$ rpki-client -vvf repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft File: 75890247E178C40DD3F9A5968202F684AEB89D9A.mft (raw, json) Hash identifier: RACnb22BN/jU7DbyK9zs2W3Bh7mHQ7zkLTJs/yTDrcE= Subject key identifier: C0:FB:49:46:1A:9E:CD:99:02:8D:1B:07:A5:5C:42:BF:95:70:2A:04 Authority key identifier: 75:89:02:47:E1:78:C4:0D:D3:F9:A5:96:82:02:F6:84:AE:B8:9D:9A Certificate issuer: /CN=75890247E178C40DD3F9A5968202F684AEB89D9A Certificate serial: 2FCF1D2B097D0062D26B052A4C10AD7E10F1DA6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft Manifest number: 01C0 Signing time: Mon 04 Aug 2025 20:41:00 +0000 Manifest this update: Mon 04 Aug 2025 20:36:00 +0000 Manifest next update: Fri 08 Aug 2025 02:34:00 +0000 Files and hashes: 1: 75890247E178C40DD3F9A5968202F684AEB89D9A.crl (hash: OA+GvJw9z+R79eG4RjxjdMQamjYIdoobNV8YE/5oBk0=) 2: 3130332e33392e36382e302f32332d3233203d3e20313530323730.roa (hash: CO1KR0PabLd3Qy7I6WrYIHY7Dj4uJDchoSP1DaEOrpM=) 3: 3130332e33392e36392e302f32342d3234203d3e20313530323730.roa (hash: 2/IQ6Ol+BPKlBTSwA7bwjnQdrR+Nl265+bbA++Kn4Bk=) 4: 3130332e33392e36382e302f32342d3234203d3e20313530323730.roa (hash: +j7LagtiA8DZoXzNOV4ipiXaXeq17wIoKxvndY1v7cs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.crl rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 02:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:cf:1d:2b:09:7d:00:62:d2:6b:05:2a:4c:10:ad:7e:10:f1:da:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75890247E178C40DD3F9A5968202F684AEB89D9A Validity Not Before: Aug 4 20:36:00 2025 GMT Not After : Aug 8 02:34:00 2025 GMT Subject: CN=C0FB49461A9ECD99028D1B07A55C42BF95702A04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6e:7d:78:5b:b6:bc:4c:78:0e:ae:f4:82:6c: fa:46:94:35:81:0e:97:8c:8c:61:4a:ba:26:12:fb: 87:6b:21:62:aa:79:66:19:21:57:f0:d3:18:3e:c9: 4f:31:42:6a:c8:79:ac:94:35:47:ac:19:5d:b3:b3: fb:46:5a:16:ff:51:8e:7f:bc:a6:25:0a:bd:2b:d2: af:45:7c:2f:5e:65:02:5d:f1:7e:05:05:a2:77:0e: 35:b4:1d:61:9c:94:6e:5d:aa:c8:b8:d3:fa:0d:3f: 0c:4f:4e:b8:1d:8b:50:b4:49:8f:38:67:d6:ff:a2: 3d:5b:10:bc:62:84:3d:9e:99:aa:3a:94:21:56:a7: 7d:7e:0b:e3:01:22:b2:d5:d3:61:50:7a:cc:89:93: d2:47:5c:46:6d:15:02:d3:02:d1:43:33:f3:94:43: 7c:97:fd:ff:b3:b2:0c:70:12:58:ec:1b:d8:78:b2: 43:62:09:b0:ff:86:b1:4a:03:80:27:b9:01:d6:c8: ba:33:85:20:db:e9:68:07:50:1f:6a:c5:03:82:f9: 35:ae:c1:fb:75:54:ff:7c:ba:00:d9:d8:37:3d:18: 33:09:fb:53:07:d8:22:e7:3a:50:9c:9b:98:e9:c0: 76:bf:07:25:2e:ab:72:87:a4:32:a8:0f:d0:15:2f: 30:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FB:49:46:1A:9E:CD:99:02:8D:1B:07:A5:5C:42:BF:95:70:2A:04 X509v3 Authority Key Identifier: keyid:75:89:02:47:E1:78:C4:0D:D3:F9:A5:96:82:02:F6:84:AE:B8:9D:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b6:a4:51:29:18:1d:67:bd:e8:dd:08:b7:db:bc:ce:85:af: 6e:ab:77:2b:62:4f:50:8a:6f:d0:cd:20:87:fa:c1:db:e4:f7: ed:6e:6f:41:ea:7e:4f:91:5d:d8:62:0d:17:79:c8:1c:c4:9b: 27:5a:69:95:7e:ee:36:4e:87:8c:23:75:00:5c:ac:d5:cb:4b: 32:33:dc:c6:ef:59:ae:36:41:63:22:6b:47:e7:77:dc:65:fa: f5:b3:2d:c6:5f:7f:bf:51:83:2b:2d:e9:ff:f3:04:69:9d:03: 90:68:ff:8c:f1:c8:05:44:d1:65:fd:4f:9a:65:14:0f:85:8a: 0e:5c:69:18:b3:67:47:dd:de:66:a5:20:38:7f:3b:2c:28:d0: ae:ec:f3:2d:a4:63:8a:dd:ae:c5:a5:7a:f2:c4:96:01:c9:8e: 83:96:97:97:1b:ef:5e:96:79:10:9e:31:92:b8:53:ef:f6:45: 07:7c:77:55:bd:24:15:6a:9f:cf:9d:aa:c3:0e:11:a2:27:f6: f2:48:dd:aa:f3:67:78:55:e0:54:ec:bf:67:34:85:e1:97:3a: 26:52:3f:4c:ea:98:e3:28:98:02:4d:48:7e:b1:04:5e:be:be: c7:73:ce:d4:d1:03:0f:d5:6a:d0:6c:35:6d:dc:13:6c:cc:3f: 9f:2d:18:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL88dKwl9AGLSawUqTBCtfhDx2m8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU4OTAyNDdFMTc4QzQwREQzRjlBNTk2ODIwMkY2ODRB RUI4OUQ5QTAeFw0yNTA4MDQyMDM2MDBaFw0yNTA4MDgwMjM0MDBaMDMxMTAvBgNV BAMTKEMwRkI0OTQ2MUE5RUNEOTkwMjhEMUIwN0E1NUM0MkJGOTU3MDJBMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrbn14W7a8THgOrvSCbPpGlDWB DpeMjGFKuiYS+4drIWKqeWYZIVfw0xg+yU8xQmrIeayUNUesGV2zs/tGWhb/UY5/ vKYlCr0r0q9FfC9eZQJd8X4FBaJ3DjW0HWGclG5dqsi40/oNPwxPTrgdi1C0SY84 Z9b/oj1bELxihD2emao6lCFWp31+C+MBIrLV02FQesyJk9JHXEZtFQLTAtFDM/OU Q3yX/f+zsgxwEljsG9h4skNiCbD/hrFKA4AnuQHWyLozhSDb6WgHUB9qxQOC+TWu wft1VP98ugDZ2Dc9GDMJ+1MH2CLnOlCcm5jpwHa/ByUuq3KHpDKoD9AVLzAjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwPtJRhqezZkCjRsHpVxCv5VwKgQwHwYDVR0j BBgwFoAUdYkCR+F4xA3T+aWWggL2hK64nZowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjI2YmU3Yi0yZTI4LTQ5NTAtYWE0Yy0yMTg1ZTY0N2RiM2YvMC83NTg5MDI0N0Ux NzhDNDBERDNGOUE1OTY4MjAyRjY4NEFFQjg5RDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU4OTAyNDdFMTc4QzQwREQzRjlBNTk2ODIwMkY2ODRBRUI4 OUQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIyNmJlN2ItMmUyOC00OTUwLWFh NGMtMjE4NWU2NDdkYjNmLzAvNzU4OTAyNDdFMTc4QzQwREQzRjlBNTk2ODIwMkY2 ODRBRUI4OUQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGq2pFEpGB1nvejdCLfbvM6Fr26rdytiT1CK b9DNIIf6wdvk9+1ub0Hqfk+RXdhiDRd5yBzEmydaaZV+7jZOh4wjdQBcrNXLSzIz 3MbvWa42QWMia0fnd9xl+vWzLcZff79Rgyst6f/zBGmdA5Bo/4zxyAVE0WX9T5pl FA+Fig5caRizZ0fd3malIDh/Oywo0K7s8y2kY4rdrsWlevLElgHJjoOWl5cb716W eRCeMZK4U+/2RQd8d1W9JBVqn8+dqsMOEaIn9vJI3arzZ3hV4FTsv2c0heGXOiZS P0zqmOMomAJNSH6xBF6+vsdzztTRAw/VatBsNW3cE2zMP58tGK0= -----END CERTIFICATE-----Generated at Thu Aug 7 00:31:25 2025 by rpki-client