$ rpki-client -vvf repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft File: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft (raw, json) Hash identifier: ubeejNOdWCrtjWe8DrXiTO4K9rgF5XLQO0jBodUsLBI= Subject key identifier: 57:F9:CC:44:EC:AA:E5:BE:7D:97:6B:20:E8:D3:CC:C9:44:AC:A7:23 Authority key identifier: 73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E Certificate issuer: /CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Certificate serial: 377321A1EFC87773D8C5B094424B150026F8674E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft Manifest number: 9F Signing time: Wed 02 Jul 2025 14:01:22 +0000 Manifest this update: Wed 02 Jul 2025 13:56:22 +0000 Manifest next update: Sat 05 Jul 2025 14:58:22 +0000 Files and hashes: 1: 3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa (hash: ky6kqewG2CLcXwQoFuB0Gbkz5WHCCY7RgpoJqEc0cVU=) 2: 3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa (hash: 5d1MR7rKvEWqFJE9IZmsunjaxhaRl4wODAGB+LLjxEo=) 3: 323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa (hash: fYFecXdBAeKoyIAgB0JeLy6cqYChyPHEhUfoQQOYxUQ=) 4: 3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa (hash: WMzT2ENPMmi2mcaD4CnPa7CoBrNxdNCIISZtPItZ4MM=) 5: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl (hash: zRHu12SUAQE/JeYlLBQZWuAq5B1d+eMIHm+DKG+UAYA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 14:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:73:21:a1:ef:c8:77:73:d8:c5:b0:94:42:4b:15:00:26:f8:67:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Validity Not Before: Jul 2 13:56:22 2025 GMT Not After : Jul 5 14:58:22 2025 GMT Subject: CN=57F9CC44ECAAE5BE7D976B20E8D3CCC944ACA723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:af:07:f2:c7:a9:61:12:21:40:58:4c:82: 23:2a:ce:21:a3:fd:87:95:cb:f0:b1:23:87:a3:d9: 42:88:37:6f:4d:5e:9e:21:39:98:10:10:69:4a:4f: cd:fd:f2:01:bc:29:c9:4d:11:16:93:9f:17:2d:5d: 64:60:ba:bb:db:de:0b:40:04:4e:99:32:55:41:b4: 59:fb:77:a8:43:bb:c6:19:15:24:9a:06:b5:8d:59: 7c:5d:15:69:7a:2b:f2:ba:87:0e:1e:26:49:42:4f: a4:3e:f6:33:57:bd:dd:ac:99:fd:8d:b5:c5:a2:52: 6c:e5:93:1f:c3:90:04:46:24:5d:75:3b:db:ec:9f: 33:2a:03:8b:f7:b6:94:53:af:84:5b:53:3a:c3:4c: 1a:6f:db:8e:91:d3:cd:0a:d1:d8:91:ca:36:f7:55: ed:33:13:83:61:38:c2:69:43:ee:9b:10:16:d8:9e: 83:ee:1e:03:0d:0c:6f:63:44:79:8b:1f:bb:e2:f6: bb:33:39:12:5b:62:c9:5f:7c:32:ab:5d:8f:eb:ce: 85:a7:36:a8:0a:d6:f8:43:ef:50:27:32:18:a3:1c: 41:7b:d9:5d:bb:10:9c:6b:0a:35:7c:12:9c:05:6f: da:a5:3c:f1:90:47:f1:0a:74:6f:d7:bd:33:ef:3b: b6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F9:CC:44:EC:AA:E5:BE:7D:97:6B:20:E8:D3:CC:C9:44:AC:A7:23 X509v3 Authority Key Identifier: keyid:73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a6:6f:71:56:35:4f:fa:10:32:38:d4:63:86:0f:54:49:92: 2c:e4:e1:7b:5c:10:9b:2e:1e:40:b5:ee:e4:92:8a:67:8c:57: 70:8e:07:a7:03:a0:66:c5:2f:82:a5:44:cb:53:c0:d7:9f:18: 6e:a4:e6:dc:5c:80:f8:e5:b6:fb:4f:0d:55:83:94:e0:9a:ed: b0:31:fa:74:77:ea:d3:a2:30:be:21:3c:cc:77:01:70:1c:5a: d5:ae:c5:6e:01:fa:68:92:a4:77:ce:0e:aa:0f:04:4d:21:d6: 22:3e:81:c4:75:02:3f:56:20:a8:1b:db:5e:96:48:90:d5:c2: 2b:a1:6a:ce:84:fc:21:28:63:f4:6d:d4:6a:ca:1a:1e:9c:4f: 1e:5b:04:7f:1b:ae:2b:b0:d1:f0:aa:82:7b:a2:2b:b9:d6:29: 05:71:07:cd:0c:ee:50:54:23:03:1f:3c:48:7c:25:2f:49:8d: 85:26:30:14:c8:0b:09:cb:31:66:0e:1f:d8:25:94:65:be:79: 67:f7:8c:82:30:03:e4:f9:57:b9:3f:2e:c7:5d:7f:99:9a:13: 09:3a:4c:aa:c2:64:fe:43:ef:5d:f4:4c:9d:41:9c:64:8b:78: 9c:8d:79:9e:d4:c2:8e:9e:a1:46:fb:2d:4a:84:c8:c4:ae:91: fa:0c:4d:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN3Mhoe/Id3PYxbCUQksVACb4Z04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3 REZDNkE4RTAeFw0yNTA3MDIxMzU2MjJaFw0yNTA3MDUxNDU4MjJaMDMxMTAvBgNV BAMTKDU3RjlDQzQ0RUNBQUU1QkU3RDk3NkIyMEU4RDNDQ0M5NDRBQ0E3MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFA68H8sepYRIhQFhMgiMqziGj /YeVy/CxI4ej2UKIN29NXp4hOZgQEGlKT8398gG8KclNERaTnxctXWRgurvb3gtA BE6ZMlVBtFn7d6hDu8YZFSSaBrWNWXxdFWl6K/K6hw4eJklCT6Q+9jNXvd2smf2N tcWiUmzlkx/DkARGJF11O9vsnzMqA4v3tpRTr4RbUzrDTBpv246R080K0diRyjb3 Ve0zE4NhOMJpQ+6bEBbYnoPuHgMNDG9jRHmLH7vi9rszORJbYslffDKrXY/rzoWn NqgK1vhD71AnMhijHEF72V27EJxrCjV8EpwFb9qlPPGQR/EKdG/XvTPvO7Z1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV/nMROyq5b59l2sg6NPMyUSspyMwHwYDVR0j BBgwFoAUcx22dXK0ijqG8EdaDiHhon38ao4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yjc1YmZkMC1hODZjLTRiZWItOWY5OS1hYWMzM2ZiNWU0OWYvMC83MzFEQjY3NTcy QjQ4QTNBODZGMDQ3NUEwRTIxRTFBMjdERkM2QThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3REZD NkE4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I3NWJmZDAtYTg2Yy00YmViLTlm OTktYWFjMzNmYjVlNDlmLzAvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUx QTI3REZDNkE4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGemb3FWNU/6EDI41GOGD1RJkizk4XtcEJsu HkC17uSSimeMV3COB6cDoGbFL4KlRMtTwNefGG6k5txcgPjltvtPDVWDlOCa7bAx +nR36tOiML4hPMx3AXAcWtWuxW4B+miSpHfODqoPBE0h1iI+gcR1Aj9WIKgb216W SJDVwiuhas6E/CEoY/Rt1GrKGh6cTx5bBH8briuw0fCqgnuiK7nWKQVxB80M7lBU IwMfPEh8JS9JjYUmMBTICwnLMWYOH9gllGW+eWf3jIIwA+T5V7k/Lsddf5maEwk6 TKrCZP5D7130TJ1BnGSLeJyNeZ7Uwo6eoUb7LUqEyMSukfoMTe8= -----END CERTIFICATE-----Generated at Thu Jul 3 06:43:59 2025 by rpki-client