$ rpki-client -vvf repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft File: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft (raw, json) Hash identifier: D9PE9pGOzmXl6T/H9G2h23TLnU//VGSd+DHn7YMeqgs= Subject key identifier: 80:3E:3E:32:9B:66:7B:BA:44:4B:DA:F4:F4:39:3C:7F:3F:5C:24:04 Authority key identifier: 73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E Certificate issuer: /CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Certificate serial: 4D5CA4B5421623CB5DDD8D2518F01681E171BBA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft Manifest number: 91 Signing time: Tue 03 Jun 2025 16:01:35 +0000 Manifest this update: Tue 03 Jun 2025 15:56:35 +0000 Manifest next update: Fri 06 Jun 2025 16:49:35 +0000 Files and hashes: 1: 323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa (hash: fYFecXdBAeKoyIAgB0JeLy6cqYChyPHEhUfoQQOYxUQ=) 2: 3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa (hash: DNJc9xkVk10+u7abf6ZM/Nl2Ukmj/FIJDXFuFGCkFwc=) 3: 3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa (hash: WMzT2ENPMmi2mcaD4CnPa7CoBrNxdNCIISZtPItZ4MM=) 4: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl (hash: Ma6UMmezbSkLi4tATZD6CyfhptEW/aRRgIzZ2menBh0=) 5: 3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa (hash: iXzUmlYgIeqgRD6OLpTZAHA87G2XsNDyecWPhh9XaJs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:5c:a4:b5:42:16:23:cb:5d:dd:8d:25:18:f0:16:81:e1:71:bb:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Validity Not Before: Jun 3 15:56:35 2025 GMT Not After : Jun 6 16:49:35 2025 GMT Subject: CN=803E3E329B667BBA444BDAF4F4393C7F3F5C2404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:32:52:94:da:59:46:91:e0:f5:31:5f:bf:9e: 12:1e:78:40:2d:6f:06:c2:09:7c:0f:7d:ad:9d:ab: 70:14:e7:75:d4:4b:e6:52:9e:9b:8d:2c:b5:de:54: 81:f9:a2:30:60:5c:da:0b:16:6b:82:08:da:15:71: 99:b0:9f:26:64:ca:c1:34:89:d0:01:9e:05:1b:bf: 07:d4:12:6b:46:4b:d9:b5:06:f0:7c:e2:83:55:23: 8f:02:d0:58:bb:6e:2d:9c:c4:fc:6e:40:e0:70:37: 78:98:9b:0b:de:52:f4:9a:60:38:aa:2f:27:3b:f4: af:57:20:f2:cc:79:d0:a8:76:0b:4f:5b:be:26:5f: 08:f0:99:b0:54:26:ab:ac:18:25:4a:e2:e8:8d:f5: 63:1e:0c:b9:c2:69:b9:3e:24:3c:43:4f:c6:7c:03: f8:4a:b2:6f:02:4f:c8:e4:c3:12:5c:ea:e6:2c:d1: 76:33:e1:97:ce:c0:6d:b3:57:c7:0d:9a:0f:44:41: 5a:6a:c5:b0:cc:57:69:e5:49:b3:05:9e:31:6e:40: e7:cc:93:de:2c:e7:ec:34:33:16:47:d1:1c:91:3a: 24:c1:8f:03:f3:0b:ca:7e:5a:5e:c8:c9:b1:bd:91: 8d:b8:b3:27:7d:15:f1:8b:09:0c:f2:5e:3f:04:b8: 60:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3E:3E:32:9B:66:7B:BA:44:4B:DA:F4:F4:39:3C:7F:3F:5C:24:04 X509v3 Authority Key Identifier: keyid:73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e0:69:36:e6:15:94:aa:a0:a2:72:f4:16:e7:45:99:94:63: a1:fa:d8:63:3d:c4:49:de:45:f5:cb:9d:57:2d:49:a4:33:18: 79:1b:dc:0d:84:d1:fd:b0:73:89:e4:cb:89:c0:72:04:f7:a9: bc:25:1c:56:28:da:5e:12:79:58:de:84:bc:9e:fa:4f:da:f6: 7c:98:6c:44:40:78:a5:19:cf:b5:8b:10:d4:c0:fd:15:99:86: bc:32:91:1a:57:6b:99:8e:23:58:98:d5:03:04:b0:e8:08:0e: e7:d9:7a:f1:1c:54:0f:aa:e8:68:b5:ee:f4:d8:fd:04:e1:ca: 05:63:c1:b2:b1:77:8a:57:95:7a:0d:e1:6b:13:8f:70:bb:29: 53:7d:8b:4a:c5:f7:b5:22:18:8e:9e:dd:96:19:2c:b1:79:f8: 9d:b8:e2:33:58:11:34:04:1f:b9:84:20:86:29:ff:68:4c:d1: 23:53:68:90:ae:9a:58:49:3e:a9:cb:59:6d:3b:40:e9:7e:1c: a7:d4:1d:8a:1c:6a:4c:30:30:78:30:30:71:c8:66:1a:6f:98: 28:2d:02:8f:ed:a4:33:5c:cf:3b:cd:85:f6:30:ab:cf:ff:77: bc:61:be:26:59:4d:a8:40:49:8f:44:43:9a:80:57:28:a2:c8: 7d:dc:9e:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTVyktUIWI8td3Y0lGPAWgeFxu6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3 REZDNkE4RTAeFw0yNTA2MDMxNTU2MzVaFw0yNTA2MDYxNjQ5MzVaMDMxMTAvBgNV BAMTKDgwM0UzRTMyOUI2NjdCQkE0NDRCREFGNEY0MzkzQzdGM0Y1QzI0MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZMlKU2llGkeD1MV+/nhIeeEAt bwbCCXwPfa2dq3AU53XUS+ZSnpuNLLXeVIH5ojBgXNoLFmuCCNoVcZmwnyZkysE0 idABngUbvwfUEmtGS9m1BvB84oNVI48C0Fi7bi2cxPxuQOBwN3iYmwveUvSaYDiq Lyc79K9XIPLMedCodgtPW74mXwjwmbBUJqusGCVK4uiN9WMeDLnCabk+JDxDT8Z8 A/hKsm8CT8jkwxJc6uYs0XYz4ZfOwG2zV8cNmg9EQVpqxbDMV2nlSbMFnjFuQOfM k94s5+w0MxZH0RyROiTBjwPzC8p+Wl7IybG9kY24syd9FfGLCQzyXj8EuGC9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgD4+Mptme7pES9r09Dk8fz9cJAQwHwYDVR0j BBgwFoAUcx22dXK0ijqG8EdaDiHhon38ao4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yjc1YmZkMC1hODZjLTRiZWItOWY5OS1hYWMzM2ZiNWU0OWYvMC83MzFEQjY3NTcy QjQ4QTNBODZGMDQ3NUEwRTIxRTFBMjdERkM2QThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3REZD NkE4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I3NWJmZDAtYTg2Yy00YmViLTlm OTktYWFjMzNmYjVlNDlmLzAvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUx QTI3REZDNkE4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/gaTbmFZSqoKJy9BbnRZmUY6H62GM9xEne RfXLnVctSaQzGHkb3A2E0f2wc4nky4nAcgT3qbwlHFYo2l4SeVjehLye+k/a9nyY bERAeKUZz7WLENTA/RWZhrwykRpXa5mOI1iY1QMEsOgIDufZevEcVA+q6Gi17vTY /QThygVjwbKxd4pXlXoN4WsTj3C7KVN9i0rF97UiGI6e3ZYZLLF5+J244jNYETQE H7mEIIYp/2hM0SNTaJCumlhJPqnLWW07QOl+HKfUHYocakwwMHgwMHHIZhpvmCgt Ao/tpDNczzvNhfYwq8//d7xhviZZTahASY9EQ5qAVyiiyH3cnmo= -----END CERTIFICATE-----Generated at Thu Jun 5 18:14:31 2025 by rpki-client