$ rpki-client -vvf repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft File: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft (raw, json) Hash identifier: DMh5Lo+LWwz3cUrkeLl5WY3iQeF6Dy3KZKXPz5y4prc= Subject key identifier: CC:87:B3:33:6E:0C:78:D1:E7:E2:C7:F5:BC:F4:00:9E:CE:3E:7C:38 Authority key identifier: 73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 Certificate issuer: /CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Certificate serial: 4B29B96E2954F61832ACD5D5588CB4094ED58C6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft Manifest number: 027D Signing time: Thu 21 Aug 2025 07:41:03 +0000 Manifest this update: Thu 21 Aug 2025 07:36:02 +0000 Manifest next update: Sun 24 Aug 2025 16:16:02 +0000 Files and hashes: 1: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl (hash: o9m7ekbgtTQ4nKfd6wA5kbGC4l1HDg+HDik13XS4zA0=) 2: 3230322e3138332e302e302f31392d3139203d3e203338313630.roa (hash: MEztuZqZgD3unDvE9UbT7j2miLRVC0ZWnvrCm6yOt54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 16:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:29:b9:6e:29:54:f6:18:32:ac:d5:d5:58:8c:b4:09:4e:d5:8c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Validity Not Before: Aug 21 07:36:02 2025 GMT Not After : Aug 24 16:16:02 2025 GMT Subject: CN=CC87B3336E0C78D1E7E2C7F5BCF4009ECE3E7C38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0c:e5:0d:68:1d:4b:74:d7:e7:3f:8c:31:26: e2:75:5a:a3:4d:b6:2e:a8:5b:1d:94:b6:08:bb:66: 51:43:49:40:b7:5a:41:e6:f1:74:3b:e1:ce:00:8c: a7:b1:c3:37:ab:29:bc:30:a4:4a:b0:1c:4d:d0:67: dd:c2:9d:bc:1d:b8:ef:e5:99:df:86:9e:4e:6d:3f: a1:f9:86:a7:a6:72:8a:0f:0a:49:03:63:93:51:48: 20:e0:ab:b4:e8:95:a5:90:13:28:a9:92:19:e3:12: 84:17:9c:00:47:7e:3b:f6:96:2b:15:2d:9a:dd:dd: f9:95:84:fe:e7:64:67:46:e8:25:ac:75:8d:b2:82: 37:8d:4e:b1:96:6e:e3:53:ec:45:44:3c:81:76:6c: c8:f7:f8:29:34:53:23:6a:a5:6b:fd:69:c2:17:bd: 44:97:b8:d6:46:16:ac:24:ed:1a:54:f1:b8:3a:a5: 51:58:99:04:e8:a3:c2:83:4a:46:ad:fe:97:be:09: 8c:b1:fa:b9:5a:a6:3f:ff:5d:22:27:f3:2f:42:ca: 06:72:a5:5e:ff:48:e4:e8:aa:b0:d8:45:18:ef:12: a7:c9:70:38:b4:9f:87:37:c2:ee:91:9d:5b:0a:fe: 47:8e:bf:fd:2d:df:f5:eb:fe:b0:ba:14:b7:00:ce: 30:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:87:B3:33:6E:0C:78:D1:E7:E2:C7:F5:BC:F4:00:9E:CE:3E:7C:38 X509v3 Authority Key Identifier: keyid:73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:ae:74:f4:76:e0:f5:ba:43:da:d5:f2:49:8a:54:2f:7f:25: bc:b7:1f:e4:bc:87:cc:ce:74:fc:00:c8:a1:17:54:57:8f:c3: 59:fb:a0:c1:1f:a4:db:b5:c8:31:90:82:11:9c:17:d8:0a:c0: 01:25:74:cb:1d:b7:33:d7:3e:0d:21:6c:c5:70:31:98:c9:fe: 7d:0e:db:7b:a7:9c:24:6b:1a:de:5b:62:61:30:78:63:cf:1e: e4:ab:f8:6c:ea:df:ba:d5:83:75:0d:f2:dc:67:a1:71:d8:de: f8:a1:7a:5a:d2:85:27:39:ac:24:ac:cf:7f:0a:64:cc:a9:3b: d4:9e:14:36:a5:e1:d5:94:5e:a2:9d:6d:0e:54:9d:54:84:b2: bf:d7:fa:7c:bc:96:0e:39:a5:6f:d7:32:49:f0:7c:18:79:ae: 05:7b:0e:cb:96:6c:3e:2b:9e:68:69:b2:cf:73:fd:84:0f:78: c9:40:7b:2a:d9:b7:18:0f:f1:e8:ff:df:d9:8e:de:0c:fa:bb: 79:ec:a6:30:b6:d3:98:56:04:bd:ab:8d:50:39:51:c5:07:9c: 3b:b1:ba:cc:44:d4:0b:48:d8:0d:60:a8:d1:e8:ee:e7:4a:6f: f6:57:3f:76:b9:0d:16:c3:11:c3:df:0f:3f:f9:7b:4a:31:25: 60:41:40:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSym5bilU9hgyrNXVWIy0CU7VjG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5 RUZFOTZBMzAeFw0yNTA4MjEwNzM2MDJaFw0yNTA4MjQxNjE2MDJaMDMxMTAvBgNV BAMTKENDODdCMzMzNkUwQzc4RDFFN0UyQzdGNUJDRjQwMDlFQ0UzRTdDMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoDOUNaB1LdNfnP4wxJuJ1WqNN ti6oWx2Utgi7ZlFDSUC3WkHm8XQ74c4AjKexwzerKbwwpEqwHE3QZ93CnbwduO/l md+Gnk5tP6H5hqemcooPCkkDY5NRSCDgq7TolaWQEyipkhnjEoQXnABHfjv2lisV LZrd3fmVhP7nZGdG6CWsdY2ygjeNTrGWbuNT7EVEPIF2bMj3+Ck0UyNqpWv9acIX vUSXuNZGFqwk7RpU8bg6pVFYmQToo8KDSkat/pe+CYyx+rlapj//XSIn8y9CygZy pV7/SOToqrDYRRjvEqfJcDi0n4c3wu6RnVsK/keOv/0t3/Xr/rC6FLcAzjBlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzIezM24MeNHn4sf1vPQAns4+fDgwHwYDVR0j BBgwFoAUcy9G10x6jF2IinCRpwbzoJ7+lqMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTBkMWFhMS00YzdmLTQ0OGItYjJiYi0wMmM1NzE1MWYyMTAvMC83MzJGNDZENzRD N0E4QzVEODg4QTcwOTFBNzA2RjNBMDlFRkU5NkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5RUZF OTZBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUwZDFhYTEtNGM3Zi00NDhiLWIy YmItMDJjNTcxNTFmMjEwLzAvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYz QTA5RUZFOTZBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmudPR24PW6Q9rV8kmKVC9/Jby3H+S8h8zO dPwAyKEXVFePw1n7oMEfpNu1yDGQghGcF9gKwAEldMsdtzPXPg0hbMVwMZjJ/n0O 23unnCRrGt5bYmEweGPPHuSr+Gzq37rVg3UN8txnoXHY3vihelrShSc5rCSsz38K ZMypO9SeFDal4dWUXqKdbQ5UnVSEsr/X+ny8lg45pW/XMknwfBh5rgV7DsuWbD4r nmhpss9z/YQPeMlAeyrZtxgP8ej/39mO3gz6u3nspjC205hWBL2rjVA5UcUHnDux usxE1AtI2A1gqNHo7udKb/ZXP3a5DRbDEcPfDz/5e0oxJWBBQI8= -----END CERTIFICATE-----Generated at Sat Aug 23 16:05:30 2025 by rpki-client