$ rpki-client -vvf repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft File: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft (raw, json) Hash identifier: 9Jj+C/qbJGa2m5gCE3QSHQiQzFFJdNg7nnG7O8O+RaU= Subject key identifier: BA:EB:D3:9F:38:1C:F1:B8:49:86:C4:2A:1D:1D:BE:B4:04:67:35:2A Authority key identifier: 73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E Certificate issuer: /CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Certificate serial: 2B6A2CB6969D20E78204556B5AC0759F20588D1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft Manifest number: D0 Signing time: Mon 20 Oct 2025 09:31:26 +0000 Manifest this update: Mon 20 Oct 2025 09:26:26 +0000 Manifest next update: Thu 23 Oct 2025 09:58:26 +0000 Files and hashes: 1: 3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa (hash: WMzT2ENPMmi2mcaD4CnPa7CoBrNxdNCIISZtPItZ4MM=) 2: 3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa (hash: 5d1MR7rKvEWqFJE9IZmsunjaxhaRl4wODAGB+LLjxEo=) 3: 323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa (hash: fYFecXdBAeKoyIAgB0JeLy6cqYChyPHEhUfoQQOYxUQ=) 4: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl (hash: wAy0kfvVSRC2NCtxP5R21lBPIN8LGk7SceN8dKPCZ3Q=) 5: 3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa (hash: ky6kqewG2CLcXwQoFuB0Gbkz5WHCCY7RgpoJqEc0cVU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:6a:2c:b6:96:9d:20:e7:82:04:55:6b:5a:c0:75:9f:20:58:8d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Validity Not Before: Oct 20 09:26:26 2025 GMT Not After : Oct 23 09:58:26 2025 GMT Subject: CN=BAEBD39F381CF1B84986C42A1D1DBEB40467352A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d7:fd:27:88:f2:f6:be:d4:50:fa:03:d6:cd: 1a:9a:f8:44:22:a0:76:df:48:65:54:41:30:73:50: 73:14:69:01:eb:19:a7:7c:04:92:13:73:83:c9:9b: f5:29:bf:d7:8f:ed:57:2e:54:a0:72:1b:23:7d:f1: 23:7e:de:19:b5:3f:7b:6d:9c:7c:a7:ac:75:03:86: f6:88:c3:53:36:41:01:80:0f:34:3f:f8:38:49:45: 1c:3b:60:6a:fd:19:8c:74:22:e9:ca:2b:b0:2e:8f: 18:a4:ae:2b:e7:ce:52:3d:a0:5c:6a:26:3c:17:34: 60:fc:c4:a4:33:72:a1:0b:4b:49:a4:a1:bf:73:5d: 44:59:85:df:cc:6e:22:dd:f5:bf:f4:77:61:ab:0c: ef:33:f0:82:7c:fb:be:fd:6a:b3:56:51:70:d5:f3: b6:98:0e:42:9d:22:69:8a:11:f1:15:21:f3:2b:2c: 60:0c:c1:cf:6b:e0:9b:b4:49:9a:aa:44:27:3a:52: 68:5c:54:09:50:55:35:8a:51:61:8b:3e:5e:d2:5f: 82:0e:25:71:00:ff:7e:54:3d:6f:bc:fd:84:83:56: e0:eb:23:61:9c:e5:44:05:15:e0:45:be:05:45:ce: 1f:aa:a6:54:6b:8d:05:3a:20:93:90:fc:dc:2d:84: d4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:EB:D3:9F:38:1C:F1:B8:49:86:C4:2A:1D:1D:BE:B4:04:67:35:2A X509v3 Authority Key Identifier: keyid:73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:64:41:b6:dd:fa:79:d9:c1:29:c3:03:3a:70:53:17:04:60: fa:72:16:1e:60:df:79:48:2c:92:e1:42:b1:f0:87:52:1b:cd: e5:51:13:94:28:7b:6f:03:07:96:e8:a4:99:c6:32:e1:4f:ee: 1f:c5:88:10:0a:91:93:4e:88:b5:d8:9f:50:cc:ac:f2:3b:aa: ee:8a:1c:52:77:c7:c7:8b:d7:e0:f1:ef:39:63:e9:2b:d7:f4: 7b:35:80:d1:20:dd:f1:35:b2:f9:fe:98:3d:df:b3:dd:f2:2c: a4:b3:bf:79:50:17:30:e1:83:7c:65:e8:b4:2a:7f:6d:7b:59: bc:81:c2:7c:2f:15:83:eb:22:fd:10:ca:7f:1a:61:71:0e:6e: d5:9e:04:9a:d0:e2:42:98:81:ca:20:60:45:eb:7f:dd:74:32: ad:b6:0b:07:97:8c:b4:07:41:f0:48:07:2a:f5:5f:08:67:36: 00:18:f1:45:1e:d1:bd:6a:1e:e4:43:be:f5:1a:59:5e:bf:d5: e6:b5:cf:3e:be:5a:c1:33:2b:67:aa:66:03:5f:7e:c2:7b:c8: 59:71:1b:1f:ae:e3:d8:cf:3a:4b:ca:92:b2:de:15:05:55:24: 40:8a:08:1d:8f:39:9e:1a:09:68:94:4c:b0:b9:a4:75:dd:8d: ce:65:62:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK2ostpadIOeCBFVrWsB1nyBYjR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3 REZDNkE4RTAeFw0yNTEwMjAwOTI2MjZaFw0yNTEwMjMwOTU4MjZaMDMxMTAvBgNV BAMTKEJBRUJEMzlGMzgxQ0YxQjg0OTg2QzQyQTFEMURCRUI0MDQ2NzM1MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK1/0niPL2vtRQ+gPWzRqa+EQi oHbfSGVUQTBzUHMUaQHrGad8BJITc4PJm/Upv9eP7VcuVKByGyN98SN+3hm1P3tt nHynrHUDhvaIw1M2QQGADzQ/+DhJRRw7YGr9GYx0IunKK7AujxikrivnzlI9oFxq JjwXNGD8xKQzcqELS0mkob9zXURZhd/MbiLd9b/0d2GrDO8z8IJ8+779arNWUXDV 87aYDkKdImmKEfEVIfMrLGAMwc9r4Ju0SZqqRCc6UmhcVAlQVTWKUWGLPl7SX4IO JXEA/35UPW+8/YSDVuDrI2Gc5UQFFeBFvgVFzh+qplRrjQU6IJOQ/NwthNQzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuuvTnzgc8bhJhsQqHR2+tARnNSowHwYDVR0j BBgwFoAUcx22dXK0ijqG8EdaDiHhon38ao4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yjc1YmZkMC1hODZjLTRiZWItOWY5OS1hYWMzM2ZiNWU0OWYvMC83MzFEQjY3NTcy QjQ4QTNBODZGMDQ3NUEwRTIxRTFBMjdERkM2QThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3REZD NkE4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I3NWJmZDAtYTg2Yy00YmViLTlm OTktYWFjMzNmYjVlNDlmLzAvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUx QTI3REZDNkE4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxkQbbd+nnZwSnDAzpwUxcEYPpyFh5g33lI LJLhQrHwh1IbzeVRE5Qoe28DB5bopJnGMuFP7h/FiBAKkZNOiLXYn1DMrPI7qu6K HFJ3x8eL1+Dx7zlj6SvX9Hs1gNEg3fE1svn+mD3fs93yLKSzv3lQFzDhg3xl6LQq f217WbyBwnwvFYPrIv0Qyn8aYXEObtWeBJrQ4kKYgcogYEXrf910Mq22CweXjLQH QfBIByr1XwhnNgAY8UUe0b1qHuRDvvUaWV6/1ea1zz6+WsEzK2eqZgNffsJ7yFlx Gx+u49jPOkvKkrLeFQVVJECKCB2POZ4aCWiUTLC5pHXdjc5lYio= -----END CERTIFICATE-----Generated at Mon Oct 20 20:14:48 2025 by rpki-client