$ rpki-client -vvf repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft File: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft (raw, json) Hash identifier: j4ZeflhLXh5AGzWQL8Gesr30MFTbxxyFoki+jGo1XIg= Subject key identifier: EC:D5:00:DF:AE:E9:FB:89:B1:B6:0C:45:DD:F0:15:FE:12:9B:73:A1 Authority key identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD Certificate issuer: /CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Certificate serial: 0552FA5E832BDADEDBD3753638A82331D7B466BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft Manifest number: 025E Signing time: Sun 29 Jun 2025 04:41:09 +0000 Manifest this update: Sun 29 Jun 2025 04:36:09 +0000 Manifest next update: Wed 02 Jul 2025 06:42:09 +0000 Files and hashes: 1: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl (hash: h5TgaPya+xVfoGapGqWrHqGme4Q49idjylMRpsy/Nuc=) 2: 3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (hash: WzQyswXSwMjXUbCDUIIF0PkevxcLaE+CYPcmOj6X+is=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 06:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:52:fa:5e:83:2b:da:de:db:d3:75:36:38:a8:23:31:d7:b4:66:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Validity Not Before: Jun 29 04:36:09 2025 GMT Not After : Jul 2 06:42:09 2025 GMT Subject: CN=ECD500DFAEE9FB89B1B60C45DDF015FE129B73A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:96:22:e2:7f:7a:ad:fe:25:d3:3d:2b:00:5b: f0:8d:31:1c:6e:ff:29:fb:ee:26:10:71:88:61:f7: 3e:4e:d3:50:c8:34:95:3c:3d:3c:3d:a4:28:19:c5: e5:84:c9:8a:2d:69:89:55:1b:91:05:b9:ac:01:8e: a7:dd:36:f0:97:3c:5b:90:40:be:e1:4d:d0:03:77: c5:0a:fe:d7:ba:90:95:5a:83:3d:60:67:06:c9:ef: ad:f7:21:e8:ad:de:b0:0b:ff:04:28:41:56:bf:56: 74:39:64:cb:81:4a:8f:1a:a1:1c:1a:fc:13:7b:aa: ce:c9:b0:b5:ae:dc:2d:c3:c1:e5:53:ac:d0:0d:05: a8:7a:7c:2c:a1:2b:5b:48:85:5f:59:b7:e3:63:9e: 9d:3b:d4:e4:03:23:bf:6d:88:44:81:00:6d:93:74: dd:f2:57:0b:27:4b:d0:a2:99:74:dd:4e:11:04:87: 0a:17:ba:8b:f2:f9:9a:05:99:3b:8d:63:c7:21:d5: bb:af:20:f1:28:00:0f:a8:75:9b:29:84:17:69:e2: 2c:8c:52:0d:7a:b6:6e:85:de:f5:d6:db:0e:c5:c3: af:3f:a4:b3:97:8b:81:62:73:ee:1c:cf:26:2d:a2: ce:5a:d4:b1:48:6b:48:1d:ac:aa:c9:1f:ee:1c:37: 09:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D5:00:DF:AE:E9:FB:89:B1:B6:0C:45:DD:F0:15:FE:12:9B:73:A1 X509v3 Authority Key Identifier: keyid:73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:eb:05:a8:23:16:8a:26:08:a3:11:4a:64:b2:70:09:08:f5: 30:c5:54:62:39:43:de:90:3c:18:7b:7b:c8:d3:e8:04:0f:6e: 86:e1:4b:17:e0:1e:02:72:71:c8:aa:a1:bd:0b:76:80:18:17: 60:09:c5:3e:d3:b4:6a:dc:9e:5b:c3:03:03:68:b9:e1:89:50: 6a:22:74:92:0c:bb:73:98:15:00:dc:09:31:f9:1b:26:d8:f4: 94:e2:9c:a6:fe:04:d3:14:85:08:10:7a:41:88:4a:95:d3:a8: 58:20:82:c4:6a:3b:11:bf:3e:67:5b:dc:9d:54:09:34:36:14: 92:9c:d1:43:a1:d0:20:51:0c:5d:ac:09:b5:53:2a:3a:2f:a6: 58:89:f7:cd:73:97:73:d2:72:70:16:fd:c7:dc:d5:58:ed:6f: ab:7b:5c:2a:78:7d:34:22:bc:b7:56:55:41:57:3f:c6:3e:56: 73:df:b7:4d:ef:cf:75:82:84:5d:02:4f:20:c4:6d:8a:6c:88: 0d:00:21:fb:9f:d6:89:69:31:e7:50:2c:97:0a:b8:c8:e4:d5: ac:db:08:0d:26:5d:34:e5:b6:02:7d:47:e1:f9:df:e2:db:bf: d8:49:c1:ca:c4:a0:c4:87:f9:5b:4b:e0:95:0c:96:80:2f:80: ce:fc:61:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBVL6XoMr2t7b03U2OKgjMde0Zr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAy QjU1QTZGRDAeFw0yNTA2MjkwNDM2MDlaFw0yNTA3MDIwNjQyMDlaMDMxMTAvBgNV BAMTKEVDRDUwMERGQUVFOUZCODlCMUI2MEM0NURERjAxNUZFMTI5QjczQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDliLif3qt/iXTPSsAW/CNMRxu /yn77iYQcYhh9z5O01DINJU8PTw9pCgZxeWEyYotaYlVG5EFuawBjqfdNvCXPFuQ QL7hTdADd8UK/te6kJVagz1gZwbJ7633Ieit3rAL/wQoQVa/VnQ5ZMuBSo8aoRwa /BN7qs7JsLWu3C3DweVTrNANBah6fCyhK1tIhV9Zt+Njnp071OQDI79tiESBAG2T dN3yVwsnS9CimXTdThEEhwoXuovy+ZoFmTuNY8ch1buvIPEoAA+odZsphBdp4iyM Ug16tm6F3vXW2w7Fw68/pLOXi4Fic+4czyYtos5a1LFIa0gdrKrJH+4cNwmBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7NUA367p+4mxtgxF3fAV/hKbc6EwHwYDVR0j BBgwFoAUc6LAaaOy66x17LNz85i1YCtVpv0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWMyNzYyMS1lMjk3LTQxMDAtOTcxYS0xYzY5NjdjNTJiMWIvMC83M0EyQzA2OUEz QjJFQkFDNzVFQ0IzNzNGMzk4QjU2MDJCNTVBNkZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAyQjU1 QTZGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTljMjc2MjEtZTI5Ny00MTAwLTk3 MWEtMWM2OTY3YzUyYjFiLzAvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1 NjAyQjU1QTZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnrBagjFoomCKMRSmSycAkI9TDFVGI5Q96Q PBh7e8jT6AQPbobhSxfgHgJycciqob0LdoAYF2AJxT7TtGrcnlvDAwNoueGJUGoi dJIMu3OYFQDcCTH5GybY9JTinKb+BNMUhQgQekGISpXTqFgggsRqOxG/Pmdb3J1U CTQ2FJKc0UOh0CBRDF2sCbVTKjovpliJ981zl3PScnAW/cfc1Vjtb6t7XCp4fTQi vLdWVUFXP8Y+VnPft03vz3WChF0CTyDEbYpsiA0AIfuf1olpMedQLJcKuMjk1azb CA0mXTTltgJ9R+H53+Lbv9hJwcrEoMSH+VtL4JUMloAvgM78Yfc= -----END CERTIFICATE-----Generated at Sun Jun 29 19:30:31 2025 by rpki-client