$ rpki-client -vvf repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft File: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft (raw, json) Hash identifier: MHDgD/ovG5zRBzgdinDpxtbc6MIpJ7u+4oT2mmpApAA= Subject key identifier: 78:C4:40:14:E1:08:93:41:E3:49:8D:92:D3:0A:AA:52:CA:06:2E:8B Authority key identifier: 73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E Certificate issuer: /CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Certificate serial: 747B7DE59C2123CF90476A32FA1AC5E314B62555 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft Manifest number: A7 Signing time: Sun 20 Jul 2025 12:11:23 +0000 Manifest this update: Sun 20 Jul 2025 12:06:23 +0000 Manifest next update: Thu 24 Jul 2025 00:02:23 +0000 Files and hashes: 1: 3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa (hash: 5d1MR7rKvEWqFJE9IZmsunjaxhaRl4wODAGB+LLjxEo=) 2: 3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa (hash: WMzT2ENPMmi2mcaD4CnPa7CoBrNxdNCIISZtPItZ4MM=) 3: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl (hash: usuHeNAvZNYSZvlBYMUwJZwSXhyIWQU+FJaJWQ5expA=) 4: 3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa (hash: ky6kqewG2CLcXwQoFuB0Gbkz5WHCCY7RgpoJqEc0cVU=) 5: 323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa (hash: fYFecXdBAeKoyIAgB0JeLy6cqYChyPHEhUfoQQOYxUQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:7b:7d:e5:9c:21:23:cf:90:47:6a:32:fa:1a:c5:e3:14:b6:25:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Validity Not Before: Jul 20 12:06:23 2025 GMT Not After : Jul 24 00:02:23 2025 GMT Subject: CN=78C44014E1089341E3498D92D30AAA52CA062E8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0f:08:a2:71:2d:1d:67:91:a7:a7:02:be:5b: 09:61:1a:f6:da:ae:a5:e2:62:cb:f3:5c:11:8c:70: 77:f7:6f:7e:7d:70:d5:78:47:8c:08:11:ae:ef:e0: 7c:87:97:bb:b9:4d:26:3b:fa:b2:82:31:d7:25:a4: 60:00:5a:cb:f1:c4:d1:28:f3:17:bd:03:3c:4c:2f: 49:73:7a:c4:f3:0f:e6:12:d2:07:42:a5:f5:db:a8: 3b:09:91:99:a5:41:f8:5d:48:89:7d:46:69:10:e6: 73:8b:c3:2b:5b:98:ae:16:6c:d6:92:cd:48:80:61: 30:63:cf:dc:67:7b:da:ed:b0:bb:f1:95:1b:b9:a0: 0c:e2:1c:2e:98:c8:77:ed:69:8e:7c:aa:6a:88:55: 78:0f:d2:f6:d6:56:5d:2a:2b:05:d9:fe:95:0c:b9: 70:41:0d:51:8e:5c:77:cb:6b:b8:63:6e:a0:3d:94: 1e:35:cc:02:04:3b:c1:3a:78:37:01:30:89:db:4b: 24:16:d6:21:05:8e:5b:5b:60:77:eb:67:7c:13:92: d4:14:cd:52:8b:b5:3d:53:22:a8:d9:b6:05:7a:99: 68:4f:d3:bf:67:8b:39:14:96:91:83:6d:c3:16:50: 30:82:3f:6c:94:16:f7:84:5a:ec:48:74:e2:40:90: 3c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C4:40:14:E1:08:93:41:E3:49:8D:92:D3:0A:AA:52:CA:06:2E:8B X509v3 Authority Key Identifier: keyid:73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:85:0e:18:f7:4e:8b:7b:7b:c0:3a:9b:b5:75:a7:20:5d:cc: 8e:47:78:37:49:7a:bf:97:14:ec:14:84:8f:cb:de:c7:40:22: c3:91:5b:71:8e:19:3d:a3:57:17:00:28:5c:90:d9:dd:f3:1e: 5e:85:b1:23:f9:75:8e:8c:93:6a:96:a1:7e:af:98:2d:5b:df: 70:1f:38:02:cd:87:85:e5:de:b9:e2:99:84:0e:f6:79:e0:36: e5:ec:73:d6:3a:cc:c9:a9:44:73:f0:8b:b1:af:c6:59:a6:6c: 50:9b:81:14:b8:7e:d4:aa:ff:6a:13:4f:c3:c5:37:57:de:18: 79:9b:ce:37:3b:9f:b9:19:00:90:39:46:8b:b3:32:9e:0f:05: 98:32:09:b7:23:02:3d:75:24:89:48:32:b1:67:64:ba:0d:8c: a4:fa:85:47:1d:17:01:37:4d:a4:eb:74:ff:f0:34:6f:c2:34: 46:b6:01:59:f6:94:cb:c1:e0:a3:02:dd:64:02:27:54:cc:80: 68:f9:b5:3f:5e:c5:84:36:b9:ed:dc:ff:5d:ae:05:be:21:4b: 9a:39:ed:0e:70:c1:2d:13:6d:98:b7:24:50:5d:84:06:bb:ae: 3c:1b:6a:75:a2:bb:eb:09:b0:2b:ca:7a:7a:33:47:2c:0f:13: 57:7b:bf:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdHt95ZwhI8+QR2oy+hrF4xS2JVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3 REZDNkE4RTAeFw0yNTA3MjAxMjA2MjNaFw0yNTA3MjQwMDAyMjNaMDMxMTAvBgNV BAMTKDc4QzQ0MDE0RTEwODkzNDFFMzQ5OEQ5MkQzMEFBQTUyQ0EwNjJFOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwDwiicS0dZ5GnpwK+WwlhGvba rqXiYsvzXBGMcHf3b359cNV4R4wIEa7v4HyHl7u5TSY7+rKCMdclpGAAWsvxxNEo 8xe9AzxML0lzesTzD+YS0gdCpfXbqDsJkZmlQfhdSIl9RmkQ5nOLwytbmK4WbNaS zUiAYTBjz9xne9rtsLvxlRu5oAziHC6YyHftaY58qmqIVXgP0vbWVl0qKwXZ/pUM uXBBDVGOXHfLa7hjbqA9lB41zAIEO8E6eDcBMInbSyQW1iEFjltbYHfrZ3wTktQU zVKLtT1TIqjZtgV6mWhP079nizkUlpGDbcMWUDCCP2yUFveEWuxIdOJAkDyxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeMRAFOEIk0HjSY2S0wqqUsoGLoswHwYDVR0j BBgwFoAUcx22dXK0ijqG8EdaDiHhon38ao4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yjc1YmZkMC1hODZjLTRiZWItOWY5OS1hYWMzM2ZiNWU0OWYvMC83MzFEQjY3NTcy QjQ4QTNBODZGMDQ3NUEwRTIxRTFBMjdERkM2QThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3REZD NkE4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I3NWJmZDAtYTg2Yy00YmViLTlm OTktYWFjMzNmYjVlNDlmLzAvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUx QTI3REZDNkE4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2FDhj3Tot7e8A6m7V1pyBdzI5HeDdJer+X FOwUhI/L3sdAIsORW3GOGT2jVxcAKFyQ2d3zHl6FsSP5dY6Mk2qWoX6vmC1b33Af OALNh4Xl3rnimYQO9nngNuXsc9Y6zMmpRHPwi7GvxlmmbFCbgRS4ftSq/2oTT8PF N1feGHmbzjc7n7kZAJA5RouzMp4PBZgyCbcjAj11JIlIMrFnZLoNjKT6hUcdFwE3 TaTrdP/wNG/CNEa2AVn2lMvB4KMC3WQCJ1TMgGj5tT9exYQ2ue3c/12uBb4hS5o5 7Q5wwS0TbZi3JFBdhAa7rjwbanWiu+sJsCvKenozRywPE1d7vzc= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:09 2025 by rpki-client