$ rpki-client -vvf repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft File: 73B96F5AC43A4212760D6629FB36B21B2E801D90.mft (raw, json) Hash identifier: FxF8dC3vPBjgIEnG3NawJ2auKcbrFtZr6ZC7pZQlI7o= Subject key identifier: C6:3C:9A:A8:1E:3D:5F:D8:15:8C:8F:11:2A:AF:CA:4B:2C:CF:BF:6E Authority key identifier: 73:B9:6F:5A:C4:3A:42:12:76:0D:66:29:FB:36:B2:1B:2E:80:1D:90 Certificate issuer: /CN=73B96F5AC43A4212760D6629FB36B21B2E801D90 Certificate serial: 0701E83F583A6190D50F5C6EED9BF2316A928973 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft Manifest number: 0305 Signing time: Mon 03 Nov 2025 06:41:36 +0000 Manifest this update: Mon 03 Nov 2025 06:36:36 +0000 Manifest next update: Thu 06 Nov 2025 14:16:36 +0000 Files and hashes: 1: 73B96F5AC43A4212760D6629FB36B21B2E801D90.crl (hash: 9DWUj2Og7gOeb+S6sfMTIqpmzeRwnCSSNKaq7qm+PHQ=) 2: 3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa (hash: oudTGBDalRCfCvgYs+K0jORqoSv3XWEHAn8WI/m8myE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.crl rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 14:16:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:01:e8:3f:58:3a:61:90:d5:0f:5c:6e:ed:9b:f2:31:6a:92:89:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73B96F5AC43A4212760D6629FB36B21B2E801D90 Validity Not Before: Nov 3 06:36:36 2025 GMT Not After : Nov 6 14:16:36 2025 GMT Subject: CN=C63C9AA81E3D5FD8158C8F112AAFCA4B2CCFBF6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4d:b5:d6:7b:9f:ec:1a:3c:08:2a:03:6b:40: eb:0d:f4:6f:cc:2a:d9:f1:5d:9c:11:d5:da:58:4a: 85:6e:32:9f:46:fe:10:f1:b8:ef:cd:57:e2:9f:50: 62:06:ca:e9:51:ce:64:bf:eb:33:d7:da:5e:4f:5f: 51:d0:03:bb:a6:68:30:75:c2:a7:f4:85:85:de:4e: 12:24:52:17:77:5c:fa:c2:1c:c4:71:59:ec:29:78: 29:6f:6c:00:15:89:7e:49:b0:1a:c9:5a:02:f6:e4: 66:d3:79:b4:3b:9c:fa:79:03:48:70:5e:73:c8:09: 0a:9e:db:85:18:f0:19:48:f6:54:c6:8a:01:a8:96: c6:cd:a9:06:71:7e:4d:6e:22:c0:ae:fa:d4:40:fe: 3a:d4:4d:35:e2:4a:27:a1:a1:c5:ff:09:be:4d:de: 45:e4:bd:f6:38:52:0b:5f:13:94:7b:58:ff:bb:35: a7:30:f6:fa:a9:d4:99:3a:68:f4:d5:53:3a:8c:d8: ea:e9:5a:55:2b:99:3d:be:f7:88:68:08:db:3a:85: fa:38:5d:0a:61:4a:e8:a4:0d:ae:a3:ff:59:d0:2a: 1d:e2:b3:e7:ef:a1:0a:47:15:37:de:c2:77:f1:e8: b0:a8:e1:cb:07:f5:91:60:0e:8a:b9:bf:e8:c5:6f: 6b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3C:9A:A8:1E:3D:5F:D8:15:8C:8F:11:2A:AF:CA:4B:2C:CF:BF:6E X509v3 Authority Key Identifier: keyid:73:B9:6F:5A:C4:3A:42:12:76:0D:66:29:FB:36:B2:1B:2E:80:1D:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:6c:7e:5c:3f:3d:6a:6c:65:de:a1:83:10:73:6d:b3:b7:bd: c0:12:5f:97:0f:f9:26:f1:50:2c:a9:50:67:85:a7:f1:ff:cf: 46:33:68:65:ac:fb:cf:62:3c:94:a3:6a:54:07:8f:ec:22:39: 8e:f0:fb:d0:03:7b:42:c5:3b:3d:8a:57:ac:9f:7b:4f:48:71: d2:12:27:a8:94:70:92:42:35:c7:0a:5d:b4:88:99:d7:17:f5: 76:23:14:bf:68:75:18:34:1d:96:f8:54:a4:20:5e:09:de:6b: 20:d2:6e:03:d5:9f:11:d3:d7:a1:83:95:62:0c:98:f0:7a:dd: 6c:92:fa:23:39:1c:45:c5:cc:fa:55:b3:95:fa:71:72:26:4b: 12:da:37:e9:8d:d0:7b:ef:7e:f1:2b:19:03:7a:0b:2f:3d:50: b0:f1:70:30:ed:39:09:46:34:a5:2a:f3:e9:a9:e9:f3:2e:bf: e8:66:2d:6a:3f:af:a6:37:51:8c:7b:3d:7f:01:ab:ec:6b:0b: 7d:fd:66:e3:e8:56:f1:c5:f7:32:0a:c2:7c:41:16:40:7d:1e: ae:13:4c:79:4c:63:7b:fe:13:59:37:16:bf:6c:1c:0a:44:dc: 31:c7:b1:cc:1c:0b:0b:e9:57:b7:21:ae:95:85:ff:01:ec:5a: 09:cd:19:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBwHoP1g6YZDVD1xu7ZvyMWqSiXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNCOTZGNUFDNDNBNDIxMjc2MEQ2NjI5RkIzNkIyMUIy RTgwMUQ5MDAeFw0yNTExMDMwNjM2MzZaFw0yNTExMDYxNDE2MzZaMDMxMTAvBgNV BAMTKEM2M0M5QUE4MUUzRDVGRDgxNThDOEYxMTJBQUZDQTRCMkNDRkJGNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgTbXWe5/sGjwIKgNrQOsN9G/M KtnxXZwR1dpYSoVuMp9G/hDxuO/NV+KfUGIGyulRzmS/6zPX2l5PX1HQA7umaDB1 wqf0hYXeThIkUhd3XPrCHMRxWewpeClvbAAViX5JsBrJWgL25GbTebQ7nPp5A0hw XnPICQqe24UY8BlI9lTGigGolsbNqQZxfk1uIsCu+tRA/jrUTTXiSiehocX/Cb5N 3kXkvfY4UgtfE5R7WP+7Nacw9vqp1Jk6aPTVUzqM2OrpWlUrmT2+94hoCNs6hfo4 XQphSuikDa6j/1nQKh3is+fvoQpHFTfewnfx6LCo4csH9ZFgDoq5v+jFb2uDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxjyaqB49X9gVjI8RKq/KSyzPv24wHwYDVR0j BBgwFoAUc7lvWsQ6QhJ2DWYp+zayGy6AHZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2JlYTgxZC04NWFjLTQwYTUtYTdmNS0zZmEzNjJiMTdiY2IvMC83M0I5NkY1QUM0 M0E0MjEyNzYwRDY2MjlGQjM2QjIxQjJFODAxRDkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNCOTZGNUFDNDNBNDIxMjc2MEQ2NjI5RkIzNkIyMUIyRTgw MUQ5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNiZWE4MWQtODVhYy00MGE1LWE3 ZjUtM2ZhMzYyYjE3YmNiLzAvNzNCOTZGNUFDNDNBNDIxMjc2MEQ2NjI5RkIzNkIy MUIyRTgwMUQ5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZsflw/PWpsZd6hgxBzbbO3vcASX5cP+Sbx UCypUGeFp/H/z0YzaGWs+89iPJSjalQHj+wiOY7w+9ADe0LFOz2KV6yfe09IcdIS J6iUcJJCNccKXbSImdcX9XYjFL9odRg0HZb4VKQgXgneayDSbgPVnxHT16GDlWIM mPB63WyS+iM5HEXFzPpVs5X6cXImSxLaN+mN0HvvfvErGQN6Cy89ULDxcDDtOQlG NKUq8+mp6fMuv+hmLWo/r6Y3UYx7PX8Bq+xrC339ZuPoVvHF9zIKwnxBFkB9Hq4T THlMY3v+E1k3Fr9sHApE3DHHscwcCwvpV7chrpWF/wHsWgnNGTw= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:36 2025 by rpki-client