$ rpki-client -vvf repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft File: 1073C0AF2447C17B85643987B72701D1AE52823D.mft (raw, json) Hash identifier: UjqFMlNJSE5C5xXlZ+ch6ft+xdkkLCpCakxpYD0vRbw= Subject key identifier: 55:FA:A0:0A:FF:B8:11:A8:44:09:3C:33:6D:7C:DA:F8:A6:B6:CF:43 Authority key identifier: 10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D Certificate issuer: /CN=1073C0AF2447C17B85643987B72701D1AE52823D Certificate serial: 49F3F0BCC893FCB48950BEEA1A8F39C5AD8D4518 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft Manifest number: BA Signing time: Sun 03 Aug 2025 23:10:39 +0000 Manifest this update: Sun 03 Aug 2025 23:05:39 +0000 Manifest next update: Thu 07 Aug 2025 10:44:39 +0000 Files and hashes: 1: 1073C0AF2447C17B85643987B72701D1AE52823D.crl (hash: 9qQuiVYKw+9oluG2Ex6oIm+8tgYpJ1CGsV/GtJHlP3M=) 2: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: 31fCRfNUFIYAvmAMKXAqFxsON/60EF/0rmnL9f/SdJI=) 3: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: eGRPg+0FqPezAL7Sp3nM4zvLQO8rtFSR4EykoCf7Z54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 10:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:f3:f0:bc:c8:93:fc:b4:89:50:be:ea:1a:8f:39:c5:ad:8d:45:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1073C0AF2447C17B85643987B72701D1AE52823D Validity Not Before: Aug 3 23:05:39 2025 GMT Not After : Aug 7 10:44:39 2025 GMT Subject: CN=55FAA00AFFB811A844093C336D7CDAF8A6B6CF43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:13:a9:11:26:f1:2c:14:92:ea:eb:5a:13:77: 18:b5:a7:d8:8c:d2:2b:4c:79:99:b6:c0:29:22:1d: 38:bc:66:2e:17:eb:1d:ea:1b:72:06:b2:b8:40:d6: c3:f8:0a:89:27:bc:0b:4e:31:db:6f:8c:6a:ce:5e: ab:85:0d:55:2d:81:e6:56:a5:75:65:dd:64:b9:ce: 75:7d:1a:9a:70:a2:ac:99:1b:13:6d:f8:68:a7:f0: 2f:4e:da:1d:c1:7b:71:27:32:6f:6c:89:c5:51:b9: 2a:ae:de:73:76:0b:4c:b9:7a:b8:7e:49:a1:83:e9: 62:29:ea:27:7a:00:64:5e:e4:9e:70:39:a4:da:74: 2b:76:b7:8f:74:5e:5a:63:67:87:aa:3d:87:7d:29: ea:2e:34:6e:f9:37:da:ba:c9:31:ea:23:5c:6e:4d: b8:9d:26:7e:e0:3f:6c:42:e8:ee:3d:62:78:a6:c9: 7e:76:db:46:9a:e3:37:e5:a0:af:8d:00:96:85:e9: c5:6f:59:bf:eb:5d:3b:76:63:ab:ba:7f:9f:cc:0f: cb:03:24:36:0a:c3:07:bb:b6:01:4a:1e:5e:e1:8b: fb:01:bb:af:7b:5c:98:74:fb:c0:25:df:66:05:92: f8:2d:57:2b:1b:98:5e:23:c0:ce:cd:2c:ac:d6:2c: 61:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:FA:A0:0A:FF:B8:11:A8:44:09:3C:33:6D:7C:DA:F8:A6:B6:CF:43 X509v3 Authority Key Identifier: keyid:10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:bf:20:0c:1c:6c:b0:73:a1:7b:d0:83:06:cb:81:10:a7:60: 0d:4a:0c:54:88:a8:1c:fc:3d:c9:e9:bb:57:4e:19:dc:74:fd: 54:ef:bd:db:f7:64:c1:d9:b8:44:e5:ba:ca:fd:7f:4e:04:75: 37:79:7d:57:7d:8c:ca:cb:e6:70:18:13:99:12:cb:ea:3b:a1: 82:45:c8:94:a4:77:12:f1:8f:99:8e:dd:b5:34:e9:db:74:06: ab:07:ee:7d:ac:f2:7c:83:d1:b1:eb:bb:d6:c9:13:30:91:19: 11:d1:1f:76:d7:81:0c:70:7a:4a:1b:c5:3a:4c:a7:e1:ab:b6: 65:71:94:c1:b2:45:90:cd:1f:e1:38:73:3a:f2:ae:a6:71:53: dc:a2:2e:c1:74:df:04:17:d2:ec:94:69:d3:64:cb:fd:20:b9: 4d:c4:a0:74:43:2a:b9:76:0c:f5:c3:48:09:db:a4:de:07:69: 31:c3:b4:5c:a2:ab:98:d1:f6:6b:21:1f:b3:29:69:58:a1:b6: 5d:ee:23:31:9d:3c:d7:b4:d2:89:f3:6d:47:9e:58:20:8d:76: 2a:00:43:a7:54:9f:c2:89:f2:81:fe:48:ec:f9:d0:21:93:77: ee:5e:f5:8a:25:72:52:e7:7c:ba:0f:65:93:3d:61:86:8f:f6: 62:00:fa:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSfPwvMiT/LSJUL7qGo85xa2NRRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFB RTUyODIzRDAeFw0yNTA4MDMyMzA1MzlaFw0yNTA4MDcxMDQ0MzlaMDMxMTAvBgNV BAMTKDU1RkFBMDBBRkZCODExQTg0NDA5M0MzMzZEN0NEQUY4QTZCNkNGNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWE6kRJvEsFJLq61oTdxi1p9iM 0itMeZm2wCkiHTi8Zi4X6x3qG3IGsrhA1sP4CoknvAtOMdtvjGrOXquFDVUtgeZW pXVl3WS5znV9GppwoqyZGxNt+Gin8C9O2h3Be3EnMm9sicVRuSqu3nN2C0y5erh+ SaGD6WIp6id6AGRe5J5wOaTadCt2t490XlpjZ4eqPYd9KeouNG75N9q6yTHqI1xu TbidJn7gP2xC6O49YnimyX5220aa4zfloK+NAJaF6cVvWb/rXTt2Y6u6f5/MD8sD JDYKwwe7tgFKHl7hi/sBu697XJh0+8Al32YFkvgtVysbmF4jwM7NLKzWLGEXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVfqgCv+4EahECTwzbXza+Ka2z0MwHwYDVR0j BBgwFoAUEHPAryRHwXuFZDmHtycB0a5Sgj0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmRkMTVlMy05ZWU1LTRkNTItOWVlZS03MTJiYjNiN2JmZmIvMC8xMDczQzBBRjI0 NDdDMTdCODU2NDM5ODdCNzI3MDFEMUFFNTI4MjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFBRTUy ODIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZkZDE1ZTMtOWVlNS00ZDUyLTll ZWUtNzEyYmIzYjdiZmZiLzAvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAx RDFBRTUyODIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIu/IAwcbLBzoXvQgwbLgRCnYA1KDFSIqBz8 Pcnpu1dOGdx0/VTvvdv3ZMHZuETlusr9f04EdTd5fVd9jMrL5nAYE5kSy+o7oYJF yJSkdxLxj5mO3bU06dt0BqsH7n2s8nyD0bHru9bJEzCRGRHRH3bXgQxwekobxTpM p+GrtmVxlMGyRZDNH+E4czryrqZxU9yiLsF03wQX0uyUadNky/0guU3EoHRDKrl2 DPXDSAnbpN4HaTHDtFyiq5jR9mshH7MpaVihtl3uIzGdPNe00onzbUeeWCCNdioA Q6dUn8KJ8oH+SOz50CGTd+5e9YolclLnfLoPZZM9YYaP9mIA+gQ= -----END CERTIFICATE-----Generated at Wed Aug 6 09:23:17 2025 by rpki-client