$ rpki-client -vvf repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft File: C740DD931883C284135261B25A6958E80CDF63D2.mft (raw, json) Hash identifier: jviadakYE4owNBNZIcWWri26dQNx6y120m0fFMStFW4= Subject key identifier: DB:D6:B9:C7:4C:D7:71:C4:38:6F:3D:DB:A3:89:75:A6:F0:88:33:FC Authority key identifier: C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2 Certificate issuer: /CN=C740DD931883C284135261B25A6958E80CDF63D2 Certificate serial: 32536FA9EA460F3E15D4685D8A64FB64D7B49D1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft Manifest number: 01AD Signing time: Fri 08 Aug 2025 10:41:49 +0000 Manifest this update: Fri 08 Aug 2025 10:36:49 +0000 Manifest next update: Mon 11 Aug 2025 18:04:49 +0000 Files and hashes: 1: 3130332e3133392e3132312e302f32342d3234203d3e20313335363336.roa (hash: e/+fdrBlXeDfzPxhtNh66HWs6aVcjxIjkZ4W4qgvVgQ=) 2: C740DD931883C284135261B25A6958E80CDF63D2.crl (hash: khx2sujz+NZv1bzTSjmJs37qrObg7xPpdmvgDXPY8GE=) 3: 3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa (hash: MogNaCj5sk3XJEpkfUEURE+ZZFPXBmpIW01mKoDb4Uw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 18:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:53:6f:a9:ea:46:0f:3e:15:d4:68:5d:8a:64:fb:64:d7:b4:9d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C740DD931883C284135261B25A6958E80CDF63D2 Validity Not Before: Aug 8 10:36:49 2025 GMT Not After : Aug 11 18:04:49 2025 GMT Subject: CN=DBD6B9C74CD771C4386F3DDBA38975A6F08833FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:81:92:e2:b2:2d:ea:fb:1f:df:20:88:2b:b3: cb:39:08:da:ff:9c:b6:95:5f:fb:e3:dc:7b:95:ef: cb:ff:68:40:59:79:8d:a0:be:8f:da:1c:af:3e:cc: 10:21:df:16:f6:11:e6:d8:85:c7:ea:fb:f1:be:94: 83:3d:e2:24:62:56:29:83:b7:32:a4:af:d0:77:4b: 83:9b:1e:5d:19:3e:76:34:dc:5a:f7:24:1c:e8:46: ba:db:17:59:d4:33:bf:8f:88:08:b3:3c:4c:04:fe: 33:9f:07:15:ed:87:c9:2d:e3:28:2d:0b:1a:4b:73: 9b:0b:7f:86:c3:f7:fc:d7:bf:19:b1:5f:d4:50:19: 20:3c:82:91:48:76:98:e8:f0:5a:cf:37:5e:7a:86: 66:10:d6:f6:c9:99:f0:73:6f:bf:09:37:ac:a6:67: e9:3c:f4:b4:a1:73:91:af:23:bf:d2:25:dd:30:a0: 8c:b0:ab:ae:ef:e8:4d:68:b0:f1:25:9e:86:34:8d: a5:11:62:8c:d5:9d:c0:9b:a3:07:17:e7:ed:11:ed: e2:59:47:9f:67:c4:40:22:4d:79:61:2c:b0:8f:f9: 08:93:83:cc:49:d1:f5:6d:71:e8:a7:18:da:79:8f: b3:22:49:23:71:9d:f8:9d:18:85:77:4a:c7:75:76: f0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D6:B9:C7:4C:D7:71:C4:38:6F:3D:DB:A3:89:75:A6:F0:88:33:FC X509v3 Authority Key Identifier: keyid:C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:0a:94:b5:64:e3:bd:2b:8a:a5:ea:69:c5:10:a1:81:e7:6e: 78:14:a4:b6:db:0c:c8:5c:c4:8d:1a:98:cd:07:2f:54:ae:fe: ab:22:31:78:a6:9c:c7:2c:62:97:3e:a3:9c:c9:f5:e5:43:56: e5:85:1e:13:01:83:6e:d3:d9:9b:fd:85:d4:3a:78:ef:d5:ff: c3:ca:f3:b8:69:1a:80:08:6d:01:fb:c3:61:e2:53:7e:73:48: 99:70:88:50:77:e0:d4:02:77:b6:5b:e5:c8:ab:62:5c:59:e7: 92:d1:7b:c7:86:e0:fd:50:df:99:29:d8:57:91:7c:08:bd:98: 36:bf:89:54:78:79:c7:0c:f6:c8:44:f8:52:e9:0a:66:3d:7b: 09:4c:3e:d1:77:f3:ce:e8:0c:c7:9b:65:6c:bf:8b:ed:fc:43: a6:9a:e9:5c:8e:55:94:db:18:40:3a:f0:a3:66:9d:6b:84:e6: 43:e2:e2:64:fc:54:d4:40:c4:2d:69:4f:26:50:0c:c0:d4:0b: 9b:4e:c5:aa:80:36:24:99:35:72:7e:f0:52:fb:61:0f:89:94: 2e:0d:c1:74:67:a4:30:65:04:76:9c:02:21:7e:6a:b9:98:9d: 6c:6f:61:9e:83:26:96:db:58:c0:39:e8:8c:29:ff:2d:71:09: f4:9d:85:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMlNvqepGDz4V1GhdimT7ZNe0nR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4RTgw Q0RGNjNEMjAeFw0yNTA4MDgxMDM2NDlaFw0yNTA4MTExODA0NDlaMDMxMTAvBgNV BAMTKERCRDZCOUM3NENENzcxQzQzODZGM0REQkEzODk3NUE2RjA4ODMzRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhgZLisi3q+x/fIIgrs8s5CNr/ nLaVX/vj3HuV78v/aEBZeY2gvo/aHK8+zBAh3xb2EebYhcfq+/G+lIM94iRiVimD tzKkr9B3S4ObHl0ZPnY03Fr3JBzoRrrbF1nUM7+PiAizPEwE/jOfBxXth8kt4ygt CxpLc5sLf4bD9/zXvxmxX9RQGSA8gpFIdpjo8FrPN156hmYQ1vbJmfBzb78JN6ym Z+k89LShc5GvI7/SJd0woIywq67v6E1osPElnoY0jaURYozVncCbowcX5+0R7eJZ R59nxEAiTXlhLLCP+QiTg8xJ0fVtceinGNp5j7MiSSNxnfidGIV3Ssd1dvBHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU29a5x0zXccQ4bz3bo4l1pvCIM/wwHwYDVR0j BBgwFoAUx0DdkxiDwoQTUmGyWmlY6AzfY9IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDcxNDY2NS1jNjcwLTQ1MWUtYmRjYi05MDc0MjE5ZDU1Y2UvMC9DNzQwREQ5MzE4 ODNDMjg0MTM1MjYxQjI1QTY5NThFODBDREY2M0QyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4RTgwQ0RG NjNEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3MTQ2NjUtYzY3MC00NTFlLWJk Y2ItOTA3NDIxOWQ1NWNlLzAvQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4 RTgwQ0RGNjNEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4KlLVk470riqXqacUQoYHnbngUpLbbDMhc xI0amM0HL1Su/qsiMXimnMcsYpc+o5zJ9eVDVuWFHhMBg27T2Zv9hdQ6eO/V/8PK 87hpGoAIbQH7w2HiU35zSJlwiFB34NQCd7Zb5cirYlxZ55LRe8eG4P1Q35kp2FeR fAi9mDa/iVR4eccM9shE+FLpCmY9ewlMPtF3887oDMebZWy/i+38Q6aa6VyOVZTb GEA68KNmnWuE5kPi4mT8VNRAxC1pTyZQDMDUC5tOxaqANiSZNXJ+8FL7YQ+JlC4N wXRnpDBlBHacAiF+armYnWxvYZ6DJpbbWMA56Iwp/y1xCfSdhco= -----END CERTIFICATE-----Generated at Fri Aug 8 19:31:53 2025 by rpki-client