$ rpki-client -vvf repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft File: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft (raw, json) Hash identifier: e58ECiGz+3ARAiB3DrgsiAv8gFd8B3NgtBc0d6znGwU= Subject key identifier: 2C:57:A6:A9:D3:7B:93:06:4C:F1:C2:99:84:93:7C:FA:56:19:7E:51 Authority key identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD Certificate issuer: /CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Certificate serial: 6544B3E7BA0456A7C42F989E9FDCF85629277E16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft Manifest number: 0297 Signing time: Mon 03 Nov 2025 10:31:11 +0000 Manifest this update: Mon 03 Nov 2025 10:26:11 +0000 Manifest next update: Thu 06 Nov 2025 10:36:11 +0000 Files and hashes: 1: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl (hash: VOEhFaqPt8LNGhyIMHdzYvEk7MljXkpgKV0aydc7VoM=) 2: 3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (hash: ZLFPPPuherxliEdNrwnbiAo9KOCnKvgNjSLpmHcBAG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:44:b3:e7:ba:04:56:a7:c4:2f:98:9e:9f:dc:f8:56:29:27:7e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Validity Not Before: Nov 3 10:26:11 2025 GMT Not After : Nov 6 10:36:11 2025 GMT Subject: CN=2C57A6A9D37B93064CF1C29984937CFA56197E51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a3:3d:46:08:5e:51:7c:7e:52:43:33:cb:e1: 96:03:0e:96:4a:61:9b:25:fd:6a:97:69:d6:93:38: 2e:cd:ea:2c:b7:69:92:9b:03:47:91:1b:b7:79:6b: ec:7b:80:2a:e2:87:ea:3a:ee:fe:de:37:f9:f2:cc: 36:8f:ee:d4:f5:fa:dc:6c:7c:fd:00:90:ab:e4:02: a3:8e:47:ea:2e:b0:56:51:20:c9:82:24:71:99:fe: 3a:72:ba:a6:74:73:9c:4e:0b:a1:08:a0:53:cb:4e: 04:48:c0:15:52:48:27:26:cf:e8:8c:74:a6:eb:8e: dd:57:5d:74:21:04:d6:f9:97:64:24:af:e1:54:93: 36:8c:ef:53:f3:78:65:d5:a4:11:33:7a:3c:bd:42: c5:96:2d:3f:d2:87:57:a1:02:33:90:35:85:43:4f: d2:42:f0:5d:a0:f1:bb:f6:ac:8d:e8:74:d7:44:ac: bc:ba:ff:bf:23:d2:bb:f4:84:ed:fd:f6:d6:66:54: 76:25:3c:6f:c7:45:24:ca:5d:1f:18:ae:1e:59:8c: a2:16:4e:34:f7:a1:2b:c3:d0:95:0b:a8:3d:28:f0: 0e:f2:f5:e8:b5:bf:12:b6:9d:84:b2:bc:2c:bc:2d: 1e:31:74:d6:de:f1:0c:d3:9e:93:67:98:83:b0:ae: 71:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:57:A6:A9:D3:7B:93:06:4C:F1:C2:99:84:93:7C:FA:56:19:7E:51 X509v3 Authority Key Identifier: keyid:73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:01:96:7c:ad:0a:35:88:67:03:d5:70:79:e1:82:71:06:3a: 90:c5:d2:76:99:c4:bc:d8:44:f6:65:e8:85:c1:59:2c:49:85: 65:30:91:4c:f2:7f:e9:3b:ca:15:51:21:69:9c:70:70:3d:b8: 9f:4d:95:b0:f9:04:f8:e5:09:08:2e:87:4f:87:f2:93:29:04: 8a:b7:df:18:8a:2a:c0:6b:c6:2b:4b:29:c8:f8:34:9b:6f:6c: 53:09:e2:8d:4b:42:bf:4f:33:5e:1d:c5:e1:7c:83:55:af:6d: 84:ac:a5:91:f7:cd:72:ad:8e:c6:31:3a:d6:d6:90:b3:cb:ad: c0:cb:fd:17:41:97:e7:48:82:41:fb:a4:df:97:7e:f9:55:ca: a3:8a:06:02:f3:dd:02:7d:e4:5d:ef:c8:01:15:f8:47:26:d4: 8a:fb:56:a8:96:ff:87:bc:38:8f:33:ff:2a:71:dc:36:0f:3f: e7:4a:77:40:72:15:cb:d3:42:da:e2:38:ce:3c:1b:ee:34:08: 11:fa:77:d6:a4:97:f3:80:72:b9:5b:98:05:63:fe:0b:e4:e3: c4:0a:b7:20:04:28:9d:61:5d:4c:4a:0a:a1:3f:19:a1:d6:cc: e3:13:70:11:fd:d6:ea:c8:45:06:d2:cc:4e:1f:77:15:48:cf: aa:50:06:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZUSz57oEVqfEL5ien9z4ViknfhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAy QjU1QTZGRDAeFw0yNTExMDMxMDI2MTFaFw0yNTExMDYxMDM2MTFaMDMxMTAvBgNV BAMTKDJDNTdBNkE5RDM3QjkzMDY0Q0YxQzI5OTg0OTM3Q0ZBNTYxOTdFNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2oz1GCF5RfH5SQzPL4ZYDDpZK YZsl/WqXadaTOC7N6iy3aZKbA0eRG7d5a+x7gCrih+o67v7eN/nyzDaP7tT1+txs fP0AkKvkAqOOR+ousFZRIMmCJHGZ/jpyuqZ0c5xOC6EIoFPLTgRIwBVSSCcmz+iM dKbrjt1XXXQhBNb5l2Qkr+FUkzaM71PzeGXVpBEzejy9QsWWLT/Sh1ehAjOQNYVD T9JC8F2g8bv2rI3odNdErLy6/78j0rv0hO399tZmVHYlPG/HRSTKXR8Yrh5ZjKIW TjT3oSvD0JULqD0o8A7y9ei1vxK2nYSyvCy8LR4xdNbe8QzTnpNnmIOwrnFPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULFemqdN7kwZM8cKZhJN8+lYZflEwHwYDVR0j BBgwFoAUc6LAaaOy66x17LNz85i1YCtVpv0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWMyNzYyMS1lMjk3LTQxMDAtOTcxYS0xYzY5NjdjNTJiMWIvMC83M0EyQzA2OUEz QjJFQkFDNzVFQ0IzNzNGMzk4QjU2MDJCNTVBNkZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAyQjU1 QTZGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTljMjc2MjEtZTI5Ny00MTAwLTk3 MWEtMWM2OTY3YzUyYjFiLzAvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1 NjAyQjU1QTZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0BlnytCjWIZwPVcHnhgnEGOpDF0naZxLzY RPZl6IXBWSxJhWUwkUzyf+k7yhVRIWmccHA9uJ9NlbD5BPjlCQguh0+H8pMpBIq3 3xiKKsBrxitLKcj4NJtvbFMJ4o1LQr9PM14dxeF8g1WvbYSspZH3zXKtjsYxOtbW kLPLrcDL/RdBl+dIgkH7pN+XfvlVyqOKBgLz3QJ95F3vyAEV+Ecm1Ir7VqiW/4e8 OI8z/ypx3DYPP+dKd0ByFcvTQtriOM48G+40CBH6d9akl/OAcrlbmAVj/gvk48QK tyAEKJ1hXUxKCqE/GaHWzOMTcBH91urIRQbSzE4fdxVIz6pQBos= -----END CERTIFICATE-----Generated at Tue Nov 4 16:45:14 2025 by rpki-client