$ rpki-client -vvf repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft File: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft (raw, json) Hash identifier: yUjjkaOHykwRsyoRlB8oQMljUX37jIbR9I4e9nk8wBw= Subject key identifier: 71:DE:01:A9:73:32:17:CD:59:19:06:81:64:93:8F:C5:39:BC:82:2B Authority key identifier: 73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E Certificate issuer: /CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Certificate serial: 5B2E9BE9E14D5E5BB9E14B9C0253FC5C7807DABE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft Manifest number: BC Signing time: Fri 05 Sep 2025 05:31:25 +0000 Manifest this update: Fri 05 Sep 2025 05:26:25 +0000 Manifest next update: Mon 08 Sep 2025 06:50:25 +0000 Files and hashes: 1: 3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa (hash: 5d1MR7rKvEWqFJE9IZmsunjaxhaRl4wODAGB+LLjxEo=) 2: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl (hash: LXigeyNd5YutV6Mwxq9XNles4xKObsZx2xFfi9XfuFA=) 3: 323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa (hash: fYFecXdBAeKoyIAgB0JeLy6cqYChyPHEhUfoQQOYxUQ=) 4: 3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa (hash: WMzT2ENPMmi2mcaD4CnPa7CoBrNxdNCIISZtPItZ4MM=) 5: 3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa (hash: ky6kqewG2CLcXwQoFuB0Gbkz5WHCCY7RgpoJqEc0cVU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 06:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:2e:9b:e9:e1:4d:5e:5b:b9:e1:4b:9c:02:53:fc:5c:78:07:da:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Validity Not Before: Sep 5 05:26:25 2025 GMT Not After : Sep 8 06:50:25 2025 GMT Subject: CN=71DE01A9733217CD5919068164938FC539BC822B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9a:6f:ab:71:33:f6:3c:6a:08:53:29:89:3c: 79:9d:32:07:cb:cf:2b:34:b6:99:de:72:26:92:49: 84:49:8e:2c:c1:ff:4b:d4:ef:79:ff:0d:96:4b:c7: d5:01:a4:71:d4:95:db:5e:c8:c6:ea:fd:62:04:4b: 36:32:e4:a5:ff:6f:8b:fb:8d:28:a4:8b:10:d2:47: fe:1c:d0:9b:8b:c3:28:d7:cb:a3:01:0a:94:85:ca: d9:70:8d:ed:c3:65:9d:b3:30:9e:04:f5:86:56:5c: 84:0c:2e:bb:a2:5d:2a:c9:73:73:e5:46:4e:8e:86: 1b:6d:92:38:45:32:ae:b4:3b:8a:28:ea:85:75:82: 2c:6b:d0:c0:44:3d:2c:f9:ce:7e:cf:48:78:fc:78: 16:d1:b9:b2:c0:70:e2:65:21:ee:3f:2a:4c:29:60: 7c:a8:43:79:a5:bd:76:73:08:56:5f:9d:54:65:f6: 91:05:70:7a:34:40:68:6b:86:f1:64:fc:7e:c0:45: 33:56:78:ae:6c:30:37:7e:6c:78:4e:ce:f4:7d:4c: 14:90:fd:21:5d:ab:68:55:bd:8a:fe:87:1c:93:e5: ed:3b:27:b8:7a:e7:17:91:f7:16:0c:76:b4:fe:a5: 8f:17:15:89:f7:c3:df:7c:8a:1d:ca:16:9d:25:99: 0b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DE:01:A9:73:32:17:CD:59:19:06:81:64:93:8F:C5:39:BC:82:2B X509v3 Authority Key Identifier: keyid:73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:71:6c:07:9b:bb:c9:29:2a:64:6f:dd:89:00:21:f9:39:ef: b0:d9:4b:ef:99:5a:d0:bb:88:9c:98:73:82:86:ba:d5:ef:92: 51:ef:99:64:4f:75:64:27:a2:4f:2d:f4:22:3e:df:f2:7c:fd: 8d:0b:53:93:26:39:62:9e:a0:d9:b6:2d:d4:33:8e:ab:6a:37: b4:ab:69:47:3c:d7:35:cd:c9:a3:4b:80:38:7c:c8:d0:75:54: cb:31:0c:b6:39:c5:aa:62:f5:1c:c3:bb:8e:af:ec:0a:8e:3c: 74:ea:45:e3:af:c5:6d:41:c8:04:8b:24:66:74:43:26:2d:88: 01:bc:13:df:2f:a3:01:52:c0:ab:18:79:ad:5a:6c:00:82:a7: b8:27:69:58:ee:23:c3:94:06:a1:de:0a:ac:22:69:b5:d9:ee: 56:a4:0e:9e:21:ac:79:83:f9:5b:95:18:ef:67:ea:36:eb:d5: da:66:66:ab:6e:dd:20:68:e5:88:ae:92:9a:d7:22:fc:76:c5: 9a:52:48:ef:da:7b:a4:0b:87:17:28:2c:c8:f1:e3:51:de:e8: bc:29:cb:e9:77:ef:62:75:27:47:ff:7b:15:12:72:34:a5:c4: 22:5d:79:b1:1a:4f:60:84:3c:82:65:81:89:46:27:2b:e7:55: 20:7a:0c:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWy6b6eFNXlu54UucAlP8XHgH2r4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3 REZDNkE4RTAeFw0yNTA5MDUwNTI2MjVaFw0yNTA5MDgwNjUwMjVaMDMxMTAvBgNV BAMTKDcxREUwMUE5NzMzMjE3Q0Q1OTE5MDY4MTY0OTM4RkM1MzlCQzgyMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDImm+rcTP2PGoIUymJPHmdMgfL zys0tpneciaSSYRJjizB/0vU73n/DZZLx9UBpHHUldteyMbq/WIESzYy5KX/b4v7 jSikixDSR/4c0JuLwyjXy6MBCpSFytlwje3DZZ2zMJ4E9YZWXIQMLruiXSrJc3Pl Rk6OhhttkjhFMq60O4oo6oV1gixr0MBEPSz5zn7PSHj8eBbRubLAcOJlIe4/Kkwp YHyoQ3mlvXZzCFZfnVRl9pEFcHo0QGhrhvFk/H7ARTNWeK5sMDd+bHhOzvR9TBSQ /SFdq2hVvYr+hxyT5e07J7h65xeR9xYMdrT+pY8XFYn3w998ih3KFp0lmQtdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcd4BqXMyF81ZGQaBZJOPxTm8giswHwYDVR0j BBgwFoAUcx22dXK0ijqG8EdaDiHhon38ao4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yjc1YmZkMC1hODZjLTRiZWItOWY5OS1hYWMzM2ZiNWU0OWYvMC83MzFEQjY3NTcy QjQ4QTNBODZGMDQ3NUEwRTIxRTFBMjdERkM2QThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3REZD NkE4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I3NWJmZDAtYTg2Yy00YmViLTlm OTktYWFjMzNmYjVlNDlmLzAvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUx QTI3REZDNkE4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNxbAebu8kpKmRv3YkAIfk577DZS++ZWtC7 iJyYc4KGutXvklHvmWRPdWQnok8t9CI+3/J8/Y0LU5MmOWKeoNm2LdQzjqtqN7Sr aUc81zXNyaNLgDh8yNB1VMsxDLY5xapi9RzDu46v7AqOPHTqReOvxW1ByASLJGZ0 QyYtiAG8E98vowFSwKsYea1abACCp7gnaVjuI8OUBqHeCqwiabXZ7lakDp4hrHmD +VuVGO9n6jbr1dpmZqtu3SBo5YiukprXIvx2xZpSSO/ae6QLhxcoLMjx41He6Lwp y+l372J1J0f/exUScjSlxCJdebEaT2CEPIJlgYlGJyvnVSB6DLA= -----END CERTIFICATE-----Generated at Fri Sep 5 10:27:12 2025 by rpki-client