$ rpki-client -vvf repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft File: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft (raw, json) Hash identifier: VupOzN5nn+llbYZDPwR8jzG665YhfDt9VtRgqe+xFGQ= Subject key identifier: 53:1B:18:A9:45:33:67:0B:E5:78:F3:57:45:B2:5E:FB:89:C4:7A:F7 Authority key identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD Certificate issuer: /CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Certificate serial: 3A8B3BAD292EEBF28AB4A81DB88661AD032413CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft Manifest number: 0253 Signing time: Wed 04 Jun 2025 03:31:09 +0000 Manifest this update: Wed 04 Jun 2025 03:26:09 +0000 Manifest next update: Sat 07 Jun 2025 14:45:09 +0000 Files and hashes: 1: 3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (hash: WzQyswXSwMjXUbCDUIIF0PkevxcLaE+CYPcmOj6X+is=) 2: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl (hash: LZ+BGworufG9x2LZZA9O9y0XeyzJDO+g3VP2YX3cDAY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:8b:3b:ad:29:2e:eb:f2:8a:b4:a8:1d:b8:86:61:ad:03:24:13:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Validity Not Before: Jun 4 03:26:09 2025 GMT Not After : Jun 7 14:45:09 2025 GMT Subject: CN=531B18A94533670BE578F35745B25EFB89C47AF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:44:a8:e8:7b:07:16:13:1c:04:10:e0:6d:f8: 96:8a:95:a3:57:9d:6b:19:90:0c:8a:ce:6d:cb:58: e0:8c:6f:4b:b5:76:d1:77:63:72:53:43:8a:fe:ad: ed:44:7f:85:44:20:c9:a1:bd:3c:0a:93:1b:a4:cf: 90:90:f6:0c:9d:97:78:ba:d5:6a:77:c6:00:14:9b: 46:59:be:8f:34:2e:0f:fa:17:7c:39:11:b6:97:5e: 82:d9:fb:da:34:2c:3f:e3:7b:65:13:ba:db:50:dd: ce:d3:fb:00:1a:07:23:c8:4c:ab:83:05:18:08:68: c0:64:67:86:97:6d:70:64:98:5a:08:13:dc:0b:1f: 44:5e:22:b1:e5:7b:da:fe:09:8a:ab:a2:83:5b:33: 1e:91:b0:ee:cf:c3:7a:4d:a2:26:d5:e9:11:94:c8: 7b:b3:8b:c2:14:f7:85:9b:1a:ef:39:81:1b:59:f8: 82:be:74:03:c5:11:73:43:92:44:bc:9c:8d:62:c4: 4c:73:83:de:ce:34:9b:6b:32:75:89:df:8f:3f:f0: 92:75:bc:7a:23:1a:56:dd:66:09:9e:60:02:4d:05: 5e:b8:e6:a3:44:55:f4:2c:eb:24:1f:b4:87:8d:fa: 83:9f:0f:69:2c:7d:10:a2:d0:a8:15:d7:38:f8:ff: e3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1B:18:A9:45:33:67:0B:E5:78:F3:57:45:B2:5E:FB:89:C4:7A:F7 X509v3 Authority Key Identifier: keyid:73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:07:e4:27:82:56:4b:e1:76:57:09:fc:d0:08:48:72:b6:6f: 6a:d5:f4:14:f3:e1:80:76:57:4a:14:3c:f9:54:3a:7a:c2:46: f0:a3:92:d1:9f:01:8f:4d:da:07:37:04:37:e5:49:60:b6:6e: ed:5a:f8:18:71:72:53:80:1b:a5:6c:27:4a:8f:cb:81:e7:f6: 1b:3b:00:cb:fd:44:6d:b1:7d:da:ed:b6:48:21:41:36:f6:0c: 16:e3:43:8b:84:4e:1e:17:83:31:58:5a:1d:06:53:73:a3:6d: 6c:8b:43:2b:5d:0f:3b:e9:ae:44:61:41:c2:07:02:ab:a3:b0: d4:de:ea:35:e5:e9:da:30:95:c3:ed:e8:1e:02:7d:d0:f9:78: 3d:e5:f2:20:5c:65:75:7e:3b:28:28:73:1e:dc:3d:65:e8:a9: e6:ee:22:52:0f:7c:c4:b1:b4:67:e7:4a:c8:8b:54:87:55:d5: 06:08:07:15:e4:e7:db:41:4c:38:9c:a0:fe:3b:45:29:8d:1e: 5d:b8:b4:c5:4d:29:d6:11:61:8d:e9:a7:35:f0:bb:24:d1:18: 0c:b0:97:27:75:41:55:20:be:0d:0e:a3:1c:9c:ab:62:8a:c7: 3a:21:b3:d9:17:84:d6:13:62:47:5f:b2:d1:8d:09:bd:51:65: 0f:13:9e:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOos7rSku6/KKtKgduIZhrQMkE8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAy QjU1QTZGRDAeFw0yNTA2MDQwMzI2MDlaFw0yNTA2MDcxNDQ1MDlaMDMxMTAvBgNV BAMTKDUzMUIxOEE5NDUzMzY3MEJFNTc4RjM1NzQ1QjI1RUZCODlDNDdBRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8RKjoewcWExwEEOBt+JaKlaNX nWsZkAyKzm3LWOCMb0u1dtF3Y3JTQ4r+re1Ef4VEIMmhvTwKkxukz5CQ9gydl3i6 1Wp3xgAUm0ZZvo80Lg/6F3w5EbaXXoLZ+9o0LD/je2UTuttQ3c7T+wAaByPITKuD BRgIaMBkZ4aXbXBkmFoIE9wLH0ReIrHle9r+CYqrooNbMx6RsO7Pw3pNoibV6RGU yHuzi8IU94WbGu85gRtZ+IK+dAPFEXNDkkS8nI1ixExzg97ONJtrMnWJ348/8JJ1 vHojGlbdZgmeYAJNBV645qNEVfQs6yQftIeN+oOfD2ksfRCi0KgV1zj4/+NhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUxsYqUUzZwvlePNXRbJe+4nEevcwHwYDVR0j BBgwFoAUc6LAaaOy66x17LNz85i1YCtVpv0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWMyNzYyMS1lMjk3LTQxMDAtOTcxYS0xYzY5NjdjNTJiMWIvMC83M0EyQzA2OUEz QjJFQkFDNzVFQ0IzNzNGMzk4QjU2MDJCNTVBNkZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAyQjU1 QTZGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTljMjc2MjEtZTI5Ny00MTAwLTk3 MWEtMWM2OTY3YzUyYjFiLzAvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1 NjAyQjU1QTZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgH5CeCVkvhdlcJ/NAISHK2b2rV9BTz4YB2 V0oUPPlUOnrCRvCjktGfAY9N2gc3BDflSWC2bu1a+BhxclOAG6VsJ0qPy4Hn9hs7 AMv9RG2xfdrttkghQTb2DBbjQ4uETh4XgzFYWh0GU3OjbWyLQytdDzvprkRhQcIH AqujsNTe6jXl6dowlcPt6B4CfdD5eD3l8iBcZXV+Oygocx7cPWXoqebuIlIPfMSx tGfnSsiLVIdV1QYIBxXk59tBTDicoP47RSmNHl24tMVNKdYRYY3ppzXwuyTRGAyw lyd1QVUgvg0Ooxycq2KKxzohs9kXhNYTYkdfstGNCb1RZQ8TnrQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:24:51 2025 by rpki-client