$ rpki-client -vvf repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft File: 73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft (raw, json) Hash identifier: u3v2/aCt4XXBWQS36Y1D3IgY+xAKy27JGMEkP7xQ3Yk= Subject key identifier: 57:AD:55:43:B3:B4:C5:9A:8E:94:00:8C:07:E5:E0:FB:7C:0D:B4:5D Authority key identifier: 73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48 Certificate issuer: /CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448 Certificate serial: 6907D16330A29E5808D79E1E1EA1DFF8F8497D31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft Manifest number: 025A Signing time: Wed 06 Aug 2025 10:00:44 +0000 Manifest this update: Wed 06 Aug 2025 09:55:44 +0000 Manifest next update: Sat 09 Aug 2025 16:50:44 +0000 Files and hashes: 1: 323430353a646238303a3a2f33322d3332203d3e20313335343539.roa (hash: hKo6E/o6Gy5GtrWGlJyRHI/i/XIPoeDrySJ7ORVFIBM=) 2: 73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl (hash: Uqj0DGRKsQdEQMdkd6/88iXAcFKUQxD6mo2QsHRexl0=) 3: 3130332e36382e302e302f32322d3232203d3e20313335343539.roa (hash: hj0aLvHnsN2pt1jXNXHldeHD4msnEKkoRErUA/qhVzM=) 4: 3130332e36382e302e302f32342d3234203d3e20313335343539.roa (hash: TaonUeAdui33PweH5NiEAK5mmqp9ijfVBuT5VSZ1PtQ=) 5: 3130332e36382e312e302f32342d3234203d3e20313335343539.roa (hash: ySL0w18ZFEonAAh3PhTuUdA6gYBAA6WRoBXrmZ+L+Js=) 6: 3130332e36382e332e302f32342d3234203d3e20313335343539.roa (hash: GmT8ZeaySfqvjT7mO5rlRn1ljJIIsTYQ7Uu5Pp76Rgs=) 7: 3130332e36382e302e302f32332d3233203d3e20313335343539.roa (hash: HSyTIrpAeoepgTw2Qf4xN4feVn0VVvW9T2xruJUxPUQ=) 8: 3130332e36382e322e302f32342d3234203d3e20313530323635.roa (hash: ylhRyjN9O7aHn/zjEzn07ubViFMsJpvDX8p87PLz1EI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 16:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:07:d1:63:30:a2:9e:58:08:d7:9e:1e:1e:a1:df:f8:f8:49:7d:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448 Validity Not Before: Aug 6 09:55:44 2025 GMT Not After : Aug 9 16:50:44 2025 GMT Subject: CN=57AD5543B3B4C59A8E94008C07E5E0FB7C0DB45D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b6:0b:1f:2b:e7:d7:e9:15:17:54:30:78:bc: a6:80:68:cb:cd:03:7f:a1:db:2d:08:48:fe:ec:fa: 1f:3b:38:7d:b1:5d:c4:cc:36:fe:24:a6:7e:36:2e: b5:50:c3:f3:2a:ac:90:da:03:94:a6:56:21:0d:90: fb:94:2a:88:14:0c:99:bb:4a:d9:94:07:6d:89:62: e1:55:08:1d:e5:32:9f:f4:b3:07:61:44:d3:10:29: 50:5f:a2:aa:10:24:3c:36:60:be:60:dd:21:de:73: ac:ea:e1:25:ce:db:9c:00:84:96:d4:0d:14:1e:34: d9:89:95:79:8f:3b:ad:13:61:6f:99:3e:23:ea:2e: 14:8a:e4:cd:96:c9:28:a8:f2:c1:d6:ef:ba:92:b2: 9c:12:ad:31:89:65:09:d9:20:3a:aa:69:df:c1:c6: 5f:c0:00:e8:7b:f2:16:a7:12:47:da:c9:09:3b:75: 92:37:31:69:62:8e:02:7e:5d:ed:be:9a:c5:fd:3c: e2:d2:d6:9b:0a:dd:c3:14:04:dd:eb:73:e9:85:e7: 16:d7:6a:f9:6c:52:1a:46:24:21:71:c3:22:af:b4: 7f:bb:39:d2:6c:25:d1:f7:9c:4e:e6:21:db:26:21: 59:ee:e2:ba:64:c6:5c:33:87:5c:0e:4a:e3:50:af: 99:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AD:55:43:B3:B4:C5:9A:8E:94:00:8C:07:E5:E0:FB:7C:0D:B4:5D X509v3 Authority Key Identifier: keyid:73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:69:9b:29:81:03:03:ca:1e:5a:73:89:a2:68:53:55:9f:f4: c3:73:82:22:16:5c:a1:9e:28:bb:98:94:e3:9e:40:f9:ce:30: 87:6a:cd:2f:53:04:34:b3:97:25:74:de:68:e0:90:15:05:4a: 72:e7:d7:17:36:d0:e5:11:b1:b7:76:ec:ee:b1:c1:8d:c7:87: e0:ad:ae:ca:ca:66:6b:04:9f:55:7b:b4:41:51:66:ac:34:bc: fa:d4:1d:89:8e:1d:b8:97:48:c4:77:c4:40:fc:cd:f0:20:84: 0b:29:8d:90:9d:80:f6:a0:b5:be:80:5b:da:a0:0e:de:98:86: 17:fc:8b:cc:9d:12:63:83:79:44:13:f6:91:52:6f:a6:98:22: 46:da:6f:04:f5:0e:db:c8:80:84:1b:cc:de:01:7a:2c:c9:43: 7f:4d:58:47:35:26:00:e5:2f:b9:94:4b:5b:dd:b6:1c:10:7d: b4:8f:a1:3d:aa:eb:fd:b3:e9:8a:6f:06:b2:93:c3:95:9c:90: 9e:22:64:80:b1:15:23:fd:e1:7d:94:ca:8a:08:e6:17:e7:b9: 5e:44:4b:8f:0c:15:8e:ef:c4:00:f1:5b:c7:0c:e9:12:f9:9c: a8:76:80:6a:a3:50:fd:f8:a1:78:c1:85:41:16:63:5a:a3:16: 0f:f8:bc:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaQfRYzCinlgI154eHqHf+PhJfTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEw RTMxMDQ0ODAeFw0yNTA4MDYwOTU1NDRaFw0yNTA4MDkxNjUwNDRaMDMxMTAvBgNV BAMTKDU3QUQ1NTQzQjNCNEM1OUE4RTk0MDA4QzA3RTVFMEZCN0MwREI0NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5tgsfK+fX6RUXVDB4vKaAaMvN A3+h2y0ISP7s+h87OH2xXcTMNv4kpn42LrVQw/MqrJDaA5SmViENkPuUKogUDJm7 StmUB22JYuFVCB3lMp/0swdhRNMQKVBfoqoQJDw2YL5g3SHec6zq4SXO25wAhJbU DRQeNNmJlXmPO60TYW+ZPiPqLhSK5M2WySio8sHW77qSspwSrTGJZQnZIDqqad/B xl/AAOh78hanEkfayQk7dZI3MWlijgJ+Xe2+msX9POLS1psK3cMUBN3rc+mF5xbX avlsUhpGJCFxwyKvtH+7OdJsJdH3nE7mIdsmIVnu4rpkxlwzh1wOSuNQr5mjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV61VQ7O0xZqOlACMB+Xg+3wNtF0wHwYDVR0j BBgwFoAUc70mbu8TE27U9OlqtJhLWg4xBEgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTk3ZGJjNi05Mzc0LTQyZTItYTNkMC04NzllZDZhMTkxOTYvMC83M0JEMjY2RUVG MTMxMzZFRDRGNEU5NkFCNDk4NEI1QTBFMzEwNDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEwRTMx MDQ0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU5N2RiYzYtOTM3NC00MmUyLWEz ZDAtODc5ZWQ2YTE5MTk2LzAvNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRC NUEwRTMxMDQ0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9pmymBAwPKHlpziaJoU1Wf9MNzgiIWXKGe KLuYlOOeQPnOMIdqzS9TBDSzlyV03mjgkBUFSnLn1xc20OURsbd27O6xwY3Hh+Ct rsrKZmsEn1V7tEFRZqw0vPrUHYmOHbiXSMR3xED8zfAghAspjZCdgPagtb6AW9qg Dt6Yhhf8i8ydEmODeUQT9pFSb6aYIkbabwT1DtvIgIQbzN4BeizJQ39NWEc1JgDl L7mUS1vdthwQfbSPoT2q6/2z6YpvBrKTw5WckJ4iZICxFSP94X2UyooI5hfnuV5E S48MFY7vxADxW8cM6RL5nKh2gGqjUP34oXjBhUEWY1qjFg/4vIk= -----END CERTIFICATE-----Generated at Thu Aug 7 04:25:06 2025 by rpki-client