$ rpki-client -vvf repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft File: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft (raw, json) Hash identifier: GU45Oy0foCfXGGGRLHiKS1ZXYh8eQQFj4XYGZuGCh28= Subject key identifier: 2F:DC:89:E3:EC:76:D2:37:F5:B3:16:75:5E:D8:C3:01:93:BF:10:AD Authority key identifier: 73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E Certificate issuer: /CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Certificate serial: 273FFD7349A4072591EDBCDE88D3BE19C9BA7958 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft Manifest number: B6 Signing time: Sat 23 Aug 2025 04:01:28 +0000 Manifest this update: Sat 23 Aug 2025 03:56:28 +0000 Manifest next update: Tue 26 Aug 2025 06:25:28 +0000 Files and hashes: 1: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl (hash: tGz6EpIbuAj9aN1YLcgFjSVu7jhL6B9GEl77WYT+4+0=) 2: 3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa (hash: 5d1MR7rKvEWqFJE9IZmsunjaxhaRl4wODAGB+LLjxEo=) 3: 3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa (hash: WMzT2ENPMmi2mcaD4CnPa7CoBrNxdNCIISZtPItZ4MM=) 4: 323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa (hash: fYFecXdBAeKoyIAgB0JeLy6cqYChyPHEhUfoQQOYxUQ=) 5: 3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa (hash: ky6kqewG2CLcXwQoFuB0Gbkz5WHCCY7RgpoJqEc0cVU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 06:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:3f:fd:73:49:a4:07:25:91:ed:bc:de:88:d3:be:19:c9:ba:79:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Validity Not Before: Aug 23 03:56:28 2025 GMT Not After : Aug 26 06:25:28 2025 GMT Subject: CN=2FDC89E3EC76D237F5B316755ED8C30193BF10AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1e:ed:11:0d:04:1e:7e:8c:68:df:a3:07:92: ee:e7:4e:03:60:3e:36:a1:d7:30:12:f3:3d:64:b7: c1:25:18:94:40:98:87:ff:d7:d3:ab:85:5a:40:dd: 90:6c:bf:dd:9d:cb:36:91:80:d1:98:7b:db:ac:1e: f1:9d:10:e0:f9:67:12:72:38:0d:b3:dc:d7:a3:57: a5:78:b2:f2:ca:3d:fc:11:e1:ae:f7:1a:09:a5:b0: 01:73:0e:34:b7:47:6f:2e:14:0e:d1:75:81:66:a6: d8:2a:73:b5:c9:98:12:c7:74:f3:68:cc:9b:33:29: 5c:fe:7f:9f:6b:ac:23:da:0c:de:0b:b5:46:0e:99: 1e:7c:3a:b6:6d:bd:16:9b:a9:54:f0:cf:7a:a7:71: 4c:3d:c8:96:16:67:2b:ed:f8:3a:aa:82:4e:0c:0c: 0f:6b:b1:30:62:61:6d:62:04:4b:21:fd:c1:46:59: 03:63:f9:ed:3a:de:6e:7d:ce:8a:c6:61:d3:d0:7d: 83:75:3c:a5:8d:71:84:ec:44:13:d1:87:40:1d:aa: 85:97:aa:b5:e1:0f:16:4f:b1:73:1f:4b:d3:05:56: 8d:bb:4a:25:40:7d:bd:ab:a2:92:48:e9:da:4a:0c: 74:7a:64:be:d9:49:d9:04:31:ec:7c:64:f9:ca:78: b5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DC:89:E3:EC:76:D2:37:F5:B3:16:75:5E:D8:C3:01:93:BF:10:AD X509v3 Authority Key Identifier: keyid:73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:e1:70:9c:65:a7:c6:8a:86:43:80:51:22:13:36:59:82:38: e5:17:e0:2e:f9:53:41:ee:cc:95:56:cb:2d:6b:89:bc:da:a4: 1d:4b:86:0a:ce:23:8d:78:24:cd:16:35:d5:83:26:ce:2f:42: 08:c2:6d:00:11:34:e6:24:c1:83:b7:1e:7a:bd:92:bc:78:a6: e6:85:45:bd:49:1e:ea:70:2f:a8:d0:a1:7c:c9:ed:0b:d8:52: 9e:e7:97:bf:16:9c:fe:19:2e:44:fa:65:37:a6:02:95:be:6d: f3:2f:94:b0:1a:82:a9:1c:0b:d1:26:56:f8:0e:65:08:37:cc: 18:85:3c:c1:98:c0:c4:43:6c:b3:75:0b:1c:86:1e:b1:e9:98: 13:60:ed:0c:7f:85:c5:36:e3:70:eb:31:1e:8a:52:2f:a4:9d: 0f:cf:b6:cc:e2:e8:7e:5b:b8:eb:07:63:4f:f1:a3:4c:46:a1: 07:bc:fa:48:d3:3a:5b:c6:a7:e6:0c:17:f8:f4:68:01:63:3c: 34:dc:1a:25:e4:20:f0:0e:9f:81:71:10:d1:75:e8:7d:1a:0b: de:51:93:16:f6:3a:3e:f5:de:6e:a7:2c:7d:9d:9d:40:21:ec: 34:2b:5c:5e:37:24:89:90:dd:a4:94:2f:a0:82:0f:da:92:1d: 41:22:a0:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJz/9c0mkByWR7bzeiNO+Gcm6eVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3 REZDNkE4RTAeFw0yNTA4MjMwMzU2MjhaFw0yNTA4MjYwNjI1MjhaMDMxMTAvBgNV BAMTKDJGREM4OUUzRUM3NkQyMzdGNUIzMTY3NTVFRDhDMzAxOTNCRjEwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHu0RDQQefoxo36MHku7nTgNg Pjah1zAS8z1kt8ElGJRAmIf/19OrhVpA3ZBsv92dyzaRgNGYe9usHvGdEOD5ZxJy OA2z3NejV6V4svLKPfwR4a73GgmlsAFzDjS3R28uFA7RdYFmptgqc7XJmBLHdPNo zJszKVz+f59rrCPaDN4LtUYOmR58OrZtvRabqVTwz3qncUw9yJYWZyvt+Dqqgk4M DA9rsTBiYW1iBEsh/cFGWQNj+e063m59zorGYdPQfYN1PKWNcYTsRBPRh0AdqoWX qrXhDxZPsXMfS9MFVo27SiVAfb2ropJI6dpKDHR6ZL7ZSdkEMex8ZPnKeLWhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL9yJ4+x20jf1sxZ1XtjDAZO/EK0wHwYDVR0j BBgwFoAUcx22dXK0ijqG8EdaDiHhon38ao4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yjc1YmZkMC1hODZjLTRiZWItOWY5OS1hYWMzM2ZiNWU0OWYvMC83MzFEQjY3NTcy QjQ4QTNBODZGMDQ3NUEwRTIxRTFBMjdERkM2QThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3REZD NkE4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I3NWJmZDAtYTg2Yy00YmViLTlm OTktYWFjMzNmYjVlNDlmLzAvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUx QTI3REZDNkE4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACThcJxlp8aKhkOAUSITNlmCOOUX4C75U0Hu zJVWyy1ribzapB1LhgrOI414JM0WNdWDJs4vQgjCbQARNOYkwYO3Hnq9krx4puaF Rb1JHupwL6jQoXzJ7QvYUp7nl78WnP4ZLkT6ZTemApW+bfMvlLAagqkcC9EmVvgO ZQg3zBiFPMGYwMRDbLN1CxyGHrHpmBNg7Qx/hcU243DrMR6KUi+knQ/Ptszi6H5b uOsHY0/xo0xGoQe8+kjTOlvGp+YMF/j0aAFjPDTcGiXkIPAOn4FxENF16H0aC95R kxb2Oj713m6nLH2dnUAh7DQrXF43JImQ3aSUL6CCD9qSHUEioBc= -----END CERTIFICATE-----Generated at Sat Aug 23 13:30:02 2025 by rpki-client