$ rpki-client -vvf repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft File: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft (raw, json) Hash identifier: PQEwX1ILROtwPYo1tSfhCT5p5Uj8udTcou1FdFm/H/I= Subject key identifier: D4:CE:9C:DB:71:9F:C5:FF:E2:C4:37:6F:72:79:67:67:3E:04:3F:FF Authority key identifier: 73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E Certificate issuer: /CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Certificate serial: 3D6FC3E9F24FAADDAEACDBD94B24256124C0B7A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft Manifest number: B0 Signing time: Sat 09 Aug 2025 06:21:25 +0000 Manifest this update: Sat 09 Aug 2025 06:16:25 +0000 Manifest next update: Tue 12 Aug 2025 09:04:25 +0000 Files and hashes: 1: 3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa (hash: ky6kqewG2CLcXwQoFuB0Gbkz5WHCCY7RgpoJqEc0cVU=) 2: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl (hash: 6/N4RFOOupzipbAe8U0dQJQu3cHOOR7j0NFdf2XK1d4=) 3: 3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa (hash: 5d1MR7rKvEWqFJE9IZmsunjaxhaRl4wODAGB+LLjxEo=) 4: 323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa (hash: fYFecXdBAeKoyIAgB0JeLy6cqYChyPHEhUfoQQOYxUQ=) 5: 3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa (hash: WMzT2ENPMmi2mcaD4CnPa7CoBrNxdNCIISZtPItZ4MM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 09:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:6f:c3:e9:f2:4f:aa:dd:ae:ac:db:d9:4b:24:25:61:24:c0:b7:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Validity Not Before: Aug 9 06:16:25 2025 GMT Not After : Aug 12 09:04:25 2025 GMT Subject: CN=D4CE9CDB719FC5FFE2C4376F727967673E043FFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9c:75:28:73:90:71:69:c6:2b:e8:da:13:56: b8:25:d7:15:8f:5e:a2:7f:48:ee:d8:3e:eb:99:a8: 47:59:e5:01:4d:54:ea:d4:b7:f5:71:a9:aa:d4:9c: 9c:82:9c:99:dc:61:a8:f5:30:4e:04:4e:c3:82:f9: c9:93:0b:d9:6c:dd:8b:a5:d0:42:1d:e0:b8:6a:26: 51:94:cb:16:01:5c:85:20:35:5e:c7:cc:48:f6:00: 98:28:75:76:7d:ff:cb:71:22:69:68:3e:8f:4b:69: 20:7c:81:c6:19:fe:c6:23:d4:d7:26:65:79:a9:36: e8:bf:b8:f9:a5:0b:e4:cf:0f:c7:5e:52:6e:18:77: 07:db:4c:69:58:0e:a7:60:f3:e6:a9:59:c2:95:4b: 50:25:f2:dd:36:2f:a2:75:30:4e:32:6b:d2:d9:e4: bd:69:db:e8:42:41:28:9e:60:6f:82:72:c7:7f:20: 5a:18:6a:bd:b8:8f:3a:82:fb:9d:7d:ca:a1:5d:26: 0e:44:30:7b:f7:15:6f:d0:95:2c:4c:54:aa:7e:4a: a3:89:ba:cc:3f:16:e0:b4:80:8c:85:7d:3c:bc:bd: d4:61:77:0f:11:81:dd:67:a9:2d:01:f3:8b:78:7c: 14:db:f4:7c:a2:e1:a6:66:b7:c5:4a:fd:cd:4e:29: a0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CE:9C:DB:71:9F:C5:FF:E2:C4:37:6F:72:79:67:67:3E:04:3F:FF X509v3 Authority Key Identifier: keyid:73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:9c:0c:40:17:12:3e:07:d5:64:df:d3:54:74:ec:26:8e:30: 3a:87:f4:32:04:6c:e3:c8:fe:c2:8e:87:7e:7e:3b:1f:aa:51: 29:27:39:eb:a0:cb:03:25:5c:0f:c8:88:3b:0e:19:27:64:9d: 95:f2:5f:61:ee:d1:d9:bf:26:1a:95:8c:a8:a3:6e:50:8d:6d: 68:c2:b5:21:fd:39:c9:bf:cd:13:f4:58:0a:3f:43:5e:ed:4d: 67:de:35:30:fb:68:c8:30:f3:30:5e:09:bf:67:2d:20:98:c8: 48:ef:16:63:b3:92:e3:c3:e4:de:86:25:e4:38:da:ff:04:83: 23:c2:14:69:fa:ff:fb:9e:cb:01:5c:03:fe:b1:9c:e7:81:09: fc:60:ee:21:d9:3e:91:34:cd:04:cc:66:70:ed:c9:95:26:7b: 8f:66:ed:2c:e6:5c:40:78:d1:f0:22:09:b2:49:34:e3:2b:2a: 9f:a6:69:03:cb:8e:9c:c6:ec:38:b1:02:36:c5:ba:4f:4d:f3: 96:3e:c6:46:34:25:e1:7f:86:17:2c:ed:d4:0e:58:3c:1a:68: 37:3c:97:58:cf:0b:5c:56:0e:e3:5b:3f:ed:16:c0:a5:6e:99: c7:6c:be:86:ff:34:b9:84:95:f3:f3:bf:90:6d:90:d7:b5:88: 01:32:a9:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPW/D6fJPqt2urNvZSyQlYSTAt6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3 REZDNkE4RTAeFw0yNTA4MDkwNjE2MjVaFw0yNTA4MTIwOTA0MjVaMDMxMTAvBgNV BAMTKEQ0Q0U5Q0RCNzE5RkM1RkZFMkM0Mzc2RjcyNzk2NzY3M0UwNDNGRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBnHUoc5BxacYr6NoTVrgl1xWP XqJ/SO7YPuuZqEdZ5QFNVOrUt/VxqarUnJyCnJncYaj1ME4ETsOC+cmTC9ls3Yul 0EId4LhqJlGUyxYBXIUgNV7HzEj2AJgodXZ9/8txImloPo9LaSB8gcYZ/sYj1Ncm ZXmpNui/uPmlC+TPD8deUm4YdwfbTGlYDqdg8+apWcKVS1Al8t02L6J1ME4ya9LZ 5L1p2+hCQSieYG+Ccsd/IFoYar24jzqC+519yqFdJg5EMHv3FW/QlSxMVKp+SqOJ usw/FuC0gIyFfTy8vdRhdw8Rgd1nqS0B84t4fBTb9Hyi4aZmt8VK/c1OKaAFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1M6c23Gfxf/ixDdvcnlnZz4EP/8wHwYDVR0j BBgwFoAUcx22dXK0ijqG8EdaDiHhon38ao4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yjc1YmZkMC1hODZjLTRiZWItOWY5OS1hYWMzM2ZiNWU0OWYvMC83MzFEQjY3NTcy QjQ4QTNBODZGMDQ3NUEwRTIxRTFBMjdERkM2QThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3REZD NkE4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I3NWJmZDAtYTg2Yy00YmViLTlm OTktYWFjMzNmYjVlNDlmLzAvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUx QTI3REZDNkE4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOcDEAXEj4H1WTf01R07CaOMDqH9DIEbOPI /sKOh35+Ox+qUSknOeugywMlXA/IiDsOGSdknZXyX2Hu0dm/JhqVjKijblCNbWjC tSH9Ocm/zRP0WAo/Q17tTWfeNTD7aMgw8zBeCb9nLSCYyEjvFmOzkuPD5N6GJeQ4 2v8EgyPCFGn6//ueywFcA/6xnOeBCfxg7iHZPpE0zQTMZnDtyZUme49m7SzmXEB4 0fAiCbJJNOMrKp+maQPLjpzG7DixAjbFuk9N85Y+xkY0JeF/hhcs7dQOWDwaaDc8 l1jPC1xWDuNbP+0WwKVumcdsvob/NLmElfPzv5BtkNe1iAEyqao= -----END CERTIFICATE-----Generated at Sat Aug 9 20:32:21 2025 by rpki-client