$ rpki-client -vvf repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft File: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft (raw, json) Hash identifier: NQrNWyo3z8OJ2v1PC64Rkz114VcjjjHus0YQeZ7GAvI= Subject key identifier: 98:67:E5:CC:8D:B8:01:73:DC:FB:28:0F:76:5B:B0:43:77:84:CB:EE Authority key identifier: 73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 Certificate issuer: /CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Certificate serial: 1DABEA009A7D565DC63031311CE164FFBFE6428D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft Manifest number: 026E Signing time: Sat 19 Jul 2025 04:41:01 +0000 Manifest this update: Sat 19 Jul 2025 04:36:01 +0000 Manifest next update: Tue 22 Jul 2025 13:10:01 +0000 Files and hashes: 1: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl (hash: +Ky8QbFad5rbpEnLpq8oCU/+Zo0JnejFkc12o1v/3xc=) 2: 3230322e3138332e302e302f31392d3139203d3e203338313630.roa (hash: MEztuZqZgD3unDvE9UbT7j2miLRVC0ZWnvrCm6yOt54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 13:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ab:ea:00:9a:7d:56:5d:c6:30:31:31:1c:e1:64:ff:bf:e6:42:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Validity Not Before: Jul 19 04:36:01 2025 GMT Not After : Jul 22 13:10:01 2025 GMT Subject: CN=9867E5CC8DB80173DCFB280F765BB0437784CBEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:de:1f:39:87:dc:f6:3b:50:0b:ff:10:91:f4: e0:8f:28:c0:23:f3:36:1b:bf:24:21:be:a4:b5:53: 2a:7a:4c:8a:ea:ec:36:d6:bf:68:8f:28:9e:21:79: 72:b6:62:17:d2:93:78:56:40:76:78:be:76:dd:2a: 0c:ca:fd:3d:06:8b:aa:0a:0a:7d:b9:3f:78:7f:04: e4:94:20:2f:09:cc:33:2e:d9:02:c7:d4:bc:af:cb: 78:53:a1:f0:40:39:a2:f7:ea:95:04:54:a9:f7:28: a2:05:49:57:61:b5:49:af:68:69:07:2a:af:b8:b1: 8f:22:fd:d3:45:82:d4:17:c6:ef:af:fd:f5:bc:af: 60:c8:cb:45:6c:34:78:9c:23:ee:33:1f:22:1e:e1: 5e:c6:b4:32:63:31:df:f9:65:2b:9a:1d:ba:53:65: 52:85:b5:38:a8:db:6a:5c:d9:20:b7:b5:a6:4e:8d: 82:17:2f:ff:52:96:ea:61:5d:88:e1:df:b8:5b:70: 3c:24:df:15:7f:2a:a9:8f:8a:bf:d4:1b:f7:b7:ad: bc:47:90:a4:25:63:8f:da:3a:cb:2d:fb:e9:08:ef: 80:ca:d0:50:ec:e9:2d:56:bd:c3:3f:20:b1:f9:3f: 81:c7:c7:da:21:df:5d:c1:76:43:f7:a8:b8:53:9c: 6f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:67:E5:CC:8D:B8:01:73:DC:FB:28:0F:76:5B:B0:43:77:84:CB:EE X509v3 Authority Key Identifier: keyid:73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:19:14:b3:2c:a6:f7:51:ac:bb:39:87:4f:6c:70:ea:ff:d9: 26:aa:88:75:e9:c6:35:3e:9c:30:d2:6f:ef:ba:df:bb:36:26: 27:3c:0a:da:97:09:9e:b6:ea:a2:4f:22:59:91:be:f4:1c:70: 2e:ef:67:cd:e6:79:99:ea:fe:b2:11:67:8c:b6:65:fe:b7:66: 01:55:e8:81:22:ac:9f:8c:fb:99:06:15:44:1a:08:3b:7b:39: bb:41:d1:32:39:b7:fb:cb:ff:7a:72:7e:e1:8f:38:73:62:72: a5:3e:62:87:3f:3f:26:d2:2f:0e:bd:66:42:33:6c:32:4c:fe: 24:a8:76:6f:54:6a:a7:b7:29:e0:fd:eb:c6:15:59:87:ac:fa: 7d:e4:ee:20:4f:7e:dc:d0:b5:97:b0:29:6f:f3:dd:0c:03:1d: 9e:5d:68:82:00:e3:86:7f:15:4f:b3:12:c1:57:55:88:96:54: c3:30:32:d5:68:06:52:7d:45:f8:c2:c3:e4:94:e9:7a:04:d8: 1d:3c:8b:96:c2:ef:0f:4c:78:89:b4:df:d3:12:00:67:3b:8b: 37:09:7a:db:31:5c:79:5c:3a:22:e7:e7:c8:ca:a9:70:13:09: 57:d1:80:e2:4b:a0:6b:ce:c1:c2:12:8f:30:42:1d:ce:64:83: 21:60:fd:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHavqAJp9Vl3GMDExHOFk/7/mQo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5 RUZFOTZBMzAeFw0yNTA3MTkwNDM2MDFaFw0yNTA3MjIxMzEwMDFaMDMxMTAvBgNV BAMTKDk4NjdFNUNDOERCODAxNzNEQ0ZCMjgwRjc2NUJCMDQzNzc4NENCRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC73h85h9z2O1AL/xCR9OCPKMAj 8zYbvyQhvqS1Uyp6TIrq7DbWv2iPKJ4heXK2YhfSk3hWQHZ4vnbdKgzK/T0Gi6oK Cn25P3h/BOSUIC8JzDMu2QLH1Lyvy3hTofBAOaL36pUEVKn3KKIFSVdhtUmvaGkH Kq+4sY8i/dNFgtQXxu+v/fW8r2DIy0VsNHicI+4zHyIe4V7GtDJjMd/5ZSuaHbpT ZVKFtTio22pc2SC3taZOjYIXL/9SluphXYjh37hbcDwk3xV/KqmPir/UG/e3rbxH kKQlY4/aOsst++kI74DK0FDs6S1WvcM/ILH5P4HHx9oh313BdkP3qLhTnG/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmGflzI24AXPc+ygPdluwQ3eEy+4wHwYDVR0j BBgwFoAUcy9G10x6jF2IinCRpwbzoJ7+lqMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTBkMWFhMS00YzdmLTQ0OGItYjJiYi0wMmM1NzE1MWYyMTAvMC83MzJGNDZENzRD N0E4QzVEODg4QTcwOTFBNzA2RjNBMDlFRkU5NkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5RUZF OTZBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUwZDFhYTEtNGM3Zi00NDhiLWIy YmItMDJjNTcxNTFmMjEwLzAvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYz QTA5RUZFOTZBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8ZFLMspvdRrLs5h09scOr/2SaqiHXpxjU+ nDDSb++637s2Jic8CtqXCZ626qJPIlmRvvQccC7vZ83meZnq/rIRZ4y2Zf63ZgFV 6IEirJ+M+5kGFUQaCDt7ObtB0TI5t/vL/3pyfuGPOHNicqU+Yoc/PybSLw69ZkIz bDJM/iSodm9Uaqe3KeD968YVWYes+n3k7iBPftzQtZewKW/z3QwDHZ5daIIA44Z/ FU+zEsFXVYiWVMMwMtVoBlJ9RfjCw+SU6XoE2B08i5bC7w9MeIm039MSAGc7izcJ etsxXHlcOiLn58jKqXATCVfRgOJLoGvOwcISjzBCHc5kgyFg/U0= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:44 2025 by rpki-client