4:fd:8f:df:2a:bd:71: 73:94:fe:0d:d8:75:7e:4b:f6:e7:c3:b3:13:be:07: b7:1a:0c:52:e6:45:9c:f1:80:0f:f5:b7:fd:94:39: aa:dc:dd:7e:6e:27:53:6a:b6:da:f7:34:7c:b3:7d: c9:a7:ee:21:af:7c:fc:b7:34:f4:ff:7b:7d:ae:55: 9f:91:4b:72:73:b6:6d:8e:f0:a1:58:92:de:41:9a: 17:e5:e7:52:bb:4f:8c:e8:4f:c7:7f:a9:f2:76:ae: 9c:47:2e:95:87:9b:38:57:fd:ad:28:02:fe:1f:fc: ec:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:91:53:9F:ED:40:6A:66:0F:67:9D:A9:9B:3C:89:F7:9A:34:CD:27 X509v3 Authority Key Identifier: keyid:E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:40:e7:e6:dc:54:d7:a3:42:26:5f:26:da:e9:cb:e6:61:b8: db:68:7d:d5:b7:df:06:fb:69:01:ab:7f:67:01:50:73:92:6a: 58:f9:39:67:3d:83:41:de:d2:08:11:3d:07:15:a8:f9:42:2d: ba:d5:c5:f4:8c:51:55:99:1d:be:cf:53:fa:f7:17:a5:bf:be: 19:93:ff:7f:41:4b:40:a3:c1:41:f9:9e:99:f9:58:28:10:ae: cb:02:47:d9:3d:47:fd:e3:ba:ea:98:78:09:9d:47:35:65:87: d7:f9:1c:9e:4b:e3:b6:97:da:f1:6b:ce:e1:d5:cb:68:e4:ea: 17:97:36:60:09:51:bf:07:69:dc:75:9a:8e:7f:3b:02:66:c4: 13:f3:77:5c:9b:96:d3:14:37:bc:6d:43:d0:66:48:66:d8:fb: 13:e5:71:7b:d4:4d:3a:e1:e0:d9:dd:71:3f:74:19:55:e9:31: a0:73:ed:cf:6c:87:6b:13:24:a8:cf:62:40:39:fe:2b:c2:46: 1c:d6:d5:74:5e:4b:65:31:7e:40:17:ab:f6:fd:03:45:95:c2: 88:e7:2d:5a:58:7d:cf:78:95:b3:d5:da:e9:2f:05:8a:9d:fd: ae:18:75:28:fa:b5:62:2b:7a:e7:4f:5b:93:92:01:13:f0:a1: 3d:6e:ed:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdfK7Kap5usQpP6Uwsr92BYDnRfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdE QzVFMTAxNDAeFw0yNTEwMTkxNTU3MjBaFw0yNTEwMjMwMDM4MjBaMDMxMTAvBgNV BAMTKDk5OTE1MzlGRUQ0MDZBNjYwRjY3OURBOTlCM0M4OUY3OUEzNENEMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+mkQH2XrgK/IdXLmzn5pRgh2d DVwg4vWXYXOCHOgf9CkTf+QfbhumNQVKdYSr0aRb0BViLVWKgG5DFxEva5YqS3jH J7LCmmHKlF4T1SDuo+hN6aVhxkKY43VTBTrWJOk4O0ryLM0C37u/yBmCCY48iU3y lYlXGc8IDLZ3IsilhxFFO0Jlf1Y75jyCbaSu5P2P3yq9cXOU/g3YdX5L9ufDsxO+ B7caDFLmRZzxgA/1t/2UOarc3X5uJ1Nqttr3NHyzfcmn7iGvfPy3NPT/e32uVZ+R S3Jztm2O8KFYkt5Bmhfl51K7T4zoT8d/qfJ2rpxHLpWHmzhX/a0oAv4f/Oy/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmZFTn+1AamYPZ52pmzyJ95o0zScwHwYDVR0j BBgwFoAU5yYirg9ptM2ryc0iOz4Gx9xeEBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1YmY3OS1lODRhLTQwZTAtOGZkNC1mMTY5YzE4NmJlOGYvMC9FNzI2MjJBRTBG NjlCNENEQUJDOUNEMjIzQjNFMDZDN0RDNUUxMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdEQzVF MTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNWJmNzktZTg0YS00MGUwLThm ZDQtZjE2OWMxODZiZThmLzAvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2 QzdEQzVFMTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJA5+bcVNejQiZfJtrpy+ZhuNtofdW33wb7 aQGrf2cBUHOSalj5OWc9g0He0ggRPQcVqPlCLbrVxfSMUVWZHb7PU/r3F6W/vhmT /39BS0CjwUH5npn5WCgQrssCR9k9R/3juuqYeAmdRzVlh9f5HJ5L47aX2vFrzuHV y2jk6heXNmAJUb8Hadx1mo5/OwJmxBPzd1ybltMUN7xtQ9BmSGbY+xPlcXvUTTrh 4NndcT90GVXpMaBz7c9sh2sTJKjPYkA5/ivCRhzW1XReS2UxfkAXq/b9A0WVwojn LVpYfc94lbPV2ukvBYqd/a4YdSj6tWIreudPW5OSARPwoT1u7XA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:27 2025 by rpki-client