$ rpki-client -vvf repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft File: 73B96F5AC43A4212760D6629FB36B21B2E801D90.mft (raw, json) Hash identifier: xPmmbeDGxIvUxGZVlbD7dLeG6mETCAaulxE+6a60e3M= Subject key identifier: DC:BE:2D:ED:C7:69:5D:21:E8:82:84:94:22:7C:0F:D4:7F:13:D4:2F Authority key identifier: 73:B9:6F:5A:C4:3A:42:12:76:0D:66:29:FB:36:B2:1B:2E:80:1D:90 Certificate issuer: /CN=73B96F5AC43A4212760D6629FB36B21B2E801D90 Certificate serial: 586CB5041DFE2115ED814D37A9B7107EDC3BBB8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft Manifest number: 02FE Signing time: Sat 18 Oct 2025 18:21:38 +0000 Manifest this update: Sat 18 Oct 2025 18:16:38 +0000 Manifest next update: Tue 21 Oct 2025 20:05:38 +0000 Files and hashes: 1: 3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa (hash: oudTGBDalRCfCvgYs+K0jORqoSv3XWEHAn8WI/m8myE=) 2: 73B96F5AC43A4212760D6629FB36B21B2E801D90.crl (hash: QMgQV8ILR8h4c2LEbXcuhrFaCdsLJeV73axZFm67YQs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.crl rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:6c:b5:04:1d:fe:21:15:ed:81:4d:37:a9:b7:10:7e:dc:3b:bb:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73B96F5AC43A4212760D6629FB36B21B2E801D90 Validity Not Before: Oct 18 18:16:38 2025 GMT Not After : Oct 21 20:05:38 2025 GMT Subject: CN=DCBE2DEDC7695D21E8828494227C0FD47F13D42F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7f:b8:c9:b7:07:a6:65:f3:b3:11:8b:7c:55: 43:e8:66:be:bf:6f:b0:8e:1f:be:96:b0:72:2e:11: ae:71:1a:d2:51:af:e5:5a:9e:b2:e5:33:20:41:b2: 33:d9:75:bb:b6:5b:04:3a:81:44:4a:59:a1:ff:c4: 91:d9:5f:1f:c7:89:73:b8:70:ed:00:8a:df:86:e7: 7c:6a:d3:91:97:96:25:e0:86:fd:25:18:c5:26:35: 35:17:1f:7a:c0:e4:b4:3d:45:38:c1:85:77:6c:29: a1:58:52:e3:aa:1e:11:41:05:9a:6b:70:85:8b:41: 7a:8a:50:0f:ed:4a:3c:21:0e:3d:9a:07:9d:cf:1b: 9d:e2:68:03:62:fb:8a:43:f3:55:a1:00:74:83:8d: 53:59:d2:7d:e2:63:98:75:8a:76:72:61:50:eb:b6: e0:d4:13:e1:d3:c5:a8:78:03:b8:1a:c7:88:d7:3a: b9:05:43:b8:33:da:5a:da:06:4c:14:2a:33:ff:77: 6f:d8:f1:c2:33:f9:fb:21:e1:13:15:f3:33:61:57: c0:d0:ed:29:f9:c8:b3:d0:f7:83:bc:e3:db:1d:d1: f0:fe:5a:a6:a5:ba:0a:0b:52:40:de:0e:bb:93:10: 05:28:63:e7:e7:a1:20:a1:27:e5:8d:c4:ce:57:a9: 8e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BE:2D:ED:C7:69:5D:21:E8:82:84:94:22:7C:0F:D4:7F:13:D4:2F X509v3 Authority Key Identifier: keyid:73:B9:6F:5A:C4:3A:42:12:76:0D:66:29:FB:36:B2:1B:2E:80:1D:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:cd:8e:c0:97:33:7d:b7:2e:dd:e7:f4:0c:4b:1a:c6:1a:6e: e0:60:35:d4:ad:e8:89:1e:e7:4c:90:d4:2e:9b:4e:ca:ca:0e: a4:56:78:72:97:38:6d:c6:c1:30:3d:3f:da:6b:35:73:46:39: e0:0c:16:70:d5:ee:26:83:43:48:27:5d:84:4c:42:a6:5a:91: 8f:c0:71:fe:d6:13:01:99:51:e4:ee:6b:a2:36:34:37:4f:87: 8e:d9:23:67:ab:5c:08:22:49:69:66:eb:52:a0:35:44:03:3f: a4:3e:0c:84:8a:12:70:ab:e0:04:8f:ed:15:30:0c:19:5c:40: 5e:5e:08:fa:f0:3f:6c:05:39:2a:96:df:ea:11:c9:5d:7e:b6: 7d:84:80:ee:a9:cc:7b:a7:b9:c1:f5:a8:55:6f:20:25:33:ad: db:97:17:b2:5d:8c:e4:c9:9b:16:f6:d8:64:be:dc:c3:a3:a8: 55:ba:45:86:6a:9e:64:f7:4d:7f:0a:7b:38:cb:37:20:58:16: 82:35:aa:0e:e6:f8:98:46:98:65:51:0c:4b:af:d2:f0:50:44: d2:a0:6b:b6:a7:92:d4:8b:9f:6d:01:f6:9c:ed:06:5d:7a:cf: 52:60:c2:22:4e:ff:cb:58:27:9c:14:86:dd:ec:7d:ef:ee:bf: ae:f7:44:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWGy1BB3+IRXtgU03qbcQftw7u4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNCOTZGNUFDNDNBNDIxMjc2MEQ2NjI5RkIzNkIyMUIy RTgwMUQ5MDAeFw0yNTEwMTgxODE2MzhaFw0yNTEwMjEyMDA1MzhaMDMxMTAvBgNV BAMTKERDQkUyREVEQzc2OTVEMjFFODgyODQ5NDIyN0MwRkQ0N0YxM0Q0MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqf7jJtwemZfOzEYt8VUPoZr6/ b7COH76WsHIuEa5xGtJRr+VanrLlMyBBsjPZdbu2WwQ6gURKWaH/xJHZXx/HiXO4 cO0Ait+G53xq05GXliXghv0lGMUmNTUXH3rA5LQ9RTjBhXdsKaFYUuOqHhFBBZpr cIWLQXqKUA/tSjwhDj2aB53PG53iaANi+4pD81WhAHSDjVNZ0n3iY5h1inZyYVDr tuDUE+HTxah4A7gax4jXOrkFQ7gz2lraBkwUKjP/d2/Y8cIz+fsh4RMV8zNhV8DQ 7Sn5yLPQ94O849sd0fD+WqalugoLUkDeDruTEAUoY+fnoSChJ+WNxM5XqY51AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3L4t7cdpXSHogoSUInwP1H8T1C8wHwYDVR0j BBgwFoAUc7lvWsQ6QhJ2DWYp+zayGy6AHZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2JlYTgxZC04NWFjLTQwYTUtYTdmNS0zZmEzNjJiMTdiY2IvMC83M0I5NkY1QUM0 M0E0MjEyNzYwRDY2MjlGQjM2QjIxQjJFODAxRDkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNCOTZGNUFDNDNBNDIxMjc2MEQ2NjI5RkIzNkIyMUIyRTgw MUQ5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNiZWE4MWQtODVhYy00MGE1LWE3 ZjUtM2ZhMzYyYjE3YmNiLzAvNzNCOTZGNUFDNDNBNDIxMjc2MEQ2NjI5RkIzNkIy MUIyRTgwMUQ5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnNjsCXM323Lt3n9AxLGsYabuBgNdSt6Ike 50yQ1C6bTsrKDqRWeHKXOG3GwTA9P9prNXNGOeAMFnDV7iaDQ0gnXYRMQqZakY/A cf7WEwGZUeTua6I2NDdPh47ZI2erXAgiSWlm61KgNUQDP6Q+DISKEnCr4ASP7RUw DBlcQF5eCPrwP2wFOSqW3+oRyV1+tn2EgO6pzHunucH1qFVvICUzrduXF7JdjOTJ mxb22GS+3MOjqFW6RYZqnmT3TX8KezjLNyBYFoI1qg7m+JhGmGVRDEuv0vBQRNKg a7anktSLn20B9pztBl16z1JgwiJO/8tYJ5wUht3sfe/uv673RNU= -----END CERTIFICATE-----Generated at Mon Oct 20 18:04:27 2025 by rpki-client