$ rpki-client -vvf repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft File: 74017DA6C3B6935388C1ADE6008FB78FAC671213.mft (raw, json) Hash identifier: Wu0Ll0c9v33kDZwQwM/7qnEj9lBlhtGb7X5wDPGesY8= Subject key identifier: F4:0A:9E:0E:76:95:75:3D:91:B6:9E:5F:53:D5:64:F5:BD:64:D8:60 Authority key identifier: 74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 Certificate issuer: /CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Certificate serial: 583E00872347498E581A30D33F2784CA229E4976 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft Manifest number: 0146 Signing time: Tue 17 Jun 2025 16:21:51 +0000 Manifest this update: Tue 17 Jun 2025 16:16:51 +0000 Manifest next update: Fri 20 Jun 2025 21:49:51 +0000 Files and hashes: 1: 74017DA6C3B6935388C1ADE6008FB78FAC671213.crl (hash: 4m6Oy3w+ShJWpZhtLpB2lx0HvVSI7DQ+JCFNfpht9Vk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 21:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:3e:00:87:23:47:49:8e:58:1a:30:d3:3f:27:84:ca:22:9e:49:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Validity Not Before: Jun 17 16:16:51 2025 GMT Not After : Jun 20 21:49:51 2025 GMT Subject: CN=F40A9E0E7695753D91B69E5F53D564F5BD64D860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8a:72:00:dc:02:13:f1:6f:f3:aa:45:b7:51: a1:b1:02:d1:87:65:05:c3:fe:ce:48:45:51:39:3a: b4:09:68:70:77:3d:4f:f7:61:3e:b5:0b:0d:2c:a1: 0e:fe:58:ea:34:a8:6f:c5:48:0c:2c:a5:07:eb:ad: fd:68:ba:cd:33:24:4d:61:7b:89:32:9b:de:4c:5a: 83:8a:b9:ee:6d:12:a2:7a:e6:5a:04:6d:ea:6a:b0: 25:04:a5:49:34:b7:31:36:bb:63:71:00:be:98:45: ed:e5:e9:1a:25:a6:9a:04:54:1a:77:86:aa:4e:0f: 81:9f:63:46:88:9a:01:bd:cb:8c:bc:dd:ab:1e:76: 8e:67:f9:a7:21:5e:e6:93:d8:83:d2:47:60:98:cd: ca:03:26:1b:eb:cf:b7:f7:b4:a8:75:e8:09:4b:88: db:5b:38:83:15:d2:5f:c3:3e:f0:55:b1:cf:a4:f7: 75:f4:1a:f2:e9:3c:cd:bb:e9:f0:97:80:71:a2:76: 0c:ff:fd:1c:76:d5:c0:97:db:9e:c2:aa:96:1c:d0: 35:da:3b:7a:4a:99:8b:df:06:54:f3:84:b9:61:cd: 39:3c:24:c4:75:5c:97:41:1e:66:2b:c3:79:6b:85: 15:00:bf:28:df:f9:3d:49:21:c2:94:a8:7b:40:3e: 5a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:0A:9E:0E:76:95:75:3D:91:B6:9E:5F:53:D5:64:F5:BD:64:D8:60 X509v3 Authority Key Identifier: keyid:74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:06:37:c8:30:6b:29:67:8b:69:9a:ed:d3:2b:6a:83:8d:b9: 67:c7:64:27:e9:2a:fe:81:1a:3e:54:34:9c:f8:a1:3b:7a:d6: 3f:51:67:7c:82:5f:12:f6:c1:af:2f:e9:5f:52:66:32:07:10: b0:09:ff:84:8b:54:96:50:45:66:d2:08:59:03:ce:2f:3a:6b: 25:84:b5:98:f2:8f:6f:d5:16:d8:b6:32:37:d5:36:04:5a:03: 75:18:c8:1f:00:9c:fc:22:5d:cd:3c:9f:31:18:e7:aa:3f:52: ec:b4:6a:8e:9f:e4:2e:e6:3b:7d:c6:99:c4:3d:7d:9d:c8:8f: 43:49:83:be:2f:1a:d5:17:38:d0:73:14:5d:83:2a:24:6d:3f: bb:14:e9:f5:7d:93:24:5d:48:cf:82:d1:ba:e1:b4:46:87:fa: 5c:06:2a:9e:5c:78:e0:73:83:44:3f:5a:9b:a2:6e:9b:ff:56: 85:e9:7c:36:88:1c:89:10:67:8a:6f:b7:46:c5:73:4f:41:55: ab:f9:a1:cb:a5:c0:e7:3c:88:84:ad:1d:0c:a7:3d:07:a9:bf: ce:c0:27:fc:ac:9b:7e:88:ec:1b:0d:dd:01:fa:65:61:43:47: 8c:7f:1f:fb:85:3f:bc:81:df:56:f1:0a:f5:fa:0b:23:9b:2c: 20:96:3d:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWD4AhyNHSY5YGjDTPyeEyiKeSXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZB QzY3MTIxMzAeFw0yNTA2MTcxNjE2NTFaFw0yNTA2MjAyMTQ5NTFaMDMxMTAvBgNV BAMTKEY0MEE5RTBFNzY5NTc1M0Q5MUI2OUU1RjUzRDU2NEY1QkQ2NEQ4NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiinIA3AIT8W/zqkW3UaGxAtGH ZQXD/s5IRVE5OrQJaHB3PU/3YT61Cw0soQ7+WOo0qG/FSAwspQfrrf1ous0zJE1h e4kym95MWoOKue5tEqJ65loEbepqsCUEpUk0tzE2u2NxAL6YRe3l6RolppoEVBp3 hqpOD4GfY0aImgG9y4y83asedo5n+achXuaT2IPSR2CYzcoDJhvrz7f3tKh16AlL iNtbOIMV0l/DPvBVsc+k93X0GvLpPM276fCXgHGidgz//Rx21cCX257CqpYc0DXa O3pKmYvfBlTzhLlhzTk8JMR1XJdBHmYrw3lrhRUAvyjf+T1JIcKUqHtAPloTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9AqeDnaVdT2Rtp5fU9Vk9b1k2GAwHwYDVR0j BBgwFoAUdAF9psO2k1OIwa3mAI+3j6xnEhMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2FkZWNkZC0yNTMzLTQ2MmQtYWNlMi1iYTRhN2EyY2E0YzMvMC83NDAxN0RBNkMz QjY5MzUzODhDMUFERTYwMDhGQjc4RkFDNjcxMjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZBQzY3 MTIxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNhZGVjZGQtMjUzMy00NjJkLWFj ZTItYmE0YTdhMmNhNGMzLzAvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3 OEZBQzY3MTIxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4GN8gwaylni2ma7dMraoONuWfHZCfpKv6B Gj5UNJz4oTt61j9RZ3yCXxL2wa8v6V9SZjIHELAJ/4SLVJZQRWbSCFkDzi86ayWE tZjyj2/VFti2MjfVNgRaA3UYyB8AnPwiXc08nzEY56o/Uuy0ao6f5C7mO33GmcQ9 fZ3Ij0NJg74vGtUXONBzFF2DKiRtP7sU6fV9kyRdSM+C0brhtEaH+lwGKp5ceOBz g0Q/Wpuibpv/VoXpfDaIHIkQZ4pvt0bFc09BVav5oculwOc8iIStHQynPQepv87A J/ysm36I7BsN3QH6ZWFDR4x/H/uFP7yB31bxCvX6CyObLCCWPTw= -----END CERTIFICATE-----Generated at Tue Jun 17 23:08:19 2025 by rpki-client