$ rpki-client -vvf repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft File: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft (raw, json) Hash identifier: I0sJwR1jbUT5VIfkuP50u1sJXWCf9p8W6ghRZQOy9R8= Subject key identifier: 60:84:F7:B8:2A:43:86:A6:7F:C6:60:67:9C:88:D4:72:FB:D0:70:3E Authority key identifier: 73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 Certificate issuer: /CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Certificate serial: 72271A0E4FC87D331BABE5AA62C24DC9F415510F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft Manifest number: AF Signing time: Tue 05 Aug 2025 23:51:17 +0000 Manifest this update: Tue 05 Aug 2025 23:46:17 +0000 Manifest next update: Sat 09 Aug 2025 08:26:17 +0000 Files and hashes: 1: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (hash: bCp+hfr7ROEtQWyvQHaGucdWFI7N+d4ip6n9SavuoOk=) 2: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl (hash: ZqqWwdHLWBv/jTvhD3b54TL8E0szH4YbOLqlHEqJbwU=) 3: 3135372e36362e3137312e302f32342d3234203d3e20313532373737.roa (hash: uOA4jTwlkcqlsjP32WwaK900NFV6wePG9q2fIgGqlJw=) 4: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (hash: mWn5DPCiekSxGNB8RumBKf5syIxB4d7+KUn6ZNJHctk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 08:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:27:1a:0e:4f:c8:7d:33:1b:ab:e5:aa:62:c2:4d:c9:f4:15:51:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Validity Not Before: Aug 5 23:46:17 2025 GMT Not After : Aug 9 08:26:17 2025 GMT Subject: CN=6084F7B82A4386A67FC660679C88D472FBD0703E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:db:74:aa:cd:6b:ee:b0:a5:3c:2a:14:2a:35: 66:b5:9e:ea:96:05:70:16:80:72:33:db:09:8e:c6: 3f:37:66:a4:49:e5:81:cf:af:28:8b:bc:76:6f:93: 1d:6a:4e:f5:45:36:5a:0f:72:9c:44:2d:9a:d8:9d: 62:8e:41:40:0d:86:da:ea:b7:03:2a:a9:fd:1c:3e: e9:63:24:97:72:9d:f2:a9:12:a3:00:b8:ca:af:e1: 39:21:ae:89:e7:af:b0:93:3b:7f:45:05:d6:58:9b: 91:7a:a0:f0:4f:10:ae:2f:53:3b:c2:b2:c3:32:cc: 20:69:a8:15:e9:98:90:fb:50:08:a9:15:eb:64:14: ee:35:57:c7:3e:fb:17:eb:9f:7a:1c:b0:f2:d0:3d: f3:ab:df:78:6a:a8:b5:43:29:19:5b:50:f2:17:ad: 99:3a:7a:43:6b:47:6f:85:90:64:2e:5d:36:a9:83: 4b:af:6b:9b:7a:a5:8c:84:26:c8:93:2d:94:96:9e: 77:98:3c:8a:1e:b2:bb:e9:9a:18:e8:90:67:ab:e2: c3:b1:aa:fd:81:76:30:02:98:da:b4:e9:df:23:32: 58:b5:67:3a:b2:5d:65:c7:d3:0f:a3:2e:43:13:4f: 0a:94:b4:be:a9:a8:78:9f:08:91:9d:95:ca:d6:2a: 68:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:84:F7:B8:2A:43:86:A6:7F:C6:60:67:9C:88:D4:72:FB:D0:70:3E X509v3 Authority Key Identifier: keyid:73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:4c:a9:0a:d4:93:66:71:21:44:c3:ad:ee:78:0f:8f:91:8a: 77:26:44:94:cf:a4:10:79:46:86:69:9e:54:29:3b:23:6d:ba: b3:df:36:0d:ee:56:c6:45:3d:65:86:56:d9:f7:d1:01:52:a6: 79:4b:4e:e9:fb:d2:e8:11:4d:51:4d:51:15:02:9c:50:1d:58: 86:02:d5:1c:3e:40:fa:57:99:c1:10:81:87:e5:a7:76:a1:31: f9:b5:82:b6:53:b2:88:80:04:e8:a6:44:d4:b2:7b:84:a8:eb: 12:6d:0f:41:97:fd:19:ef:9b:17:96:9f:25:cc:08:84:05:93: 56:3b:6c:f9:36:6b:19:38:84:be:4e:fc:84:8a:4f:2b:a2:c8: 9f:9b:70:35:1c:94:38:42:8b:57:db:ed:a7:8f:79:e7:10:95: 03:a7:76:a5:ac:a7:53:92:0b:52:28:42:77:ed:c0:66:41:0b: ab:b2:4f:40:95:07:38:04:18:ce:40:40:9d:d5:63:fe:f3:94: 85:7a:53:62:31:e6:4b:91:a3:03:da:e8:37:d1:3d:f7:b5:c2: 56:5f:c6:a1:6a:b1:a5:23:a5:bd:af:da:5f:fd:ef:d2:c2:df: 37:b4:5d:c5:7d:48:41:70:48:2d:cc:97:b3:73:17:57:dc:58: 2c:40:c9:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcicaDk/IfTMbq+WqYsJNyfQVUQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4 N0UxOUFCNjAeFw0yNTA4MDUyMzQ2MTdaFw0yNTA4MDkwODI2MTdaMDMxMTAvBgNV BAMTKDYwODRGN0I4MkE0Mzg2QTY3RkM2NjA2NzlDODhENDcyRkJEMDcwM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV23SqzWvusKU8KhQqNWa1nuqW BXAWgHIz2wmOxj83ZqRJ5YHPryiLvHZvkx1qTvVFNloPcpxELZrYnWKOQUANhtrq twMqqf0cPuljJJdynfKpEqMAuMqv4Tkhronnr7CTO39FBdZYm5F6oPBPEK4vUzvC ssMyzCBpqBXpmJD7UAipFetkFO41V8c++xfrn3ocsPLQPfOr33hqqLVDKRlbUPIX rZk6ekNrR2+FkGQuXTapg0uva5t6pYyEJsiTLZSWnneYPIoesrvpmhjokGer4sOx qv2BdjACmNq06d8jMli1ZzqyXWXH0w+jLkMTTwqUtL6pqHifCJGdlcrWKmjjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYIT3uCpDhqZ/xmBnnIjUcvvQcD4wHwYDVR0j BBgwFoAUc6+UXv9eqdHv3CYX+kNDDofhmrYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTQ4MTYwNi1kNWZkLTQxOTYtYWJjZC01OGU2Yzc2MjQzYzUvMC83M0FGOTQ1RUZG NUVBOUQxRUZEQzI2MTdGQTQzNDMwRTg3RTE5QUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4N0Ux OUFCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU0ODE2MDYtZDVmZC00MTk2LWFi Y2QtNThlNmM3NjI0M2M1LzAvNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQz MEU4N0UxOUFCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5MqQrUk2ZxIUTDre54D4+RincmRJTPpBB5 RoZpnlQpOyNturPfNg3uVsZFPWWGVtn30QFSpnlLTun70ugRTVFNURUCnFAdWIYC 1Rw+QPpXmcEQgYflp3ahMfm1grZTsoiABOimRNSye4So6xJtD0GX/RnvmxeWnyXM CIQFk1Y7bPk2axk4hL5O/ISKTyuiyJ+bcDUclDhCi1fb7aePeecQlQOndqWsp1OS C1IoQnftwGZBC6uyT0CVBzgEGM5AQJ3VY/7zlIV6U2Ix5kuRowPa6DfRPfe1wlZf xqFqsaUjpb2v2l/979LC3ze0XcV9SEFwSC3Ml7NzF1fcWCxAycw= -----END CERTIFICATE-----Generated at Thu Aug 7 04:24:12 2025 by rpki-client