$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft File: 73626536B3B2A503E6D53473A97CF39A13301753.mft (raw, json) Hash identifier: GxN0gtz+ikeMCoI/lq+cA4gm+UKxfR23Os5dRv2J/PI= Subject key identifier: 7C:B7:63:3C:82:AF:AB:C1:A5:31:05:33:D9:15:65:7D:F4:05:B0:84 Authority key identifier: 73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53 Certificate issuer: /CN=73626536B3B2A503E6D53473A97CF39A13301753 Certificate serial: 14192A4E4DC75494C53B78B1E558F6B77726B930 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft Manifest number: AC Signing time: Mon 20 Oct 2025 17:20:54 +0000 Manifest this update: Mon 20 Oct 2025 17:15:54 +0000 Manifest next update: Fri 24 Oct 2025 02:32:54 +0000 Files and hashes: 1: 3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (hash: U/AZuWhjUWyMn2Gx5iZvx5RdqNlWPDYnQI/RL/HzzmI=) 2: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (hash: qbLrPvZpuRQboHf20eAwQEqv0hdBrMoM2us7hcpzxVQ=) 3: 73626536B3B2A503E6D53473A97CF39A13301753.crl (hash: stDFpOZps2Hfm2iiAYWsfQoqW19gv4M4FocfOsCmCqk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:19:2a:4e:4d:c7:54:94:c5:3b:78:b1:e5:58:f6:b7:77:26:b9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73626536B3B2A503E6D53473A97CF39A13301753 Validity Not Before: Oct 20 17:15:54 2025 GMT Not After : Oct 24 02:32:54 2025 GMT Subject: CN=7CB7633C82AFABC1A5310533D915657DF405B084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:dd:40:8f:61:f7:a2:17:d2:f2:76:1a:ad:42: 26:95:43:96:bf:87:f0:09:81:90:29:a4:de:f6:ad: a3:ad:75:8a:36:40:76:76:3d:0f:df:ee:df:1a:aa: 67:bd:58:88:ea:ae:58:65:98:22:81:da:a0:20:ac: ec:a3:04:31:78:93:74:7d:3b:8d:0f:97:f6:0a:53: 7d:49:03:6e:d8:79:25:88:6f:c1:bb:d5:59:25:23: 93:aa:30:2e:a4:4a:71:6d:ca:87:cc:85:28:ef:d7: a6:51:b6:02:66:85:ab:b8:3d:51:0a:41:2c:4b:cb: 4c:99:92:61:2d:84:7d:cb:b8:fb:21:fe:76:3d:01: d3:82:fb:af:6a:d8:4b:0a:1f:4b:f7:18:87:10:96: 86:f5:0f:f2:f7:5d:57:bc:b4:ff:1b:81:0f:1b:b7: 9f:d2:82:b9:36:bf:ab:67:72:7e:12:70:7c:72:ce: bb:41:ed:90:da:b2:2a:25:ec:36:66:95:55:c6:c1: 24:c1:d1:a6:48:ee:3d:00:bd:3c:d2:4b:4a:3f:6b: f7:07:b3:8a:dc:52:48:1f:58:e1:b4:f4:e2:ce:7f: e3:ea:a3:68:b5:c9:8c:00:3c:86:fc:89:1e:96:19: 43:1e:b7:06:ec:b9:7b:76:de:ac:9b:50:83:ae:71: 0d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B7:63:3C:82:AF:AB:C1:A5:31:05:33:D9:15:65:7D:F4:05:B0:84 X509v3 Authority Key Identifier: keyid:73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f1:71:98:0e:85:10:a4:1d:50:8f:be:7e:5c:98:19:c3:86: 3b:1d:51:0e:a8:57:71:1a:62:9e:68:a9:2f:19:e8:52:9c:ba: ed:ee:80:f9:06:16:4d:ff:cb:c1:5a:b6:e6:51:23:f5:64:49: 7b:43:bb:7f:cc:c6:53:f3:8d:46:b3:ac:0b:c8:f7:f5:8f:f5: 27:9f:bb:f4:2a:d4:ec:d9:f6:7e:c6:f1:a1:f7:36:8b:f7:c4: 9d:a9:14:79:a0:eb:ce:37:a3:1d:1b:d9:77:fc:ff:ac:d9:08: 87:28:96:1f:c9:c6:66:b5:56:4b:94:43:9c:cd:7c:e7:eb:c8: 1c:13:e2:7b:ba:0e:e9:b7:cb:7b:b4:4a:f0:83:74:17:71:f3: 9f:9c:c3:8b:80:1a:ee:cc:87:15:29:c3:d7:fa:c0:d2:90:91: 4e:78:cb:a8:c1:3e:b9:35:0d:68:3d:19:51:42:7f:2c:36:f0: e7:11:6c:28:e4:b4:5f:f0:27:7f:df:f4:4a:36:01:97:2f:0b: 17:3c:3c:6e:0a:30:5a:27:f8:bc:58:02:fb:5b:56:3b:a8:a6: 2c:9d:4e:4b:ae:2c:a7:40:89:cc:ff:4b:05:ac:1c:6e:39:c9: ce:83:77:d2:6c:24:f5:94:8c:3b:2a:bf:95:c1:6b:91:d5:d1: db:a0:3e:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFBkqTk3HVJTFO3ix5Vj2t3cmuTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0YzOUEx MzMwMTc1MzAeFw0yNTEwMjAxNzE1NTRaFw0yNTEwMjQwMjMyNTRaMDMxMTAvBgNV BAMTKDdDQjc2MzNDODJBRkFCQzFBNTMxMDUzM0Q5MTU2NTdERjQwNUIwODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP3UCPYfeiF9LydhqtQiaVQ5a/ h/AJgZAppN72raOtdYo2QHZ2PQ/f7t8aqme9WIjqrlhlmCKB2qAgrOyjBDF4k3R9 O40Pl/YKU31JA27YeSWIb8G71VklI5OqMC6kSnFtyofMhSjv16ZRtgJmhau4PVEK QSxLy0yZkmEthH3LuPsh/nY9AdOC+69q2EsKH0v3GIcQlob1D/L3XVe8tP8bgQ8b t5/Sgrk2v6tncn4ScHxyzrtB7ZDasiol7DZmlVXGwSTB0aZI7j0AvTzSS0o/a/cH s4rcUkgfWOG09OLOf+Pqo2i1yYwAPIb8iR6WGUMetwbsuXt23qybUIOucQ01AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfLdjPIKvq8GlMQUz2RVlffQFsIQwHwYDVR0j BBgwFoAUc2JlNrOypQPm1TRzqXzzmhMwF1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMC83MzYyNjUzNkIz QjJBNTAzRTZENTM0NzNBOTdDRjM5QTEzMzAxNzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0YzOUExMzMw MTc1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzAvNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0Yz OUExMzMwMTc1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrxcZgOhRCkHVCPvn5cmBnDhjsdUQ6oV3Ea Yp5oqS8Z6FKcuu3ugPkGFk3/y8FatuZRI/VkSXtDu3/MxlPzjUazrAvI9/WP9Sef u/Qq1OzZ9n7G8aH3Nov3xJ2pFHmg6843ox0b2Xf8/6zZCIcolh/Jxma1VkuUQ5zN fOfryBwT4nu6Dum3y3u0SvCDdBdx85+cw4uAGu7MhxUpw9f6wNKQkU54y6jBPrk1 DWg9GVFCfyw28OcRbCjktF/wJ3/f9Eo2AZcvCxc8PG4KMFon+LxYAvtbVjuopiyd TkuuLKdAicz/SwWsHG45yc6Dd9JsJPWUjDsqv5XBa5HV0dugPmY= -----END CERTIFICATE-----Generated at Tue Oct 21 03:05:31 2025 by rpki-client