$ rpki-client -vvf repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft File: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft (raw, json) Hash identifier: UyY2osx2t7Fx4O3c2iCFRkRDogmpoC8SVhNEiTVyNxc= Subject key identifier: B8:4A:79:01:5E:C0:95:21:7F:92:84:EF:88:7B:B3:8A:8F:B0:B5:B8 Authority key identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD Certificate issuer: /CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Certificate serial: 587A0E779E0E8F3CC07B1BAD33DC65368123CE4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft Manifest number: 0276 Signing time: Fri 22 Aug 2025 17:21:12 +0000 Manifest this update: Fri 22 Aug 2025 17:16:12 +0000 Manifest next update: Mon 25 Aug 2025 21:31:12 +0000 Files and hashes: 1: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl (hash: zUuvaEpYuGHEXGeWsr296HGHZvANmNUW/0I6vGvKkXA=) 2: 3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (hash: WzQyswXSwMjXUbCDUIIF0PkevxcLaE+CYPcmOj6X+is=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:7a:0e:77:9e:0e:8f:3c:c0:7b:1b:ad:33:dc:65:36:81:23:ce:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Validity Not Before: Aug 22 17:16:12 2025 GMT Not After : Aug 25 21:31:12 2025 GMT Subject: CN=B84A79015EC095217F9284EF887BB38A8FB0B5B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fa:48:17:03:72:55:d0:a9:e0:64:7e:fe:bb: 80:6b:1a:bd:79:5a:7e:ce:d0:a0:99:dd:c4:57:68: 8d:2f:05:5b:ee:6e:d8:00:f7:03:3f:48:a9:e6:0b: e8:2f:8d:f3:d4:90:7b:de:dc:17:30:d0:06:4a:7b: f8:37:29:15:91:c5:09:4f:ac:2a:11:be:1d:c4:22: a0:97:0b:f3:d8:c9:9e:74:76:85:3b:37:16:e0:2a: 9f:83:32:46:4f:d9:5a:a9:17:89:93:21:ee:c4:0f: 6b:54:cb:8b:cb:dd:73:7b:35:0a:60:b2:97:cd:08: 0e:ac:88:0e:15:fd:01:44:d6:40:d3:4f:43:1a:df: c4:db:8b:1d:e9:b4:03:ef:1c:55:69:e6:e1:ff:16: 5f:91:13:f1:c1:2b:d6:8b:e9:cb:9b:47:a9:8a:4d: e6:8b:eb:34:eb:35:f9:4d:3f:9a:31:6b:4d:8c:e6: bc:92:e2:c5:82:1a:1b:22:84:cb:a0:74:81:00:2e: c0:91:71:50:55:5d:a0:ab:98:2b:c7:f0:1f:b7:fd: 72:f8:98:6c:1e:e8:ad:bc:76:d3:41:82:6e:9e:db: 90:bf:39:2c:33:6c:86:07:a6:da:a3:cf:cd:51:e3: 90:be:f8:1b:6f:fc:28:06:8c:6d:c8:f1:a4:10:5d: 8c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4A:79:01:5E:C0:95:21:7F:92:84:EF:88:7B:B3:8A:8F:B0:B5:B8 X509v3 Authority Key Identifier: keyid:73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:c7:66:c3:4f:79:4a:3d:0e:4b:2f:46:93:0b:52:ac:c3:d2: 89:a1:2f:a1:9e:68:1a:ca:e4:fc:b4:a6:a4:5f:a8:e0:a6:f7: 0c:67:79:ff:bb:f8:ea:68:bc:56:1a:0b:4f:30:78:af:78:37: 54:9c:b9:50:5d:a7:2e:b6:66:31:9c:4f:ca:70:e6:ff:f6:ef: d2:5f:ac:c0:69:76:18:22:1f:50:fd:13:e5:52:89:7a:98:7e: 33:51:a3:92:3b:a1:ba:29:cb:9f:f8:96:64:4e:c2:06:75:f7: 8f:60:52:84:c6:9d:dc:ed:39:70:6f:1a:e3:a5:b1:0e:4d:c7: 4a:d1:16:d2:ac:1f:bf:06:c8:e9:8e:41:9b:bf:28:70:a0:da: 01:9f:84:02:48:50:01:32:cd:71:7b:15:3c:37:d2:81:f8:03: 0c:41:2a:f1:25:44:48:0c:9a:49:5d:84:9d:90:22:9a:74:9c: f5:95:53:64:a0:f1:28:b0:3d:c5:85:78:b7:da:55:b0:60:d4: 98:e6:8e:19:7e:98:31:e7:5e:f0:c4:d8:19:7b:c0:9b:5a:d0: 41:1e:2d:ad:6a:5c:ec:46:50:0f:b1:90:96:fe:06:61:e2:63: 22:f4:8d:5b:d1:fe:20:9d:d8:ee:51:1d:26:01:d2:18:22:f3: 0f:2f:a5:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWHoOd54OjzzAexutM9xlNoEjzkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAy QjU1QTZGRDAeFw0yNTA4MjIxNzE2MTJaFw0yNTA4MjUyMTMxMTJaMDMxMTAvBgNV BAMTKEI4NEE3OTAxNUVDMDk1MjE3RjkyODRFRjg4N0JCMzhBOEZCMEI1QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR+kgXA3JV0KngZH7+u4BrGr15 Wn7O0KCZ3cRXaI0vBVvubtgA9wM/SKnmC+gvjfPUkHve3Bcw0AZKe/g3KRWRxQlP rCoRvh3EIqCXC/PYyZ50doU7NxbgKp+DMkZP2VqpF4mTIe7ED2tUy4vL3XN7NQpg spfNCA6siA4V/QFE1kDTT0Ma38Tbix3ptAPvHFVp5uH/Fl+RE/HBK9aL6cubR6mK TeaL6zTrNflNP5oxa02M5ryS4sWCGhsihMugdIEALsCRcVBVXaCrmCvH8B+3/XL4 mGwe6K28dtNBgm6e25C/OSwzbIYHptqjz81R45C++Btv/CgGjG3I8aQQXYwVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuEp5AV7AlSF/koTviHuzio+wtbgwHwYDVR0j BBgwFoAUc6LAaaOy66x17LNz85i1YCtVpv0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWMyNzYyMS1lMjk3LTQxMDAtOTcxYS0xYzY5NjdjNTJiMWIvMC83M0EyQzA2OUEz QjJFQkFDNzVFQ0IzNzNGMzk4QjU2MDJCNTVBNkZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAyQjU1 QTZGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTljMjc2MjEtZTI5Ny00MTAwLTk3 MWEtMWM2OTY3YzUyYjFiLzAvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1 NjAyQjU1QTZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPHZsNPeUo9DksvRpMLUqzD0omhL6GeaBrK 5Py0pqRfqOCm9wxnef+7+OpovFYaC08weK94N1ScuVBdpy62ZjGcT8pw5v/279Jf rMBpdhgiH1D9E+VSiXqYfjNRo5I7obopy5/4lmROwgZ1949gUoTGndztOXBvGuOl sQ5Nx0rRFtKsH78GyOmOQZu/KHCg2gGfhAJIUAEyzXF7FTw30oH4AwxBKvElREgM mkldhJ2QIpp0nPWVU2Sg8SiwPcWFeLfaVbBg1Jjmjhl+mDHnXvDE2Bl7wJta0EEe La1qXOxGUA+xkJb+BmHiYyL0jVvR/iCd2O5RHSYB0hgi8w8vpaE= -----END CERTIFICATE-----Generated at Sat Aug 23 12:12:28 2025 by rpki-client