$ rpki-client -vvf repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft File: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft (raw, json) Hash identifier: wUwhIgK8WjPQQmbLOTLxEAhnm82el9lC+mJXiHidbOw= Subject key identifier: 00:DB:03:E4:00:BE:35:9F:F2:60:72:1A:EB:27:DB:3C:0B:0D:56:17 Authority key identifier: 73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 Certificate issuer: /CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Certificate serial: 2CD9C67A2CFA66628F1734B9F8B4DEA56F5DF0E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft Manifest number: D7 Signing time: Tue 04 Nov 2025 10:31:16 +0000 Manifest this update: Tue 04 Nov 2025 10:26:16 +0000 Manifest next update: Fri 07 Nov 2025 21:00:16 +0000 Files and hashes: 1: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (hash: mWn5DPCiekSxGNB8RumBKf5syIxB4d7+KUn6ZNJHctk=) 2: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl (hash: blYkKrlOQ6MTrK1ik0cY0ac9wjlzgeppuIAKcNvTodo=) 3: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (hash: bCp+hfr7ROEtQWyvQHaGucdWFI7N+d4ip6n9SavuoOk=) 4: 3135372e36362e3137312e302f32342d3234203d3e20313532373737.roa (hash: uOA4jTwlkcqlsjP32WwaK900NFV6wePG9q2fIgGqlJw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 21:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d9:c6:7a:2c:fa:66:62:8f:17:34:b9:f8:b4:de:a5:6f:5d:f0:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Validity Not Before: Nov 4 10:26:16 2025 GMT Not After : Nov 7 21:00:16 2025 GMT Subject: CN=00DB03E400BE359FF260721AEB27DB3C0B0D5617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4e:81:5a:bb:87:49:f6:10:be:16:b9:b2:1d: 7d:50:2e:07:61:ce:77:b0:6f:8e:4e:c3:87:33:f1: ee:25:f5:3e:bb:ab:24:58:c0:2f:34:b8:3d:b2:2e: 18:cf:0f:0f:51:21:43:c0:39:7a:da:a7:93:f5:ec: 7f:7f:36:20:88:1e:33:eb:ee:13:4f:0f:1e:01:4b: 93:16:d4:bc:b4:81:14:1a:75:f5:48:db:31:41:91: 70:ad:87:27:cb:fa:82:1e:94:27:67:7f:27:e7:00: 42:40:a9:be:fb:32:0e:54:27:18:82:b1:21:4e:f6: 24:bd:57:c8:8d:aa:f0:c8:5f:5f:78:e1:53:da:2e: 3e:59:06:e2:ef:f3:73:65:b4:ca:de:3e:05:05:4c: 48:dd:e6:60:3a:8d:aa:07:4b:63:df:19:53:49:69: 22:b7:0e:d9:0e:a7:5f:c4:4f:05:4c:ff:a3:78:77: 28:74:53:ce:71:2e:2c:ee:61:56:f2:71:66:ea:55: 48:ae:8b:d9:28:56:11:1d:12:a6:8f:80:82:31:37: 49:b0:e0:1b:0d:15:64:4e:2b:33:8e:cd:7b:55:f4: 24:fa:6c:5d:c3:93:c3:3a:e7:16:5f:8c:3d:77:03: b4:5e:d6:3c:f2:f3:78:c8:41:29:ab:0b:f7:4c:99: 81:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DB:03:E4:00:BE:35:9F:F2:60:72:1A:EB:27:DB:3C:0B:0D:56:17 X509v3 Authority Key Identifier: keyid:73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ba:73:c6:87:e6:3b:3f:6b:39:c1:36:37:a3:b2:dc:31:00: 2a:5b:91:b9:d1:f0:b6:03:4b:e7:44:30:77:bb:50:6e:cd:71: 0c:a4:7b:1a:af:e8:77:5b:c4:26:78:29:c1:33:ec:4d:ad:e1: 9f:b1:4b:43:90:da:e9:70:29:01:f5:f2:b1:7c:84:0c:4a:d8: 17:8e:89:4c:8d:0b:9c:1d:29:6f:50:52:03:61:77:b5:75:93: 71:ec:2e:07:ac:55:83:e6:22:d3:b0:6c:3b:32:b7:30:16:95: 7b:f8:60:9c:b3:8b:2a:e6:19:e2:f6:14:e2:74:a6:ba:f3:27: ab:99:b2:6a:06:e5:9f:e9:a4:22:c0:9c:2a:92:ce:3b:2f:b8: bb:6b:87:82:7b:3a:41:c6:ac:68:d0:4b:c0:4f:33:67:7b:83: 52:80:fd:52:35:71:c9:08:dc:48:5e:d1:8b:0a:7b:53:4c:59: 0f:ae:ba:5e:1b:c3:7b:4f:e2:b0:cc:00:e1:0f:06:e4:80:8d: f3:03:55:02:83:42:08:4e:eb:53:b9:82:90:4a:91:a8:ec:12: 46:a0:9a:6a:aa:e8:7c:7c:5b:8f:48:4e:47:69:2d:2c:0f:61: f1:00:0c:99:84:f3:63:92:2f:78:1f:db:44:c8:d8:79:cb:9f: ab:6a:d5:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULNnGeiz6ZmKPFzS5+LTepW9d8OYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4 N0UxOUFCNjAeFw0yNTExMDQxMDI2MTZaFw0yNTExMDcyMTAwMTZaMDMxMTAvBgNV BAMTKDAwREIwM0U0MDBCRTM1OUZGMjYwNzIxQUVCMjdEQjNDMEIwRDU2MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzToFau4dJ9hC+FrmyHX1QLgdh znewb45Ow4cz8e4l9T67qyRYwC80uD2yLhjPDw9RIUPAOXrap5P17H9/NiCIHjPr 7hNPDx4BS5MW1Ly0gRQadfVI2zFBkXCthyfL+oIelCdnfyfnAEJAqb77Mg5UJxiC sSFO9iS9V8iNqvDIX1944VPaLj5ZBuLv83NltMrePgUFTEjd5mA6jaoHS2PfGVNJ aSK3DtkOp1/ETwVM/6N4dyh0U85xLizuYVbycWbqVUiui9koVhEdEqaPgIIxN0mw 4BsNFWROKzOOzXtV9CT6bF3Dk8M65xZfjD13A7Re1jzy83jIQSmrC/dMmYGhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUANsD5AC+NZ/yYHIa6yfbPAsNVhcwHwYDVR0j BBgwFoAUc6+UXv9eqdHv3CYX+kNDDofhmrYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTQ4MTYwNi1kNWZkLTQxOTYtYWJjZC01OGU2Yzc2MjQzYzUvMC83M0FGOTQ1RUZG NUVBOUQxRUZEQzI2MTdGQTQzNDMwRTg3RTE5QUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4N0Ux OUFCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU0ODE2MDYtZDVmZC00MTk2LWFi Y2QtNThlNmM3NjI0M2M1LzAvNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQz MEU4N0UxOUFCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ66c8aH5js/aznBNjejstwxACpbkbnR8LYD S+dEMHe7UG7NcQykexqv6HdbxCZ4KcEz7E2t4Z+xS0OQ2ulwKQH18rF8hAxK2BeO iUyNC5wdKW9QUgNhd7V1k3HsLgesVYPmItOwbDsytzAWlXv4YJyziyrmGeL2FOJ0 prrzJ6uZsmoG5Z/ppCLAnCqSzjsvuLtrh4J7OkHGrGjQS8BPM2d7g1KA/VI1cckI 3Ehe0YsKe1NMWQ+uul4bw3tP4rDMAOEPBuSAjfMDVQKDQghO61O5gpBKkajsEkag mmqq6Hx8W49ITkdpLSwPYfEADJmE82OSL3gf20TI2HnLn6tq1YI= -----END CERTIFICATE-----Generated at Wed Nov 5 21:11:02 2025 by rpki-client