$ rpki-client -vvf repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft File: 73B96F5AC43A4212760D6629FB36B21B2E801D90.mft (raw, json) Hash identifier: XaL4citIkWBvNG4DTz8O0Y9ZqHylORFI8usx9VuR+ks= Subject key identifier: 1A:2E:CD:67:73:90:51:F8:C5:5A:2D:54:36:52:1D:A7:8D:E2:6B:FD Authority key identifier: 73:B9:6F:5A:C4:3A:42:12:76:0D:66:29:FB:36:B2:1B:2E:80:1D:90 Certificate issuer: /CN=73B96F5AC43A4212760D6629FB36B21B2E801D90 Certificate serial: 01A09B02C2775747DB0659D191B51904C668D265 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft Manifest number: 02C7 Signing time: Sun 15 Jun 2025 23:01:36 +0000 Manifest this update: Sun 15 Jun 2025 22:56:36 +0000 Manifest next update: Thu 19 Jun 2025 04:57:36 +0000 Files and hashes: 1: 3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa (hash: YvBhLx83rLWHTDBD8XCBDSfZ45/xJzaFaVpjS5h6w+Q=) 2: 73B96F5AC43A4212760D6629FB36B21B2E801D90.crl (hash: XoiSKSjNQCYOAE0rPtdOR/4JB+Qj8q6kDGk7Y4Rkcjw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.crl rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 04:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:9b:02:c2:77:57:47:db:06:59:d1:91:b5:19:04:c6:68:d2:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73B96F5AC43A4212760D6629FB36B21B2E801D90 Validity Not Before: Jun 15 22:56:36 2025 GMT Not After : Jun 19 04:57:36 2025 GMT Subject: CN=1A2ECD67739051F8C55A2D5436521DA78DE26BFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3b:b6:cf:e0:bc:74:c6:0a:17:b9:b8:f6:7d: 13:50:f4:91:dc:7e:60:13:2e:bd:2e:fb:8e:cc:58: ed:49:84:38:ac:a1:11:a8:01:34:ce:7d:d6:af:3a: 51:2f:64:0b:e7:0c:a4:fa:6b:65:b4:e3:29:68:d8: 9b:29:98:1d:a0:b7:08:a5:95:e5:5e:be:95:e5:ee: a3:64:6d:b8:d7:57:68:ce:30:ea:0d:4b:74:b3:af: 6d:6d:1f:55:c2:72:83:4d:aa:c1:06:cd:db:97:59: 71:51:ea:16:da:9a:e2:6d:e2:ab:f7:be:7a:76:c9: 08:ad:d4:4d:88:fe:7f:ef:a4:19:b1:72:d4:96:f8: 6c:03:80:6b:cf:1f:00:42:74:65:1c:7f:d8:0b:60: 85:05:76:28:71:2c:82:31:04:ce:92:76:b5:20:88: 26:8d:ae:0d:ea:3a:6a:ea:db:98:19:8f:4a:fd:a5: d3:99:9b:14:98:c7:e6:39:63:44:84:a9:65:da:ee: 70:95:f6:eb:da:d6:0c:85:05:7b:f7:96:ce:f3:d5: 3c:6d:82:7b:af:ca:b0:07:3d:a9:c6:c4:36:69:e8: 3d:d7:8e:f3:ef:e1:d1:52:1f:9e:c9:a5:18:f4:80: 1c:ca:19:84:89:0b:99:eb:5a:0f:59:4f:6e:d0:7b: 78:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2E:CD:67:73:90:51:F8:C5:5A:2D:54:36:52:1D:A7:8D:E2:6B:FD X509v3 Authority Key Identifier: keyid:73:B9:6F:5A:C4:3A:42:12:76:0D:66:29:FB:36:B2:1B:2E:80:1D:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:99:ac:1a:35:3c:f8:1c:cb:fc:d4:fc:3c:dd:d4:8c:46:59: a7:87:ce:6d:a7:74:92:37:70:3c:39:08:68:2b:3f:78:db:1c: 66:a6:11:ac:e3:47:a3:ad:66:10:d3:74:da:63:1f:81:ab:db: 84:c4:09:ce:ad:9a:13:8a:6c:8b:e2:be:15:e5:86:80:4f:b1: e8:5c:a3:c1:c1:a2:8e:0a:54:df:12:71:59:e8:91:ce:60:b1: 8a:4d:fa:d2:93:39:98:a7:66:83:71:af:8c:ee:0b:04:c4:e1: 82:59:60:7c:17:83:60:d6:14:f0:ad:58:84:6d:dc:33:b2:d7: b0:ef:97:a9:d3:f0:09:62:83:11:04:01:89:eb:6f:3c:43:b5: 57:89:b7:c5:f6:58:6b:f7:bd:1e:44:59:c7:a8:e5:ef:ce:3e: ee:c8:b7:e8:40:6f:e9:52:a8:85:69:54:61:cb:ea:b7:4e:05: e2:80:64:63:15:af:c1:20:87:1c:fd:e1:65:3e:7e:c6:91:52: e1:18:7f:d6:ef:4b:ed:20:23:1c:8d:7d:bc:3e:bd:88:7e:f5: 8f:ab:5b:bc:30:07:be:e8:fb:c0:d7:ce:e5:00:69:45:d4:d6: d8:6b:03:2e:da:0a:ee:67:3b:87:93:61:14:3c:69:3e:46:11: a4:a5:a0:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAaCbAsJ3V0fbBlnRkbUZBMZo0mUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNCOTZGNUFDNDNBNDIxMjc2MEQ2NjI5RkIzNkIyMUIy RTgwMUQ5MDAeFw0yNTA2MTUyMjU2MzZaFw0yNTA2MTkwNDU3MzZaMDMxMTAvBgNV BAMTKDFBMkVDRDY3NzM5MDUxRjhDNTVBMkQ1NDM2NTIxREE3OERFMjZCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBO7bP4Lx0xgoXubj2fRNQ9JHc fmATLr0u+47MWO1JhDisoRGoATTOfdavOlEvZAvnDKT6a2W04ylo2JspmB2gtwil leVevpXl7qNkbbjXV2jOMOoNS3Szr21tH1XCcoNNqsEGzduXWXFR6hbamuJt4qv3 vnp2yQit1E2I/n/vpBmxctSW+GwDgGvPHwBCdGUcf9gLYIUFdihxLIIxBM6SdrUg iCaNrg3qOmrq25gZj0r9pdOZmxSYx+Y5Y0SEqWXa7nCV9uva1gyFBXv3ls7z1Txt gnuvyrAHPanGxDZp6D3XjvPv4dFSH57JpRj0gBzKGYSJC5nrWg9ZT27Qe3ipAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGi7NZ3OQUfjFWi1UNlIdp43ia/0wHwYDVR0j BBgwFoAUc7lvWsQ6QhJ2DWYp+zayGy6AHZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2JlYTgxZC04NWFjLTQwYTUtYTdmNS0zZmEzNjJiMTdiY2IvMC83M0I5NkY1QUM0 M0E0MjEyNzYwRDY2MjlGQjM2QjIxQjJFODAxRDkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNCOTZGNUFDNDNBNDIxMjc2MEQ2NjI5RkIzNkIyMUIyRTgw MUQ5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNiZWE4MWQtODVhYy00MGE1LWE3 ZjUtM2ZhMzYyYjE3YmNiLzAvNzNCOTZGNUFDNDNBNDIxMjc2MEQ2NjI5RkIzNkIy MUIyRTgwMUQ5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqZrBo1PPgcy/zU/Dzd1IxGWaeHzm2ndJI3 cDw5CGgrP3jbHGamEazjR6OtZhDTdNpjH4Gr24TECc6tmhOKbIvivhXlhoBPsehc o8HBoo4KVN8ScVnokc5gsYpN+tKTOZinZoNxr4zuCwTE4YJZYHwXg2DWFPCtWIRt 3DOy17Dvl6nT8AligxEEAYnrbzxDtVeJt8X2WGv3vR5EWceo5e/OPu7It+hAb+lS qIVpVGHL6rdOBeKAZGMVr8Eghxz94WU+fsaRUuEYf9bvS+0gIxyNfbw+vYh+9Y+r W7wwB77o+8DXzuUAaUXU1thrAy7aCu5nO4eTYRQ8aT5GEaSloK0= -----END CERTIFICATE-----Generated at Tue Jun 17 00:16:01 2025 by rpki-client