$ rpki-client -vvf repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft File: 73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft (raw, json) Hash identifier: N91RKVu7nf6SMM44qHnUvKM4CYpOyt1M5OM2vY1s3O4= Subject key identifier: D5:31:22:A9:D9:99:3A:80:CC:79:5C:AF:EC:11:5B:C8:90:42:5C:8E Authority key identifier: 73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9 Certificate issuer: /CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9 Certificate serial: 2D9BBD4AB56F27F06BFAC5C2085C7089F0EB1376 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft Manifest number: F3 Signing time: Sun 27 Apr 2025 02:22:07 +0000 Manifest this update: Sun 27 Apr 2025 02:17:07 +0000 Manifest next update: Wed 30 Apr 2025 06:52:07 +0000 Files and hashes: 1: 73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl (hash: IKohOjqdLqE4M8ZoT+7Kq6oQxtCHY6Okt9Yh2YzJfPk=) 2: 3130332e35352e3235342e302f32342d3234203d3e20333936393832.roa (hash: 3GuMduWTgloUnJZtYU+5K5/Trf+zimiieU09c7Eyrv4=) 3: 3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa (hash: d/xmUChepoOogFc4Soq6uqm5Cedk9W9kH6EQCdLR+3s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 05:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:9b:bd:4a:b5:6f:27:f0:6b:fa:c5:c2:08:5c:70:89:f0:eb:13:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9 Validity Not Before: Apr 27 02:17:07 2025 GMT Not After : Apr 30 06:52:07 2025 GMT Subject: CN=D53122A9D9993A80CC795CAFEC115BC890425C8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:44:ca:01:8c:05:81:ff:0c:f4:2c:04:db:96: da:94:75:57:f9:c1:c2:26:79:bc:1c:7b:38:e0:c0: 32:45:0a:61:37:0b:50:c6:1d:55:f2:16:a0:21:d9: 25:8d:52:e6:9e:45:fa:62:fe:5e:0a:56:1d:dc:68: 97:dc:d7:f7:f5:38:67:21:6d:99:ad:2f:72:da:ac: e2:b0:d7:43:c1:42:ac:0b:30:4e:a2:14:a6:a0:49: 63:41:36:98:72:02:3a:f9:ad:95:0c:c4:1b:8d:f9: 30:35:3e:f8:c5:70:86:ed:88:63:e8:af:29:2c:36: 52:a1:12:85:17:ae:cd:01:8b:db:39:13:a4:7c:cf: a1:26:07:a1:14:78:9c:34:5a:a2:50:ae:1a:af:3e: 18:d4:bd:f2:1e:a2:35:55:14:ca:c3:ae:84:23:57: 29:55:85:cd:57:74:04:7e:14:d8:a0:8a:7e:fb:c4: 61:1a:ee:55:01:dd:24:3e:ca:ae:26:28:ad:89:09: f9:e3:e1:6d:70:a9:d2:dd:19:d4:ce:b6:1e:de:e8: 90:ff:4f:ef:2f:5f:14:07:82:ce:8b:6a:26:5b:54: 8f:68:27:da:da:86:8d:48:ab:11:60:61:c4:24:9f: dc:b2:da:5b:25:85:1b:4f:fe:d1:45:1b:b4:ef:7f: 0e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:31:22:A9:D9:99:3A:80:CC:79:5C:AF:EC:11:5B:C8:90:42:5C:8E X509v3 Authority Key Identifier: keyid:73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a0:ed:c2:79:4d:1a:32:d8:ad:89:94:20:40:1c:d2:c3:15: 65:d6:2c:ee:73:c2:87:26:4d:51:b3:49:76:1a:7f:b2:dc:9b: 88:3c:e4:c2:fa:d3:7a:b1:ae:1a:dc:91:0e:01:db:93:91:1d: f8:24:db:6c:38:76:00:38:3b:be:4c:2b:0b:43:14:52:7e:82: 84:1d:9e:35:77:25:09:18:6d:b8:d9:87:2e:f7:9b:f5:33:92: 66:e1:c1:9f:f6:6a:fc:b8:2b:a6:e9:d7:d2:fa:1b:e7:f5:b3: b7:0d:db:2c:86:74:bd:04:01:92:b6:31:41:2e:a8:19:ad:ba: b9:48:80:cf:c7:3c:3d:a3:df:24:ca:c6:77:d6:3d:5b:06:5c: eb:20:17:e6:6d:5e:f7:11:62:0d:cd:80:38:6d:a7:f4:44:82: f5:75:b7:f1:89:ac:88:c8:da:d8:4b:92:95:d7:55:b1:18:36: 82:a8:8c:a2:ae:27:aa:aa:35:0a:81:82:00:e9:11:b9:91:37: 6c:fb:43:4f:87:e6:38:f0:18:34:08:0b:63:26:b7:2f:f4:17: 7f:6e:40:ed:f5:2c:54:db:c0:e4:67:2d:ad:da:d8:50:3d:60: bd:01:9f:b3:30:9d:32:32:b0:a0:83:aa:56:5d:8f:1c:63:84: 67:cb:35:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULZu9SrVvJ/Br+sXCCFxwifDrE3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyNzlEQURCNEVCOUIzMUI4OENDQUI1RjY4M0REQTA1 NUY0RjBBOTAeFw0yNTA0MjcwMjE3MDdaFw0yNTA0MzAwNjUyMDdaMDMxMTAvBgNV BAMTKEQ1MzEyMkE5RDk5OTNBODBDQzc5NUNBRkVDMTE1QkM4OTA0MjVDOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5RMoBjAWB/wz0LATbltqUdVf5 wcImebwcezjgwDJFCmE3C1DGHVXyFqAh2SWNUuaeRfpi/l4KVh3caJfc1/f1OGch bZmtL3LarOKw10PBQqwLME6iFKagSWNBNphyAjr5rZUMxBuN+TA1PvjFcIbtiGPo ryksNlKhEoUXrs0Bi9s5E6R8z6EmB6EUeJw0WqJQrhqvPhjUvfIeojVVFMrDroQj VylVhc1XdAR+FNigin77xGEa7lUB3SQ+yq4mKK2JCfnj4W1wqdLdGdTOth7e6JD/ T+8vXxQHgs6LaiZbVI9oJ9raho1IqxFgYcQkn9yy2lslhRtP/tFFG7Tvfw7/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1TEiqdmZOoDMeVyv7BFbyJBCXI4wHwYDVR0j BBgwFoAUcyedrbTrmzG4jMq19oPdoFX08KkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzYzNmE0Ni0zOGZmLTQ0OTYtOTcyMS04YzAzY2YwNDYzNDUvMC83MzI3OURBREI0 RUI5QjMxQjg4Q0NBQjVGNjgzRERBMDU1RjRGMEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMyNzlEQURCNEVCOUIzMUI4OENDQUI1RjY4M0REQTA1NUY0 RjBBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M2MzZhNDYtMzhmZi00NDk2LTk3 MjEtOGMwM2NmMDQ2MzQ1LzAvNzMyNzlEQURCNEVCOUIzMUI4OENDQUI1RjY4M0RE QTA1NUY0RjBBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEug7cJ5TRoy2K2JlCBAHNLDFWXWLO5zwocm TVGzSXYaf7Lcm4g85ML603qxrhrckQ4B25ORHfgk22w4dgA4O75MKwtDFFJ+goQd njV3JQkYbbjZhy73m/UzkmbhwZ/2avy4K6bp19L6G+f1s7cN2yyGdL0EAZK2MUEu qBmturlIgM/HPD2j3yTKxnfWPVsGXOsgF+ZtXvcRYg3NgDhtp/REgvV1t/GJrIjI 2thLkpXXVbEYNoKojKKuJ6qqNQqBggDpEbmRN2z7Q0+H5jjwGDQIC2Mmty/0F39u QO31LFTbwORnLa3a2FA9YL0Bn7MwnTIysKCDqlZdjxxjhGfLNWU= -----END CERTIFICATE-----Generated at Sun Apr 27 05:09:45 2025 by rpki-client