$ rpki-client -vvf repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft File: 73B96F5AC43A4212760D6629FB36B21B2E801D90.mft (raw, json) Hash identifier: uhJCZEJpzg4Fz3UTTptCifN9/9p6E3XJv+HMUgg3P2g= Subject key identifier: C0:E9:35:4D:C0:1A:27:C4:3A:A7:AA:4C:42:39:32:FC:20:91:9F:C6 Authority key identifier: 73:B9:6F:5A:C4:3A:42:12:76:0D:66:29:FB:36:B2:1B:2E:80:1D:90 Certificate issuer: /CN=73B96F5AC43A4212760D6629FB36B21B2E801D90 Certificate serial: 2136C0F1DCF9A0352C231F69DDF4B7AC5D2351C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft Manifest number: 02C3 Signing time: Fri 06 Jun 2025 22:51:38 +0000 Manifest this update: Fri 06 Jun 2025 22:46:38 +0000 Manifest next update: Tue 10 Jun 2025 04:30:38 +0000 Files and hashes: 1: 73B96F5AC43A4212760D6629FB36B21B2E801D90.crl (hash: LOReiSlA0AqjrNrUBUR5AAIMCfMChwsZn1BiXH1GUiA=) 2: 3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa (hash: YvBhLx83rLWHTDBD8XCBDSfZ45/xJzaFaVpjS5h6w+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.crl rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 04:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:36:c0:f1:dc:f9:a0:35:2c:23:1f:69:dd:f4:b7:ac:5d:23:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73B96F5AC43A4212760D6629FB36B21B2E801D90 Validity Not Before: Jun 6 22:46:38 2025 GMT Not After : Jun 10 04:30:38 2025 GMT Subject: CN=C0E9354DC01A27C43AA7AA4C423932FC20919FC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:53:6f:b6:c6:da:3c:ab:b2:83:33:2b:f4:db: 08:ac:ba:3d:ba:d8:e0:5d:25:b9:20:10:f1:18:fc: d0:0d:e4:3d:e8:d2:b9:cd:bc:1a:53:e9:a0:38:f3: b0:e5:33:80:e0:96:bf:31:18:a9:c1:f5:35:70:2b: f1:e5:fe:a1:df:5a:3c:bf:ae:a0:05:b8:f0:73:b2: 0a:7d:22:2d:68:43:78:e9:59:0d:d8:d3:86:a7:c7: f1:ac:b8:40:29:e0:d1:ae:a0:b6:b4:33:54:01:b2: b4:a4:d3:5b:5b:c0:cf:03:5e:0d:fb:ca:a7:d1:4f: e4:62:a1:de:09:58:f3:18:9a:fe:c9:d6:c9:d5:07: b8:0c:29:ed:6e:a4:b1:23:5c:c6:0c:18:e4:78:08: b8:39:7f:95:59:34:af:76:6a:e5:38:fe:a7:ae:68: 87:73:c1:1c:c2:0d:fb:32:80:80:f0:fb:0e:cd:26: c1:61:19:40:a7:81:89:28:d5:72:da:a1:fa:a8:a9: 25:33:73:27:1e:15:e1:df:29:67:df:84:60:7c:f2: 19:88:0d:56:57:bb:4a:b5:15:f9:50:79:9e:50:78: 11:bc:79:28:59:ea:35:3c:9e:5f:ba:29:69:d3:7c: 3b:c7:59:74:93:c5:5c:00:c8:80:3c:35:d3:9f:04: ed:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E9:35:4D:C0:1A:27:C4:3A:A7:AA:4C:42:39:32:FC:20:91:9F:C6 X509v3 Authority Key Identifier: keyid:73:B9:6F:5A:C4:3A:42:12:76:0D:66:29:FB:36:B2:1B:2E:80:1D:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:97:15:98:fd:7e:73:0d:73:66:71:34:3d:9e:46:97:a1:d6: 07:91:bc:a5:0f:c1:56:9c:9d:e0:e2:7f:6c:0c:d2:31:98:54: 96:45:34:44:fb:aa:3e:fb:e5:5c:24:26:02:08:24:05:49:87: e0:25:1a:64:0c:d3:f2:aa:ef:52:e3:0d:fb:83:95:12:9a:76: 55:05:74:c4:4e:b7:bf:ee:b1:4d:02:5f:9f:0f:05:7b:d0:3c: 16:09:25:50:64:e6:99:0f:c5:4b:4d:54:38:03:28:9f:98:82: a7:d9:60:aa:f6:06:ce:95:0f:40:82:33:be:19:2a:c6:69:e1: 6d:21:89:9b:6f:7e:1b:68:8e:1a:81:2c:26:c3:ec:69:db:06: fc:1b:7d:0b:50:af:8d:d9:7f:20:b0:56:60:94:0f:de:42:df: be:6e:12:67:2f:db:15:a4:aa:5f:3c:d9:d4:5d:72:45:dd:18: 61:e4:41:7e:4b:90:61:53:24:68:66:1f:2b:45:62:96:ee:91: 96:d2:5a:f9:f7:60:94:f5:78:4f:fb:27:d4:3d:56:18:d4:94: 56:a0:03:ee:ec:29:8f:4f:91:fa:46:80:28:a7:6e:15:1e:c9: b0:3b:45:29:11:10:69:06:b8:3a:c5:a5:1e:e0:86:3c:81:9d: 06:ac:29:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUITbA8dz5oDUsIx9p3fS3rF0jUcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNCOTZGNUFDNDNBNDIxMjc2MEQ2NjI5RkIzNkIyMUIy RTgwMUQ5MDAeFw0yNTA2MDYyMjQ2MzhaFw0yNTA2MTAwNDMwMzhaMDMxMTAvBgNV BAMTKEMwRTkzNTREQzAxQTI3QzQzQUE3QUE0QzQyMzkzMkZDMjA5MTlGQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1U2+2xto8q7KDMyv02wisuj26 2OBdJbkgEPEY/NAN5D3o0rnNvBpT6aA487DlM4Dglr8xGKnB9TVwK/Hl/qHfWjy/ rqAFuPBzsgp9Ii1oQ3jpWQ3Y04anx/GsuEAp4NGuoLa0M1QBsrSk01tbwM8DXg37 yqfRT+Riod4JWPMYmv7J1snVB7gMKe1upLEjXMYMGOR4CLg5f5VZNK92auU4/qeu aIdzwRzCDfsygIDw+w7NJsFhGUCngYko1XLaofqoqSUzcyceFeHfKWffhGB88hmI DVZXu0q1FflQeZ5QeBG8eShZ6jU8nl+6KWnTfDvHWXSTxVwAyIA8NdOfBO2BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwOk1TcAaJ8Q6p6pMQjky/CCRn8YwHwYDVR0j BBgwFoAUc7lvWsQ6QhJ2DWYp+zayGy6AHZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2JlYTgxZC04NWFjLTQwYTUtYTdmNS0zZmEzNjJiMTdiY2IvMC83M0I5NkY1QUM0 M0E0MjEyNzYwRDY2MjlGQjM2QjIxQjJFODAxRDkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNCOTZGNUFDNDNBNDIxMjc2MEQ2NjI5RkIzNkIyMUIyRTgw MUQ5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNiZWE4MWQtODVhYy00MGE1LWE3 ZjUtM2ZhMzYyYjE3YmNiLzAvNzNCOTZGNUFDNDNBNDIxMjc2MEQ2NjI5RkIzNkIy MUIyRTgwMUQ5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL+XFZj9fnMNc2ZxND2eRpeh1geRvKUPwVac neDif2wM0jGYVJZFNET7qj775VwkJgIIJAVJh+AlGmQM0/Kq71LjDfuDlRKadlUF dMROt7/usU0CX58PBXvQPBYJJVBk5pkPxUtNVDgDKJ+YgqfZYKr2Bs6VD0CCM74Z KsZp4W0hiZtvfhtojhqBLCbD7GnbBvwbfQtQr43ZfyCwVmCUD95C375uEmcv2xWk ql882dRdckXdGGHkQX5LkGFTJGhmHytFYpbukZbSWvn3YJT1eE/7J9Q9VhjUlFag A+7sKY9PkfpGgCinbhUeybA7RSkREGkGuDrFpR7ghjyBnQasKWE= -----END CERTIFICATE-----Generated at Sun Jun 8 05:18:21 2025 by rpki-client