$ rpki-client -vvf repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft File: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft (raw, json) Hash identifier: 2rB34EFo95acz4c2wkp7LNBc36a6xyQmUphVUdIl0kY= Subject key identifier: 63:C8:E6:F0:DF:22:28:A3:61:12:09:2B:DE:E5:7F:47:91:10:52:A7 Authority key identifier: E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 Certificate issuer: /CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Certificate serial: 5D4E9891C5A6F0B97BC02B1E7C8F5F9574CD9114 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft Manifest number: 04F2 Signing time: Sat 28 Jun 2025 03:24:10 +0000 Manifest this update: Sat 28 Jun 2025 03:19:10 +0000 Manifest next update: Tue 01 Jul 2025 14:43:10 +0000 Files and hashes: 1: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl (hash: zLhJRoZkap4HnboYESy7m7lbjOR8JBc/3/OzA13W5XI=) 2: 323430323a366163303a3a2f33332d3333203d3e20313337333036.roa (hash: +LtGD0I+CcS2FlJTjK9Ti6xX24NgEqNHjvhmLsu4MGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 14:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4e:98:91:c5:a6:f0:b9:7b:c0:2b:1e:7c:8f:5f:95:74:cd:91:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Validity Not Before: Jun 28 03:19:10 2025 GMT Not After : Jul 1 14:43:10 2025 GMT Subject: CN=63C8E6F0DF2228A36112092BDEE57F47911052A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2d:c1:c4:1a:c7:db:64:5b:69:60:dc:c5:99: 3c:93:aa:80:67:4c:e8:d8:6d:a9:6c:e2:e9:f5:13: e0:6a:b5:a1:b9:72:f9:de:3e:61:98:e3:f5:00:cf: 85:0d:60:6b:79:95:8b:8c:c8:ba:3c:ab:24:c2:3e: b9:8b:70:bc:98:c9:0f:63:99:ac:10:e7:17:ad:3b: a9:66:83:01:8f:a3:80:b7:f9:e2:03:e7:2a:60:80: b6:b6:d9:19:17:51:12:a5:e6:10:0e:65:30:fc:b6: f6:09:f1:6e:ff:61:9d:76:38:ab:c3:18:a7:ce:b4: 4c:ff:e0:58:80:af:17:10:ff:a1:8f:96:2e:2d:2d: 08:78:da:5d:6f:f1:05:3a:c6:d7:6b:74:a9:f2:69: c1:bb:f8:b9:8b:68:d5:3b:4b:f1:fe:9f:0d:61:35: 4f:87:43:7f:11:0c:c6:b1:37:41:bc:4e:6f:3e:4b: c7:a8:37:f1:43:22:eb:0b:e7:0d:d0:4b:0e:2a:ed: fe:b8:d4:c4:63:fe:be:fd:85:67:61:76:da:43:1c: 1a:83:5c:13:c9:d8:3a:9b:f5:d4:14:0e:f2:4b:64: cf:96:86:03:77:f6:63:b9:47:67:48:0c:24:39:25: a6:7b:99:d5:4a:f8:f5:1e:c2:7f:02:bb:37:09:54: 12:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C8:E6:F0:DF:22:28:A3:61:12:09:2B:DE:E5:7F:47:91:10:52:A7 X509v3 Authority Key Identifier: keyid:E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:a5:f3:b4:af:17:a3:35:48:a7:24:a9:e1:cb:a8:4b:60:d8: d7:82:99:b1:3c:92:31:d7:4d:82:d3:82:e0:c1:30:9f:8a:4c: cb:9d:a5:f4:1a:38:7d:c3:3c:e5:ad:4f:4b:dd:97:54:37:5a: 5f:c4:2a:d8:8b:f1:19:76:f2:8f:56:57:da:1e:90:fc:91:ea: d0:b9:45:5d:03:33:a3:c3:68:42:5c:0d:4a:24:01:39:0a:c2: 67:43:99:ce:fc:92:77:21:e1:9e:a0:97:f3:b8:8a:41:45:f9: 17:34:ee:8d:c5:56:e8:f0:18:05:db:74:14:1c:98:17:3b:a9: 13:4f:3b:b4:ba:0f:c6:ef:20:53:9f:b4:c3:2d:9b:88:28:79: 05:1f:ac:9c:be:d8:0d:70:a2:57:93:ad:64:8c:57:43:2a:f1: d9:21:e3:16:56:a0:da:b3:10:dd:c1:58:c2:b5:03:07:a3:d3: fd:9a:32:a7:86:9a:7b:f2:b7:36:2a:62:ee:0f:04:fe:04:ce: 03:de:7f:b5:81:ad:99:38:7d:8b:da:a8:d9:b3:34:8c:20:3c: db:e1:30:ce:3b:80:33:4d:eb:25:b3:00:40:36:ff:e7:8a:98: 9b:95:61:a8:2a:04:43:72:35:08:e5:33:5d:1c:02:7a:c4:24: 71:6e:48:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXU6YkcWm8Ll7wCsefI9flXTNkRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdE QzVFMTAxNDAeFw0yNTA2MjgwMzE5MTBaFw0yNTA3MDExNDQzMTBaMDMxMTAvBgNV BAMTKDYzQzhFNkYwREYyMjI4QTM2MTEyMDkyQkRFRTU3RjQ3OTExMDUyQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoLcHEGsfbZFtpYNzFmTyTqoBn TOjYbals4un1E+BqtaG5cvnePmGY4/UAz4UNYGt5lYuMyLo8qyTCPrmLcLyYyQ9j mawQ5xetO6lmgwGPo4C3+eID5ypggLa22RkXURKl5hAOZTD8tvYJ8W7/YZ12OKvD GKfOtEz/4FiArxcQ/6GPli4tLQh42l1v8QU6xtdrdKnyacG7+LmLaNU7S/H+nw1h NU+HQ38RDMaxN0G8Tm8+S8eoN/FDIusL5w3QSw4q7f641MRj/r79hWdhdtpDHBqD XBPJ2Dqb9dQUDvJLZM+WhgN39mO5R2dIDCQ5JaZ7mdVK+PUewn8CuzcJVBJLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY8jm8N8iKKNhEgkr3uV/R5EQUqcwHwYDVR0j BBgwFoAU5yYirg9ptM2ryc0iOz4Gx9xeEBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1YmY3OS1lODRhLTQwZTAtOGZkNC1mMTY5YzE4NmJlOGYvMC9FNzI2MjJBRTBG NjlCNENEQUJDOUNEMjIzQjNFMDZDN0RDNUUxMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdEQzVF MTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNWJmNzktZTg0YS00MGUwLThm ZDQtZjE2OWMxODZiZThmLzAvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2 QzdEQzVFMTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKl87SvF6M1SKckqeHLqEtg2NeCmbE8kjHX TYLTguDBMJ+KTMudpfQaOH3DPOWtT0vdl1Q3Wl/EKtiL8Rl28o9WV9oekPyR6tC5 RV0DM6PDaEJcDUokATkKwmdDmc78knch4Z6gl/O4ikFF+Rc07o3FVujwGAXbdBQc mBc7qRNPO7S6D8bvIFOftMMtm4goeQUfrJy+2A1woleTrWSMV0Mq8dkh4xZWoNqz EN3BWMK1Awej0/2aMqeGmnvytzYqYu4PBP4EzgPef7WBrZk4fYvaqNmzNIwgPNvh MM47gDNN6yWzAEA2/+eKmJuVYagqBENyNQjlM10cAnrEJHFuSLA= -----END CERTIFICATE-----Generated at Sun Jun 29 18:08:42 2025 by rpki-client