$ rpki-client -vvf repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft File: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft (raw, json) Hash identifier: Thp9XRIqEx05eHiMDiKN8EjCc8qf5io1W0Rh1QQTo6o= Subject key identifier: B9:9A:4B:CB:2A:42:46:AF:F1:A1:A8:FA:37:25:F2:F4:B0:9C:67:4A Authority key identifier: 73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 Certificate issuer: /CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Certificate serial: 7BB7A218E207FAAD0216EA86B31BF8CF783A6294 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft Manifest number: D0 Signing time: Sun 19 Oct 2025 19:31:17 +0000 Manifest this update: Sun 19 Oct 2025 19:26:17 +0000 Manifest next update: Thu 23 Oct 2025 03:34:17 +0000 Files and hashes: 1: 3135372e36362e3137312e302f32342d3234203d3e20313532373737.roa (hash: uOA4jTwlkcqlsjP32WwaK900NFV6wePG9q2fIgGqlJw=) 2: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (hash: mWn5DPCiekSxGNB8RumBKf5syIxB4d7+KUn6ZNJHctk=) 3: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl (hash: B5DYjRwDpbuAvSzmC4xVMESOo1nLPmSU5uRfAkzZaTY=) 4: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (hash: bCp+hfr7ROEtQWyvQHaGucdWFI7N+d4ip6n9SavuoOk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b7:a2:18:e2:07:fa:ad:02:16:ea:86:b3:1b:f8:cf:78:3a:62:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Validity Not Before: Oct 19 19:26:17 2025 GMT Not After : Oct 23 03:34:17 2025 GMT Subject: CN=B99A4BCB2A4246AFF1A1A8FA3725F2F4B09C674A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:83:58:e7:62:5e:7d:6e:a3:e4:49:9c:7b:11: 9f:a7:68:b3:f1:12:8f:5d:00:81:b4:4d:d2:99:5e: 7d:b1:83:79:cb:8d:52:ff:af:3e:4a:bd:e8:46:d4: b7:3c:61:e6:29:a4:5e:86:95:62:c7:e7:db:40:b9: 00:93:72:29:8f:02:a4:6d:1f:b1:26:04:30:cc:42: 93:77:76:a6:22:31:1a:d2:c6:e4:7b:e1:11:72:ed: 36:c5:9d:c2:5f:d5:7d:98:04:5e:2a:41:05:77:1a: c0:1e:b7:73:8f:6f:84:ca:99:81:74:e5:6e:14:c5: 3b:3e:87:06:ba:1b:e6:a6:43:3c:d4:8d:25:5b:69: 75:02:91:9b:e7:a0:6a:14:21:49:36:b5:43:a9:fd: 84:da:9a:bf:a6:cf:85:f7:81:98:2b:ee:32:bd:06: c6:a7:a6:f2:5a:5b:19:35:69:17:4e:22:31:63:84: ec:2c:c6:55:08:72:bd:62:a9:39:49:25:6d:11:0a: 9c:36:8c:40:9a:2e:42:b6:59:58:7c:09:00:74:09: b2:64:b8:02:d7:8b:1a:84:34:14:24:05:9d:f7:b7: 71:69:7e:3c:14:40:ca:17:6a:21:7f:a8:9b:d2:c8: b7:c5:50:b9:e6:69:b6:0b:ee:f7:61:0a:3e:eb:ea: 25:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9A:4B:CB:2A:42:46:AF:F1:A1:A8:FA:37:25:F2:F4:B0:9C:67:4A X509v3 Authority Key Identifier: keyid:73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:56:6d:64:d0:bc:51:da:d3:01:12:e1:ec:b4:92:ca:70:9e: 30:f9:70:c6:d9:21:20:4e:4b:b2:6f:93:30:0a:be:61:1f:df: c3:07:f8:dc:99:ba:0a:d7:6b:ba:59:56:ff:9c:9d:b9:f4:76: 35:da:77:c2:ed:2a:01:a5:d3:28:0a:2e:91:0e:e8:e2:8b:59: 17:d4:dc:60:57:48:46:6a:d2:fc:dd:be:ea:4b:1e:4b:90:3c: 01:bd:33:4b:a4:fb:75:1e:38:3a:1e:28:04:31:1b:9a:6c:4d: 85:13:74:99:97:8a:2f:58:4b:ed:1c:31:17:01:cc:67:77:1b: ad:f9:6e:fc:d6:64:be:85:ad:8f:b6:6c:04:84:aa:27:de:02: c2:e1:e0:bc:bc:c0:c9:bd:a9:92:e1:c9:e3:77:c4:21:e5:29: 21:8c:26:92:de:d5:ef:76:3b:b5:8a:50:0e:75:c3:88:3d:5b: 00:47:f2:95:3b:37:63:58:ed:44:de:c6:07:f4:81:bb:36:38: c4:ee:a5:ca:2b:74:c1:c1:19:5a:d0:47:c3:49:d0:62:73:ce: ad:5f:e9:3b:59:09:f6:7e:7f:d3:82:ce:e6:8c:f2:d9:82:0e: 4c:9b:c0:7e:54:08:81:c8:23:02:2c:83:97:f7:5a:41:67:28: 7d:9f:b2:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe7eiGOIH+q0CFuqGsxv4z3g6YpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4 N0UxOUFCNjAeFw0yNTEwMTkxOTI2MTdaFw0yNTEwMjMwMzM0MTdaMDMxMTAvBgNV BAMTKEI5OUE0QkNCMkE0MjQ2QUZGMUExQThGQTM3MjVGMkY0QjA5QzY3NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjg1jnYl59bqPkSZx7EZ+naLPx Eo9dAIG0TdKZXn2xg3nLjVL/rz5KvehG1Lc8YeYppF6GlWLH59tAuQCTcimPAqRt H7EmBDDMQpN3dqYiMRrSxuR74RFy7TbFncJf1X2YBF4qQQV3GsAet3OPb4TKmYF0 5W4UxTs+hwa6G+amQzzUjSVbaXUCkZvnoGoUIUk2tUOp/YTamr+mz4X3gZgr7jK9 BsanpvJaWxk1aRdOIjFjhOwsxlUIcr1iqTlJJW0RCpw2jECaLkK2WVh8CQB0CbJk uALXixqENBQkBZ33t3FpfjwUQMoXaiF/qJvSyLfFULnmabYL7vdhCj7r6iXBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuZpLyypCRq/xoaj6NyXy9LCcZ0owHwYDVR0j BBgwFoAUc6+UXv9eqdHv3CYX+kNDDofhmrYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTQ4MTYwNi1kNWZkLTQxOTYtYWJjZC01OGU2Yzc2MjQzYzUvMC83M0FGOTQ1RUZG NUVBOUQxRUZEQzI2MTdGQTQzNDMwRTg3RTE5QUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4N0Ux OUFCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU0ODE2MDYtZDVmZC00MTk2LWFi Y2QtNThlNmM3NjI0M2M1LzAvNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQz MEU4N0UxOUFCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRWbWTQvFHa0wES4ey0kspwnjD5cMbZISBO S7JvkzAKvmEf38MH+NyZugrXa7pZVv+cnbn0djXad8LtKgGl0ygKLpEO6OKLWRfU 3GBXSEZq0vzdvupLHkuQPAG9M0uk+3UeODoeKAQxG5psTYUTdJmXii9YS+0cMRcB zGd3G635bvzWZL6FrY+2bASEqifeAsLh4Ly8wMm9qZLhyeN3xCHlKSGMJpLe1e92 O7WKUA51w4g9WwBH8pU7N2NY7UTexgf0gbs2OMTupcordMHBGVrQR8NJ0GJzzq1f 6TtZCfZ+f9OCzuaM8tmCDkybwH5UCIHIIwIsg5f3WkFnKH2fsrQ= -----END CERTIFICATE-----Generated at Mon Oct 20 19:06:28 2025 by rpki-client