$ rpki-client -vvf repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft File: 73238FE50473DF8F457921BE1B0C04764209BBF1.mft (raw, json) Hash identifier: Oye6OjTxoZvsvNfvOBNuNI0yl8Bon+5egvRS/FfJMh0= Subject key identifier: 56:3F:55:89:26:9F:E8:C4:11:E1:D3:51:01:4C:07:91:9D:88:FD:5F Authority key identifier: 73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 Certificate issuer: /CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Certificate serial: 5DD2DDA6999CCF39871C5A6F7E30A9D0BE33A3BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft Manifest number: D3 Signing time: Mon 03 Nov 2025 21:51:04 +0000 Manifest this update: Mon 03 Nov 2025 21:46:04 +0000 Manifest next update: Fri 07 Nov 2025 06:57:04 +0000 Files and hashes: 1: 73238FE50473DF8F457921BE1B0C04764209BBF1.crl (hash: GFt0KplFGatrMYJkSk5i/xHHjMkg+Of21cXzG+2hX9Q=) 2: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (hash: 6ESo4EJBYW+TZiA7AQCDdrC7W+O2u7DLGxOGwrnalLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 06:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d2:dd:a6:99:9c:cf:39:87:1c:5a:6f:7e:30:a9:d0:be:33:a3:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Validity Not Before: Nov 3 21:46:04 2025 GMT Not After : Nov 7 06:57:04 2025 GMT Subject: CN=563F5589269FE8C411E1D351014C07919D88FD5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a0:f2:d8:2b:96:2e:7c:60:d4:2a:bd:7d:5a: 4f:40:23:d5:6e:09:18:2e:e9:a3:e1:8e:cc:8b:ff: fc:50:2c:2a:40:33:33:58:0b:c0:66:40:61:c3:8c: c8:fa:9b:6f:55:d9:bb:73:87:be:ad:1d:a1:e4:ee: e5:14:89:9d:ad:e0:e0:36:f5:62:1b:11:65:30:5f: 36:24:95:65:49:78:7a:ad:57:06:7f:d8:a7:a8:22: 30:f3:72:d6:b6:0c:8a:25:ad:f0:ac:81:3e:c6:30: fe:80:e9:94:ae:bc:65:0c:45:65:79:cb:ec:a4:16: fc:44:8a:03:2f:5d:36:6e:4f:13:37:af:d7:99:a5: ef:87:93:5c:32:70:5e:86:1e:4e:e3:bb:21:d4:ae: f0:d1:14:da:e2:65:ed:57:15:95:93:02:ca:62:0c: 43:30:67:49:ec:98:f9:77:18:06:64:96:8f:97:61: bf:73:e4:ef:5a:20:10:1b:83:f1:4d:0d:e7:d7:e0: 08:36:9d:c1:a5:34:61:91:1c:b0:36:32:6d:95:da: 82:a8:9c:fa:03:1a:2b:f4:df:4f:76:e3:7f:5e:a4: 8b:db:11:74:24:07:37:07:be:30:eb:f1:9b:70:e7: 1d:3e:9f:fa:54:0c:38:fc:51:77:c8:33:83:b8:37: 7f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3F:55:89:26:9F:E8:C4:11:E1:D3:51:01:4C:07:91:9D:88:FD:5F X509v3 Authority Key Identifier: keyid:73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ea:64:52:f2:53:28:61:95:54:a1:5e:f0:6f:44:43:b2:30: ba:4c:5d:72:de:66:bc:57:1a:8c:69:10:fa:5c:3c:c5:4c:dc: 1f:0e:88:97:e3:89:90:56:ff:d6:81:77:01:f0:fb:06:37:f4: 3d:8c:8b:31:71:44:67:65:f5:26:4a:93:2c:d6:e3:37:44:71: 55:b2:c7:7a:39:2b:a6:78:71:d5:bb:67:63:28:11:e7:7d:df: 58:38:ab:d4:ce:84:21:ce:4b:ce:14:e5:8b:ef:f4:84:d3:15: af:2b:67:6f:9c:25:9e:7f:3b:a6:ff:69:ad:fc:14:d6:18:d1: 4d:0c:56:e2:29:d7:91:cd:1b:f2:41:13:e3:97:00:af:48:c4: 9b:8a:a5:92:b0:f5:ea:af:40:93:2a:30:2a:90:99:09:a8:a2: 63:67:81:d3:c2:08:6a:8f:70:f0:68:fc:2c:8b:e4:e4:6f:79: d7:bc:8d:4e:76:b9:79:f7:49:22:c7:6e:a6:a9:0b:fa:49:23: b2:8f:7e:94:8a:63:38:d0:10:3d:c3:08:0a:6e:af:49:e2:e3: 56:a1:85:2b:54:5c:b5:2b:3f:e4:a0:77:3f:25:e3:91:13:57: 7b:0c:a8:e4:b7:5d:8b:22:22:60:dc:1b:0e:92:e3:a9:d1:ce: 43:2c:e3:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXdLdppmczzmHHFpvfjCp0L4zo7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0 MjA5QkJGMTAeFw0yNTExMDMyMTQ2MDRaFw0yNTExMDcwNjU3MDRaMDMxMTAvBgNV BAMTKDU2M0Y1NTg5MjY5RkU4QzQxMUUxRDM1MTAxNEMwNzkxOUQ4OEZENUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFoPLYK5YufGDUKr19Wk9AI9Vu CRgu6aPhjsyL//xQLCpAMzNYC8BmQGHDjMj6m29V2btzh76tHaHk7uUUiZ2t4OA2 9WIbEWUwXzYklWVJeHqtVwZ/2KeoIjDzcta2DIolrfCsgT7GMP6A6ZSuvGUMRWV5 y+ykFvxEigMvXTZuTxM3r9eZpe+Hk1wycF6GHk7juyHUrvDRFNriZe1XFZWTAspi DEMwZ0nsmPl3GAZklo+XYb9z5O9aIBAbg/FNDefX4Ag2ncGlNGGRHLA2Mm2V2oKo nPoDGiv03092439epIvbEXQkBzcHvjDr8Ztw5x0+n/pUDDj8UXfIM4O4N389AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVj9ViSaf6MQR4dNRAUwHkZ2I/V8wHwYDVR0j BBgwFoAUcyOP5QRz349FeSG+GwwEdkIJu/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGE4Y2U2Yy04MjkwLTRiOWQtOWFlZC0wNzU0ZDNmZDhkMzIvMC83MzIzOEZFNTA0 NzNERjhGNDU3OTIxQkUxQjBDMDQ3NjQyMDlCQkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0MjA5 QkJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDBhOGNlNmMtODI5MC00YjlkLTlh ZWQtMDc1NGQzZmQ4ZDMyLzAvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0 NzY0MjA5QkJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLqZFLyUyhhlVShXvBvREOyMLpMXXLeZrxX GoxpEPpcPMVM3B8OiJfjiZBW/9aBdwHw+wY39D2MizFxRGdl9SZKkyzW4zdEcVWy x3o5K6Z4cdW7Z2MoEed931g4q9TOhCHOS84U5Yvv9ITTFa8rZ2+cJZ5/O6b/aa38 FNYY0U0MVuIp15HNG/JBE+OXAK9IxJuKpZKw9eqvQJMqMCqQmQmoomNngdPCCGqP cPBo/CyL5ORvede8jU52uXn3SSLHbqapC/pJI7KPfpSKYzjQED3DCApur0ni41ah hStUXLUrP+Sgdz8l45ETV3sMqOS3XYsiImDcGw6S46nRzkMs440= -----END CERTIFICATE-----Generated at Wed Nov 5 14:06:32 2025 by rpki-client