$ rpki-client -vvf repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft File: 73238FE50473DF8F457921BE1B0C04764209BBF1.mft (raw, json) Hash identifier: 48EFoP6hzHhNvQ8nNMUSSovpCd5mEREeEQXBdmujzGw= Subject key identifier: 48:73:9B:18:F5:F0:32:4B:47:E1:16:49:E8:A3:35:46:28:37:6E:AD Authority key identifier: 73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 Certificate issuer: /CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Certificate serial: 617A7197F55D436C2950A042C218BFF14EA0C09A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft Manifest number: A3 Signing time: Sun 20 Jul 2025 04:11:02 +0000 Manifest this update: Sun 20 Jul 2025 04:06:02 +0000 Manifest next update: Wed 23 Jul 2025 08:22:02 +0000 Files and hashes: 1: 73238FE50473DF8F457921BE1B0C04764209BBF1.crl (hash: lloi2/CjPIGGAHMkEjWT7GqQ2MB6uzHNVRdR9uTrg2E=) 2: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (hash: 6ESo4EJBYW+TZiA7AQCDdrC7W+O2u7DLGxOGwrnalLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 08:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:7a:71:97:f5:5d:43:6c:29:50:a0:42:c2:18:bf:f1:4e:a0:c0:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Validity Not Before: Jul 20 04:06:02 2025 GMT Not After : Jul 23 08:22:02 2025 GMT Subject: CN=48739B18F5F0324B47E11649E8A3354628376EAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7a:c4:cc:a2:06:a8:ce:18:a6:bd:dd:b1:85: c4:ec:da:ae:69:61:9c:d6:17:9e:a1:5c:13:0c:11: 49:c4:5b:fb:07:7a:50:61:25:9e:8b:4e:d2:fe:7c: f8:f9:4c:48:46:4f:23:02:ff:e0:a6:4d:f8:81:62: 19:24:23:d9:af:90:2e:ea:a1:23:d7:17:a3:8b:c8: 73:64:f8:c2:37:c0:23:5c:f4:1a:2c:9f:6f:b6:23: 4e:3a:fa:93:7d:17:6c:2a:55:61:28:73:b0:4b:dc: cf:0f:f1:e6:b0:c7:14:62:af:80:c7:2c:29:e6:64: c4:cc:ec:a0:9c:5e:10:44:79:11:a2:cf:a9:3b:f9: 93:94:8f:38:36:bc:82:88:67:24:a4:56:21:08:27: 96:33:69:10:cd:b7:b5:0d:47:e4:51:ff:db:29:6e: ea:43:a9:93:29:5b:46:2c:f2:06:af:41:a4:79:ef: 98:f2:a2:90:bd:69:b8:68:9d:1a:fd:78:9b:2e:24: e8:91:c1:31:a9:ff:df:b1:69:24:f5:4e:83:36:28: d2:07:96:48:95:dc:1e:96:58:5a:50:0a:46:29:21: 38:0c:69:98:41:75:42:52:be:54:68:0b:51:af:43: d1:cb:91:0f:31:64:d3:69:6f:16:fb:4a:76:81:91: e0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:73:9B:18:F5:F0:32:4B:47:E1:16:49:E8:A3:35:46:28:37:6E:AD X509v3 Authority Key Identifier: keyid:73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:55:ec:70:a8:79:08:8d:b6:75:a1:73:cf:1e:ff:8a:6c:d4: f8:50:02:cd:e2:9d:8e:60:43:9f:10:88:4a:28:3b:b8:d8:a3: 4e:ad:db:d6:89:a6:ab:90:a2:45:c7:f7:6a:b9:0e:1d:15:75: 68:d1:f4:ba:6c:62:b8:18:f8:a9:2c:2b:17:01:5f:c2:97:62: f6:7e:82:24:56:ca:f5:68:5b:8e:d6:94:8d:0d:a3:1e:a2:9d: 9f:90:f9:1e:fb:0b:66:62:05:0d:67:38:d4:70:a6:05:0a:26: 11:17:89:8f:6d:2b:3a:04:bd:a8:ec:5d:c7:78:05:9e:68:d0: f3:a7:07:09:bb:8c:a2:9e:c0:4e:ba:97:42:47:8a:a8:19:af: 6f:3a:69:a5:21:99:82:ad:ee:25:8a:e6:bc:fa:b1:4e:89:e0: 1d:93:6e:cc:63:10:91:cb:39:12:b1:36:79:28:7f:37:0e:47: e9:53:c2:b1:70:7b:5b:d8:71:c6:42:4a:15:e1:2e:e5:9c:16: 75:9f:bb:cc:f7:a8:1d:42:9f:ed:f4:de:c4:c0:d1:59:0b:22: d2:58:da:ac:18:10:de:a5:b3:12:e2:cb:6b:fd:05:4b:22:64: cb:7f:c7:91:65:26:1e:b1:da:aa:51:f7:3e:98:45:df:9c:f6: e7:f7:b9:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYXpxl/VdQ2wpUKBCwhi/8U6gwJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0 MjA5QkJGMTAeFw0yNTA3MjAwNDA2MDJaFw0yNTA3MjMwODIyMDJaMDMxMTAvBgNV BAMTKDQ4NzM5QjE4RjVGMDMyNEI0N0UxMTY0OUU4QTMzNTQ2MjgzNzZFQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMesTMogaozhimvd2xhcTs2q5p YZzWF56hXBMMEUnEW/sHelBhJZ6LTtL+fPj5TEhGTyMC/+CmTfiBYhkkI9mvkC7q oSPXF6OLyHNk+MI3wCNc9Bosn2+2I046+pN9F2wqVWEoc7BL3M8P8eawxxRir4DH LCnmZMTM7KCcXhBEeRGiz6k7+ZOUjzg2vIKIZySkViEIJ5YzaRDNt7UNR+RR/9sp bupDqZMpW0Ys8gavQaR575jyopC9abhonRr9eJsuJOiRwTGp/9+xaST1ToM2KNIH lkiV3B6WWFpQCkYpITgMaZhBdUJSvlRoC1GvQ9HLkQ8xZNNpbxb7SnaBkeBlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSHObGPXwMktH4RZJ6KM1Rig3bq0wHwYDVR0j BBgwFoAUcyOP5QRz349FeSG+GwwEdkIJu/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGE4Y2U2Yy04MjkwLTRiOWQtOWFlZC0wNzU0ZDNmZDhkMzIvMC83MzIzOEZFNTA0 NzNERjhGNDU3OTIxQkUxQjBDMDQ3NjQyMDlCQkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0MjA5 QkJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDBhOGNlNmMtODI5MC00YjlkLTlh ZWQtMDc1NGQzZmQ4ZDMyLzAvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0 NzY0MjA5QkJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVV7HCoeQiNtnWhc88e/4ps1PhQAs3inY5g Q58QiEooO7jYo06t29aJpquQokXH92q5Dh0VdWjR9LpsYrgY+KksKxcBX8KXYvZ+ giRWyvVoW47WlI0Nox6inZ+Q+R77C2ZiBQ1nONRwpgUKJhEXiY9tKzoEvajsXcd4 BZ5o0POnBwm7jKKewE66l0JHiqgZr286aaUhmYKt7iWK5rz6sU6J4B2TbsxjEJHL ORKxNnkofzcOR+lTwrFwe1vYccZCShXhLuWcFnWfu8z3qB1Cn+303sTA0VkLItJY 2qwYEN6lsxLiy2v9BUsiZMt/x5FlJh6x2qpR9z6YRd+c9uf3uSk= -----END CERTIFICATE-----Generated at Mon Jul 21 10:32:40 2025 by rpki-client