$ rpki-client -vvf repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft File: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft (raw, json) Hash identifier: N+eX/t+yuG+9PSJj8Q3TrPtsxGtIDDnK7qXtEP8BNy4= Subject key identifier: 1C:28:91:CF:69:E3:E4:7E:43:9C:9B:9B:B1:DD:15:F9:86:9B:21:AE Authority key identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD Certificate issuer: /CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Certificate serial: 5234809DB932764763AFD9B8FBD7524F907CC6A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft Manifest number: 0258 Signing time: Sun 15 Jun 2025 17:11:09 +0000 Manifest this update: Sun 15 Jun 2025 17:06:09 +0000 Manifest next update: Wed 18 Jun 2025 22:02:09 +0000 Files and hashes: 1: 3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (hash: WzQyswXSwMjXUbCDUIIF0PkevxcLaE+CYPcmOj6X+is=) 2: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl (hash: NvfilvGIRFnEvuj1LLdLJB+o7Ue7FzzRYkJRIOWukG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:34:80:9d:b9:32:76:47:63:af:d9:b8:fb:d7:52:4f:90:7c:c6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Validity Not Before: Jun 15 17:06:09 2025 GMT Not After : Jun 18 22:02:09 2025 GMT Subject: CN=1C2891CF69E3E47E439C9B9BB1DD15F9869B21AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f6:ed:c2:b2:ff:86:54:93:21:ad:00:ba:3c: 2d:60:b4:ec:6d:45:c3:dd:ff:e3:f8:30:82:ce:c6: 57:18:1c:e2:24:bc:05:5e:99:75:34:4c:73:42:db: 2c:4f:99:86:53:a7:ae:14:57:c2:b9:5f:18:f4:78: 91:b0:bd:87:9b:40:4f:ec:3a:81:ec:16:fd:cd:45: c3:d5:81:f7:a2:78:da:11:13:9c:7d:3c:2c:7b:90: 8d:ce:69:b6:b9:1a:fe:34:72:9c:39:f5:3e:16:da: 97:14:4f:78:c3:14:b5:3c:ab:fe:e5:9a:93:f4:d0: 0d:e6:b7:e6:df:0d:e5:98:25:e5:ed:ea:03:59:1a: c1:d4:c8:7f:33:a4:39:9c:1c:b4:b1:5e:a3:a1:a9: a8:51:9e:98:3b:88:25:b9:9d:a6:10:2f:1b:47:ad: bc:66:72:7b:c5:a5:25:3d:d9:06:44:84:b8:36:30: 89:b2:3c:39:73:9b:2e:0a:89:ba:e9:1f:88:93:90: 35:4c:54:dc:74:ee:47:07:4e:d3:7c:6e:25:17:c4: 0b:35:d6:f4:c7:b2:19:e9:9d:79:15:d9:f4:94:17: 8c:7d:8f:52:16:db:58:c9:2c:4d:ae:0c:bd:34:9b: a7:44:0f:1f:e2:9d:12:42:52:4a:90:bf:e7:55:3a: 97:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:28:91:CF:69:E3:E4:7E:43:9C:9B:9B:B1:DD:15:F9:86:9B:21:AE X509v3 Authority Key Identifier: keyid:73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:44:2b:0c:6c:24:7a:6d:0c:50:0f:e1:ed:4c:04:6f:b2:7d: 8e:1e:d4:0f:ef:8c:26:4d:80:0c:98:2a:be:5d:2d:ee:bf:b6: ff:39:d6:1e:c1:83:7b:a6:50:2e:95:27:05:73:af:a8:f8:dd: 74:f1:49:32:1a:62:6d:ed:93:f3:10:56:b4:aa:27:a4:48:ad: fe:c8:b3:27:04:da:38:c5:30:29:86:de:b9:4c:63:fc:44:55: 06:6b:ca:d7:f4:ff:49:47:b8:d4:e0:ba:78:ff:0d:67:d8:cc: 3e:b6:9a:2e:85:5b:41:2b:9d:82:96:7e:39:19:32:a1:ea:96: 8b:41:ff:88:6c:20:ca:5e:e0:e8:77:c9:b3:ac:63:43:c8:cb: 38:b4:02:8e:06:79:89:74:24:d9:08:6b:11:2c:2e:d7:39:2d: 13:8d:33:4b:9b:31:dd:70:f7:af:8a:a3:40:94:99:93:a1:5a: 70:52:0e:43:d2:ab:4a:09:ea:2b:57:f9:90:c4:55:9c:41:79: 54:70:af:7d:13:44:d0:02:eb:0c:c5:c3:40:a2:be:6e:80:da: a3:5e:63:cd:a5:ad:ba:f4:e3:9a:49:98:d3:97:d9:e0:73:6e: a0:fb:8e:33:2e:aa:83:ba:6a:aa:81:15:0d:ad:ae:f8:c0:7e: be:f6:60:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUjSAnbkydkdjr9m4+9dST5B8xqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAy QjU1QTZGRDAeFw0yNTA2MTUxNzA2MDlaFw0yNTA2MTgyMjAyMDlaMDMxMTAvBgNV BAMTKDFDMjg5MUNGNjlFM0U0N0U0MzlDOUI5QkIxREQxNUY5ODY5QjIxQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9u3Csv+GVJMhrQC6PC1gtOxt RcPd/+P4MILOxlcYHOIkvAVemXU0THNC2yxPmYZTp64UV8K5Xxj0eJGwvYebQE/s OoHsFv3NRcPVgfeieNoRE5x9PCx7kI3Oaba5Gv40cpw59T4W2pcUT3jDFLU8q/7l mpP00A3mt+bfDeWYJeXt6gNZGsHUyH8zpDmcHLSxXqOhqahRnpg7iCW5naYQLxtH rbxmcnvFpSU92QZEhLg2MImyPDlzmy4KibrpH4iTkDVMVNx07kcHTtN8biUXxAs1 1vTHshnpnXkV2fSUF4x9j1IW21jJLE2uDL00m6dEDx/inRJCUkqQv+dVOpcVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHCiRz2nj5H5DnJubsd0V+YabIa4wHwYDVR0j BBgwFoAUc6LAaaOy66x17LNz85i1YCtVpv0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWMyNzYyMS1lMjk3LTQxMDAtOTcxYS0xYzY5NjdjNTJiMWIvMC83M0EyQzA2OUEz QjJFQkFDNzVFQ0IzNzNGMzk4QjU2MDJCNTVBNkZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAyQjU1 QTZGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTljMjc2MjEtZTI5Ny00MTAwLTk3 MWEtMWM2OTY3YzUyYjFiLzAvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1 NjAyQjU1QTZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9EKwxsJHptDFAP4e1MBG+yfY4e1A/vjCZN gAyYKr5dLe6/tv851h7Bg3umUC6VJwVzr6j43XTxSTIaYm3tk/MQVrSqJ6RIrf7I sycE2jjFMCmG3rlMY/xEVQZrytf0/0lHuNTgunj/DWfYzD62mi6FW0ErnYKWfjkZ MqHqlotB/4hsIMpe4Oh3ybOsY0PIyzi0Ao4GeYl0JNkIaxEsLtc5LRONM0ubMd1w 96+Ko0CUmZOhWnBSDkPSq0oJ6itX+ZDEVZxBeVRwr30TRNAC6wzFw0Civm6A2qNe Y82lrbr045pJmNOX2eBzbqD7jjMuqoO6aqqBFQ2trvjAfr72YCU= -----END CERTIFICATE-----Generated at Sun Jun 15 22:57:20 2025 by rpki-client