$ rpki-client -vvf repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft File: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft (raw, json) Hash identifier: q9hW8sDCT0Fc5VqDgwdr3a0ALToFNR0RDGiK1ybjrtc= Subject key identifier: 12:71:B4:A4:A1:07:75:F1:BE:0A:39:0C:C2:35:95:9B:3B:AB:4D:98 Authority key identifier: 72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 Certificate issuer: /CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Certificate serial: 2BD6CB9C4EC3A2BC5AB971EECBB97CEED42BCAEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft Manifest number: 86 Signing time: Fri 22 Aug 2025 21:30:38 +0000 Manifest this update: Fri 22 Aug 2025 21:25:38 +0000 Manifest next update: Tue 26 Aug 2025 07:07:38 +0000 Files and hashes: 1: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl (hash: 7HSPp017plI3+AphngGn+7yRX3eQTC5f7rQ//vM4YdM=) 2: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: Mh2qAtV9OXmT8dkxySa/tVQuTPHOj1MMmtUTif0IndI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:d6:cb:9c:4e:c3:a2:bc:5a:b9:71:ee:cb:b9:7c:ee:d4:2b:ca:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Validity Not Before: Aug 22 21:25:38 2025 GMT Not After : Aug 26 07:07:38 2025 GMT Subject: CN=1271B4A4A10775F1BE0A390CC235959B3BAB4D98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fd:db:ad:a1:d8:41:84:f9:04:ba:ca:34:05: 5d:e6:d5:3f:77:2d:26:06:3d:bb:50:4c:05:cf:02: 40:3a:a9:07:8d:37:65:f4:38:70:cd:90:d9:59:05: ce:75:11:6b:74:44:78:a4:1a:bb:19:62:50:d6:88: 28:e7:cf:ce:a4:8e:10:5f:69:4c:81:85:8f:ab:c8: 43:e6:b9:2e:b1:f8:53:1c:59:0c:d1:64:70:d6:81: 97:33:ab:de:86:54:a5:f0:fa:0c:75:b6:db:4e:2e: 5a:71:55:da:28:61:75:18:2e:d9:4c:d5:fd:77:73: 05:b8:89:7e:bf:62:44:4d:1e:7d:bc:67:77:27:94: 72:0f:8e:bc:9a:b6:33:38:de:22:37:88:c9:36:0f: 32:71:40:31:ee:bb:58:6a:ef:4f:9f:c8:9b:ef:aa: 15:5a:98:a2:9c:f4:e7:1d:a4:e1:1a:12:a8:fd:4d: 5b:40:f5:f6:78:bf:60:e5:99:91:1a:70:d8:c3:dc: 7a:37:9d:51:23:d6:b9:12:11:cd:50:6f:0a:1d:37: 04:64:0b:ff:ee:24:74:b1:f3:5d:04:d0:d1:81:57: a4:38:03:a8:89:0c:3d:13:85:f5:a5:e0:0a:53:5f: 88:59:7d:1b:18:ac:5e:71:32:86:7e:97:ef:8f:66: 80:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:71:B4:A4:A1:07:75:F1:BE:0A:39:0C:C2:35:95:9B:3B:AB:4D:98 X509v3 Authority Key Identifier: keyid:72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:5f:26:36:c7:7a:2a:db:34:41:6d:b3:e9:75:73:ee:f6:76: aa:af:81:38:ba:df:12:6a:11:26:19:aa:b6:96:51:dd:fe:e6: b4:5c:29:ed:4f:d7:3d:8d:1f:48:43:14:d2:f9:13:69:e0:3d: 33:e5:62:c5:f8:2a:ee:4d:d3:24:0a:4b:cd:a8:f3:fc:07:99: 29:cd:12:67:40:9c:4d:b0:0f:50:19:2f:47:89:94:92:c4:76: 3d:9f:f2:db:cc:73:36:d6:42:29:17:03:0d:36:21:ef:98:ae: c3:5f:b8:2e:51:db:b8:18:4a:97:f1:a6:ca:1e:8f:ae:7c:98: a9:93:0e:6a:1c:5f:14:10:ff:88:07:6e:0c:74:ea:dd:2e:e9: 5f:3b:55:51:57:39:cd:df:d9:f3:9a:96:00:3c:45:8b:0b:3e: 6e:d0:3e:7e:19:41:35:8b:80:3f:95:ee:73:9b:2e:d3:16:83: e4:72:17:7c:ac:0b:42:ab:e6:da:a6:8b:d6:91:c7:70:68:0d: 35:7a:43:61:e5:22:58:f1:a3:2c:79:7c:8e:e9:cf:4a:50:c8: 29:00:8d:da:02:8b:d0:83:c6:79:5e:cf:73:10:8d:c5:39:b8: 5c:af:b0:e4:e9:b2:7b:2f:2d:5e:05:74:4e:55:d0:ad:5f:11: 44:cc:93:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK9bLnE7DorxauXHuy7l87tQryuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURG QTNGNEUxNjAeFw0yNTA4MjIyMTI1MzhaFw0yNTA4MjYwNzA3MzhaMDMxMTAvBgNV BAMTKDEyNzFCNEE0QTEwNzc1RjFCRTBBMzkwQ0MyMzU5NTlCM0JBQjREOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0/dutodhBhPkEuso0BV3m1T93 LSYGPbtQTAXPAkA6qQeNN2X0OHDNkNlZBc51EWt0RHikGrsZYlDWiCjnz86kjhBf aUyBhY+ryEPmuS6x+FMcWQzRZHDWgZczq96GVKXw+gx1tttOLlpxVdooYXUYLtlM 1f13cwW4iX6/YkRNHn28Z3cnlHIPjryatjM43iI3iMk2DzJxQDHuu1hq70+fyJvv qhVamKKc9OcdpOEaEqj9TVtA9fZ4v2DlmZEacNjD3Ho3nVEj1rkSEc1QbwodNwRk C//uJHSx810E0NGBV6Q4A6iJDD0ThfWl4ApTX4hZfRsYrF5xMoZ+l++PZoDrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEnG0pKEHdfG+CjkMwjWVmzurTZgwHwYDVR0j BBgwFoAUctja/UgbP4+sKyWZyePs7fo/ThYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDdmNmNmNi1kZDJiLTQ4MjMtYjI2NC1lMmJmNGYzMGFiZmUvMC83MkQ4REFGRDQ4 MUIzRjhGQUMyQjI1OTlDOUUzRUNFREZBM0Y0RTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURGQTNG NEUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ3ZjZjZjYtZGQyYi00ODIzLWIy NjQtZTJiZjRmMzBhYmZlLzAvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VD RURGQTNGNEUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElfJjbHeirbNEFts+l1c+72dqqvgTi63xJq ESYZqraWUd3+5rRcKe1P1z2NH0hDFNL5E2ngPTPlYsX4Ku5N0yQKS82o8/wHmSnN EmdAnE2wD1AZL0eJlJLEdj2f8tvMczbWQikXAw02Ie+YrsNfuC5R27gYSpfxpsoe j658mKmTDmocXxQQ/4gHbgx06t0u6V87VVFXOc3f2fOalgA8RYsLPm7QPn4ZQTWL gD+V7nObLtMWg+RyF3ysC0Kr5tqmi9aRx3BoDTV6Q2HlIljxoyx5fI7pz0pQyCkA jdoCi9CDxnlez3MQjcU5uFyvsOTpsnsvLV4FdE5V0K1fEUTMk6Y= -----END CERTIFICATE-----Generated at Sat Aug 23 19:20:57 2025 by rpki-client