$ rpki-client -vvf repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft File: 73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft (raw, json) Hash identifier: tNTrbFJZx47eoZ140XuUuu1l6EN9/l24a+wTOoyCL4A= Subject key identifier: 5E:AF:07:5B:49:9B:7D:E3:27:2D:2B:71:23:26:B1:0C:D9:B8:DD:11 Authority key identifier: 73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9 Certificate issuer: /CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9 Certificate serial: 2C72A158FE90A30C3F27CFAC646FC2C1C4810A9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft Manifest number: 0142 Signing time: Mon 20 Oct 2025 07:02:12 +0000 Manifest this update: Mon 20 Oct 2025 06:57:12 +0000 Manifest next update: Thu 23 Oct 2025 15:28:12 +0000 Files and hashes: 1: 3130332e35352e3235342e302f32342d3234203d3e20333936393832.roa (hash: 3GuMduWTgloUnJZtYU+5K5/Trf+zimiieU09c7Eyrv4=) 2: 3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa (hash: d/xmUChepoOogFc4Soq6uqm5Cedk9W9kH6EQCdLR+3s=) 3: 73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl (hash: ooQallpi8NsOC4BDVDeh+ZZItQX9v2c7qvrvuAqHxA0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:72:a1:58:fe:90:a3:0c:3f:27:cf:ac:64:6f:c2:c1:c4:81:0a:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9 Validity Not Before: Oct 20 06:57:12 2025 GMT Not After : Oct 23 15:28:12 2025 GMT Subject: CN=5EAF075B499B7DE3272D2B712326B10CD9B8DD11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9c:96:9a:e1:56:76:49:8c:9b:a5:65:bf:e5: 4d:86:93:75:00:c8:32:b8:95:f5:62:e8:55:e1:13: 28:cf:61:7b:e9:a4:6b:14:76:9d:f6:cc:f3:5d:57: 0a:1e:2e:1e:f4:ce:af:d8:70:f9:7d:2c:7d:54:8b: 0a:e0:d9:01:ac:b5:5c:dd:7d:9c:ab:d0:94:32:b2: b3:16:62:87:00:ef:82:52:c0:f7:bf:79:23:74:49: 5b:7a:01:66:07:48:2f:35:af:98:71:4c:b2:0f:31: c4:05:ff:ac:06:19:85:ed:64:b6:08:bf:dd:05:d6: 95:3d:f4:cb:87:95:d2:c8:1d:b2:ff:38:b5:62:c5: b3:a6:7d:ae:67:3f:db:69:19:8b:9a:7a:e8:01:cf: 49:93:8b:a7:6b:95:1e:4a:15:0b:05:85:4e:1b:88: c9:cb:ec:c6:f0:80:aa:4f:ae:ac:69:3b:4a:67:5c: 06:2d:5e:d2:b7:00:b8:2a:21:04:af:12:0a:8b:69: 22:20:21:6c:ad:61:f9:03:95:42:e2:11:2e:cc:96: c7:81:af:c1:2d:23:de:fd:52:fa:ff:30:21:6d:7e: 44:71:79:fc:70:02:0c:24:2d:c2:d7:64:65:1a:ff: 49:df:c2:c3:79:18:79:8f:e1:a4:8c:79:16:7c:9b: 85:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AF:07:5B:49:9B:7D:E3:27:2D:2B:71:23:26:B1:0C:D9:B8:DD:11 X509v3 Authority Key Identifier: keyid:73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e9:4a:d4:65:e3:45:74:b8:6f:d8:09:e3:22:e1:3c:31:6c:91: 54:c0:dd:ff:ce:96:ee:b8:95:c7:83:91:67:68:83:42:fe:73: 2e:b3:d5:df:e5:c3:ae:7a:6e:90:86:88:9e:2c:fb:e3:87:70: 1e:47:0f:11:8e:db:90:b4:b0:8d:6a:a7:d5:4d:dc:31:ee:31: 7e:87:b8:47:d5:f2:2e:c8:41:88:b3:e9:8d:8c:81:c4:2b:a8: 27:bb:e0:b5:cb:ac:b3:2d:fb:83:29:f1:ad:f9:91:f8:66:b7: a4:05:b7:3a:09:f9:3f:58:fd:7b:9b:d0:88:d6:c7:fa:7a:2e: ab:4c:6e:49:bf:60:57:b8:8a:04:5f:2a:54:64:9f:f7:24:35: 90:76:7a:f4:5f:f0:4a:52:78:d7:01:7b:7f:90:a7:ba:da:7b: e1:a2:0a:c6:ad:f0:60:ff:69:66:4d:bd:fa:31:4b:d3:29:5c: f3:14:f0:be:6f:3e:d2:8f:3b:bf:91:57:6c:a0:3d:77:7d:6d: 55:8a:91:29:ca:2d:2a:ff:92:cc:9a:0e:39:42:8f:a7:94:80: 66:dc:6a:a4:f6:fd:c3:42:0d:fe:a6:9e:05:4d:79:5a:a3:c1: 1c:26:1c:53:cc:05:15:0e:31:a8:aa:4d:af:76:3c:5d:47:9c: 9f:a0:51:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULHKhWP6Qoww/J8+sZG/CwcSBCp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyNzlEQURCNEVCOUIzMUI4OENDQUI1RjY4M0REQTA1 NUY0RjBBOTAeFw0yNTEwMjAwNjU3MTJaFw0yNTEwMjMxNTI4MTJaMDMxMTAvBgNV BAMTKDVFQUYwNzVCNDk5QjdERTMyNzJEMkI3MTIzMjZCMTBDRDlCOEREMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCznJaa4VZ2SYybpWW/5U2Gk3UA yDK4lfVi6FXhEyjPYXvppGsUdp32zPNdVwoeLh70zq/YcPl9LH1Uiwrg2QGstVzd fZyr0JQysrMWYocA74JSwPe/eSN0SVt6AWYHSC81r5hxTLIPMcQF/6wGGYXtZLYI v90F1pU99MuHldLIHbL/OLVixbOmfa5nP9tpGYuaeugBz0mTi6drlR5KFQsFhU4b iMnL7MbwgKpPrqxpO0pnXAYtXtK3ALgqIQSvEgqLaSIgIWytYfkDlULiES7MlseB r8EtI979Uvr/MCFtfkRxefxwAgwkLcLXZGUa/0nfwsN5GHmP4aSMeRZ8m4WfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXq8HW0mbfeMnLStxIyaxDNm43REwHwYDVR0j BBgwFoAUcyedrbTrmzG4jMq19oPdoFX08KkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzYzNmE0Ni0zOGZmLTQ0OTYtOTcyMS04YzAzY2YwNDYzNDUvMC83MzI3OURBREI0 RUI5QjMxQjg4Q0NBQjVGNjgzRERBMDU1RjRGMEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMyNzlEQURCNEVCOUIzMUI4OENDQUI1RjY4M0REQTA1NUY0 RjBBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M2MzZhNDYtMzhmZi00NDk2LTk3 MjEtOGMwM2NmMDQ2MzQ1LzAvNzMyNzlEQURCNEVCOUIzMUI4OENDQUI1RjY4M0RE QTA1NUY0RjBBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOlK1GXjRXS4b9gJ4yLhPDFskVTA3f/Olu64 lceDkWdog0L+cy6z1d/lw656bpCGiJ4s++OHcB5HDxGO25C0sI1qp9VN3DHuMX6H uEfV8i7IQYiz6Y2MgcQrqCe74LXLrLMt+4Mp8a35kfhmt6QFtzoJ+T9Y/Xub0IjW x/p6LqtMbkm/YFe4igRfKlRkn/ckNZB2evRf8EpSeNcBe3+Qp7rae+GiCsat8GD/ aWZNvfoxS9MpXPMU8L5vPtKPO7+RV2ygPXd9bVWKkSnKLSr/ksyaDjlCj6eUgGbc aqT2/cNCDf6mngVNeVqjwRwmHFPMBRUOMaiqTa92PF1HnJ+gURI= -----END CERTIFICATE-----Generated at Mon Oct 20 13:34:26 2025 by rpki-client