$ rpki-client -vvf repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft File: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft (raw, json) Hash identifier: 1VEwV40aKhWuPi31EuN0XkVPfScaX9E/ZviHsL9Nc5I= Subject key identifier: 80:38:F4:49:F2:36:24:E9:9C:86:AC:75:33:50:80:E3:3E:11:51:F8 Authority key identifier: E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 Certificate issuer: /CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Certificate serial: 2670EC19E3763F2708B6304F174A470E0C5B74A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft Manifest number: 050A Signing time: Thu 21 Aug 2025 21:22:22 +0000 Manifest this update: Thu 21 Aug 2025 21:17:22 +0000 Manifest next update: Mon 25 Aug 2025 07:38:22 +0000 Files and hashes: 1: 323430323a366163303a3a2f33332d3333203d3e20313337333036.roa (hash: +LtGD0I+CcS2FlJTjK9Ti6xX24NgEqNHjvhmLsu4MGU=) 2: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl (hash: 4yaoiZwBvUdTRRwUXUt+fw5ZA9qxdOEW18giGlmS7oc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:70:ec:19:e3:76:3f:27:08:b6:30:4f:17:4a:47:0e:0c:5b:74:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Validity Not Before: Aug 21 21:17:22 2025 GMT Not After : Aug 25 07:38:22 2025 GMT Subject: CN=8038F449F23624E99C86AC75335080E33E1151F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:73:1f:64:93:c4:93:f4:af:42:af:e1:e9:a0: 74:f2:b2:47:ae:04:c9:e3:81:c3:e1:91:1d:db:6f: c1:0c:c7:af:46:cc:b9:71:c6:f2:b9:ac:f5:25:0a: d9:ba:19:00:48:54:28:fe:8a:9d:dd:b2:be:63:c0: 0f:aa:e2:9f:97:be:70:42:d5:b6:9c:f2:c8:24:28: e3:c8:76:75:c9:fa:3e:30:6c:57:37:8e:f3:bd:01: 9f:7e:d4:03:3c:93:f3:fc:ae:42:2c:5d:62:7f:19: ad:1e:c0:f9:97:93:ea:eb:f3:82:60:f8:a0:bb:3e: 03:39:54:26:18:cf:d2:a4:44:bd:1b:7c:03:25:d7: 1d:e6:fc:0e:8e:dd:2d:24:5d:d0:1e:b6:07:ee:da: cc:bc:a2:f0:04:34:d5:c7:e5:a4:39:9b:1f:e0:a2: 69:f9:a4:85:26:4b:40:8a:b0:2a:a7:99:6c:c8:b7: bd:fc:8e:72:c7:7e:aa:48:4e:7e:21:bd:86:34:d6: 18:25:5f:e6:99:c7:67:2e:cc:12:1c:50:f6:f5:6e: fa:e3:66:af:f4:fd:f3:0c:29:02:01:2a:ae:36:29: cb:32:c3:f5:cd:15:a1:2e:2d:8c:93:a5:24:f7:9e: 22:d9:1e:db:f0:d5:ea:25:85:d3:b1:61:8f:be:28: 08:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:38:F4:49:F2:36:24:E9:9C:86:AC:75:33:50:80:E3:3E:11:51:F8 X509v3 Authority Key Identifier: keyid:E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:c5:6b:d3:b3:24:bf:bc:7f:1c:36:5d:43:67:f9:e7:1f:f2: 15:ef:30:6a:63:98:4c:3e:f2:cc:b8:0a:dd:90:fb:33:99:46: be:d8:fe:41:fe:ee:50:71:28:db:ba:4b:47:5f:37:96:95:97: eb:46:eb:0f:52:dd:81:23:57:f7:0b:e7:2a:9a:5f:dc:e9:26: 64:eb:d9:b8:ed:b4:fb:d5:6d:bf:f3:b8:4e:a1:08:77:ef:c7: 6a:85:f1:9c:ff:92:58:f6:50:da:21:f4:17:3c:0b:b6:a0:f1: 86:39:2a:a9:0a:9b:99:00:65:48:7b:6b:9d:34:0b:7f:af:ac: 76:d8:eb:10:ad:46:55:68:2c:5d:2d:18:34:aa:97:fa:c2:62: 07:09:99:06:e7:a5:2d:45:a8:4d:10:c0:48:51:a7:4c:66:3e: c5:5b:7a:cb:70:fc:ee:2f:f9:fd:35:e3:da:18:1d:e3:84:31: 80:2b:94:5f:8f:9e:e6:44:2f:4d:4d:ad:c4:c2:02:5f:57:43: 82:bd:f7:54:cb:03:51:6f:7e:17:99:dc:0f:01:be:40:d2:3d: 25:d0:89:df:92:63:62:74:25:c3:e7:45:21:d9:35:dc:e7:00: 7e:c9:71:64:f5:64:74:d2:32:50:fc:f8:e6:a4:02:7d:d4:ad: 72:c0:23:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJnDsGeN2PycItjBPF0pHDgxbdKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdE QzVFMTAxNDAeFw0yNTA4MjEyMTE3MjJaFw0yNTA4MjUwNzM4MjJaMDMxMTAvBgNV BAMTKDgwMzhGNDQ5RjIzNjI0RTk5Qzg2QUM3NTMzNTA4MEUzM0UxMTUxRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0cx9kk8ST9K9Cr+HpoHTyskeu BMnjgcPhkR3bb8EMx69GzLlxxvK5rPUlCtm6GQBIVCj+ip3dsr5jwA+q4p+XvnBC 1bac8sgkKOPIdnXJ+j4wbFc3jvO9AZ9+1AM8k/P8rkIsXWJ/Ga0ewPmXk+rr84Jg +KC7PgM5VCYYz9KkRL0bfAMl1x3m/A6O3S0kXdAetgfu2sy8ovAENNXH5aQ5mx/g omn5pIUmS0CKsCqnmWzIt738jnLHfqpITn4hvYY01hglX+aZx2cuzBIcUPb1bvrj Zq/0/fMMKQIBKq42Kcsyw/XNFaEuLYyTpST3niLZHtvw1eolhdOxYY++KAi7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgDj0SfI2JOmchqx1M1CA4z4RUfgwHwYDVR0j BBgwFoAU5yYirg9ptM2ryc0iOz4Gx9xeEBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1YmY3OS1lODRhLTQwZTAtOGZkNC1mMTY5YzE4NmJlOGYvMC9FNzI2MjJBRTBG NjlCNENEQUJDOUNEMjIzQjNFMDZDN0RDNUUxMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdEQzVF MTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNWJmNzktZTg0YS00MGUwLThm ZDQtZjE2OWMxODZiZThmLzAvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2 QzdEQzVFMTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbFa9OzJL+8fxw2XUNn+ecf8hXvMGpjmEw+ 8sy4Ct2Q+zOZRr7Y/kH+7lBxKNu6S0dfN5aVl+tG6w9S3YEjV/cL5yqaX9zpJmTr 2bjttPvVbb/zuE6hCHfvx2qF8Zz/klj2UNoh9Bc8C7ag8YY5KqkKm5kAZUh7a500 C3+vrHbY6xCtRlVoLF0tGDSql/rCYgcJmQbnpS1FqE0QwEhRp0xmPsVbestw/O4v +f0149oYHeOEMYArlF+PnuZEL01NrcTCAl9XQ4K991TLA1FvfheZ3A8BvkDSPSXQ id+SY2J0JcPnRSHZNdznAH7JcWT1ZHTSMlD8+OakAn3UrXLAI7Y= -----END CERTIFICATE-----Generated at Sun Aug 24 04:37:06 2025 by rpki-client