$ rpki-client -vvf repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft File: 743D7544160232918AB5AB2CD90221B4C4E978E5.mft (raw, json) Hash identifier: PflpsJXIdcsl4hMYom8oya7/DWw58M5TXLdqSN1ZX7Y= Subject key identifier: C2:B2:14:6D:F8:6B:8C:05:DB:43:34:47:06:02:4F:B4:AA:33:FC:05 Authority key identifier: 74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5 Certificate issuer: /CN=743D7544160232918AB5AB2CD90221B4C4E978E5 Certificate serial: 6C45CD57EC52F7CADE9ABA67B350EC3077B34D76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft Manifest number: 01AB Signing time: Mon 03 Nov 2025 02:01:02 +0000 Manifest this update: Mon 03 Nov 2025 01:56:02 +0000 Manifest next update: Thu 06 Nov 2025 04:01:02 +0000 Files and hashes: 1: 3130332e38312e3235342e302f32342d3234203d3e20313530353533.roa (hash: E2z3KSns6iTpnPXpRNJQCkLuXAdqTPQfcSqYdPzsxRI=) 2: 743D7544160232918AB5AB2CD90221B4C4E978E5.crl (hash: 2DdTIZlm9FZ0hRvB0YwveAUNSI9KzWtmF6QDyAQ3pRY=) 3: 3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa (hash: Z7Z02l6lwQScJffXxbcOwRM3DR/Zcud+xbv6JirEUW0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:45:cd:57:ec:52:f7:ca:de:9a:ba:67:b3:50:ec:30:77:b3:4d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743D7544160232918AB5AB2CD90221B4C4E978E5 Validity Not Before: Nov 3 01:56:02 2025 GMT Not After : Nov 6 04:01:02 2025 GMT Subject: CN=C2B2146DF86B8C05DB43344706024FB4AA33FC05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a7:d8:d3:0d:e2:40:95:23:d0:9d:9d:60:98: b0:fd:80:82:c0:b8:76:aa:97:50:c3:f6:a4:81:bb: b5:c3:4d:b3:d1:97:e5:38:cd:82:4d:e2:49:3e:0e: ac:f8:1f:b3:81:de:f2:2b:8a:02:9d:06:96:f6:4c: 65:0a:58:b9:56:61:ca:d7:62:03:b1:15:74:1d:81: 05:50:6d:33:ff:59:4d:41:ec:8a:42:7e:c5:3d:c8: bd:73:42:93:41:45:48:3a:ed:e3:74:df:95:75:b0: f5:0d:3c:9c:99:49:12:8f:82:16:ed:6f:a3:7f:b6: 28:71:65:ce:df:8e:0c:c0:a0:51:6d:b6:30:1c:66: 9b:ca:1a:5c:b5:63:a1:60:f5:0d:fb:ea:9e:8a:cd: 66:f8:e4:74:4a:c0:44:e6:53:5c:46:7b:8e:e6:d2: 43:8a:05:f3:c8:6a:da:b2:54:aa:b3:66:37:5f:c7: 43:e4:d6:8c:30:14:6d:a2:ec:65:59:ab:e6:c3:23: 3c:2e:06:95:a0:74:98:d3:8c:7c:b8:9c:cb:d9:70: 08:e9:b1:ba:06:76:cc:3f:59:8c:b1:0f:81:78:b0: b8:55:5a:20:6b:a7:3d:38:81:dd:f0:a8:da:a3:5d: e0:db:8b:cd:33:b2:f1:48:c4:63:70:4f:ea:fb:02: 94:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B2:14:6D:F8:6B:8C:05:DB:43:34:47:06:02:4F:B4:AA:33:FC:05 X509v3 Authority Key Identifier: keyid:74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9e:7a:b8:8c:e7:64:17:2a:20:1d:1d:82:b1:b6:2b:1f:57: cd:9e:b0:a1:b3:40:d4:ad:24:f2:3f:38:0e:fc:b1:fd:be:f6: b7:12:26:27:a9:a7:ff:18:73:2f:41:90:da:1b:5f:15:58:b3: 98:4d:c3:0c:8b:16:e6:bd:42:88:b5:b9:d2:08:b7:4c:78:92: 15:09:3e:3c:7b:c7:c1:b9:b4:aa:d9:e0:91:9d:bd:f6:83:da: 5b:96:6a:94:98:e8:7b:89:93:b9:a0:81:75:49:0c:05:bc:25: ab:f3:61:18:ff:32:22:31:51:ef:41:ed:54:9d:56:f0:33:3c: ae:be:67:7d:8c:48:7e:5e:0d:92:31:8f:40:c7:a5:a1:b2:9e: 7e:b0:ca:b0:cc:0a:c6:be:6f:e3:2a:65:94:5e:44:e2:b4:84: b5:76:2e:81:cf:fb:f4:7f:a5:9f:1e:32:c6:32:5c:95:ee:6a: e2:77:a3:70:a4:0f:47:fb:e8:57:77:65:71:af:b7:16:33:c8: 63:08:fb:bd:21:26:00:a2:c0:f2:e5:8a:72:7e:fe:12:88:16: a3:ae:f6:02:7c:f3:d6:1f:64:8e:f2:af:90:54:23:63:29:29: 72:4a:e4:b6:84:f7:38:47:f2:28:f4:e9:45:76:5f:c9:2d:ff: d3:c5:41:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbEXNV+xS98remrpns1DsMHezTXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIxQjRD NEU5NzhFNTAeFw0yNTExMDMwMTU2MDJaFw0yNTExMDYwNDAxMDJaMDMxMTAvBgNV BAMTKEMyQjIxNDZERjg2QjhDMDVEQjQzMzQ0NzA2MDI0RkI0QUEzM0ZDMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyp9jTDeJAlSPQnZ1gmLD9gILA uHaql1DD9qSBu7XDTbPRl+U4zYJN4kk+Dqz4H7OB3vIrigKdBpb2TGUKWLlWYcrX YgOxFXQdgQVQbTP/WU1B7IpCfsU9yL1zQpNBRUg67eN035V1sPUNPJyZSRKPghbt b6N/tihxZc7fjgzAoFFttjAcZpvKGly1Y6Fg9Q376p6KzWb45HRKwETmU1xGe47m 0kOKBfPIatqyVKqzZjdfx0Pk1owwFG2i7GVZq+bDIzwuBpWgdJjTjHy4nMvZcAjp sboGdsw/WYyxD4F4sLhVWiBrpz04gd3wqNqjXeDbi80zsvFIxGNwT+r7ApSnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwrIUbfhrjAXbQzRHBgJPtKoz/AUwHwYDVR0j BBgwFoAUdD11RBYCMpGKtass2QIhtMTpeOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGZkNDIzNC0xMzIzLTRmMGUtYjY4Ni0xZDcyYWNiODgwMjkvMC83NDNENzU0NDE2 MDIzMjkxOEFCNUFCMkNEOTAyMjFCNEM0RTk3OEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIxQjRDNEU5 NzhFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRmZDQyMzQtMTMyMy00ZjBlLWI2 ODYtMWQ3MmFjYjg4MDI5LzAvNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIx QjRDNEU5NzhFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADueeriM52QXKiAdHYKxtisfV82esKGzQNSt JPI/OA78sf2+9rcSJiepp/8Ycy9BkNobXxVYs5hNwwyLFua9Qoi1udIIt0x4khUJ Pjx7x8G5tKrZ4JGdvfaD2luWapSY6HuJk7mggXVJDAW8JavzYRj/MiIxUe9B7VSd VvAzPK6+Z32MSH5eDZIxj0DHpaGynn6wyrDMCsa+b+MqZZReROK0hLV2LoHP+/R/ pZ8eMsYyXJXuauJ3o3CkD0f76Fd3ZXGvtxYzyGMI+70hJgCiwPLlinJ+/hKIFqOu 9gJ889YfZI7yr5BUI2MpKXJK5LaE9zhH8ij06UV2X8kt/9PFQeY= -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:16 2025 by rpki-client