$ rpki-client -vvf repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft File: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft (raw, json) Hash identifier: 8hO8Z4vBLb/0N87pXOghQZ0kJToDfcKI6duj7rYQQQs= Subject key identifier: 34:F4:CD:BD:7E:BD:75:50:70:77:0F:33:D0:7B:9E:12:95:28:02:35 Authority key identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD Certificate issuer: /CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Certificate serial: 415FE14763DF0371C730343C9553748B5C6535FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft Manifest number: 027D Signing time: Sun 07 Sep 2025 12:31:09 +0000 Manifest this update: Sun 07 Sep 2025 12:26:09 +0000 Manifest next update: Wed 10 Sep 2025 13:19:09 +0000 Files and hashes: 1: 3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (hash: WzQyswXSwMjXUbCDUIIF0PkevxcLaE+CYPcmOj6X+is=) 2: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl (hash: lf/Gy2jivM8iUOSZ41ZuJhsYkM7OryezK0XcOug79Uk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:5f:e1:47:63:df:03:71:c7:30:34:3c:95:53:74:8b:5c:65:35:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Validity Not Before: Sep 7 12:26:09 2025 GMT Not After : Sep 10 13:19:09 2025 GMT Subject: CN=34F4CDBD7EBD755070770F33D07B9E1295280235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:18:01:a9:e6:f9:f5:ba:09:3b:46:3d:ed:1c: 7a:56:04:d3:a7:5c:3d:21:01:5b:1d:96:d5:f7:ee: 3e:af:08:79:11:47:ad:51:25:44:2f:a5:e7:46:7b: a1:d6:0c:15:1a:b8:bb:05:27:5e:18:6a:b5:bf:2f: 0e:9b:f4:ec:c6:62:0d:8c:2d:4f:a0:b5:c2:41:7e: 33:30:c0:74:15:2e:d5:b1:d5:48:94:35:52:54:e5: ce:d6:5e:09:7d:8e:5d:88:46:be:a6:95:77:b8:0f: d3:c9:17:2e:6b:90:29:53:f9:55:8e:6d:3b:02:ee: 02:23:fb:f4:11:ae:0e:e5:f0:3e:a3:bf:17:0c:1a: f8:78:40:1d:ea:16:bd:71:20:ea:d5:a5:dd:6f:83: af:2f:cd:64:da:2a:8e:c4:40:35:49:be:08:60:d5: 37:ac:e8:ad:37:8d:31:4e:27:86:12:02:34:f2:f3: a9:f6:31:10:04:29:a1:2f:b1:e0:c0:38:76:79:9a: 91:60:f8:bf:ee:e0:35:82:93:e0:94:e0:49:d9:75: b1:75:1c:1b:02:28:8a:8b:1d:58:ee:5c:1c:0b:e5: 37:14:50:6c:9d:1f:29:68:7a:ca:91:0f:40:f4:8b: 59:b4:1d:6c:b8:29:b4:15:f6:a6:92:6c:21:69:88: b6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F4:CD:BD:7E:BD:75:50:70:77:0F:33:D0:7B:9E:12:95:28:02:35 X509v3 Authority Key Identifier: keyid:73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:d4:0f:df:10:66:92:a5:cc:54:cf:b4:69:41:58:c8:00:ff: db:5c:6b:29:e8:1c:87:e3:15:44:a6:3b:cc:36:9a:fb:1b:08: 29:ca:0d:f6:74:5c:ff:9f:ce:f3:de:3b:1c:3f:36:21:cf:bf: 25:a1:c9:3d:15:22:30:fe:9c:b2:bc:f7:32:c2:8d:5c:92:83: 80:d2:35:99:7f:3a:37:26:50:e0:71:63:88:fc:ed:28:f0:a3: 1e:7b:c8:da:bd:33:e6:92:dc:3a:be:84:74:32:80:6a:5a:31: 70:f0:4a:ce:01:f1:13:0d:f4:03:f5:eb:d1:12:f8:23:ca:45: 79:be:8b:06:e3:e5:9f:9e:1c:40:20:55:a5:35:24:a2:43:66: 80:e3:05:31:ea:85:b9:3f:02:41:c2:fa:d7:f6:1a:22:ef:0f: fb:d2:55:9a:06:85:68:32:61:10:16:e3:a2:2f:5e:51:f0:23: e0:7b:36:3c:49:99:d5:5f:5b:ea:11:20:4b:d5:a3:5c:20:8e: 23:3e:e3:1f:f8:59:cf:06:83:cc:ad:38:28:b1:27:6b:12:2c: dd:2b:ff:94:bf:1a:23:64:6b:26:85:f6:a7:72:fc:14:14:a2: 7b:c7:6a:41:41:e8:f8:2d:ee:f6:c6:60:f8:70:01:23:e2:3f: cc:a5:72:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQV/hR2PfA3HHMDQ8lVN0i1xlNf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAy QjU1QTZGRDAeFw0yNTA5MDcxMjI2MDlaFw0yNTA5MTAxMzE5MDlaMDMxMTAvBgNV BAMTKDM0RjRDREJEN0VCRDc1NTA3MDc3MEYzM0QwN0I5RTEyOTUyODAyMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEGAGp5vn1ugk7Rj3tHHpWBNOn XD0hAVsdltX37j6vCHkRR61RJUQvpedGe6HWDBUauLsFJ14YarW/Lw6b9OzGYg2M LU+gtcJBfjMwwHQVLtWx1UiUNVJU5c7WXgl9jl2IRr6mlXe4D9PJFy5rkClT+VWO bTsC7gIj+/QRrg7l8D6jvxcMGvh4QB3qFr1xIOrVpd1vg68vzWTaKo7EQDVJvghg 1Tes6K03jTFOJ4YSAjTy86n2MRAEKaEvseDAOHZ5mpFg+L/u4DWCk+CU4EnZdbF1 HBsCKIqLHVjuXBwL5TcUUGydHyloesqRD0D0i1m0HWy4KbQV9qaSbCFpiLYfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNPTNvX69dVBwdw8z0HueEpUoAjUwHwYDVR0j BBgwFoAUc6LAaaOy66x17LNz85i1YCtVpv0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWMyNzYyMS1lMjk3LTQxMDAtOTcxYS0xYzY5NjdjNTJiMWIvMC83M0EyQzA2OUEz QjJFQkFDNzVFQ0IzNzNGMzk4QjU2MDJCNTVBNkZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAyQjU1 QTZGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTljMjc2MjEtZTI5Ny00MTAwLTk3 MWEtMWM2OTY3YzUyYjFiLzAvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1 NjAyQjU1QTZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALnUD98QZpKlzFTPtGlBWMgA/9tcaynoHIfj FUSmO8w2mvsbCCnKDfZ0XP+fzvPeOxw/NiHPvyWhyT0VIjD+nLK89zLCjVySg4DS NZl/OjcmUOBxY4j87Sjwox57yNq9M+aS3Dq+hHQygGpaMXDwSs4B8RMN9AP169ES +CPKRXm+iwbj5Z+eHEAgVaU1JKJDZoDjBTHqhbk/AkHC+tf2GiLvD/vSVZoGhWgy YRAW46IvXlHwI+B7NjxJmdVfW+oRIEvVo1wgjiM+4x/4Wc8Gg8ytOCixJ2sSLN0r /5S/GiNkayaF9qdy/BQUonvHakFB6Pgt7vbGYPhwASPiP8ylchw= -----END CERTIFICATE-----Generated at Sun Sep 7 15:24:10 2025 by rpki-client