$ rpki-client -vvf repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft File: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft (raw, json) Hash identifier: IF7iVqoW9tS+0kzTKUYvaJQVmFDDmpEpIsS209QJOng= Subject key identifier: A4:B6:A0:2D:D2:92:7D:E0:01:ED:51:1C:22:9B:49:F4:85:54:37:9B Authority key identifier: 73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 Certificate issuer: /CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Certificate serial: 179FFAED665EB6E1E9935087B773C7F809C800B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft Manifest number: BA Signing time: Sat 30 Aug 2025 16:31:17 +0000 Manifest this update: Sat 30 Aug 2025 16:26:17 +0000 Manifest next update: Tue 02 Sep 2025 21:47:17 +0000 Files and hashes: 1: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl (hash: iuTPFCIsPBgdChwiRxShivFrT2yXTJCrZ6roPQ1T3z8=) 2: 3135372e36362e3137312e302f32342d3234203d3e20313532373737.roa (hash: uOA4jTwlkcqlsjP32WwaK900NFV6wePG9q2fIgGqlJw=) 3: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (hash: bCp+hfr7ROEtQWyvQHaGucdWFI7N+d4ip6n9SavuoOk=) 4: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (hash: mWn5DPCiekSxGNB8RumBKf5syIxB4d7+KUn6ZNJHctk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:9f:fa:ed:66:5e:b6:e1:e9:93:50:87:b7:73:c7:f8:09:c8:00:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Validity Not Before: Aug 30 16:26:17 2025 GMT Not After : Sep 2 21:47:17 2025 GMT Subject: CN=A4B6A02DD2927DE001ED511C229B49F48554379B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ca:9c:47:62:07:88:75:c9:32:23:c4:69:b1: 27:58:37:9d:dc:2e:6d:34:9e:37:bc:b3:f4:e7:23: 25:60:57:8f:2e:07:01:c3:7a:b1:e6:18:e9:b4:46: eb:76:fa:d0:a7:51:99:3a:d3:e6:22:a0:29:17:a9: 93:92:34:22:22:1d:2a:00:7b:8c:3a:5e:7c:0d:21: 59:73:60:0e:79:ff:d7:d1:0a:da:68:c8:5c:45:e4: 9f:76:bb:97:76:e2:94:6c:37:76:57:d9:91:c2:c3: d7:a2:33:8d:28:d0:ef:62:5b:5f:11:91:aa:52:76: 92:86:42:83:8a:45:e5:80:46:47:29:5f:e0:b6:83: 62:ed:48:17:d4:39:80:1a:ca:14:c4:1a:fe:50:b6: 59:2e:c2:f9:6f:40:c6:3e:6b:06:85:64:aa:b8:eb: 48:f9:8f:94:8b:01:52:ca:4e:6d:51:0e:58:f1:0c: f6:02:05:a2:8d:94:e9:0e:6c:40:d0:69:f1:8d:3a: a5:a4:01:b4:22:98:16:83:5e:f3:04:2c:ab:c2:51: 22:26:d0:4e:43:29:b4:58:4b:fa:d9:21:5a:d6:fe: 48:7c:64:76:4b:55:c3:38:ed:9d:3c:6f:3d:a9:ff: 71:24:c3:10:b0:f1:cb:8f:74:3c:18:63:08:3a:15: d7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B6:A0:2D:D2:92:7D:E0:01:ED:51:1C:22:9B:49:F4:85:54:37:9B X509v3 Authority Key Identifier: keyid:73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:89:49:37:5e:3a:71:ce:e7:a8:79:88:6f:20:bc:41:92:29: c5:9e:d0:87:68:14:67:76:9a:34:a5:8c:e4:19:62:31:53:78: b9:5d:81:2c:55:45:fe:9e:85:3f:26:76:10:1d:d9:fd:b4:8f: de:ae:40:ee:35:20:87:a6:82:e0:e8:54:1d:a7:1f:72:74:08: 77:9e:8f:6f:c8:fb:a4:ee:6f:51:76:83:d0:46:f0:15:2f:2d: a4:f1:6e:9c:84:c6:31:8e:be:96:2e:b4:49:2f:ae:37:98:3e: 5c:aa:dd:eb:2b:ed:95:ca:94:87:41:08:f8:f2:dc:90:f3:db: ba:48:47:e3:86:f7:a7:88:f9:16:19:95:47:31:20:96:04:1f: 37:c1:be:dc:a0:9d:c4:c0:d7:e8:75:52:c4:2f:12:ef:52:b1: 6b:8b:cc:02:89:25:d9:7c:35:c0:cb:45:a4:75:10:9e:ff:aa: 5b:11:aa:d2:29:e8:80:51:cf:2e:20:02:0d:43:71:a6:1d:66: 0a:4b:ab:ba:1f:82:5e:a5:ad:30:ee:21:58:9c:9d:bd:c0:16: e9:ef:98:b1:4b:1d:8c:6e:42:3b:c6:b8:fc:98:9a:4a:fa:bd: b7:3c:15:7f:40:8c:d1:4b:6b:1f:b7:bd:77:8f:bd:f9:7f:99: 0f:b6:c4:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF5/67WZetuHpk1CHt3PH+AnIALgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4 N0UxOUFCNjAeFw0yNTA4MzAxNjI2MTdaFw0yNTA5MDIyMTQ3MTdaMDMxMTAvBgNV BAMTKEE0QjZBMDJERDI5MjdERTAwMUVENTExQzIyOUI0OUY0ODU1NDM3OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvypxHYgeIdckyI8RpsSdYN53c Lm00nje8s/TnIyVgV48uBwHDerHmGOm0Rut2+tCnUZk60+YioCkXqZOSNCIiHSoA e4w6XnwNIVlzYA55/9fRCtpoyFxF5J92u5d24pRsN3ZX2ZHCw9eiM40o0O9iW18R kapSdpKGQoOKReWARkcpX+C2g2LtSBfUOYAayhTEGv5QtlkuwvlvQMY+awaFZKq4 60j5j5SLAVLKTm1RDljxDPYCBaKNlOkObEDQafGNOqWkAbQimBaDXvMELKvCUSIm 0E5DKbRYS/rZIVrW/kh8ZHZLVcM47Z08bz2p/3EkwxCw8cuPdDwYYwg6FdfZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpLagLdKSfeAB7VEcIptJ9IVUN5swHwYDVR0j BBgwFoAUc6+UXv9eqdHv3CYX+kNDDofhmrYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTQ4MTYwNi1kNWZkLTQxOTYtYWJjZC01OGU2Yzc2MjQzYzUvMC83M0FGOTQ1RUZG NUVBOUQxRUZEQzI2MTdGQTQzNDMwRTg3RTE5QUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4N0Ux OUFCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU0ODE2MDYtZDVmZC00MTk2LWFi Y2QtNThlNmM3NjI0M2M1LzAvNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQz MEU4N0UxOUFCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6JSTdeOnHO56h5iG8gvEGSKcWe0IdoFGd2 mjSljOQZYjFTeLldgSxVRf6ehT8mdhAd2f20j96uQO41IIemguDoVB2nH3J0CHee j2/I+6Tub1F2g9BG8BUvLaTxbpyExjGOvpYutEkvrjeYPlyq3esr7ZXKlIdBCPjy 3JDz27pIR+OG96eI+RYZlUcxIJYEHzfBvtygncTA1+h1UsQvEu9SsWuLzAKJJdl8 NcDLRaR1EJ7/qlsRqtIp6IBRzy4gAg1DcaYdZgpLq7ofgl6lrTDuIVicnb3AFunv mLFLHYxuQjvGuPyYmkr6vbc8FX9AjNFLax+3vXePvfl/mQ+2xKQ= -----END CERTIFICATE-----Generated at Sun Aug 31 11:39:14 2025 by rpki-client