$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft File: 73626536B3B2A503E6D53473A97CF39A13301753.mft (raw, json) Hash identifier: yScjRn8GnXQ+RDy3jreMCdGQkV5rGV3imhU/9iGpXZU= Subject key identifier: 15:CF:32:4A:8F:97:E6:EC:C6:72:2D:F3:FE:A8:C7:A9:2B:FF:C4:13 Authority key identifier: 73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53 Certificate issuer: /CN=73626536B3B2A503E6D53473A97CF39A13301753 Certificate serial: 76B783626DC218F8365D8FC8B9552C9D23D0CECC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft Manifest number: 92 Signing time: Sat 23 Aug 2025 19:51:00 +0000 Manifest this update: Sat 23 Aug 2025 19:46:00 +0000 Manifest next update: Wed 27 Aug 2025 05:11:00 +0000 Files and hashes: 1: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (hash: qbLrPvZpuRQboHf20eAwQEqv0hdBrMoM2us7hcpzxVQ=) 2: 73626536B3B2A503E6D53473A97CF39A13301753.crl (hash: BQ/9AUYo8yaI2tN34thffAKVvW3u7IvcVRVyZpICT/w=) 3: 3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (hash: U/AZuWhjUWyMn2Gx5iZvx5RdqNlWPDYnQI/RL/HzzmI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:b7:83:62:6d:c2:18:f8:36:5d:8f:c8:b9:55:2c:9d:23:d0:ce:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73626536B3B2A503E6D53473A97CF39A13301753 Validity Not Before: Aug 23 19:46:00 2025 GMT Not After : Aug 27 05:11:00 2025 GMT Subject: CN=15CF324A8F97E6ECC6722DF3FEA8C7A92BFFC413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:52:17:ed:20:7d:da:31:59:26:69:e8:5a:43: 99:6c:60:f5:20:e1:0e:d9:36:9c:6c:03:32:4d:d1: ae:1b:ba:41:c1:9f:62:80:6c:1e:5a:a7:68:39:dd: 59:a6:4e:94:e9:82:76:ce:b6:c4:fd:4a:68:55:ec: fe:7d:44:c5:a0:af:a5:17:0a:7e:c7:f8:0b:ac:ca: 94:14:12:60:a2:d4:2a:bf:2f:d3:9d:b6:62:d7:df: d1:73:bc:b7:ba:95:16:26:4b:a1:b9:fb:ef:00:b2: 5f:00:45:99:27:4f:19:22:67:3d:38:10:e9:69:fd: 7f:ae:40:db:d3:54:ad:bd:42:97:3d:b6:d8:61:aa: 28:33:10:56:80:5f:d5:8b:b5:e2:16:94:92:20:73: 82:75:62:ad:de:13:f5:bb:3a:3c:af:c3:ef:7d:68: 8c:28:b8:cd:d3:10:b2:2c:06:e3:96:f5:0f:68:a8: dc:56:65:82:7d:88:62:99:d1:c8:9a:c7:0f:ab:c9: 2b:d8:fa:b5:2a:ac:c0:6b:09:30:2d:2d:81:17:73: 33:7e:ad:4b:cd:80:04:34:35:71:4c:ed:74:e2:80: cd:35:2f:d0:67:64:dd:8f:08:91:25:2e:2a:a1:6e: 64:ec:c8:67:6c:90:06:11:cf:96:ce:28:0a:ae:b4: 93:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CF:32:4A:8F:97:E6:EC:C6:72:2D:F3:FE:A8:C7:A9:2B:FF:C4:13 X509v3 Authority Key Identifier: keyid:73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:03:a2:0c:5c:52:b9:b7:9f:ed:e7:59:b1:36:2e:60:68:0f: e0:89:b8:b6:cf:b5:ca:34:bb:6c:41:05:e2:26:bf:1f:25:8a: 02:6b:0a:64:c7:7c:6b:09:14:6a:6e:cf:6f:67:83:2b:51:d0: ab:40:19:4d:5b:7e:b4:70:1f:61:0d:fd:9d:be:40:d9:74:be: 18:43:7d:35:f4:6d:ce:75:44:1b:7e:a7:dc:de:b4:ca:ca:cf: 0e:08:58:56:3e:b5:a7:ed:ba:db:1d:24:ec:f4:5a:a5:bd:c3: ad:32:e2:90:8b:c6:51:75:03:3f:6e:1e:9c:a0:5b:61:f5:9d: 34:e5:d0:c0:78:e3:45:7f:ee:32:49:fe:6d:76:07:43:07:bf: eb:78:b3:f8:6e:06:fa:d1:83:ee:b9:b0:47:8b:4d:cb:15:53: b0:bc:99:48:d0:55:3f:4d:09:81:cc:b0:0b:7d:5f:b8:33:78: 2d:6c:16:d2:0f:c4:33:c8:bb:ae:9a:f9:1a:00:d2:ad:aa:fb: f2:ba:cf:96:45:78:27:b8:63:6c:e9:27:40:c3:35:e5:39:f0: 09:9d:a4:2a:88:a4:f8:cf:c2:d9:17:e8:44:ca:4e:3e:91:e2: 81:e4:0d:34:77:03:1e:54:eb:00:1e:36:dc:58:a5:9e:df:58: ab:80:4e:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdreDYm3CGPg2XY/IuVUsnSPQzswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0YzOUEx MzMwMTc1MzAeFw0yNTA4MjMxOTQ2MDBaFw0yNTA4MjcwNTExMDBaMDMxMTAvBgNV BAMTKDE1Q0YzMjRBOEY5N0U2RUNDNjcyMkRGM0ZFQThDN0E5MkJGRkM0MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6UhftIH3aMVkmaehaQ5lsYPUg 4Q7ZNpxsAzJN0a4bukHBn2KAbB5ap2g53VmmTpTpgnbOtsT9SmhV7P59RMWgr6UX Cn7H+AusypQUEmCi1Cq/L9OdtmLX39FzvLe6lRYmS6G5++8Asl8ARZknTxkiZz04 EOlp/X+uQNvTVK29Qpc9tthhqigzEFaAX9WLteIWlJIgc4J1Yq3eE/W7Ojyvw+99 aIwouM3TELIsBuOW9Q9oqNxWZYJ9iGKZ0ciaxw+rySvY+rUqrMBrCTAtLYEXczN+ rUvNgAQ0NXFM7XTigM01L9BnZN2PCJElLiqhbmTsyGdskAYRz5bOKAqutJPHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFc8ySo+X5uzGci3z/qjHqSv/xBMwHwYDVR0j BBgwFoAUc2JlNrOypQPm1TRzqXzzmhMwF1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMC83MzYyNjUzNkIz QjJBNTAzRTZENTM0NzNBOTdDRjM5QTEzMzAxNzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0YzOUExMzMw MTc1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzAvNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0Yz OUExMzMwMTc1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEDogxcUrm3n+3nWbE2LmBoD+CJuLbPtco0 u2xBBeImvx8ligJrCmTHfGsJFGpuz29ngytR0KtAGU1bfrRwH2EN/Z2+QNl0vhhD fTX0bc51RBt+p9zetMrKzw4IWFY+taftutsdJOz0WqW9w60y4pCLxlF1Az9uHpyg W2H1nTTl0MB440V/7jJJ/m12B0MHv+t4s/huBvrRg+65sEeLTcsVU7C8mUjQVT9N CYHMsAt9X7gzeC1sFtIPxDPIu66a+RoA0q2q+/K6z5ZFeCe4Y2zpJ0DDNeU58Amd pCqIpPjPwtkX6ETKTj6R4oHkDTR3Ax5U6wAeNtxYpZ7fWKuATtQ= -----END CERTIFICATE-----Generated at Sun Aug 24 04:26:11 2025 by rpki-client