$ rpki-client -vvf repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft File: 73238FE50473DF8F457921BE1B0C04764209BBF1.mft (raw, json) Hash identifier: Qo6hERYlG2mxQQtadrENo0Hk5lNLIKQOAugwXvVliOA= Subject key identifier: B8:34:C0:86:45:E6:1F:BA:C0:32:A8:FA:C6:72:94:A3:13:62:8A:F2 Authority key identifier: 73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 Certificate issuer: /CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Certificate serial: 31B882FF14B5F3E487CA1CBA9CD803C046B158FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft Manifest number: 9A Signing time: Sun 29 Jun 2025 13:01:02 +0000 Manifest this update: Sun 29 Jun 2025 12:56:01 +0000 Manifest next update: Wed 02 Jul 2025 23:41:01 +0000 Files and hashes: 1: 73238FE50473DF8F457921BE1B0C04764209BBF1.crl (hash: p/mpjMJNlE7LXkCn8FdeIfrrUx/QAT6KKCy3wYeZwes=) 2: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (hash: 6ESo4EJBYW+TZiA7AQCDdrC7W+O2u7DLGxOGwrnalLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 23:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b8:82:ff:14:b5:f3:e4:87:ca:1c:ba:9c:d8:03:c0:46:b1:58:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Validity Not Before: Jun 29 12:56:01 2025 GMT Not After : Jul 2 23:41:01 2025 GMT Subject: CN=B834C08645E61FBAC032A8FAC67294A313628AF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fc:9f:8c:68:e9:45:5c:2e:dc:5e:c3:a2:9f: c5:23:c7:69:2b:9b:e6:09:3f:3f:0c:a1:38:43:7e: 39:63:98:1d:19:22:b1:15:11:8e:bd:6d:39:23:41: e0:1a:ba:aa:b8:40:91:3a:2b:52:68:a8:47:c8:a1: 29:1e:48:38:fb:76:e0:a9:95:0b:be:99:96:ab:90: 7c:64:0b:1c:ba:31:8c:dd:bb:98:c1:ff:a9:b8:0e: 4e:6d:7a:e9:40:76:5a:58:da:70:96:3c:6d:0d:4b: 5a:59:88:ac:13:f9:9b:05:27:66:7e:07:55:19:42: d0:c1:55:68:92:7d:c4:23:1c:28:36:20:e6:6b:f2: 53:f0:29:8a:87:85:3e:87:94:0d:b5:69:94:3a:61: ac:b3:af:bd:0a:ab:cf:e4:1b:92:d1:e2:7e:51:94: c3:f1:56:b5:e4:06:d5:a0:51:40:e8:9b:2f:53:3c: 59:ac:fb:5c:99:1f:c2:ed:71:e3:73:ec:7d:a4:73: 45:77:42:96:cd:23:e1:5f:d0:67:29:19:cc:32:47: 98:4a:1c:e4:26:c1:50:9e:46:cf:26:e1:66:20:24: 54:75:e6:17:51:f7:f9:76:08:2e:0b:db:ca:32:30: 26:ca:ff:f1:87:2c:ec:7d:2f:d0:cc:02:af:d1:02: ed:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:34:C0:86:45:E6:1F:BA:C0:32:A8:FA:C6:72:94:A3:13:62:8A:F2 X509v3 Authority Key Identifier: keyid:73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:fc:96:30:ed:2a:55:0b:10:e9:f3:9d:0b:2e:39:fe:d9:1e: b0:d2:52:af:3e:97:db:13:ff:e8:23:02:45:32:b3:dc:40:49: df:6c:1c:a8:a7:48:71:b3:30:0a:7f:e3:ea:81:28:39:8d:db: 6e:f7:21:4c:04:57:9e:f5:93:bc:3c:b8:c2:9f:61:cd:1c:d1: 03:7c:e2:d8:65:b8:06:9c:b9:15:ff:b4:6b:f4:18:8c:73:8a: f3:15:e4:3d:d5:91:e6:5d:79:3f:ba:61:17:e5:0d:62:a7:a6: f7:e3:c7:a9:72:1e:b7:c2:2d:ff:d3:15:da:67:90:c0:33:4e: 7b:a5:4d:3e:b5:f8:6b:8b:d1:7e:cb:21:f1:f6:40:72:07:d5: 16:b3:77:59:06:e4:5b:61:b1:94:31:c1:9d:b7:95:f6:c4:15: d4:f5:cb:22:df:f4:67:ef:cc:af:b2:90:45:f0:2e:31:1e:f3: c8:0c:f9:db:cf:7a:c3:45:fc:e9:67:06:55:76:a8:32:3e:51: c6:20:5b:3a:77:85:e1:3e:6b:82:e6:82:d4:8d:ef:a0:de:97: ec:cd:03:71:a7:4b:46:c5:aa:28:9e:08:b9:db:f1:70:1b:14: dd:8f:59:a6:e6:2d:bb:51:ee:df:b0:5a:ab:7b:69:e5:0c:b3: fe:07:88:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMbiC/xS18+SHyhy6nNgDwEaxWP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0 MjA5QkJGMTAeFw0yNTA2MjkxMjU2MDFaFw0yNTA3MDIyMzQxMDFaMDMxMTAvBgNV BAMTKEI4MzRDMDg2NDVFNjFGQkFDMDMyQThGQUM2NzI5NEEzMTM2MjhBRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL/J+MaOlFXC7cXsOin8Ujx2kr m+YJPz8MoThDfjljmB0ZIrEVEY69bTkjQeAauqq4QJE6K1JoqEfIoSkeSDj7duCp lQu+mZarkHxkCxy6MYzdu5jB/6m4Dk5teulAdlpY2nCWPG0NS1pZiKwT+ZsFJ2Z+ B1UZQtDBVWiSfcQjHCg2IOZr8lPwKYqHhT6HlA21aZQ6Yayzr70Kq8/kG5LR4n5R lMPxVrXkBtWgUUDomy9TPFms+1yZH8LtceNz7H2kc0V3QpbNI+Ff0GcpGcwyR5hK HOQmwVCeRs8m4WYgJFR15hdR9/l2CC4L28oyMCbK//GHLOx9L9DMAq/RAu0PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuDTAhkXmH7rAMqj6xnKUoxNiivIwHwYDVR0j BBgwFoAUcyOP5QRz349FeSG+GwwEdkIJu/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGE4Y2U2Yy04MjkwLTRiOWQtOWFlZC0wNzU0ZDNmZDhkMzIvMC83MzIzOEZFNTA0 NzNERjhGNDU3OTIxQkUxQjBDMDQ3NjQyMDlCQkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0MjA5 QkJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDBhOGNlNmMtODI5MC00YjlkLTlh ZWQtMDc1NGQzZmQ4ZDMyLzAvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0 NzY0MjA5QkJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACP8ljDtKlULEOnznQsuOf7ZHrDSUq8+l9sT /+gjAkUys9xASd9sHKinSHGzMAp/4+qBKDmN2273IUwEV571k7w8uMKfYc0c0QN8 4thluAacuRX/tGv0GIxzivMV5D3VkeZdeT+6YRflDWKnpvfjx6lyHrfCLf/TFdpn kMAzTnulTT61+GuL0X7LIfH2QHIH1Razd1kG5FthsZQxwZ23lfbEFdT1yyLf9Gfv zK+ykEXwLjEe88gM+dvPesNF/OlnBlV2qDI+UcYgWzp3heE+a4LmgtSN76Del+zN A3GnS0bFqiieCLnb8XAbFN2PWabmLbtR7t+wWqt7aeUMs/4HiPM= -----END CERTIFICATE-----Generated at Mon Jun 30 16:21:49 2025 by rpki-client