$ rpki-client -vvf repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft File: 73B96F5AC43A4212760D6629FB36B21B2E801D90.mft (raw, json) Hash identifier: x/SqN3H5u7/3PzNnJxfDKuS2SrC2L6zUoNFcrxTMmCc= Subject key identifier: 4E:EF:C5:AB:5D:32:A6:3C:74:9B:1D:A0:28:4E:8D:6C:D0:FA:CA:F6 Authority key identifier: 73:B9:6F:5A:C4:3A:42:12:76:0D:66:29:FB:36:B2:1B:2E:80:1D:90 Certificate issuer: /CN=73B96F5AC43A4212760D6629FB36B21B2E801D90 Certificate serial: 01FAEAA77EC6AD7B8BD519C6EEE1907D685FE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft Manifest number: 02EB Signing time: Fri 05 Sep 2025 09:31:38 +0000 Manifest this update: Fri 05 Sep 2025 09:26:38 +0000 Manifest next update: Mon 08 Sep 2025 18:01:38 +0000 Files and hashes: 1: 3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa (hash: oudTGBDalRCfCvgYs+K0jORqoSv3XWEHAn8WI/m8myE=) 2: 73B96F5AC43A4212760D6629FB36B21B2E801D90.crl (hash: NYQxsHCCOFP4i0mtm+tjDonOtiwe4cuIDU3MKZXnV2Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.crl rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:fa:ea:a7:7e:c6:ad:7b:8b:d5:19:c6:ee:e1:90:7d:68:5f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73B96F5AC43A4212760D6629FB36B21B2E801D90 Validity Not Before: Sep 5 09:26:38 2025 GMT Not After : Sep 8 18:01:38 2025 GMT Subject: CN=4EEFC5AB5D32A63C749B1DA0284E8D6CD0FACAF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fc:c5:43:1e:ee:6c:f8:6e:db:a9:86:25:52: 18:6e:34:a6:9e:0d:86:20:4e:4d:0f:73:21:03:90: 29:27:eb:cb:10:62:ca:bb:5f:38:8a:05:6f:ea:3e: 7d:8a:30:df:37:6c:f0:38:29:e1:d0:72:ec:f2:ac: 7f:95:e9:b9:25:bc:f2:2d:81:73:be:c5:08:cf:53: a5:22:dd:8f:ee:99:45:fc:99:23:e4:8b:1c:3e:be: 59:10:c7:5a:1e:c8:9a:53:b8:e9:36:8e:9b:f8:9e: ce:40:5e:52:65:81:46:cd:0a:3d:b0:ec:5e:e3:ca: 53:df:0d:0a:16:3a:b8:02:bb:56:b9:28:ba:3b:de: a4:53:cf:93:db:43:15:cf:1f:be:6d:17:f7:68:3d: bd:07:01:ad:e9:3c:b0:07:9b:ed:cb:9c:3b:75:c5: 00:3c:f9:92:98:57:be:9d:7e:50:85:4b:10:d9:3e: dd:79:1a:51:a3:81:8e:8c:c8:0b:ef:61:cb:21:7e: 0d:bc:d0:44:2e:5c:aa:4f:b1:e0:90:e9:21:e5:1b: f1:52:9e:71:b5:b5:95:e0:68:ba:df:e8:57:41:d9: 6e:29:a0:70:51:7f:75:da:76:7b:50:e5:25:fe:7a: ee:07:16:81:68:93:6d:de:b2:91:94:3e:98:ce:58: bb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EF:C5:AB:5D:32:A6:3C:74:9B:1D:A0:28:4E:8D:6C:D0:FA:CA:F6 X509v3 Authority Key Identifier: keyid:73:B9:6F:5A:C4:3A:42:12:76:0D:66:29:FB:36:B2:1B:2E:80:1D:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:60:0d:07:02:62:ab:cc:f2:5a:ef:2b:11:ef:f0:20:fe:4f: eb:29:9e:dd:2a:81:0d:e6:7c:e6:ec:5e:c4:a7:89:55:91:8a: 5b:0c:cb:6f:e1:d7:32:1f:10:96:df:43:8b:59:f1:d2:96:d2: bb:3c:77:6d:dd:11:9e:af:0d:1a:f7:0f:c2:0b:bd:48:ee:b1: a4:da:91:d7:9e:aa:c4:5e:00:70:ec:78:2a:d3:33:52:60:86: b4:29:3b:9f:b8:aa:a3:54:de:ab:a5:0f:70:4c:d1:b5:fd:c8: 42:4a:8d:8c:77:d8:56:31:e3:42:3a:fb:48:a6:6d:25:4e:3a: 7f:7d:44:65:10:f1:8d:e3:5b:4d:7d:c8:25:18:60:e9:47:40: 5e:f6:f8:64:f7:3d:e4:78:f1:80:85:f6:e9:f6:61:b9:e8:10: d5:3b:77:96:bf:eb:f4:ad:b6:4c:b3:f5:17:df:42:bd:7b:f7: 71:9d:cf:51:4a:fd:70:25:71:17:69:60:8c:00:20:2b:5a:8f: 4e:0b:e5:b5:f2:b6:a1:57:4c:d3:d9:01:18:d8:29:a1:3b:c0: 01:a7:09:79:e5:f9:74:02:e4:2c:d3:d1:28:26:f9:00:bc:3e: e2:50:cb:90:1b:82:62:14:26:3d:c0:14:f4:60:f9:81:27:a4: 1a:74:a5:89 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITAfrqp37GrXuL1RnG7uGQfWhf5jANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg3M0I5NkY1QUM0M0E0MjEyNzYwRDY2MjlGQjM2QjIxQjJF ODAxRDkwMB4XDTI1MDkwNTA5MjYzOFoXDTI1MDkwODE4MDEzOFowMzExMC8GA1UE AxMoNEVFRkM1QUI1RDMyQTYzQzc0OUIxREEwMjg0RThENkNEMEZBQ0FGNjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMz8xUMe7mz4btuphiVSGG40pp4N hiBOTQ9zIQOQKSfryxBiyrtfOIoFb+o+fYow3zds8Dgp4dBy7PKsf5XpuSW88i2B c77FCM9TpSLdj+6ZRfyZI+SLHD6+WRDHWh7ImlO46TaOm/iezkBeUmWBRs0KPbDs XuPKU98NChY6uAK7VrkoujvepFPPk9tDFc8fvm0X92g9vQcBrek8sAeb7cucO3XF ADz5kphXvp1+UIVLENk+3XkaUaOBjozIC+9hyyF+DbzQRC5cqk+x4JDpIeUb8VKe cbW1leBout/oV0HZbimgcFF/ddp2e1DlJf567gcWgWiTbd6ykZQ+mM5Yu90CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBRO78WrXTKmPHSbHaAoTo1s0PrK9jAfBgNVHSME GDAWgBRzuW9axDpCEnYNZin7NrIbLoAdkDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZj YmVhODFkLTg1YWMtNDBhNS1hN2Y1LTNmYTM2MmIxN2JjYi8wLzczQjk2RjVBQzQz QTQyMTI3NjBENjYyOUZCMzZCMjFCMkU4MDFEOTAuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi83M0I5NkY1QUM0M0E0MjEyNzYwRDY2MjlGQjM2QjIxQjJFODAx RDkwLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82Y2JlYTgxZC04NWFjLTQwYTUtYTdm NS0zZmEzNjJiMTdiY2IvMC83M0I5NkY1QUM0M0E0MjEyNzYwRDY2MjlGQjM2QjIx QjJFODAxRDkwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAEGANBwJiq8zyWu8rEe/wIP5P6yme3SqBDeZ8 5uxexKeJVZGKWwzLb+HXMh8Qlt9Di1nx0pbSuzx3bd0Rnq8NGvcPwgu9SO6xpNqR 156qxF4AcOx4KtMzUmCGtCk7n7iqo1Teq6UPcEzRtf3IQkqNjHfYVjHjQjr7SKZt JU46f31EZRDxjeNbTX3IJRhg6UdAXvb4ZPc95HjxgIX26fZhuegQ1Tt3lr/r9K22 TLP1F99CvXv3cZ3PUUr9cCVxF2lgjAAgK1qPTgvltfK2oVdM09kBGNgpoTvAAacJ eeX5dALkLNPRKCb5ALw+4lDLkBuCYhQmPcAU9GD5gSekGnSliQ== -----END CERTIFICATE-----Generated at Fri Sep 5 10:10:32 2025 by rpki-client