$ rpki-client -vvf repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft File: 74017DA6C3B6935388C1ADE6008FB78FAC671213.mft (raw, json) Hash identifier: voYLANROOs4jbouXR3IPTJgqOhmZ1U27rfBssMwZTZs= Subject key identifier: 13:7A:12:96:DF:BD:7E:01:A2:AF:97:DB:55:10:51:60:64:36:54:56 Authority key identifier: 74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 Certificate issuer: /CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Certificate serial: 5A594E43497319D5EF178E76359B8E3A9347BF3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft Manifest number: 015E Signing time: Sat 09 Aug 2025 18:01:55 +0000 Manifest this update: Sat 09 Aug 2025 17:56:55 +0000 Manifest next update: Tue 12 Aug 2025 22:33:55 +0000 Files and hashes: 1: 74017DA6C3B6935388C1ADE6008FB78FAC671213.crl (hash: UwjAXs4h68bOZWvtmPBhUQLY2mU2tJt1KtuDk72Pf0E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 22:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:59:4e:43:49:73:19:d5:ef:17:8e:76:35:9b:8e:3a:93:47:bf:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Validity Not Before: Aug 9 17:56:55 2025 GMT Not After : Aug 12 22:33:55 2025 GMT Subject: CN=137A1296DFBD7E01A2AF97DB5510516064365456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b6:44:bc:07:56:e6:e9:fc:e9:74:5d:de:ea: f0:2e:9b:be:de:a4:f5:07:d5:9b:db:9d:8f:01:a0: 6a:68:e2:17:5a:eb:e9:ce:db:a7:73:30:c1:85:d7: c0:d8:8e:fc:7f:23:81:18:39:ed:30:8e:81:b4:66: 38:8f:15:98:ac:b8:48:da:e3:8a:b9:fb:0c:3c:9f: b1:54:0d:27:9c:59:bb:c6:61:73:ab:67:31:1e:23: e8:2c:0c:b1:26:89:e7:9d:83:d7:86:22:c8:ee:a4: 7a:91:c8:d0:1a:5a:98:00:13:c8:93:e2:9a:dd:a0: 76:e9:33:1f:5e:e1:4a:ce:cd:8d:87:6d:0e:f1:30: b3:67:ad:86:b8:67:dc:2a:d9:35:5b:bd:1d:67:04: c8:ce:54:8b:e5:0a:6e:06:97:e4:69:da:9c:2f:11: 5a:90:a5:9b:4b:f4:10:f8:9c:fe:42:de:1c:8c:d8: 0e:c2:a7:27:9d:af:43:bb:8c:82:aa:b2:3f:a8:7c: 0a:69:7c:0a:c0:55:27:14:51:71:ff:63:2f:0e:e4: 5d:0c:e2:5e:3e:a7:74:4f:dc:6d:26:71:87:a8:c6: 1a:c8:5c:9d:13:d9:ac:49:cd:24:46:38:a2:2e:87: 48:c6:af:88:d6:cb:40:15:f2:34:2d:a9:87:ed:ac: b9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7A:12:96:DF:BD:7E:01:A2:AF:97:DB:55:10:51:60:64:36:54:56 X509v3 Authority Key Identifier: keyid:74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f6:e2:61:55:4c:f2:43:15:cc:85:6d:70:9b:31:0d:15:61: 2f:42:03:b1:69:cf:6b:5d:17:fd:0d:f6:c9:42:9a:13:b4:d8: 9f:c8:b9:33:e1:f8:7c:97:12:82:8c:dc:cf:ef:4d:3d:f9:82: 8d:31:76:94:52:45:a1:bb:94:c8:f6:f5:ac:ad:bf:1b:69:04: 2a:55:1f:31:ce:90:7f:8c:b2:8f:8d:cb:2a:45:6d:70:7e:1a: a7:f2:83:50:b7:70:5f:e0:3c:1b:d0:74:39:28:d2:be:b7:59: b4:29:6a:0e:bf:01:d2:d9:af:10:8d:39:c8:46:33:a1:e5:d5: be:2a:ed:50:00:22:f6:b7:3a:be:6c:2a:af:5f:8d:f9:39:b7: 6c:2d:ae:fe:b9:ed:f7:9a:fd:15:62:a5:55:2d:fd:bd:47:7a: 86:60:24:72:4a:d1:24:27:ef:68:82:38:d5:82:30:88:dd:13: 25:4e:ce:8e:50:4d:ba:8a:30:ea:ac:25:5b:51:8b:98:3a:cf: 17:3a:a2:72:38:88:7c:1d:79:a1:32:ab:fd:be:65:48:cd:db: fe:e6:be:66:1b:70:bf:84:92:39:89:c8:91:29:ea:7c:ce:5e: 1f:f8:87:d7:89:68:40:74:9b:46:b5:43:df:d6:77:30:35:4f: 9e:b6:15:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWllOQ0lzGdXvF452NZuOOpNHvzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZB QzY3MTIxMzAeFw0yNTA4MDkxNzU2NTVaFw0yNTA4MTIyMjMzNTVaMDMxMTAvBgNV BAMTKDEzN0ExMjk2REZCRDdFMDFBMkFGOTdEQjU1MTA1MTYwNjQzNjU0NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUtkS8B1bm6fzpdF3e6vAum77e pPUH1ZvbnY8BoGpo4hda6+nO26dzMMGF18DYjvx/I4EYOe0wjoG0ZjiPFZisuEja 44q5+ww8n7FUDSecWbvGYXOrZzEeI+gsDLEmieedg9eGIsjupHqRyNAaWpgAE8iT 4prdoHbpMx9e4UrOzY2HbQ7xMLNnrYa4Z9wq2TVbvR1nBMjOVIvlCm4Gl+Rp2pwv EVqQpZtL9BD4nP5C3hyM2A7Cpyedr0O7jIKqsj+ofAppfArAVScUUXH/Yy8O5F0M 4l4+p3RP3G0mcYeoxhrIXJ0T2axJzSRGOKIuh0jGr4jWy0AV8jQtqYftrLn7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE3oSlt+9fgGir5fbVRBRYGQ2VFYwHwYDVR0j BBgwFoAUdAF9psO2k1OIwa3mAI+3j6xnEhMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2FkZWNkZC0yNTMzLTQ2MmQtYWNlMi1iYTRhN2EyY2E0YzMvMC83NDAxN0RBNkMz QjY5MzUzODhDMUFERTYwMDhGQjc4RkFDNjcxMjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZBQzY3 MTIxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNhZGVjZGQtMjUzMy00NjJkLWFj ZTItYmE0YTdhMmNhNGMzLzAvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3 OEZBQzY3MTIxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA724mFVTPJDFcyFbXCbMQ0VYS9CA7Fpz2td F/0N9slCmhO02J/IuTPh+HyXEoKM3M/vTT35go0xdpRSRaG7lMj29aytvxtpBCpV HzHOkH+Mso+NyypFbXB+Gqfyg1C3cF/gPBvQdDko0r63WbQpag6/AdLZrxCNOchG M6Hl1b4q7VAAIva3Or5sKq9fjfk5t2wtrv657fea/RVipVUt/b1HeoZgJHJK0SQn 72iCONWCMIjdEyVOzo5QTbqKMOqsJVtRi5g6zxc6onI4iHwdeaEyq/2+ZUjN2/7m vmYbcL+EkjmJyJEp6nzOXh/4h9eJaEB0m0a1Q9/WdzA1T562FSg= -----END CERTIFICATE-----Generated at Sun Aug 10 05:36:16 2025 by rpki-client