$ rpki-client -vvf repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft File: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft (raw, json) Hash identifier: JgIMZGfWcbh2rvrr06L+fpeRSSt93INf3axI99h48J4= Subject key identifier: 2E:4F:C3:4E:E7:E0:DE:9C:98:5A:7E:62:9D:22:24:B0:F3:D1:F4:E0 Authority key identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD Certificate issuer: /CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Certificate serial: 3029D273D48DB521DA102608A948201D592026A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft Manifest number: 026F Signing time: Wed 06 Aug 2025 21:11:10 +0000 Manifest this update: Wed 06 Aug 2025 21:06:10 +0000 Manifest next update: Sun 10 Aug 2025 01:31:10 +0000 Files and hashes: 1: 3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (hash: WzQyswXSwMjXUbCDUIIF0PkevxcLaE+CYPcmOj6X+is=) 2: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl (hash: DVAjHX+Kpqy23X2nFOnkR2IV5T+2I2ElrUDYrBkwIAI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 01:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:29:d2:73:d4:8d:b5:21:da:10:26:08:a9:48:20:1d:59:20:26:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Validity Not Before: Aug 6 21:06:10 2025 GMT Not After : Aug 10 01:31:10 2025 GMT Subject: CN=2E4FC34EE7E0DE9C985A7E629D2224B0F3D1F4E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0b:0a:45:7b:fd:19:ad:b5:61:83:08:19:11: 5a:7c:0f:e1:e8:4a:99:bc:c7:61:1f:dc:9c:58:45: 1e:a0:e9:79:72:ec:3b:49:de:0d:a8:03:c7:a9:3c: 5b:82:86:5e:b8:af:f5:64:fe:60:62:87:f6:f4:87: 03:be:9a:4b:a0:21:5e:c6:0c:51:ea:79:76:48:ee: 8b:43:3c:48:bc:0f:12:11:21:88:1e:b2:5b:4d:fa: 71:de:ea:08:30:7d:01:08:9d:aa:15:2d:d0:bc:d0: bf:a6:17:ec:fc:54:2d:33:0a:2c:63:58:2e:1d:d5: 35:ab:42:71:f4:6e:60:bf:89:30:e5:3c:ea:52:e4: 16:c4:0b:7f:85:c3:14:0c:ec:5e:af:72:96:85:32: 36:ad:db:2d:d1:f2:91:2e:7e:7d:f0:1c:b4:83:71: 0b:1e:d0:1a:a8:61:cb:38:f2:06:63:10:91:82:57: 1c:dc:c9:ef:e8:c5:7a:54:09:ca:3c:53:c9:c5:a1: a2:7c:af:88:6c:17:2f:0a:bc:78:c1:69:d9:1b:f9: f9:0a:87:d1:a6:66:54:0d:f1:57:dd:23:2e:f4:42: 19:c2:9f:7b:04:ca:69:c8:01:99:63:34:43:58:ef: 8a:cc:00:06:03:6b:eb:11:fd:3c:6d:5d:7e:e5:1e: 26:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4F:C3:4E:E7:E0:DE:9C:98:5A:7E:62:9D:22:24:B0:F3:D1:F4:E0 X509v3 Authority Key Identifier: keyid:73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:d4:29:d7:96:c0:b0:33:ab:1e:66:6c:36:bf:4e:a8:08:9e: c4:7e:f4:97:c2:30:02:9e:70:2d:d6:e3:15:a2:bb:0a:41:92: 72:89:89:39:b5:6c:1b:aa:d9:af:c2:07:80:a0:cd:a2:af:a2: c9:f3:12:38:a2:91:8d:f7:b0:7a:57:e0:19:08:58:ed:f2:96: 21:6a:c7:99:3c:b7:bc:9e:7e:7f:9e:43:8d:9c:17:52:4d:d9: e8:47:de:c3:4e:8a:f0:6b:e1:13:5a:d6:0e:97:e0:cc:45:f8: 51:10:0b:52:fc:b1:55:88:f8:63:91:b1:db:9c:09:71:a1:66: 46:01:26:d0:3a:dd:65:64:32:cc:78:51:6b:8a:19:ac:8c:83: 3d:ff:9a:7a:0b:3d:7d:d6:10:d7:f7:f3:57:1f:c5:6a:ce:6f: cc:23:29:73:46:68:5f:6b:99:3e:c0:35:17:53:6f:9f:7c:c7: 8d:57:5e:b1:e2:bb:6d:27:08:b2:17:b6:e3:45:11:20:84:f1: 01:15:79:75:4e:e9:29:8d:fe:0a:89:07:bf:a1:b8:16:a4:24: 3a:39:56:3d:ac:e5:95:70:66:c4:72:e4:a1:3b:2c:9e:1d:5c: 1e:96:91:7d:3d:6e:8f:8a:de:b2:da:34:dc:b2:22:d1:b9:1a: 1d:b8:56:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMCnSc9SNtSHaECYIqUggHVkgJqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAy QjU1QTZGRDAeFw0yNTA4MDYyMTA2MTBaFw0yNTA4MTAwMTMxMTBaMDMxMTAvBgNV BAMTKDJFNEZDMzRFRTdFMERFOUM5ODVBN0U2MjlEMjIyNEIwRjNEMUY0RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHCwpFe/0ZrbVhgwgZEVp8D+Ho Spm8x2Ef3JxYRR6g6Xly7DtJ3g2oA8epPFuChl64r/Vk/mBih/b0hwO+mkugIV7G DFHqeXZI7otDPEi8DxIRIYgesltN+nHe6ggwfQEInaoVLdC80L+mF+z8VC0zCixj WC4d1TWrQnH0bmC/iTDlPOpS5BbEC3+FwxQM7F6vcpaFMjat2y3R8pEufn3wHLSD cQse0BqoYcs48gZjEJGCVxzcye/oxXpUCco8U8nFoaJ8r4hsFy8KvHjBadkb+fkK h9GmZlQN8VfdIy70QhnCn3sEymnIAZljNENY74rMAAYDa+sR/TxtXX7lHibfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULk/DTufg3pyYWn5inSIksPPR9OAwHwYDVR0j BBgwFoAUc6LAaaOy66x17LNz85i1YCtVpv0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWMyNzYyMS1lMjk3LTQxMDAtOTcxYS0xYzY5NjdjNTJiMWIvMC83M0EyQzA2OUEz QjJFQkFDNzVFQ0IzNzNGMzk4QjU2MDJCNTVBNkZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAyQjU1 QTZGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTljMjc2MjEtZTI5Ny00MTAwLTk3 MWEtMWM2OTY3YzUyYjFiLzAvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1 NjAyQjU1QTZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPUKdeWwLAzqx5mbDa/TqgInsR+9JfCMAKe cC3W4xWiuwpBknKJiTm1bBuq2a/CB4CgzaKvosnzEjiikY33sHpX4BkIWO3yliFq x5k8t7yefn+eQ42cF1JN2ehH3sNOivBr4RNa1g6X4MxF+FEQC1L8sVWI+GORsduc CXGhZkYBJtA63WVkMsx4UWuKGayMgz3/mnoLPX3WENf381cfxWrOb8wjKXNGaF9r mT7ANRdTb598x41XXrHiu20nCLIXtuNFESCE8QEVeXVO6SmN/gqJB7+huBakJDo5 Vj2s5ZVwZsRy5KE7LJ4dXB6WkX09bo+K3rLaNNyyItG5Gh24Vvo= -----END CERTIFICATE-----Generated at Thu Aug 7 00:31:31 2025 by rpki-client