$ rpki-client -vvf repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft File: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft (raw, json) Hash identifier: XzRgX5XQ4BPI8tZ3ZLYoFCErrzn+wvzCkIpiUqBrwzk= Subject key identifier: 9F:65:52:79:E8:21:54:F4:44:66:9B:BF:EF:39:8C:C4:B4:F3:EE:5E Authority key identifier: 73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 Certificate issuer: /CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Certificate serial: 674243034FF35877222DBEC72E4E6AFDC4A1BB2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft Manifest number: 0297 Signing time: Sat 18 Oct 2025 19:21:07 +0000 Manifest this update: Sat 18 Oct 2025 19:16:07 +0000 Manifest next update: Wed 22 Oct 2025 00:30:07 +0000 Files and hashes: 1: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl (hash: 1TvD//VkB0trz8wxPLKERjkPpXMAkHzfFq+g5ByoBSQ=) 2: 3230322e3138332e302e302f31392d3139203d3e203338313630.roa (hash: MEztuZqZgD3unDvE9UbT7j2miLRVC0ZWnvrCm6yOt54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:42:43:03:4f:f3:58:77:22:2d:be:c7:2e:4e:6a:fd:c4:a1:bb:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Validity Not Before: Oct 18 19:16:07 2025 GMT Not After : Oct 22 00:30:07 2025 GMT Subject: CN=9F655279E82154F444669BBFEF398CC4B4F3EE5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b6:ac:7d:a9:d9:eb:f1:12:fc:96:4c:b6:3e: 7a:95:d5:fd:71:ed:ee:0b:ca:01:05:b2:bb:42:b7: 36:4f:6a:e1:4f:4f:89:ad:cd:3d:f1:bb:92:a1:ea: 40:44:90:48:ee:a7:fc:19:2b:a4:c0:38:3f:52:88: ed:b2:7c:80:57:5f:bf:32:4c:07:77:26:0f:61:7a: 76:1a:3b:51:82:4d:de:79:70:3b:cd:a1:01:a3:3d: bd:76:41:9f:bc:af:8f:5a:e3:3a:39:2a:c4:78:a0: 47:ed:00:46:bf:63:cf:df:d6:e7:da:b6:bb:5d:29: d3:4c:60:03:4a:eb:9d:20:a8:c9:fa:64:29:18:96: cb:e9:c1:77:d2:2d:6a:8a:ba:e8:d7:c0:d3:0b:4c: 0a:4a:33:6e:c9:71:84:6d:45:e3:ca:7e:06:12:47: c9:3b:e8:91:52:26:da:0d:13:35:85:57:c4:a1:ee: c4:51:e7:c1:99:94:a7:40:34:bf:4f:53:bf:cd:14: cb:be:da:d7:57:cb:db:4c:15:b1:7e:a3:85:80:9a: ee:db:9d:32:c4:5a:d3:3d:e1:6a:ed:ae:38:e8:5a: 11:dd:20:1e:5f:e4:31:2f:e0:6b:a5:ff:11:a5:91: 61:47:50:75:2a:bd:b6:6a:90:27:04:a9:64:45:37: c2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:65:52:79:E8:21:54:F4:44:66:9B:BF:EF:39:8C:C4:B4:F3:EE:5E X509v3 Authority Key Identifier: keyid:73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:53:ee:58:7c:40:d3:ec:46:f7:d2:de:80:aa:ce:c4:77:d0: 37:45:bf:e2:84:a4:3b:98:67:bf:a9:40:85:22:d0:8c:81:16: 81:70:1c:91:40:55:01:9b:26:7b:4b:81:db:df:14:37:0a:3a: 42:8d:55:dd:be:98:cb:3d:af:d6:e6:0a:f0:71:ac:41:e8:77: 45:c6:11:20:b6:db:d4:d8:94:27:39:2e:ab:12:63:49:3a:cf: f0:23:af:6d:b2:0d:b0:87:34:ea:77:58:b2:ab:a6:c1:80:fa: 23:21:f1:3f:3b:6d:0d:ea:45:a8:62:23:78:df:cd:da:3e:dc: fd:c8:30:42:09:fb:65:10:83:9d:9f:ef:60:72:d5:6c:cb:1e: b8:44:95:95:88:48:a2:2f:88:6c:c3:6b:19:92:c0:d6:21:42: 25:85:81:23:c0:8a:06:be:99:29:ab:d7:24:16:7c:e1:36:53: 7a:9b:55:e1:ae:66:7b:69:dd:4b:c3:ea:0f:0a:a3:a9:6c:18: d3:7b:88:eb:e8:0a:4e:21:10:a6:0b:e0:c0:e8:23:12:df:f3: 48:ae:70:05:5f:f5:e3:25:d7:25:1e:6d:a6:ec:9b:45:3e:60: af:6e:61:78:3c:d3:38:48:e1:07:83:f1:32:fb:cc:a7:6f:ae: 69:11:45:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ0JDA0/zWHciLb7HLk5q/cShuy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5 RUZFOTZBMzAeFw0yNTEwMTgxOTE2MDdaFw0yNTEwMjIwMDMwMDdaMDMxMTAvBgNV BAMTKDlGNjU1Mjc5RTgyMTU0RjQ0NDY2OUJCRkVGMzk4Q0M0QjRGM0VFNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDotqx9qdnr8RL8lky2PnqV1f1x 7e4LygEFsrtCtzZPauFPT4mtzT3xu5Kh6kBEkEjup/wZK6TAOD9SiO2yfIBXX78y TAd3Jg9henYaO1GCTd55cDvNoQGjPb12QZ+8r49a4zo5KsR4oEftAEa/Y8/f1ufa trtdKdNMYANK650gqMn6ZCkYlsvpwXfSLWqKuujXwNMLTApKM27JcYRtRePKfgYS R8k76JFSJtoNEzWFV8Sh7sRR58GZlKdANL9PU7/NFMu+2tdXy9tMFbF+o4WAmu7b nTLEWtM94WrtrjjoWhHdIB5f5DEv4Gul/xGlkWFHUHUqvbZqkCcEqWRFN8JzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn2VSeeghVPREZpu/7zmMxLTz7l4wHwYDVR0j BBgwFoAUcy9G10x6jF2IinCRpwbzoJ7+lqMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTBkMWFhMS00YzdmLTQ0OGItYjJiYi0wMmM1NzE1MWYyMTAvMC83MzJGNDZENzRD N0E4QzVEODg4QTcwOTFBNzA2RjNBMDlFRkU5NkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5RUZF OTZBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUwZDFhYTEtNGM3Zi00NDhiLWIy YmItMDJjNTcxNTFmMjEwLzAvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYz QTA5RUZFOTZBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJT7lh8QNPsRvfS3oCqzsR30DdFv+KEpDuY Z7+pQIUi0IyBFoFwHJFAVQGbJntLgdvfFDcKOkKNVd2+mMs9r9bmCvBxrEHod0XG ESC229TYlCc5LqsSY0k6z/Ajr22yDbCHNOp3WLKrpsGA+iMh8T87bQ3qRahiI3jf zdo+3P3IMEIJ+2UQg52f72By1WzLHrhElZWISKIviGzDaxmSwNYhQiWFgSPAiga+ mSmr1yQWfOE2U3qbVeGuZntp3UvD6g8Ko6lsGNN7iOvoCk4hEKYL4MDoIxLf80iu cAVf9eMl1yUebabsm0U+YK9uYXg80zhI4QeD8TL7zKdvrmkRRSA= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:52 2025 by rpki-client