$ rpki-client -vvf repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft File: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft (raw, json) Hash identifier: TD4lvNy2pfrGlefXrggDYew23Bs8jmKGJR8t2DglTqI= Subject key identifier: 88:C7:16:CD:94:DA:28:8A:12:9E:52:F9:EC:D9:90:5B:40:EA:DC:91 Authority key identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD Certificate issuer: /CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Certificate serial: 25A1478B7CC18A0594A509EA61265B4893F0B02E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft Manifest number: 0290 Signing time: Sun 19 Oct 2025 01:32:58 +0000 Manifest this update: Sun 19 Oct 2025 01:27:58 +0000 Manifest next update: Wed 22 Oct 2025 07:47:58 +0000 Files and hashes: 1: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl (hash: yTCrq5tBXgY2VMH3FvYonO3Pub+uzGF9M9jtXCnZyis=) 2: 3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (hash: ZLFPPPuherxliEdNrwnbiAo9KOCnKvgNjSLpmHcBAG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a1:47:8b:7c:c1:8a:05:94:a5:09:ea:61:26:5b:48:93:f0:b0:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Validity Not Before: Oct 19 01:27:58 2025 GMT Not After : Oct 22 07:47:58 2025 GMT Subject: CN=88C716CD94DA288A129E52F9ECD9905B40EADC91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:25:be:40:81:a5:b6:d7:cf:91:ed:00:d9:a8: a5:94:37:d1:4f:82:3e:ca:08:43:19:f8:72:de:42: 18:1e:ab:60:3c:76:35:d8:7f:06:b7:6e:97:47:3f: 59:bf:af:a4:59:68:2c:77:30:28:ce:62:ad:ba:e5: 5e:18:2e:47:75:3c:ae:6e:08:c7:2b:0f:95:ad:90: 64:1e:8b:91:a3:31:f0:29:b3:91:61:56:51:43:1c: 69:66:b7:36:a9:23:c0:e5:af:05:cd:2f:40:ed:8e: 30:98:13:ad:f0:15:87:0f:27:bd:a8:a5:ee:cb:b7: b0:53:89:9b:2b:3d:af:27:64:2e:e7:08:59:99:53: 7e:c4:13:18:40:87:98:c1:08:33:07:97:3e:92:1e: ba:3d:cf:73:91:3a:e3:86:a6:22:2c:01:12:a3:37: d7:9c:45:57:c1:da:cc:5a:3d:a8:42:3d:5c:a1:63: 8b:bd:70:1c:0b:38:ae:7d:60:1d:2e:c0:55:25:77: 83:5d:39:95:69:78:7d:f4:33:15:05:2d:fd:c7:39: 4d:4f:0d:8b:37:4f:0d:2a:a6:04:0c:95:b4:62:49: f3:9a:73:94:c0:76:5e:7f:d9:23:28:b7:9d:0d:cb: 43:ac:d7:85:a2:8c:8f:84:07:70:b3:cf:6f:7c:ce: 11:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C7:16:CD:94:DA:28:8A:12:9E:52:F9:EC:D9:90:5B:40:EA:DC:91 X509v3 Authority Key Identifier: keyid:73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f2:9e:ab:25:cb:4b:57:4d:6a:14:bb:a5:bc:8c:59:d5:f8: 4e:90:63:7a:04:e6:b8:0a:ad:fb:3d:46:37:fd:e9:01:29:78: bb:48:03:69:e2:79:22:3d:07:97:08:5a:09:38:b7:13:2c:1b: 8d:cc:eb:36:97:da:1c:c8:53:fa:27:49:ec:e5:4a:cc:c8:5b: e1:38:fd:08:18:04:7a:34:39:b4:b6:1f:90:f4:00:13:58:c2: b6:df:a3:20:5f:5f:cd:b6:8f:53:4b:8b:ae:51:6b:2e:4b:ba: 1d:24:8a:80:68:1f:d5:7d:f6:5d:a6:91:71:6c:c9:b9:7e:fc: 0e:33:cf:e8:63:65:a6:cc:22:3e:54:54:d9:37:56:31:0c:33: 39:29:ed:1f:c0:73:1f:40:c1:b0:74:87:4b:a7:c7:2f:44:b6: de:7e:ab:ff:8a:65:cd:01:ee:2c:fb:dc:a9:6f:e6:ea:d7:a7: 79:10:25:05:75:d0:54:b2:d4:56:a4:5a:d5:7a:14:db:85:bd: 71:9d:d8:cf:b2:b2:82:db:42:aa:b1:0c:d7:ae:9b:0a:70:03: f0:2e:57:e9:68:33:b8:dc:ce:f2:c7:0d:89:8f:69:b2:fd:7a: f9:6c:83:23:98:e5:0c:2a:4c:b0:5b:3b:5e:53:97:d9:c6:b9: d7:b6:2d:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJaFHi3zBigWUpQnqYSZbSJPwsC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAy QjU1QTZGRDAeFw0yNTEwMTkwMTI3NThaFw0yNTEwMjIwNzQ3NThaMDMxMTAvBgNV BAMTKDg4QzcxNkNEOTREQTI4OEExMjlFNTJGOUVDRDk5MDVCNDBFQURDOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaJb5AgaW218+R7QDZqKWUN9FP gj7KCEMZ+HLeQhgeq2A8djXYfwa3bpdHP1m/r6RZaCx3MCjOYq265V4YLkd1PK5u CMcrD5WtkGQei5GjMfAps5FhVlFDHGlmtzapI8DlrwXNL0DtjjCYE63wFYcPJ72o pe7Lt7BTiZsrPa8nZC7nCFmZU37EExhAh5jBCDMHlz6SHro9z3OROuOGpiIsARKj N9ecRVfB2sxaPahCPVyhY4u9cBwLOK59YB0uwFUld4NdOZVpeH30MxUFLf3HOU1P DYs3Tw0qpgQMlbRiSfOac5TAdl5/2SMot50Ny0Os14WijI+EB3Czz298zhHlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiMcWzZTaKIoSnlL57NmQW0Dq3JEwHwYDVR0j BBgwFoAUc6LAaaOy66x17LNz85i1YCtVpv0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWMyNzYyMS1lMjk3LTQxMDAtOTcxYS0xYzY5NjdjNTJiMWIvMC83M0EyQzA2OUEz QjJFQkFDNzVFQ0IzNzNGMzk4QjU2MDJCNTVBNkZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAyQjU1 QTZGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTljMjc2MjEtZTI5Ny00MTAwLTk3 MWEtMWM2OTY3YzUyYjFiLzAvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1 NjAyQjU1QTZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/ynqsly0tXTWoUu6W8jFnV+E6QY3oE5rgK rfs9Rjf96QEpeLtIA2nieSI9B5cIWgk4txMsG43M6zaX2hzIU/onSezlSszIW+E4 /QgYBHo0ObS2H5D0ABNYwrbfoyBfX822j1NLi65Ray5Luh0kioBoH9V99l2mkXFs ybl+/A4zz+hjZabMIj5UVNk3VjEMMzkp7R/Acx9AwbB0h0unxy9Ett5+q/+KZc0B 7iz73Klv5urXp3kQJQV10FSy1FakWtV6FNuFvXGd2M+ysoLbQqqxDNeumwpwA/Au V+loM7jczvLHDYmPabL9evlsgyOY5QwqTLBbO15Tl9nGude2LdM= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:27 2025 by rpki-client