$ rpki-client -vvf repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft File: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft (raw, json) Hash identifier: cMi7sMOkN9ZmD0np1njMCnKcZHRF3lhDKSo8UFg5CLo= Subject key identifier: E0:98:52:62:A6:F6:63:40:0E:17:3D:CE:1F:FB:4B:05:70:10:50:EA Authority key identifier: 73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 Certificate issuer: /CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Certificate serial: 72C33620E0F6A5E56B8140E42DF96DE2313B13EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft Manifest number: 029E Signing time: Mon 03 Nov 2025 23:41:04 +0000 Manifest this update: Mon 03 Nov 2025 23:36:04 +0000 Manifest next update: Fri 07 Nov 2025 02:01:04 +0000 Files and hashes: 1: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl (hash: oXKzwQGKprnLGK4SNya02mgDtPY3QYadGihRSQnRvKM=) 2: 3230322e3138332e302e302f31392d3139203d3e203338313630.roa (hash: MEztuZqZgD3unDvE9UbT7j2miLRVC0ZWnvrCm6yOt54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c3:36:20:e0:f6:a5:e5:6b:81:40:e4:2d:f9:6d:e2:31:3b:13:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Validity Not Before: Nov 3 23:36:04 2025 GMT Not After : Nov 7 02:01:04 2025 GMT Subject: CN=E0985262A6F663400E173DCE1FFB4B05701050EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6e:cc:7f:2a:60:16:35:f4:4c:75:92:dc:21: de:de:36:e8:86:de:de:db:76:1d:66:2c:a5:f9:a0: 09:5a:bc:af:25:fb:1b:d9:c0:e3:ad:4c:93:8f:ca: 8c:a2:19:45:37:4c:59:02:ea:e7:bd:ef:e4:9b:11: 5f:99:3b:b1:75:6f:7a:5e:6c:5c:d7:45:31:eb:6a: ee:8d:63:bb:7f:88:de:03:68:ee:45:8a:a4:7b:8e: c4:b4:8b:af:9c:26:4e:d0:c4:d3:2e:e9:bb:7d:58: cc:d9:82:86:ad:7c:16:91:2b:d0:85:cb:ae:18:af: dd:3f:55:23:d9:ba:5f:f3:30:82:35:6b:7d:db:2a: 83:5f:83:f4:c4:eb:4c:22:d8:22:ec:5f:54:9c:c5: 1a:bd:7e:9b:f8:0c:3d:63:b7:c0:4e:fe:64:63:28: 9a:4b:5c:d9:cf:9c:f6:97:ff:19:74:53:80:0b:bf: 0f:21:80:fb:84:b6:3f:e2:3b:3c:c7:e6:1a:5f:d5: 73:10:71:5d:54:1b:b9:b6:b2:a8:98:cf:5d:90:3d: b3:6e:10:f6:07:43:a7:00:37:3b:46:fe:cb:80:58: af:a5:f6:45:fe:fe:c5:a3:bb:1e:e1:40:6c:2b:55: b3:ee:ce:94:fb:cd:d0:31:49:09:cf:00:c8:c2:a2: 3b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:98:52:62:A6:F6:63:40:0E:17:3D:CE:1F:FB:4B:05:70:10:50:EA X509v3 Authority Key Identifier: keyid:73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b5:87:fc:94:33:e1:31:9d:79:bb:41:49:b1:1f:e8:5b:57: a3:8d:51:1e:43:e9:9b:b8:57:51:b3:8d:aa:c9:4e:54:e2:25: b2:ca:17:0d:0a:3c:78:5b:b6:be:d0:60:8e:2f:00:32:e3:7d: 0c:06:21:00:a7:7e:28:3c:63:06:5d:2b:e9:ab:2e:a0:17:3b: a1:85:3b:fa:66:d0:50:42:a8:af:b6:89:98:b2:f0:d4:0f:30: 08:56:44:73:f9:8e:b9:86:a8:6e:78:e9:c3:2b:45:97:c2:0d: a5:8d:20:57:0b:4b:9e:ce:07:4d:88:ef:80:7d:4d:61:b0:55: a3:b1:01:71:bd:23:08:b9:12:31:52:fc:cc:e3:95:5a:f2:f6: 2d:0d:0d:7e:64:02:87:d4:84:50:0b:c7:29:cd:f7:39:37:1f: 0f:54:86:e0:1f:3b:f7:96:c6:82:ce:d8:84:fb:c7:c5:8b:23: f0:c4:8a:fd:9f:29:74:ef:aa:94:2f:f4:29:d0:0f:95:be:b1: f0:4a:1f:a7:32:74:58:bd:c4:ca:15:f0:ac:30:32:44:5b:c9: 1b:0a:6b:84:91:ec:d1:94:85:66:2a:47:f6:90:32:db:8d:0c: 84:a7:4a:a8:e6:4b:37:47:6c:73:af:02:58:e6:1c:d4:b6:a9: 32:6d:00:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcsM2IOD2peVrgUDkLflt4jE7E+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5 RUZFOTZBMzAeFw0yNTExMDMyMzM2MDRaFw0yNTExMDcwMjAxMDRaMDMxMTAvBgNV BAMTKEUwOTg1MjYyQTZGNjYzNDAwRTE3M0RDRTFGRkI0QjA1NzAxMDUwRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsbsx/KmAWNfRMdZLcId7eNuiG 3t7bdh1mLKX5oAlavK8l+xvZwOOtTJOPyoyiGUU3TFkC6ue97+SbEV+ZO7F1b3pe bFzXRTHrau6NY7t/iN4DaO5FiqR7jsS0i6+cJk7QxNMu6bt9WMzZgoatfBaRK9CF y64Yr90/VSPZul/zMII1a33bKoNfg/TE60wi2CLsX1ScxRq9fpv4DD1jt8BO/mRj KJpLXNnPnPaX/xl0U4ALvw8hgPuEtj/iOzzH5hpf1XMQcV1UG7m2sqiYz12QPbNu EPYHQ6cANztG/suAWK+l9kX+/sWjux7hQGwrVbPuzpT7zdAxSQnPAMjCojuvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4JhSYqb2Y0AOFz3OH/tLBXAQUOowHwYDVR0j BBgwFoAUcy9G10x6jF2IinCRpwbzoJ7+lqMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTBkMWFhMS00YzdmLTQ0OGItYjJiYi0wMmM1NzE1MWYyMTAvMC83MzJGNDZENzRD N0E4QzVEODg4QTcwOTFBNzA2RjNBMDlFRkU5NkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5RUZF OTZBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUwZDFhYTEtNGM3Zi00NDhiLWIy YmItMDJjNTcxNTFmMjEwLzAvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYz QTA5RUZFOTZBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIW1h/yUM+ExnXm7QUmxH+hbV6ONUR5D6Zu4 V1GzjarJTlTiJbLKFw0KPHhbtr7QYI4vADLjfQwGIQCnfig8YwZdK+mrLqAXO6GF O/pm0FBCqK+2iZiy8NQPMAhWRHP5jrmGqG546cMrRZfCDaWNIFcLS57OB02I74B9 TWGwVaOxAXG9Iwi5EjFS/MzjlVry9i0NDX5kAofUhFALxynN9zk3Hw9UhuAfO/eW xoLO2IT7x8WLI/DEiv2fKXTvqpQv9CnQD5W+sfBKH6cydFi9xMoV8KwwMkRbyRsK a4SR7NGUhWYqR/aQMtuNDISnSqjmSzdHbHOvAljmHNS2qTJtAKo= -----END CERTIFICATE-----Generated at Tue Nov 4 12:56:22 2025 by rpki-client