$ rpki-client -vvf repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft File: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft (raw, json) Hash identifier: 9O4Zb0KsXwRZxWowun5Cmz/aRk+VgJlSOUNmfpMivWo= Subject key identifier: 14:A6:BA:12:B0:9F:F1:84:E0:49:3D:BE:DD:AC:45:2F:6B:3F:79:BE Authority key identifier: 73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 Certificate issuer: /CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Certificate serial: 415462C2659FD69A800527107E3C1C7DE80EC99C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft Manifest number: 0265 Signing time: Sun 29 Jun 2025 07:11:03 +0000 Manifest this update: Sun 29 Jun 2025 07:06:03 +0000 Manifest next update: Wed 02 Jul 2025 11:25:03 +0000 Files and hashes: 1: 3230322e3138332e302e302f31392d3139203d3e203338313630.roa (hash: MEztuZqZgD3unDvE9UbT7j2miLRVC0ZWnvrCm6yOt54=) 2: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl (hash: MCbc49L7ALa/m8UG1a+gPhiV36dgaBvBL5xVNTU+jYU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:54:62:c2:65:9f:d6:9a:80:05:27:10:7e:3c:1c:7d:e8:0e:c9:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Validity Not Before: Jun 29 07:06:03 2025 GMT Not After : Jul 2 11:25:03 2025 GMT Subject: CN=14A6BA12B09FF184E0493DBEDDAC452F6B3F79BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:09:11:c8:94:de:00:9b:a8:30:8e:ad:c8:bb: 0b:14:4a:68:1a:0d:2c:95:34:44:c3:e2:1a:7f:d4: 64:9d:32:41:9b:7f:b2:8c:26:29:22:ef:b7:da:22: 22:9a:7d:46:42:7b:27:70:41:39:c8:ba:6f:d8:07: fe:74:71:a6:13:10:3a:e4:c5:61:ee:6b:ad:77:1f: f9:e3:73:d4:73:6c:5b:15:c9:63:9d:f6:f5:3a:5e: 96:38:61:5c:bd:a2:60:20:4e:89:f3:72:19:2b:34: 3f:f0:cc:21:41:05:07:b3:38:dd:2d:a0:4b:21:20: 27:83:f6:d4:bc:ec:9e:14:ea:92:b4:61:3f:5d:4b: ed:c8:54:16:a2:7c:3b:96:cd:67:97:7e:23:1f:e8: 11:07:3e:d2:ad:97:74:6f:7f:ab:6c:ca:27:46:25: 31:66:14:2e:e1:c8:f8:98:59:6c:16:60:25:db:46: 52:39:a3:46:eb:30:9e:39:e0:67:5b:f8:af:60:1f: 69:7f:03:e3:a5:c3:50:77:c2:97:08:b9:93:6b:25: e3:e5:91:de:34:34:0c:08:ba:76:2b:aa:b5:ac:35: 5b:3a:a1:57:ef:77:8d:b6:11:69:fa:e4:f5:e7:5a: 72:35:ea:67:3d:62:7a:d8:ae:b8:54:59:81:09:dd: c0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A6:BA:12:B0:9F:F1:84:E0:49:3D:BE:DD:AC:45:2F:6B:3F:79:BE X509v3 Authority Key Identifier: keyid:73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a6:da:45:4f:75:74:2a:7c:38:25:87:43:e7:01:c2:60:9c: ee:1c:3c:72:45:0b:c5:c3:d0:04:f1:a3:96:73:d6:cf:2d:ea: 3b:76:50:73:0c:66:46:08:ff:1c:eb:24:4d:7c:43:7f:4a:7c: 45:23:f1:bf:75:c3:1e:9b:5d:d9:22:2b:64:c9:89:8f:36:a0: 5a:60:9b:a5:03:56:be:50:0e:b0:57:9c:90:f8:b6:78:b7:a5: cf:4f:67:78:9a:06:b1:b2:08:52:ab:cb:d9:46:dc:59:38:29: e4:d2:18:24:e6:67:cd:6c:e5:07:60:fc:33:47:f2:8f:cb:68: 92:5d:f6:16:5f:af:41:7c:62:89:5a:8d:86:74:d3:9d:49:9f: 13:87:a1:e8:61:90:2e:23:d8:e7:c7:29:11:93:c6:d1:ae:46: d7:63:7b:6a:ef:25:91:ae:db:95:f9:06:32:ad:03:5a:df:c8: bb:1a:14:64:67:ea:15:a5:e7:ec:1c:1b:44:c7:8c:ed:fe:57: 58:de:e7:aa:db:21:c5:26:2b:0b:68:2a:51:8c:bd:ac:f5:ca: 02:16:41:5a:fd:4e:4d:c2:ef:64:4d:f4:02:8e:70:64:56:c6: 31:11:9a:3c:97:2d:12:b6:20:96:9c:0f:05:05:1c:c7:63:0f: 26:dc:a9:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQVRiwmWf1pqABScQfjwcfegOyZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5 RUZFOTZBMzAeFw0yNTA2MjkwNzA2MDNaFw0yNTA3MDIxMTI1MDNaMDMxMTAvBgNV BAMTKDE0QTZCQTEyQjA5RkYxODRFMDQ5M0RCRUREQUM0NTJGNkIzRjc5QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9CRHIlN4Am6gwjq3IuwsUSmga DSyVNETD4hp/1GSdMkGbf7KMJiki77faIiKafUZCeydwQTnIum/YB/50caYTEDrk xWHua613H/njc9RzbFsVyWOd9vU6XpY4YVy9omAgTonzchkrND/wzCFBBQezON0t oEshICeD9tS87J4U6pK0YT9dS+3IVBaifDuWzWeXfiMf6BEHPtKtl3Rvf6tsyidG JTFmFC7hyPiYWWwWYCXbRlI5o0brMJ454Gdb+K9gH2l/A+Olw1B3wpcIuZNrJePl kd40NAwIunYrqrWsNVs6oVfvd422EWn65PXnWnI16mc9YnrYrrhUWYEJ3cD3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFKa6ErCf8YTgST2+3axFL2s/eb4wHwYDVR0j BBgwFoAUcy9G10x6jF2IinCRpwbzoJ7+lqMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTBkMWFhMS00YzdmLTQ0OGItYjJiYi0wMmM1NzE1MWYyMTAvMC83MzJGNDZENzRD N0E4QzVEODg4QTcwOTFBNzA2RjNBMDlFRkU5NkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5RUZF OTZBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUwZDFhYTEtNGM3Zi00NDhiLWIy YmItMDJjNTcxNTFmMjEwLzAvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYz QTA5RUZFOTZBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+m2kVPdXQqfDglh0PnAcJgnO4cPHJFC8XD 0ATxo5Zz1s8t6jt2UHMMZkYI/xzrJE18Q39KfEUj8b91wx6bXdkiK2TJiY82oFpg m6UDVr5QDrBXnJD4tni3pc9PZ3iaBrGyCFKry9lG3Fk4KeTSGCTmZ81s5Qdg/DNH 8o/LaJJd9hZfr0F8YolajYZ0051JnxOHoehhkC4j2OfHKRGTxtGuRtdje2rvJZGu 25X5BjKtA1rfyLsaFGRn6hWl5+wcG0THjO3+V1je56rbIcUmKwtoKlGMvaz1ygIW QVr9Tk3C72RN9AKOcGRWxjERmjyXLRK2IJacDwUFHMdjDybcqYs= -----END CERTIFICATE-----Generated at Sun Jun 29 18:50:11 2025 by rpki-client