$ rpki-client -vvf repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft File: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft (raw, json) Hash identifier: 79bfBRpavZsoGoBEs9ZAnIczcv0PVNjstj8si3YWFvU= Subject key identifier: 98:F5:5E:D0:EE:87:BE:6C:AF:E1:C8:85:45:03:17:84:02:76:FE:03 Authority key identifier: 73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E Certificate issuer: /CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Certificate serial: 5241DB04475B8F3683943CA34CFC5D3CE4015585 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft Manifest number: 85 Signing time: Tue 06 May 2025 21:11:22 +0000 Manifest this update: Tue 06 May 2025 21:06:22 +0000 Manifest next update: Sat 10 May 2025 06:53:22 +0000 Files and hashes: 1: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl (hash: f8tqSdaiw/LDerJwzXm0n6GKT7hGSpFabDgk05z3hsI=) 2: 3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa (hash: WMzT2ENPMmi2mcaD4CnPa7CoBrNxdNCIISZtPItZ4MM=) 3: 3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa (hash: iXzUmlYgIeqgRD6OLpTZAHA87G2XsNDyecWPhh9XaJs=) 4: 323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa (hash: fYFecXdBAeKoyIAgB0JeLy6cqYChyPHEhUfoQQOYxUQ=) 5: 3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa (hash: DNJc9xkVk10+u7abf6ZM/Nl2Ukmj/FIJDXFuFGCkFwc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 06:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:41:db:04:47:5b:8f:36:83:94:3c:a3:4c:fc:5d:3c:e4:01:55:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Validity Not Before: May 6 21:06:22 2025 GMT Not After : May 10 06:53:22 2025 GMT Subject: CN=98F55ED0EE87BE6CAFE1C885450317840276FE03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:86:e1:01:8c:12:c3:c3:81:f2:3d:16:92:32: ee:47:12:3a:78:60:84:09:1d:46:a7:fa:bf:2b:e2: c0:ac:68:19:1b:49:14:4a:5c:c7:64:a7:02:30:68: 98:fd:16:34:de:33:24:b4:35:fb:7e:07:79:22:63: 48:12:b2:9a:a7:67:c4:4c:b1:e7:16:94:e9:71:d9: 29:45:2c:12:3e:fb:e3:f4:b6:3c:be:9c:2f:9c:be: 66:5a:07:46:32:cf:93:a4:42:fe:dc:0a:e9:bd:cd: 95:e7:67:59:6d:ab:25:b2:db:6a:dc:7a:1a:1c:56: fe:b6:47:ae:01:28:55:e8:7c:ae:1a:7b:e8:17:47: 0a:3b:6b:a0:f1:8b:dd:78:dc:f1:83:db:05:46:ac: a4:43:a0:fe:f5:c5:45:18:4b:f5:30:3d:f0:0a:c3: e5:3d:1b:5f:5d:9e:91:a7:f0:1d:f5:bf:46:5a:29: ec:6f:65:78:9d:37:aa:2e:ab:19:57:fd:31:4c:e2: cd:17:5a:e4:8a:ab:ef:54:fa:91:2a:4c:9e:b1:52: 0a:72:48:4d:84:34:b2:48:82:01:a5:f4:9d:7e:cc: 7d:26:c3:26:6a:67:4e:51:dc:6f:ae:18:b5:48:03: 81:4c:85:6f:a1:4f:b4:4c:6b:13:5b:55:1d:31:d6: 4e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F5:5E:D0:EE:87:BE:6C:AF:E1:C8:85:45:03:17:84:02:76:FE:03 X509v3 Authority Key Identifier: keyid:73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:bf:c2:16:94:f6:f1:4c:72:e8:8e:76:7a:d3:a0:eb:19:8c: c0:b7:c1:a0:c5:da:aa:98:fb:41:2e:49:ea:8b:e0:41:d6:3a: c2:75:1b:12:ba:a3:da:05:36:54:28:2c:dc:bf:11:f0:8e:76: 9f:8f:8e:8a:a8:c6:d9:85:5c:0b:81:1f:b4:60:5e:d0:83:8c: c4:5d:b4:30:11:31:e6:dd:28:ae:cb:47:d1:f7:4c:ad:a7:c2: e5:72:f9:25:ad:9c:fd:46:00:82:c6:73:4f:42:d2:5d:88:30: 40:b7:66:b6:31:8b:3d:d7:65:d1:af:5c:6f:4e:12:73:96:8a: f5:8d:af:8c:70:60:e2:13:a3:5c:77:cf:98:b6:be:14:1d:7c: d5:d6:ac:63:c7:e1:70:26:11:0c:02:95:59:14:c1:68:68:4e: 23:07:f6:18:1b:cc:82:8f:18:4a:11:f8:59:01:25:9c:27:52: f8:fa:38:c7:67:5a:95:17:6b:3d:86:c8:48:33:d9:42:e9:06: a9:5c:02:2a:6e:10:d9:74:97:d7:da:f9:85:5c:16:16:0c:cf: e5:22:92:cf:26:d7:d6:29:76:6c:73:42:23:36:c3:3b:5f:7f: cb:d8:87:b0:be:1a:dd:10:28:07:da:e4:8d:19:d3:0f:36:72: e5:d6:10:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUkHbBEdbjzaDlDyjTPxdPOQBVYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3 REZDNkE4RTAeFw0yNTA1MDYyMTA2MjJaFw0yNTA1MTAwNjUzMjJaMDMxMTAvBgNV BAMTKDk4RjU1RUQwRUU4N0JFNkNBRkUxQzg4NTQ1MDMxNzg0MDI3NkZFMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfhuEBjBLDw4HyPRaSMu5HEjp4 YIQJHUan+r8r4sCsaBkbSRRKXMdkpwIwaJj9FjTeMyS0Nft+B3kiY0gSspqnZ8RM secWlOlx2SlFLBI+++P0tjy+nC+cvmZaB0Yyz5OkQv7cCum9zZXnZ1ltqyWy22rc ehocVv62R64BKFXofK4ae+gXRwo7a6Dxi9143PGD2wVGrKRDoP71xUUYS/UwPfAK w+U9G19dnpGn8B31v0ZaKexvZXidN6ouqxlX/TFM4s0XWuSKq+9U+pEqTJ6xUgpy SE2ENLJIggGl9J1+zH0mwyZqZ05R3G+uGLVIA4FMhW+hT7RMaxNbVR0x1k5/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmPVe0O6Hvmyv4ciFRQMXhAJ2/gMwHwYDVR0j BBgwFoAUcx22dXK0ijqG8EdaDiHhon38ao4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yjc1YmZkMC1hODZjLTRiZWItOWY5OS1hYWMzM2ZiNWU0OWYvMC83MzFEQjY3NTcy QjQ4QTNBODZGMDQ3NUEwRTIxRTFBMjdERkM2QThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3REZD NkE4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I3NWJmZDAtYTg2Yy00YmViLTlm OTktYWFjMzNmYjVlNDlmLzAvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUx QTI3REZDNkE4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGq/whaU9vFMcuiOdnrToOsZjMC3waDF2qqY +0EuSeqL4EHWOsJ1GxK6o9oFNlQoLNy/EfCOdp+PjoqoxtmFXAuBH7RgXtCDjMRd tDARMebdKK7LR9H3TK2nwuVy+SWtnP1GAILGc09C0l2IMEC3ZrYxiz3XZdGvXG9O EnOWivWNr4xwYOITo1x3z5i2vhQdfNXWrGPH4XAmEQwClVkUwWhoTiMH9hgbzIKP GEoR+FkBJZwnUvj6OMdnWpUXaz2GyEgz2ULpBqlcAipuENl0l9fa+YVcFhYMz+Ui ks8m19YpdmxzQiM2wztff8vYh7C+Gt0QKAfa5I0Z0w82cuXWEMQ= -----END CERTIFICATE-----Generated at Thu May 8 20:21:45 2025 by rpki-client