$ rpki-client -vvf repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft File: 743D7544160232918AB5AB2CD90221B4C4E978E5.mft (raw, json) Hash identifier: 1cD0tGPEbrtFsNPuCBEMmkQ4KUTlX+mNPZBrVkvGV/E= Subject key identifier: A3:96:07:5B:0F:84:F8:74:A4:25:16:B1:E8:67:3D:74:8D:7E:FD:FD Authority key identifier: 74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5 Certificate issuer: /CN=743D7544160232918AB5AB2CD90221B4C4E978E5 Certificate serial: 4BB6AF60DF14CAB487C8543BB98DF77489B9D78F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft Manifest number: 0184 Signing time: Wed 06 Aug 2025 17:21:05 +0000 Manifest this update: Wed 06 Aug 2025 17:16:05 +0000 Manifest next update: Sat 09 Aug 2025 17:44:05 +0000 Files and hashes: 1: 743D7544160232918AB5AB2CD90221B4C4E978E5.crl (hash: epohXuZCvPQhRDe6kzXZGTMp7HwRSBx0dAeMB6qnHRY=) 2: 3130332e38312e3235342e302f32342d3234203d3e20313530353533.roa (hash: E2z3KSns6iTpnPXpRNJQCkLuXAdqTPQfcSqYdPzsxRI=) 3: 3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa (hash: Z7Z02l6lwQScJffXxbcOwRM3DR/Zcud+xbv6JirEUW0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b6:af:60:df:14:ca:b4:87:c8:54:3b:b9:8d:f7:74:89:b9:d7:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743D7544160232918AB5AB2CD90221B4C4E978E5 Validity Not Before: Aug 6 17:16:05 2025 GMT Not After : Aug 9 17:44:05 2025 GMT Subject: CN=A396075B0F84F874A42516B1E8673D748D7EFDFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f6:76:16:7c:c2:8c:39:01:59:d0:c1:d9:b1: bd:59:d2:07:d6:8d:84:01:27:10:af:02:2c:ad:3d: 78:67:0a:1e:7c:b8:9a:87:38:4a:a1:2a:d6:62:69: fb:c2:c3:16:bd:9a:31:cc:1c:71:30:be:08:f4:7e: c7:41:6b:d1:9b:e7:9c:d8:c4:a3:2d:0d:5a:3b:7f: b3:f0:11:22:4b:7e:13:b3:ed:13:0f:11:4e:c9:1d: 2c:40:ce:9a:ee:fa:a2:3e:34:0e:c4:8f:89:d3:65: 91:a8:16:47:9f:72:fb:15:b2:c0:2f:3b:39:a7:03: fc:70:2e:83:96:91:d3:ae:23:ad:a8:a4:59:47:27: 8c:8a:97:ac:a2:d9:cc:b2:95:ce:f6:9b:d3:95:9f: fa:5e:fa:ff:c8:c8:63:b8:d3:8b:a4:03:80:54:8b: 9b:e9:95:bb:ed:c2:04:78:05:ea:2d:35:56:61:52: 66:a9:7b:5d:ec:28:3a:47:a6:5f:2f:97:3d:2c:9b: b4:52:b3:ac:29:bb:87:44:b2:0d:a3:d9:c3:94:f5: 57:88:11:46:61:00:8b:5a:21:df:eb:10:a0:30:c1: 73:94:98:27:84:3f:77:07:7b:c3:24:54:1c:ed:f7: b9:7d:b4:9c:16:6f:c2:7a:67:b0:a8:3c:91:f7:dd: d9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:96:07:5B:0F:84:F8:74:A4:25:16:B1:E8:67:3D:74:8D:7E:FD:FD X509v3 Authority Key Identifier: keyid:74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:a8:30:c4:5f:61:7f:f5:0c:fb:ae:c2:5b:f1:3c:e8:6d:66: f1:b8:87:fc:28:1b:2b:dd:8b:95:10:6a:06:eb:ce:aa:e6:10: 2d:2d:de:69:69:37:1f:b5:c5:f4:bc:b2:fd:33:93:3a:62:e2: 38:76:07:b9:fe:04:e8:45:a6:ef:17:9b:88:c1:4f:57:c6:08: e9:0e:1f:b7:5c:f1:a8:9a:03:b5:ca:07:06:a3:f0:40:31:1b: 18:37:c5:cf:f9:9b:36:9f:c9:ee:d7:91:5a:25:b4:64:7b:e2: b3:f4:38:67:8b:a6:98:93:06:85:cb:50:29:26:a0:34:e8:06: d5:ce:fe:a0:7d:58:30:de:52:6a:72:4a:b7:29:ec:3c:38:12: 60:bd:48:e0:f8:8c:60:d5:65:89:c7:50:ba:2c:50:33:41:d2: dc:a4:ac:34:1a:52:c2:b3:d1:3c:ce:b9:1a:18:5a:94:84:16: ef:c1:1c:85:28:ac:14:a9:2b:d7:5b:6a:77:0d:1f:5f:cd:9f: be:37:ff:d7:8f:2a:88:bf:81:da:5b:10:a7:83:13:35:cb:19: 0e:4e:2c:d2:36:74:cc:3e:32:37:b9:be:72:e8:53:6f:e5:d4: 02:a7:c3:31:39:c2:ef:d5:b3:19:81:4e:bf:2e:43:ec:9a:72: 6c:9e:a3:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS7avYN8UyrSHyFQ7uY33dIm5148wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIxQjRD NEU5NzhFNTAeFw0yNTA4MDYxNzE2MDVaFw0yNTA4MDkxNzQ0MDVaMDMxMTAvBgNV BAMTKEEzOTYwNzVCMEY4NEY4NzRBNDI1MTZCMUU4NjczRDc0OEQ3RUZERkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo9nYWfMKMOQFZ0MHZsb1Z0gfW jYQBJxCvAiytPXhnCh58uJqHOEqhKtZiafvCwxa9mjHMHHEwvgj0fsdBa9Gb55zY xKMtDVo7f7PwESJLfhOz7RMPEU7JHSxAzpru+qI+NA7Ej4nTZZGoFkefcvsVssAv OzmnA/xwLoOWkdOuI62opFlHJ4yKl6yi2cyylc72m9OVn/pe+v/IyGO404ukA4BU i5vplbvtwgR4BeotNVZhUmape13sKDpHpl8vlz0sm7RSs6wpu4dEsg2j2cOU9VeI EUZhAItaId/rEKAwwXOUmCeEP3cHe8MkVBzt97l9tJwWb8J6Z7CoPJH33dmBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo5YHWw+E+HSkJRax6Gc9dI1+/f0wHwYDVR0j BBgwFoAUdD11RBYCMpGKtass2QIhtMTpeOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGZkNDIzNC0xMzIzLTRmMGUtYjY4Ni0xZDcyYWNiODgwMjkvMC83NDNENzU0NDE2 MDIzMjkxOEFCNUFCMkNEOTAyMjFCNEM0RTk3OEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIxQjRDNEU5 NzhFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRmZDQyMzQtMTMyMy00ZjBlLWI2 ODYtMWQ3MmFjYjg4MDI5LzAvNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIx QjRDNEU5NzhFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyoMMRfYX/1DPuuwlvxPOhtZvG4h/woGyvd i5UQagbrzqrmEC0t3mlpNx+1xfS8sv0zkzpi4jh2B7n+BOhFpu8Xm4jBT1fGCOkO H7dc8aiaA7XKBwaj8EAxGxg3xc/5mzafye7XkVoltGR74rP0OGeLppiTBoXLUCkm oDToBtXO/qB9WDDeUmpySrcp7Dw4EmC9SOD4jGDVZYnHULosUDNB0tykrDQaUsKz 0TzOuRoYWpSEFu/BHIUorBSpK9dbancNH1/Nn743/9ePKoi/gdpbEKeDEzXLGQ5O LNI2dMw+Mje5vnLoU2/l1AKnwzE5wu/VsxmBTr8uQ+yacmyeo2I= -----END CERTIFICATE-----Generated at Fri Aug 8 13:05:29 2025 by rpki-client