$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft File: 735D87BA86773AC70137CF53116358A1F3B19766.mft (raw, json) Hash identifier: uSzSSgcS4Ut0GCRH9U8y7fnVWT1uVRImqdgi0Su8bIE= Subject key identifier: CB:A3:DE:CF:FC:1A:F4:B1:2C:AF:D7:23:E8:1C:EF:12:C1:33:C9:EE Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66 Certificate issuer: /CN=735D87BA86773AC70137CF53116358A1F3B19766 Certificate serial: 4FB833AF73641B0E6A1C33A5EA8DA0AC0106BA3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft Manifest number: 0249 Signing time: Sat 18 Oct 2025 08:41:05 +0000 Manifest this update: Sat 18 Oct 2025 08:36:05 +0000 Manifest next update: Tue 21 Oct 2025 12:24:05 +0000 Files and hashes: 1: 735D87BA86773AC70137CF53116358A1F3B19766.crl (hash: 2/pwoegu7Nt56JplQQaiQfh4iZNhHQIq7t1BW5aA/XQ=) 2: 3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (hash: cA/F4dRQqVseyocCpcE2agAw/XVimr3HwwnooMdskYo=) 3: 3230322e37302e34382e302f32302d3234203d3e203138303034.roa (hash: Vj9b7eOBgij03V9LOKkEMCElDrFIB3RU0Drnp1lzskU=) 4: 3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa (hash: bNf7w52cmLw3GYp+mMaw3papmg1ZcgmFTgd1v4VSUIU=) 5: 3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (hash: cuW15q9SnbE27U2Jg8nnNYvxOwHbFyEv1g42R3Sx4E0=) 6: 323430373a613630303a3a2f33322d3338203d3e203138303034.roa (hash: SoFui+6+9U4okutKDEEDEO8cNoDM72pJozwIgVHrak0=) 7: 3230322e37332e3232342e302f32312d3234203d3e203138303034.roa (hash: MYkgPF54ZFrZUvgyAUVZduFZA6VqGujX+c3smzb0mEg=) 8: 3131342e37392e302e302f31382d3234203d3e203138303034.roa (hash: hML4QQ0UsZ/MNuzlhXm7ZxAfBsEoo8p/TG6zTdeHPYA=) 9: 3130332e332e3230382e302f32322d3234203d3e203138303034.roa (hash: ixUeVPdiiujjqdz2cxBs4b9W1yytwj3hYRmTEjubFdc=) 10: 3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa (hash: MNca57frzbraXQ+A5sffHCuXC7kbkp16cgNgxDCrZrE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 12:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b8:33:af:73:64:1b:0e:6a:1c:33:a5:ea:8d:a0:ac:01:06:ba:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766 Validity Not Before: Oct 18 08:36:05 2025 GMT Not After : Oct 21 12:24:05 2025 GMT Subject: CN=CBA3DECFFC1AF4B12CAFD723E81CEF12C133C9EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7d:5c:7b:fa:2a:36:3c:9e:90:12:9c:c1:10: 2e:ee:07:6a:ed:ad:69:83:0f:cb:33:e9:d5:ca:c1: f4:6f:46:b1:bf:57:21:cc:60:f7:b4:4c:79:2e:b3: be:ae:6f:57:a8:6a:23:e9:aa:d6:91:b2:6e:d6:ac: 5e:53:88:9a:71:72:48:bb:fd:29:bc:a6:97:a4:af: 49:35:fe:ab:37:da:9a:e5:16:5a:46:f8:b5:ac:3b: 75:9c:34:20:a6:ab:b4:29:7b:24:ff:37:2d:e6:e3: c6:22:70:39:90:0e:e2:9f:16:2a:6c:0d:d9:fb:04: ba:62:40:c0:50:99:d3:12:6d:ed:cf:c6:3a:7d:96: 12:51:1a:ca:e5:aa:37:42:65:d8:52:d6:14:9d:81: a2:9d:a2:42:04:d2:a6:86:32:3a:65:d1:77:1b:c9: 4d:11:b5:0b:8e:a9:cb:ca:30:7c:93:5e:1a:74:4a: f7:c9:23:16:7d:2d:1a:d0:e1:39:07:34:66:8d:94: 70:bc:b5:9c:b3:1e:11:8d:3f:b5:8f:31:8c:54:26: c9:84:3f:2b:2b:f0:75:4d:84:fa:03:9e:52:df:c7: 92:a1:05:10:4d:7b:26:b4:8c:2c:51:0d:f3:3d:88: b6:0a:15:ef:51:5c:82:f7:bc:8a:5a:65:96:3b:32: d9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A3:DE:CF:FC:1A:F4:B1:2C:AF:D7:23:E8:1C:EF:12:C1:33:C9:EE X509v3 Authority Key Identifier: keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:69:af:1d:19:88:71:99:51:65:69:aa:9c:df:f3:69:0f:1e: c4:38:e9:08:94:8c:e1:4b:70:27:99:d4:3e:ad:23:90:56:68: 54:2d:99:08:bd:85:27:b5:20:05:ab:7a:a6:01:fb:d1:0d:b5: 51:a9:90:bd:00:fc:44:ef:f1:ca:9c:a2:16:8d:13:7e:e2:3a: 21:d7:0b:5a:47:8e:5b:cd:7b:06:a9:f6:24:ff:39:c2:71:0e: 0d:1e:b2:18:f3:c3:51:6e:1e:4b:e0:44:27:21:b8:1b:ab:e0: 1a:f6:f6:2c:dc:36:02:1a:3d:ba:d8:ef:61:ae:e6:21:c4:6e: d2:c1:9a:b7:d0:c9:63:1c:9d:15:27:9c:1e:dc:82:87:38:28: 99:a9:6a:18:3d:bb:88:2c:95:88:71:cd:be:0c:3a:38:f5:e5: 07:8b:89:9c:7b:8f:ec:ae:20:46:35:0c:bd:69:4e:2d:28:88: 79:e8:53:56:8d:74:67:05:c9:54:bc:5b:42:3f:20:4c:ae:8a: d7:44:84:ad:c5:f4:22:7f:b4:6f:41:a7:c0:ea:61:aa:fb:b9: e2:f3:94:08:ff:98:0a:f5:a5:7c:c8:54:3e:6d:94:c9:77:13: ca:f1:a3:7f:04:6b:b0:a4:e1:a4:38:96:4d:25:de:4d:2c:6c: 5b:16:a9:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT7gzr3NkGw5qHDOl6o2grAEGujowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM1RDg3QkE4Njc3M0FDNzAxMzdDRjUzMTE2MzU4QTFG M0IxOTc2NjAeFw0yNTEwMTgwODM2MDVaFw0yNTEwMjExMjI0MDVaMDMxMTAvBgNV BAMTKENCQTNERUNGRkMxQUY0QjEyQ0FGRDcyM0U4MUNFRjEyQzEzM0M5RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2fVx7+io2PJ6QEpzBEC7uB2rt rWmDD8sz6dXKwfRvRrG/VyHMYPe0THkus76ub1eoaiPpqtaRsm7WrF5TiJpxcki7 /Sm8ppekr0k1/qs32prlFlpG+LWsO3WcNCCmq7QpeyT/Ny3m48YicDmQDuKfFips Ddn7BLpiQMBQmdMSbe3Pxjp9lhJRGsrlqjdCZdhS1hSdgaKdokIE0qaGMjpl0Xcb yU0RtQuOqcvKMHyTXhp0SvfJIxZ9LRrQ4TkHNGaNlHC8tZyzHhGNP7WPMYxUJsmE Pysr8HVNhPoDnlLfx5KhBRBNeya0jCxRDfM9iLYKFe9RXIL3vIpaZZY7MtnrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy6Pez/wa9LEsr9cj6BzvEsEzye4wHwYDVR0j BBgwFoAUc12HuoZ3OscBN89TEWNYofOxl2YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjVkMzY0YS1kYTBiLTQ1NDAtOTM0OS01OTMwYmQ3MjVjZTMvMC83MzVEODdCQTg2 NzczQUM3MDEzN0NGNTMxMTYzNThBMUYzQjE5NzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzM1RDg3QkE4Njc3M0FDNzAxMzdDRjUzMTE2MzU4QTFGM0Ix OTc2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY1ZDM2NGEtZGEwYi00NTQwLTkz NDktNTkzMGJkNzI1Y2UzLzAvNzM1RDg3QkE4Njc3M0FDNzAxMzdDRjUzMTE2MzU4 QTFGM0IxOTc2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhprx0ZiHGZUWVpqpzf82kPHsQ46QiUjOFL cCeZ1D6tI5BWaFQtmQi9hSe1IAWreqYB+9ENtVGpkL0A/ETv8cqcohaNE37iOiHX C1pHjlvNewap9iT/OcJxDg0eshjzw1FuHkvgRCchuBur4Br29izcNgIaPbrY72Gu 5iHEbtLBmrfQyWMcnRUnnB7cgoc4KJmpahg9u4gslYhxzb4MOjj15QeLiZx7j+yu IEY1DL1pTi0oiHnoU1aNdGcFyVS8W0I/IEyuitdEhK3F9CJ/tG9Bp8DqYar7ueLz lAj/mAr1pXzIVD5tlMl3E8rxo38Ea7Ck4aQ4lk0l3k0sbFsWqbw= -----END CERTIFICATE-----Generated at Mon Oct 20 11:16:56 2025 by rpki-client