$ rpki-client -vvf repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft File: 73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft (raw, json) Hash identifier: UL/6Oj1r7qMRQHtKK5AdivIFLGmM/VhDvIXllp6d1zc= Subject key identifier: D9:5C:BF:3A:33:BE:E7:71:F5:F4:AE:01:D9:3D:60:01:A3:A6:7B:87 Authority key identifier: 73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9 Certificate issuer: /CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9 Certificate serial: 01F9D8597432B5F10EBF93B3F9EE27BF9B9D97CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft Manifest number: 0141 Signing time: Fri 17 Oct 2025 22:02:09 +0000 Manifest this update: Fri 17 Oct 2025 21:57:09 +0000 Manifest next update: Tue 21 Oct 2025 06:54:09 +0000 Files and hashes: 1: 3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa (hash: d/xmUChepoOogFc4Soq6uqm5Cedk9W9kH6EQCdLR+3s=) 2: 3130332e35352e3235342e302f32342d3234203d3e20333936393832.roa (hash: 3GuMduWTgloUnJZtYU+5K5/Trf+zimiieU09c7Eyrv4=) 3: 73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl (hash: UKKQZOO4RCjawdjWaQW6h+iid0YNJT11HRA2RbDXtuU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 06:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f9:d8:59:74:32:b5:f1:0e:bf:93:b3:f9:ee:27:bf:9b:9d:97:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9 Validity Not Before: Oct 17 21:57:09 2025 GMT Not After : Oct 21 06:54:09 2025 GMT Subject: CN=D95CBF3A33BEE771F5F4AE01D93D6001A3A67B87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ca:29:02:28:cd:09:d0:28:06:33:54:8d:d7: 5e:4d:6f:ad:40:7c:1e:99:5b:e2:20:15:70:b8:74: 7c:e8:ae:83:5a:20:11:d9:ce:bf:5e:35:25:d6:08: 9d:d7:c4:cb:5e:44:58:61:36:48:15:14:ff:0e:2b: d0:a7:a0:9e:af:09:36:d0:5c:e0:60:f7:18:bd:47: fa:5c:b0:4a:b2:6d:1e:02:85:c7:6b:05:fc:f4:6b: ae:19:ab:96:0d:4b:60:d6:da:6e:05:28:3b:4e:99: 82:d2:f9:ce:c0:c7:68:7d:52:23:50:8c:21:a0:34: e1:91:bc:10:f2:84:8e:a9:b5:c6:12:a9:58:86:ca: cc:12:08:5a:39:f0:d5:f0:19:c7:42:70:7e:ef:77: 2f:29:60:a2:75:f8:25:c4:01:81:30:05:7f:bd:c3: 10:3a:1f:f5:34:73:d0:08:7e:7e:0d:33:63:f2:11: 26:46:d3:27:28:c7:92:35:0d:0a:0a:e6:68:b9:ed: f7:dc:60:2e:a6:4d:74:03:7c:85:e2:67:1e:8a:f5: f7:ab:ef:83:31:0b:81:ca:71:52:41:57:6c:14:79: 42:8b:46:70:1e:df:6d:71:57:67:cd:ce:0d:d5:75: 1b:dc:85:56:19:d3:76:08:be:81:84:68:ab:68:f3: 9a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5C:BF:3A:33:BE:E7:71:F5:F4:AE:01:D9:3D:60:01:A3:A6:7B:87 X509v3 Authority Key Identifier: keyid:73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:95:43:44:7e:c3:51:74:06:db:02:9b:b6:23:61:18:86:a4: 8d:2a:3c:9b:b3:d3:5b:6e:1b:ec:db:2d:3a:85:c6:91:04:27: c7:a2:f2:86:58:79:4e:a1:da:05:59:0b:dd:b4:23:18:0b:bb: ce:a5:12:c8:8d:b8:c7:40:43:be:4c:f4:ca:cf:22:72:f3:21: 54:c0:44:50:94:a5:69:aa:4d:7e:09:1a:b6:ab:d9:5b:eb:6a: d7:6a:6b:5e:4b:21:61:9a:17:13:82:57:25:32:23:1c:ad:e6: 91:cb:36:c8:57:e2:42:02:95:a2:46:dc:67:13:37:2e:29:92: a1:4b:72:f3:a7:b8:0b:8f:73:1b:97:e8:85:2d:57:8a:cc:0d: 84:93:46:58:d7:cd:ba:06:36:f7:1e:58:27:71:a8:78:cf:48: 20:73:3f:15:45:c5:92:4d:15:66:e8:47:ed:c7:40:b9:a3:7d: f8:6e:d5:91:6b:a1:e7:78:c5:e8:35:01:db:ee:c0:d0:01:3a: ad:fb:49:19:87:67:b7:1e:77:21:dc:15:ed:05:49:2a:bf:65: 18:38:10:94:43:9c:50:e0:1e:5e:1b:dd:f8:af:da:d2:9f:b4: 3d:92:58:0e:65:02:ee:c3:f0:0a:cf:81:18:c5:ca:b2:50:31: a1:b4:25:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAfnYWXQytfEOv5Oz+e4nv5udl8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyNzlEQURCNEVCOUIzMUI4OENDQUI1RjY4M0REQTA1 NUY0RjBBOTAeFw0yNTEwMTcyMTU3MDlaFw0yNTEwMjEwNjU0MDlaMDMxMTAvBgNV BAMTKEQ5NUNCRjNBMzNCRUU3NzFGNUY0QUUwMUQ5M0Q2MDAxQTNBNjdCODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/yikCKM0J0CgGM1SN115Nb61A fB6ZW+IgFXC4dHzoroNaIBHZzr9eNSXWCJ3XxMteRFhhNkgVFP8OK9CnoJ6vCTbQ XOBg9xi9R/pcsEqybR4ChcdrBfz0a64Zq5YNS2DW2m4FKDtOmYLS+c7Ax2h9UiNQ jCGgNOGRvBDyhI6ptcYSqViGyswSCFo58NXwGcdCcH7vdy8pYKJ1+CXEAYEwBX+9 wxA6H/U0c9AIfn4NM2PyESZG0ycox5I1DQoK5mi57ffcYC6mTXQDfIXiZx6K9fer 74MxC4HKcVJBV2wUeUKLRnAe321xV2fNzg3VdRvchVYZ03YIvoGEaKto85qFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Vy/OjO+53H19K4B2T1gAaOme4cwHwYDVR0j BBgwFoAUcyedrbTrmzG4jMq19oPdoFX08KkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzYzNmE0Ni0zOGZmLTQ0OTYtOTcyMS04YzAzY2YwNDYzNDUvMC83MzI3OURBREI0 RUI5QjMxQjg4Q0NBQjVGNjgzRERBMDU1RjRGMEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMyNzlEQURCNEVCOUIzMUI4OENDQUI1RjY4M0REQTA1NUY0 RjBBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M2MzZhNDYtMzhmZi00NDk2LTk3 MjEtOGMwM2NmMDQ2MzQ1LzAvNzMyNzlEQURCNEVCOUIzMUI4OENDQUI1RjY4M0RE QTA1NUY0RjBBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImVQ0R+w1F0BtsCm7YjYRiGpI0qPJuz01tu G+zbLTqFxpEEJ8ei8oZYeU6h2gVZC920IxgLu86lEsiNuMdAQ75M9MrPInLzIVTA RFCUpWmqTX4JGrar2Vvratdqa15LIWGaFxOCVyUyIxyt5pHLNshX4kIClaJG3GcT Ny4pkqFLcvOnuAuPcxuX6IUtV4rMDYSTRljXzboGNvceWCdxqHjPSCBzPxVFxZJN FWboR+3HQLmjffhu1ZFroed4xeg1AdvuwNABOq37SRmHZ7cedyHcFe0FSSq/ZRg4 EJRDnFDgHl4b3fiv2tKftD2SWA5lAu7D8ArPgRjFyrJQMaG0Jds= -----END CERTIFICATE-----Generated at Sun Oct 19 15:43:41 2025 by rpki-client