$ rpki-client -vvf repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft File: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft (raw, json) Hash identifier: vP8VdXuO0C2WrNRI5XbB9+RGM8jROG1ri2X4H8j08rU= Subject key identifier: 1E:F7:C6:AF:C0:63:25:91:BF:9D:74:AB:D2:3B:ED:7D:1C:05:B4:65 Authority key identifier: 73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 Certificate issuer: /CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Certificate serial: 618696B926A825A50EA3C7B10EB2BA428FDBB5A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft Manifest number: 81 Signing time: Sat 26 Apr 2025 14:21:14 +0000 Manifest this update: Sat 26 Apr 2025 14:16:14 +0000 Manifest next update: Tue 29 Apr 2025 18:47:14 +0000 Files and hashes: 1: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl (hash: VIg511pQvkPNV/nglyUoZLZEoskifEOloLbaep+oZyM=) 2: 3135372e36362e3137312e302f32342d3234203d3e20313532373737.roa (hash: 4avm3eGfo7pdZ4wCw97CSHHOC8jKriOntJd1LBlXxkc=) 3: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (hash: hq3R1HOZbvpzX61BwkQ2JB9n3R+dDdAs494qH92cpTI=) 4: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (hash: kkfWGgBDhBj9LbPcLWN3LfoUckDAFJQR8XFtjGluTfk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 18:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:86:96:b9:26:a8:25:a5:0e:a3:c7:b1:0e:b2:ba:42:8f:db:b5:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Validity Not Before: Apr 26 14:16:14 2025 GMT Not After : Apr 29 18:47:14 2025 GMT Subject: CN=1EF7C6AFC0632591BF9D74ABD23BED7D1C05B465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5a:4a:f8:e6:41:ec:df:2d:a0:04:90:e8:0a: 0e:28:08:c1:c2:6f:ec:43:ea:6f:90:81:c8:2a:8c: 13:f0:4d:2a:9b:e2:b5:cb:01:e3:9a:47:52:f4:05: 29:cf:f4:a7:9d:19:d4:20:c4:30:82:5f:39:4c:c7: d6:7e:5a:9d:6c:74:f4:d3:88:b9:38:4c:4b:1c:7c: ee:67:cd:10:d3:56:fd:24:79:4e:44:73:b6:a2:4c: 67:61:e3:98:3b:d4:17:a7:53:62:21:ab:b7:f3:f6: e0:d4:12:65:12:1c:1e:c0:7e:a8:fb:25:71:c1:a8: ae:e8:ea:c5:f3:e2:5d:ec:27:9d:dc:8d:f9:05:7f: dc:c4:38:63:3c:01:fe:0b:5f:a9:1e:3e:f2:a0:55: d6:d3:04:6b:18:c5:38:ea:70:36:3f:36:2a:01:df: 63:ad:ac:1d:6b:22:f6:85:7c:b4:f5:56:73:ee:90: 40:fe:4f:0f:d6:eb:fc:76:6b:15:f8:ff:da:53:89: d1:35:fd:c3:75:fb:fb:68:3b:43:42:2a:18:95:93: 1e:65:f6:a6:7e:8a:fc:7d:c9:d6:e3:97:8d:76:2c: bb:70:27:ac:64:5b:d6:d7:5f:f4:49:de:c4:e6:ed: e5:b1:3e:5e:ae:e2:58:20:08:da:31:43:3e:a8:69: 1b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F7:C6:AF:C0:63:25:91:BF:9D:74:AB:D2:3B:ED:7D:1C:05:B4:65 X509v3 Authority Key Identifier: keyid:73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:6e:e1:cb:47:79:32:1c:fb:95:3f:51:6f:c1:45:1e:59:3a: ed:d2:02:e8:cd:91:1f:c7:5b:d7:af:21:7e:0f:12:7e:ce:c0: 33:e0:0e:cb:bd:37:fa:25:a0:62:bb:a9:35:45:4c:b8:d6:f7: b8:9f:b8:bb:55:f8:6c:8a:80:42:37:15:d8:b9:f8:d5:0c:1f: 66:07:45:23:69:c5:f7:af:0c:ad:80:38:99:6b:b8:ad:b9:5b: 86:8a:26:cf:e4:d2:c5:24:4d:23:cf:bd:4b:65:a4:7d:5b:90: da:e7:17:7e:51:d4:8e:7b:4d:cb:9e:ad:93:d7:35:8e:0a:84: 70:ae:e0:ba:9e:4b:e5:64:e5:e8:cc:fa:a1:06:9b:8a:4d:a7: 8e:a3:6f:1b:81:44:60:64:e4:2d:b4:28:42:cb:50:00:dc:d1: 82:35:e6:ff:8c:68:76:b0:fb:ec:4f:22:8d:87:17:61:68:a5: 4d:b6:c3:0c:f7:cb:ca:56:83:ff:d6:ce:05:c4:c6:8e:32:43: 16:46:f3:63:79:ee:5c:3d:6e:e0:32:dc:c3:87:b9:b0:71:71: 77:09:0b:9f:c1:6f:74:3f:db:1a:f3:1e:a2:4d:15:0b:3b:fd: 6b:32:ec:96:d4:b1:b6:00:66:73:ab:cc:1c:6d:0e:c9:cd:50: 00:86:e1:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYYaWuSaoJaUOo8exDrK6Qo/btacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4 N0UxOUFCNjAeFw0yNTA0MjYxNDE2MTRaFw0yNTA0MjkxODQ3MTRaMDMxMTAvBgNV BAMTKDFFRjdDNkFGQzA2MzI1OTFCRjlENzRBQkQyM0JFRDdEMUMwNUI0NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRWkr45kHs3y2gBJDoCg4oCMHC b+xD6m+QgcgqjBPwTSqb4rXLAeOaR1L0BSnP9KedGdQgxDCCXzlMx9Z+Wp1sdPTT iLk4TEscfO5nzRDTVv0keU5Ec7aiTGdh45g71BenU2Ihq7fz9uDUEmUSHB7Afqj7 JXHBqK7o6sXz4l3sJ53cjfkFf9zEOGM8Af4LX6kePvKgVdbTBGsYxTjqcDY/NioB 32OtrB1rIvaFfLT1VnPukED+Tw/W6/x2axX4/9pTidE1/cN1+/toO0NCKhiVkx5l 9qZ+ivx9ydbjl412LLtwJ6xkW9bXX/RJ3sTm7eWxPl6u4lggCNoxQz6oaRu7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHvfGr8BjJZG/nXSr0jvtfRwFtGUwHwYDVR0j BBgwFoAUc6+UXv9eqdHv3CYX+kNDDofhmrYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTQ4MTYwNi1kNWZkLTQxOTYtYWJjZC01OGU2Yzc2MjQzYzUvMC83M0FGOTQ1RUZG NUVBOUQxRUZEQzI2MTdGQTQzNDMwRTg3RTE5QUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4N0Ux OUFCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU0ODE2MDYtZDVmZC00MTk2LWFi Y2QtNThlNmM3NjI0M2M1LzAvNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQz MEU4N0UxOUFCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANu4ctHeTIc+5U/UW/BRR5ZOu3SAujNkR/H W9evIX4PEn7OwDPgDsu9N/oloGK7qTVFTLjW97ifuLtV+GyKgEI3Fdi5+NUMH2YH RSNpxfevDK2AOJlruK25W4aKJs/k0sUkTSPPvUtlpH1bkNrnF35R1I57TcuerZPX NY4KhHCu4LqeS+Vk5ejM+qEGm4pNp46jbxuBRGBk5C20KELLUADc0YI15v+MaHaw ++xPIo2HF2FopU22wwz3y8pWg//WzgXExo4yQxZG82N57lw9buAy3MOHubBxcXcJ C5/Bb3Q/2xrzHqJNFQs7/Wsy7JbUsbYAZnOrzBxtDsnNUACG4cc= -----END CERTIFICATE-----Generated at Sun Apr 27 18:30:44 2025 by rpki-client