$ rpki-client -vvf repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft File: 73238FE50473DF8F457921BE1B0C04764209BBF1.mft (raw, json) Hash identifier: QvSn2JdRsnHIbVhEA+ZiyxgQ2l2wJlNkQVR27wG3zws= Subject key identifier: 25:5D:A7:AD:A6:87:F6:6E:D8:46:BB:E0:A3:B3:2A:D4:BB:09:59:3F Authority key identifier: 73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 Certificate issuer: /CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Certificate serial: 793272A56192B03244D7D931925030920A797843 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft Manifest number: CC Signing time: Sun 19 Oct 2025 07:31:04 +0000 Manifest this update: Sun 19 Oct 2025 07:26:04 +0000 Manifest next update: Wed 22 Oct 2025 13:55:04 +0000 Files and hashes: 1: 73238FE50473DF8F457921BE1B0C04764209BBF1.crl (hash: CxAMvqB62e4zrMwi1aCUWpqPK2GQ+0Z0iug+tDiJsrU=) 2: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (hash: 6ESo4EJBYW+TZiA7AQCDdrC7W+O2u7DLGxOGwrnalLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:32:72:a5:61:92:b0:32:44:d7:d9:31:92:50:30:92:0a:79:78:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Validity Not Before: Oct 19 07:26:04 2025 GMT Not After : Oct 22 13:55:04 2025 GMT Subject: CN=255DA7ADA687F66ED846BBE0A3B32AD4BB09593F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6d:45:4c:b9:9e:18:20:49:d0:10:2f:69:73: 26:ca:3c:a6:9b:e3:0e:c9:9d:1e:5d:69:a4:4a:33: 60:25:49:c1:0d:ac:2d:b9:b3:97:5f:00:56:c7:05: ae:8f:a9:a5:82:ed:60:a9:8d:45:f3:a4:e5:0d:57: 2f:12:17:29:47:04:00:0c:73:58:73:aa:a3:af:5b: 01:5a:c0:db:cd:da:f1:b6:02:e5:e7:08:bb:34:90: 8e:e8:63:0b:be:09:6c:30:3a:b0:5e:70:59:01:8b: d3:d1:86:5b:63:e8:26:57:8d:f0:39:87:19:21:5e: 4f:5a:24:8d:82:6e:69:ee:76:f9:69:e3:17:06:4e: dd:04:88:5b:ef:d4:64:2a:2b:41:2e:d9:84:d4:3d: 37:e1:ff:f0:7b:6c:ab:06:bb:4d:7f:cd:70:cd:26: 6b:e1:c5:ce:b3:08:1f:a5:1d:70:2b:59:75:27:14: 35:54:3f:85:28:a9:7c:0c:6a:93:4b:00:9e:3b:d9: 27:6a:6c:ea:5a:04:3e:a6:9a:07:52:91:6c:95:d7: 72:e5:54:18:01:10:ec:03:a3:7e:7d:64:48:84:20: a7:44:8c:5c:10:0b:e0:6f:a7:c1:b5:88:52:ca:db: 6e:92:ea:08:8a:67:e1:bb:04:d5:81:48:76:7b:ad: cf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5D:A7:AD:A6:87:F6:6E:D8:46:BB:E0:A3:B3:2A:D4:BB:09:59:3F X509v3 Authority Key Identifier: keyid:73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d2:31:d6:44:0d:eb:ad:ec:74:4b:78:cf:d6:6d:b1:4a:d2: e7:2a:c7:1c:59:52:97:1c:38:80:87:31:ac:d0:68:b1:cb:81: 67:09:d8:a8:20:bd:01:f0:07:89:0f:e4:ae:15:66:42:f4:3f: 87:33:9d:28:72:f8:35:9f:93:ff:e0:ba:90:17:d1:0c:97:62: fe:f6:08:13:13:6c:65:a1:a5:26:31:f2:be:17:9f:4a:bd:b1: 16:b7:89:46:11:b9:17:ef:e5:b2:5a:80:a8:00:c4:e5:52:b9: 16:ed:ba:66:d6:1a:9c:4b:ea:0e:e1:fe:7e:8d:bc:62:4e:a5: 63:03:a6:a1:f3:e4:6f:55:23:78:a1:f2:21:76:1e:29:a9:c4: 31:8d:b0:e9:fa:1e:f3:ec:ea:d1:5e:bf:d4:f9:b3:0e:07:17: 37:e8:85:c3:8b:a1:c2:a6:b2:f9:d7:bc:fb:63:76:da:79:26: 28:10:27:81:da:67:e9:82:1f:3a:f4:4a:ac:1d:22:23:24:c0: e8:c8:09:5b:8b:a2:7a:75:0e:51:d5:76:33:2f:bd:4a:71:40: 1c:9e:37:88:2e:b9:a6:d9:72:06:50:fa:d2:a1:23:12:ec:89: 20:06:b8:a8:21:12:8d:cc:60:13:cd:01:10:f9:1c:54:d5:bd: b5:00:8e:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeTJypWGSsDJE19kxklAwkgp5eEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0 MjA5QkJGMTAeFw0yNTEwMTkwNzI2MDRaFw0yNTEwMjIxMzU1MDRaMDMxMTAvBgNV BAMTKDI1NURBN0FEQTY4N0Y2NkVEODQ2QkJFMEEzQjMyQUQ0QkIwOTU5M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAbUVMuZ4YIEnQEC9pcybKPKab 4w7JnR5daaRKM2AlScENrC25s5dfAFbHBa6PqaWC7WCpjUXzpOUNVy8SFylHBAAM c1hzqqOvWwFawNvN2vG2AuXnCLs0kI7oYwu+CWwwOrBecFkBi9PRhltj6CZXjfA5 hxkhXk9aJI2Cbmnudvlp4xcGTt0EiFvv1GQqK0Eu2YTUPTfh//B7bKsGu01/zXDN Jmvhxc6zCB+lHXArWXUnFDVUP4UoqXwMapNLAJ472SdqbOpaBD6mmgdSkWyV13Ll VBgBEOwDo359ZEiEIKdEjFwQC+Bvp8G1iFLK226S6giKZ+G7BNWBSHZ7rc8jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJV2nraaH9m7YRrvgo7Mq1LsJWT8wHwYDVR0j BBgwFoAUcyOP5QRz349FeSG+GwwEdkIJu/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGE4Y2U2Yy04MjkwLTRiOWQtOWFlZC0wNzU0ZDNmZDhkMzIvMC83MzIzOEZFNTA0 NzNERjhGNDU3OTIxQkUxQjBDMDQ3NjQyMDlCQkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0MjA5 QkJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDBhOGNlNmMtODI5MC00YjlkLTlh ZWQtMDc1NGQzZmQ4ZDMyLzAvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0 NzY0MjA5QkJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzSMdZEDeut7HRLeM/WbbFK0ucqxxxZUpcc OICHMazQaLHLgWcJ2KggvQHwB4kP5K4VZkL0P4cznShy+DWfk//gupAX0QyXYv72 CBMTbGWhpSYx8r4Xn0q9sRa3iUYRuRfv5bJagKgAxOVSuRbtumbWGpxL6g7h/n6N vGJOpWMDpqHz5G9VI3ih8iF2HimpxDGNsOn6HvPs6tFev9T5sw4HFzfohcOLocKm svnXvPtjdtp5JigQJ4HaZ+mCHzr0SqwdIiMkwOjICVuLonp1DlHVdjMvvUpxQBye N4guuabZcgZQ+tKhIxLsiSAGuKghEo3MYBPNARD5HFTVvbUAjmI= -----END CERTIFICATE-----Generated at Mon Oct 20 21:33:16 2025 by rpki-client