$ rpki-client -vvf repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft File: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft (raw, json) Hash identifier: +nBbEFnN+4d+W1acORhR6pLHzaDMIVoa88GueLps7MA= Subject key identifier: 5F:6B:9E:BE:CE:1A:C7:EC:93:4C:85:E7:CD:B5:86:5B:2C:62:F2:0E Authority key identifier: 73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 Certificate issuer: /CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Certificate serial: 29F27E2ECC006A16C93ABBE454157EC4A48A17E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft Manifest number: 9E Signing time: Sun 29 Jun 2025 02:01:15 +0000 Manifest this update: Sun 29 Jun 2025 01:56:15 +0000 Manifest next update: Wed 02 Jul 2025 06:57:15 +0000 Files and hashes: 1: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (hash: mWn5DPCiekSxGNB8RumBKf5syIxB4d7+KUn6ZNJHctk=) 2: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (hash: bCp+hfr7ROEtQWyvQHaGucdWFI7N+d4ip6n9SavuoOk=) 3: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl (hash: prxc8lKGmhGuZSmjsBc+5cKo1K7aRlWiAtFP8WIR7dk=) 4: 3135372e36362e3137312e302f32342d3234203d3e20313532373737.roa (hash: uOA4jTwlkcqlsjP32WwaK900NFV6wePG9q2fIgGqlJw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 06:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f2:7e:2e:cc:00:6a:16:c9:3a:bb:e4:54:15:7e:c4:a4:8a:17:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Validity Not Before: Jun 29 01:56:15 2025 GMT Not After : Jul 2 06:57:15 2025 GMT Subject: CN=5F6B9EBECE1AC7EC934C85E7CDB5865B2C62F20E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:37:df:bc:44:65:9c:4d:8f:99:de:23:ce:4f: b3:0f:f0:39:41:10:92:af:7a:fc:a5:81:11:bd:d5: 6f:d6:d5:af:3f:f9:68:6d:08:aa:e1:79:59:82:92: fe:e3:e3:e9:f6:e2:54:0a:40:e5:60:26:72:e9:e2: 73:0e:59:3d:00:83:41:77:21:08:da:a9:1c:d6:b7: 0e:57:7d:ed:6d:22:77:f1:93:74:1e:98:e3:8d:3c: 87:c9:4b:91:f8:7e:5d:68:b1:25:e5:aa:25:e0:f4: e1:ed:f5:08:a0:34:4c:9c:c9:eb:b3:10:d2:fb:90: b5:fe:e8:e6:da:ed:25:8c:2a:fb:83:e8:ea:8a:15: e1:c7:50:0c:2b:3a:3b:7a:39:c7:d1:69:3a:eb:6a: 53:f9:d4:24:42:5d:ba:05:06:38:4c:65:9e:ca:08: b0:a2:5a:76:d3:cd:b2:06:74:26:13:56:25:00:56: 0d:3a:ee:bc:66:0d:94:9f:0f:eb:5b:37:0d:02:db: b5:cf:42:e7:cf:ea:80:e8:83:05:59:74:17:b6:74: 62:96:5f:89:a0:70:af:ce:c0:74:c7:67:0b:df:1e: f5:3c:69:f4:b0:ac:cd:48:cf:45:ce:23:a5:dd:94: eb:ea:8e:2d:8a:80:73:92:31:29:e9:23:20:bd:6e: d0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6B:9E:BE:CE:1A:C7:EC:93:4C:85:E7:CD:B5:86:5B:2C:62:F2:0E X509v3 Authority Key Identifier: keyid:73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:75:08:26:ec:2d:b3:77:79:4f:d9:7f:c0:8a:4d:7a:44:ae: 7e:11:c1:2b:2c:7e:d2:29:5d:62:f9:7f:ef:f5:ae:59:f9:af: 72:85:33:06:4f:bc:ee:d1:a2:ec:d9:a1:51:9c:ec:d0:5b:7c: 23:14:69:54:27:1d:ce:23:c2:d6:4b:a3:25:19:e9:85:dc:98: 44:c5:55:aa:e7:8b:9f:67:29:b4:6a:2b:23:ed:11:cc:74:35: fb:16:b5:b4:d5:56:8d:ea:09:f6:1c:00:86:a7:7c:dd:b6:14: cc:a8:d9:65:f0:ab:3f:11:e1:88:23:27:00:da:ba:59:5b:08: 74:41:3c:85:11:30:1d:f8:fa:ba:0d:73:e7:e6:b7:83:32:9a: e3:45:42:c4:17:17:b1:c9:eb:33:05:47:9f:08:5e:e5:0a:d7: 93:7c:40:d6:0e:25:1c:ba:3f:ee:50:f0:03:80:0e:bd:98:71: 3a:8e:80:66:c6:22:e0:6f:a5:68:af:81:f1:43:c9:86:27:e4: bd:f3:79:83:7c:88:80:bf:4f:c4:1a:62:d2:ae:b1:f0:bf:6d: 8a:fc:d2:20:b2:6d:82:e6:0f:f7:71:a9:bb:6f:fc:f7:fa:42: ff:0f:8b:04:0f:c8:7b:ea:13:15:17:82:f5:38:a6:b0:96:1a: 68:bd:f7:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKfJ+LswAahbJOrvkVBV+xKSKF+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4 N0UxOUFCNjAeFw0yNTA2MjkwMTU2MTVaFw0yNTA3MDIwNjU3MTVaMDMxMTAvBgNV BAMTKDVGNkI5RUJFQ0UxQUM3RUM5MzRDODVFN0NEQjU4NjVCMkM2MkYyMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMN9+8RGWcTY+Z3iPOT7MP8DlB EJKvevylgRG91W/W1a8/+WhtCKrheVmCkv7j4+n24lQKQOVgJnLp4nMOWT0Ag0F3 IQjaqRzWtw5Xfe1tInfxk3QemOONPIfJS5H4fl1osSXlqiXg9OHt9QigNEycyeuz ENL7kLX+6Oba7SWMKvuD6OqKFeHHUAwrOjt6OcfRaTrralP51CRCXboFBjhMZZ7K CLCiWnbTzbIGdCYTViUAVg067rxmDZSfD+tbNw0C27XPQufP6oDogwVZdBe2dGKW X4mgcK/OwHTHZwvfHvU8afSwrM1Iz0XOI6XdlOvqji2KgHOSMSnpIyC9btCnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX2uevs4ax+yTTIXnzbWGWyxi8g4wHwYDVR0j BBgwFoAUc6+UXv9eqdHv3CYX+kNDDofhmrYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTQ4MTYwNi1kNWZkLTQxOTYtYWJjZC01OGU2Yzc2MjQzYzUvMC83M0FGOTQ1RUZG NUVBOUQxRUZEQzI2MTdGQTQzNDMwRTg3RTE5QUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4N0Ux OUFCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU0ODE2MDYtZDVmZC00MTk2LWFi Y2QtNThlNmM3NjI0M2M1LzAvNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQz MEU4N0UxOUFCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAt1CCbsLbN3eU/Zf8CKTXpErn4RwSssftIp XWL5f+/1rln5r3KFMwZPvO7RouzZoVGc7NBbfCMUaVQnHc4jwtZLoyUZ6YXcmETF Varni59nKbRqKyPtEcx0NfsWtbTVVo3qCfYcAIanfN22FMyo2WXwqz8R4YgjJwDa ullbCHRBPIURMB34+roNc+fmt4MymuNFQsQXF7HJ6zMFR58IXuUK15N8QNYOJRy6 P+5Q8AOADr2YcTqOgGbGIuBvpWivgfFDyYYn5L3zeYN8iIC/T8QaYtKusfC/bYr8 0iCybYLmD/dxqbtv/Pf6Qv8PiwQPyHvqExUXgvU4prCWGmi990k= -----END CERTIFICATE-----Generated at Mon Jun 30 22:23:48 2025 by rpki-client