$ rpki-client -vvf repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft File: 73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft (raw, json) Hash identifier: 5T29ad6+E1kEnmoEkA/z+wIJ/fLGqUAqtx8JqjJ/0AU= Subject key identifier: E4:B1:82:C6:A3:AD:06:A1:BF:02:EF:45:63:CA:33:E9:69:B8:E8:EC Authority key identifier: 73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48 Certificate issuer: /CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448 Certificate serial: 67909DAB93233DC8641917DEC0EB9203E36B5DB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft Manifest number: 027A Signing time: Sat 18 Oct 2025 11:30:42 +0000 Manifest this update: Sat 18 Oct 2025 11:25:42 +0000 Manifest next update: Tue 21 Oct 2025 23:24:42 +0000 Files and hashes: 1: 3130332e36382e302e302f32322d3232203d3e20313335343539.roa (hash: hj0aLvHnsN2pt1jXNXHldeHD4msnEKkoRErUA/qhVzM=) 2: 3130332e36382e302e302f32342d3234203d3e20313335343539.roa (hash: TaonUeAdui33PweH5NiEAK5mmqp9ijfVBuT5VSZ1PtQ=) 3: 73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl (hash: h1eQjUfPGXKogSvFflFSlkKVD0bTpFCUsKNovT1fbJ8=) 4: 3130332e36382e302e302f32332d3233203d3e20313335343539.roa (hash: HSyTIrpAeoepgTw2Qf4xN4feVn0VVvW9T2xruJUxPUQ=) 5: 3130332e36382e332e302f32342d3234203d3e20313335343539.roa (hash: GmT8ZeaySfqvjT7mO5rlRn1ljJIIsTYQ7Uu5Pp76Rgs=) 6: 3130332e36382e312e302f32342d3234203d3e20313335343539.roa (hash: ySL0w18ZFEonAAh3PhTuUdA6gYBAA6WRoBXrmZ+L+Js=) 7: 3130332e36382e322e302f32342d3234203d3e20313530323635.roa (hash: ylhRyjN9O7aHn/zjEzn07ubViFMsJpvDX8p87PLz1EI=) 8: 323430353a646238303a3a2f33322d3332203d3e20313335343539.roa (hash: hKo6E/o6Gy5GtrWGlJyRHI/i/XIPoeDrySJ7ORVFIBM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 23:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:90:9d:ab:93:23:3d:c8:64:19:17:de:c0:eb:92:03:e3:6b:5d:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448 Validity Not Before: Oct 18 11:25:42 2025 GMT Not After : Oct 21 23:24:42 2025 GMT Subject: CN=E4B182C6A3AD06A1BF02EF4563CA33E969B8E8EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2b:44:57:58:3e:d2:3b:cd:06:65:cd:49:19: 57:d6:99:f4:47:60:5e:eb:ea:98:09:47:1f:49:74: 5e:c8:5a:96:81:73:63:ec:ba:dc:e3:13:89:ea:39: 95:94:9b:e1:d8:52:d0:d2:38:d2:b9:2c:bf:cd:65: 15:37:6a:0d:3a:54:f9:e6:dc:c6:11:6d:cb:5b:c7: 8e:f3:bf:b6:8a:ff:88:cf:cf:26:45:bc:7f:20:77: 82:43:b3:d2:c7:1c:7b:7a:08:0a:86:29:90:bb:4d: c9:e3:26:e1:6d:ae:d5:9c:2a:84:e8:5b:7e:62:5d: 5e:c1:86:86:90:a5:28:22:52:5f:44:55:72:84:e0: 9b:5e:3a:b1:1d:7f:b4:fc:b4:ee:20:10:05:f1:3f: 10:ee:98:6f:fe:34:68:49:63:40:43:22:95:4e:1a: fa:1f:8f:64:12:46:6a:d5:35:ec:51:ad:95:9f:ee: 98:47:fc:36:1f:81:a9:cd:74:b2:f0:07:ed:e9:53: f5:1d:bd:f8:d2:d4:e7:88:20:6b:6e:13:0c:15:02: e2:07:cc:51:c3:10:50:aa:77:43:5c:5c:19:0b:91: 7d:03:9f:52:4d:bd:b3:94:b0:94:ee:41:74:35:87: f7:2c:44:0d:d4:1a:4b:ee:65:96:72:58:8d:89:e1: a0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B1:82:C6:A3:AD:06:A1:BF:02:EF:45:63:CA:33:E9:69:B8:E8:EC X509v3 Authority Key Identifier: keyid:73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:61:c9:2a:86:14:e4:8e:1f:85:a4:04:c1:9b:bc:61:13:bd: ba:8e:b0:e9:71:21:df:74:8b:20:30:ed:85:6c:1e:69:73:eb: 50:81:08:56:d3:ee:02:2b:b1:8b:0d:bf:84:a4:5b:74:41:66: 7d:eb:03:05:43:b7:19:f4:9f:46:8a:2e:73:76:e4:d2:6a:9d: e3:4e:37:d6:20:1e:86:31:14:86:e0:61:87:17:c5:30:e0:1e: 92:4e:bc:f6:ec:d3:8d:2d:fb:dd:de:68:55:19:a7:4d:34:8a: d5:4f:23:17:05:e9:10:2d:53:ae:25:65:58:68:ef:81:5f:83: e0:c9:00:8a:f5:39:6e:00:3e:f5:15:a2:06:7f:2b:bc:64:0d: b8:8d:4b:91:13:18:dd:9e:c9:2b:19:51:8b:08:e7:29:9e:1a: 53:e6:1d:91:9b:90:0b:ab:93:ff:4a:34:01:0f:10:9f:fb:9d: 2a:a3:c3:5d:de:a4:5a:12:ad:a7:39:d1:e4:75:8c:39:4c:09: a1:7e:19:04:27:80:67:33:83:9c:92:79:4e:9e:c6:2d:9c:61: 89:63:ce:25:2c:fc:11:68:48:4b:a8:70:35:40:4a:f6:5a:69: 9d:9c:73:ea:36:d9:78:76:2e:3e:f5:33:bc:7f:38:38:f5:60: be:75:b9:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ5Cdq5MjPchkGRfewOuSA+NrXbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEw RTMxMDQ0ODAeFw0yNTEwMTgxMTI1NDJaFw0yNTEwMjEyMzI0NDJaMDMxMTAvBgNV BAMTKEU0QjE4MkM2QTNBRDA2QTFCRjAyRUY0NTYzQ0EzM0U5NjlCOEU4RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLK0RXWD7SO80GZc1JGVfWmfRH YF7r6pgJRx9JdF7IWpaBc2PsutzjE4nqOZWUm+HYUtDSONK5LL/NZRU3ag06VPnm 3MYRbctbx47zv7aK/4jPzyZFvH8gd4JDs9LHHHt6CAqGKZC7TcnjJuFtrtWcKoTo W35iXV7BhoaQpSgiUl9EVXKE4JteOrEdf7T8tO4gEAXxPxDumG/+NGhJY0BDIpVO Gvofj2QSRmrVNexRrZWf7phH/DYfganNdLLwB+3pU/UdvfjS1OeIIGtuEwwVAuIH zFHDEFCqd0NcXBkLkX0Dn1JNvbOUsJTuQXQ1h/csRA3UGkvuZZZyWI2J4aB7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5LGCxqOtBqG/Au9FY8oz6Wm46OwwHwYDVR0j BBgwFoAUc70mbu8TE27U9OlqtJhLWg4xBEgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTk3ZGJjNi05Mzc0LTQyZTItYTNkMC04NzllZDZhMTkxOTYvMC83M0JEMjY2RUVG MTMxMzZFRDRGNEU5NkFCNDk4NEI1QTBFMzEwNDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEwRTMx MDQ0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU5N2RiYzYtOTM3NC00MmUyLWEz ZDAtODc5ZWQ2YTE5MTk2LzAvNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRC NUEwRTMxMDQ0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJhySqGFOSOH4WkBMGbvGETvbqOsOlxId90 iyAw7YVsHmlz61CBCFbT7gIrsYsNv4SkW3RBZn3rAwVDtxn0n0aKLnN25NJqneNO N9YgHoYxFIbgYYcXxTDgHpJOvPbs040t+93eaFUZp000itVPIxcF6RAtU64lZVho 74Ffg+DJAIr1OW4APvUVogZ/K7xkDbiNS5ETGN2eySsZUYsI5ymeGlPmHZGbkAur k/9KNAEPEJ/7nSqjw13epFoSrac50eR1jDlMCaF+GQQngGczg5ySeU6exi2cYYlj ziUs/BFoSEuocDVASvZaaZ2cc+o22Xh2Lj71M7x/ODj1YL51ucw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:02:55 2025 by rpki-client