$ rpki-client -vvf repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft File: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft (raw, json) Hash identifier: UT7vn9QVukocS3a3h3A9EdibnkZh4EN9qMw/rlqUCms= Subject key identifier: A0:9D:E7:3E:0F:5D:C7:9E:E4:BF:EF:A7:DA:20:22:B8:3A:5D:BE:4D Authority key identifier: 73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 Certificate issuer: /CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Certificate serial: 3C9449D52BABD85B4A23EF7A0B44AB4220C344C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft Manifest number: 0284 Signing time: Sat 06 Sep 2025 13:01:04 +0000 Manifest this update: Sat 06 Sep 2025 12:56:04 +0000 Manifest next update: Tue 09 Sep 2025 20:03:04 +0000 Files and hashes: 1: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl (hash: 0M8lRPPxo5x6NqUy8ctziW8bByLkE58P/Y8hbG8Z34k=) 2: 3230322e3138332e302e302f31392d3139203d3e203338313630.roa (hash: MEztuZqZgD3unDvE9UbT7j2miLRVC0ZWnvrCm6yOt54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 20:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:94:49:d5:2b:ab:d8:5b:4a:23:ef:7a:0b:44:ab:42:20:c3:44:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Validity Not Before: Sep 6 12:56:04 2025 GMT Not After : Sep 9 20:03:04 2025 GMT Subject: CN=A09DE73E0F5DC79EE4BFEFA7DA2022B83A5DBE4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:de:c1:e1:5f:23:b1:04:b1:52:24:0b:6c:13: 66:ea:ba:b0:e9:b4:52:8e:97:42:e0:06:c0:74:71: 65:e8:47:86:a2:82:ef:94:2f:ed:08:a5:37:83:58: 42:87:bb:f1:93:b6:c5:bd:d4:a8:dc:a0:17:f6:75: bb:c6:74:c8:c0:97:2a:ec:e6:d8:13:92:77:8f:f6: 8b:55:a7:34:86:0d:4a:cf:14:f6:52:ec:fe:b2:fe: b9:22:eb:6a:0d:0c:e7:57:00:64:1b:7f:a3:92:5d: b0:79:ba:b0:18:f4:c0:50:a3:62:d0:dc:1a:c9:24: 2c:78:c2:26:7b:7f:1a:bb:64:9e:6a:b0:07:11:b5: 9f:f1:50:0f:f3:5c:bf:1b:be:e8:08:1b:67:0e:51: 18:fd:d6:71:67:bd:ff:0a:a5:84:fb:19:09:42:d8: 20:6f:75:31:86:ef:2f:dd:ee:ab:f0:f8:ca:f0:af: 25:0e:61:ec:73:86:70:70:c1:6f:91:3c:f6:4d:c8: fe:ac:8d:aa:89:cb:7c:63:55:40:d4:79:53:da:e3: 3f:75:15:15:b4:ef:01:8c:9f:57:13:b2:00:38:1e: d7:51:92:06:5a:8c:b2:2b:e2:8a:d2:23:5c:14:c1: 65:63:aa:22:2c:84:62:14:3e:4f:60:7e:a5:01:3f: 00:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9D:E7:3E:0F:5D:C7:9E:E4:BF:EF:A7:DA:20:22:B8:3A:5D:BE:4D X509v3 Authority Key Identifier: keyid:73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f5:ab:b1:a5:29:ca:0f:93:67:a8:ee:f2:ae:2c:e8:e5:5f: 45:c3:39:35:f7:3e:89:e9:c9:8b:d1:42:a2:c4:0c:a0:94:46: 8a:c9:ea:31:ce:a5:8b:66:a5:a7:8d:38:66:b1:81:ee:d1:8a: 46:42:fe:e3:54:4b:0f:5f:a0:17:71:5e:da:f7:63:9f:d2:ed: cb:6c:54:51:d8:71:e2:0d:7a:9f:4e:de:f8:1f:67:52:bd:40: 08:e0:36:0a:86:3b:07:c5:75:de:22:95:3d:50:7e:37:45:c4: 56:87:4e:4f:3a:c3:52:58:47:f5:9a:ff:eb:f7:e9:b2:c4:af: ea:ca:1b:e0:dc:63:bb:7b:a0:08:83:a2:04:a8:dc:36:d4:3e: d8:44:23:ab:22:87:38:fc:81:2e:e2:e2:8c:f1:8f:9d:b1:73: 45:1e:28:72:89:49:1b:37:da:79:55:bb:01:d6:c9:a9:1a:01: 2b:03:3e:c2:1a:e0:11:38:7b:07:0c:74:23:94:0e:0e:90:67: 54:e0:6a:97:58:7a:25:0b:54:51:f5:f1:60:b7:c0:2e:eb:8f: a5:45:38:20:02:7e:61:4c:f7:40:40:bc:d0:59:0a:4b:7f:75: ec:b0:02:21:e2:ae:26:47:6d:33:28:cd:84:4d:21:8a:e9:9b: 98:8f:7f:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPJRJ1Sur2FtKI+96C0SrQiDDRMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5 RUZFOTZBMzAeFw0yNTA5MDYxMjU2MDRaFw0yNTA5MDkyMDAzMDRaMDMxMTAvBgNV BAMTKEEwOURFNzNFMEY1REM3OUVFNEJGRUZBN0RBMjAyMkI4M0E1REJFNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa3sHhXyOxBLFSJAtsE2bqurDp tFKOl0LgBsB0cWXoR4aigu+UL+0IpTeDWEKHu/GTtsW91KjcoBf2dbvGdMjAlyrs 5tgTkneP9otVpzSGDUrPFPZS7P6y/rki62oNDOdXAGQbf6OSXbB5urAY9MBQo2LQ 3BrJJCx4wiZ7fxq7ZJ5qsAcRtZ/xUA/zXL8bvugIG2cOURj91nFnvf8KpYT7GQlC 2CBvdTGG7y/d7qvw+MrwryUOYexzhnBwwW+RPPZNyP6sjaqJy3xjVUDUeVPa4z91 FRW07wGMn1cTsgA4HtdRkgZajLIr4orSI1wUwWVjqiIshGIUPk9gfqUBPwANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoJ3nPg9dx57kv++n2iAiuDpdvk0wHwYDVR0j BBgwFoAUcy9G10x6jF2IinCRpwbzoJ7+lqMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTBkMWFhMS00YzdmLTQ0OGItYjJiYi0wMmM1NzE1MWYyMTAvMC83MzJGNDZENzRD N0E4QzVEODg4QTcwOTFBNzA2RjNBMDlFRkU5NkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5RUZF OTZBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUwZDFhYTEtNGM3Zi00NDhiLWIy YmItMDJjNTcxNTFmMjEwLzAvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYz QTA5RUZFOTZBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIH1q7GlKcoPk2eo7vKuLOjlX0XDOTX3Ponp yYvRQqLEDKCURorJ6jHOpYtmpaeNOGaxge7RikZC/uNUSw9foBdxXtr3Y5/S7cts VFHYceINep9O3vgfZ1K9QAjgNgqGOwfFdd4ilT1QfjdFxFaHTk86w1JYR/Wa/+v3 6bLEr+rKG+DcY7t7oAiDogSo3DbUPthEI6sihzj8gS7i4ozxj52xc0UeKHKJSRs3 2nlVuwHWyakaASsDPsIa4BE4ewcMdCOUDg6QZ1TgapdYeiULVFH18WC3wC7rj6VF OCACfmFM90BAvNBZCkt/deywAiHiriZHbTMozYRNIYrpm5iPfyE= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:12 2025 by rpki-client