$ rpki-client -vvf repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft File: C740DD931883C284135261B25A6958E80CDF63D2.mft (raw, json) Hash identifier: WsyqCzBV0zB46yjI+ILiXPYdMlGbfkfhocxQ4e1Xoc4= Subject key identifier: DD:AF:63:45:DE:3E:3A:CA:83:E1:C8:BE:C2:09:3E:82:AA:2B:60:CF Authority key identifier: C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2 Certificate issuer: /CN=C740DD931883C284135261B25A6958E80CDF63D2 Certificate serial: 6DDE5BBBB0B0D265E45D921C1E397583876ED1B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft Manifest number: 01D4 Signing time: Sun 02 Nov 2025 23:11:46 +0000 Manifest this update: Sun 02 Nov 2025 23:06:46 +0000 Manifest next update: Thu 06 Nov 2025 06:34:46 +0000 Files and hashes: 1: 3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa (hash: GyuTjfSXg8CKV3wiOvbPNmUEDlW/pVUvbq70+NpobI8=) 2: C740DD931883C284135261B25A6958E80CDF63D2.crl (hash: +nvkYZ3p23l5aMGXw1AvlBBd8WreclF5pLNQWdng0cQ=) 3: 3130332e3133392e3132312e302f32342d3234203d3e20313335363336.roa (hash: e/+fdrBlXeDfzPxhtNh66HWs6aVcjxIjkZ4W4qgvVgQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 06:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:de:5b:bb:b0:b0:d2:65:e4:5d:92:1c:1e:39:75:83:87:6e:d1:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C740DD931883C284135261B25A6958E80CDF63D2 Validity Not Before: Nov 2 23:06:46 2025 GMT Not After : Nov 6 06:34:46 2025 GMT Subject: CN=DDAF6345DE3E3ACA83E1C8BEC2093E82AA2B60CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:3b:5d:f6:75:d5:c3:41:4c:64:22:57:f6:25: d4:51:51:6a:5f:b5:fa:f4:98:1b:56:2c:49:68:8d: d5:8c:8e:41:11:2d:a8:87:9c:0c:c7:95:bf:94:74: ce:31:72:a0:fc:6a:42:94:2f:86:cf:88:27:c7:1b: 18:bd:8b:eb:bd:cf:53:fd:30:3c:3e:1d:e7:14:56: 45:be:bc:f9:6f:c2:7c:cf:ad:69:e0:60:32:61:60: 7f:f2:63:53:c8:20:cf:0b:23:66:f5:cd:68:93:6b: 1e:e5:b8:d2:b6:6b:ba:ff:64:08:a9:e3:da:d3:6d: 68:84:97:f0:7b:a3:98:2a:fc:45:ae:4b:30:bb:8c: 0d:07:af:e4:59:93:62:73:94:fd:29:86:93:47:6f: 1e:d7:24:52:e3:e6:37:2b:b1:09:88:eb:51:60:13: 18:d6:df:6d:8e:01:e7:92:9d:a1:d1:58:d9:c2:93: 36:8e:f1:56:04:c6:8f:f1:ac:87:65:95:7f:81:67: f5:3e:4e:c5:0d:00:37:87:35:e4:a1:19:9d:03:82: 42:c1:02:b4:a9:53:cb:67:f3:93:ef:af:75:4e:44: f6:59:24:ff:9a:50:c8:30:6c:17:10:07:99:7b:41: 76:af:7d:42:c8:66:90:9b:6f:92:15:31:e4:0c:fb: eb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AF:63:45:DE:3E:3A:CA:83:E1:C8:BE:C2:09:3E:82:AA:2B:60:CF X509v3 Authority Key Identifier: keyid:C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:36:13:8d:d4:0f:16:52:09:8c:4f:81:31:ac:bc:b0:cf:db: c0:5e:24:56:b5:b3:05:ed:51:d0:8f:80:7a:69:35:ae:37:29: 66:84:fc:b5:ce:b8:8a:2f:dd:df:d8:e6:b5:61:9d:80:61:8c: 9a:f3:70:9c:4f:98:d5:58:61:bd:8f:66:42:5c:b6:9b:33:f1: a2:9c:47:f3:03:ed:ac:4c:a9:39:a2:a1:d2:47:9f:ce:dd:c0: ad:0d:1f:db:0f:c5:62:ae:a8:f8:d4:2d:3c:e9:b2:f6:e8:76: dd:e5:81:43:37:ad:5c:3b:e6:82:7b:3a:a1:90:93:1b:fc:15: 54:76:69:1d:2b:1d:5a:64:df:b5:4f:4a:af:f7:53:b3:a5:de: 5a:8f:4b:00:0b:a2:8e:07:0c:c5:8b:e2:c9:f0:49:97:29:9d: bf:8d:de:24:52:9f:1d:f3:e2:f8:51:6c:a8:98:a1:9c:9f:62: 07:c3:5a:29:b9:dc:66:b2:91:95:02:77:31:8a:db:d1:e2:d3: 20:46:1a:7e:fa:45:80:52:82:fa:8c:2d:b1:21:7f:f5:de:f2: 86:4c:46:fc:85:da:08:3f:bb:c6:aa:f5:ab:8d:a3:8c:5d:ea: cc:6c:fc:8d:38:e1:e0:83:0c:50:09:78:70:ed:60:7d:1b:66: e9:3e:49:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbd5bu7Cw0mXkXZIcHjl1g4du0bgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4RTgw Q0RGNjNEMjAeFw0yNTExMDIyMzA2NDZaFw0yNTExMDYwNjM0NDZaMDMxMTAvBgNV BAMTKEREQUY2MzQ1REUzRTNBQ0E4M0UxQzhCRUMyMDkzRTgyQUEyQjYwQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4O132ddXDQUxkIlf2JdRRUWpf tfr0mBtWLElojdWMjkERLaiHnAzHlb+UdM4xcqD8akKUL4bPiCfHGxi9i+u9z1P9 MDw+HecUVkW+vPlvwnzPrWngYDJhYH/yY1PIIM8LI2b1zWiTax7luNK2a7r/ZAip 49rTbWiEl/B7o5gq/EWuSzC7jA0Hr+RZk2JzlP0phpNHbx7XJFLj5jcrsQmI61Fg ExjW322OAeeSnaHRWNnCkzaO8VYExo/xrIdllX+BZ/U+TsUNADeHNeShGZ0DgkLB ArSpU8tn85Pvr3VORPZZJP+aUMgwbBcQB5l7QXavfULIZpCbb5IVMeQM++vfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3a9jRd4+OsqD4ci+wgk+gqorYM8wHwYDVR0j BBgwFoAUx0DdkxiDwoQTUmGyWmlY6AzfY9IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDcxNDY2NS1jNjcwLTQ1MWUtYmRjYi05MDc0MjE5ZDU1Y2UvMC9DNzQwREQ5MzE4 ODNDMjg0MTM1MjYxQjI1QTY5NThFODBDREY2M0QyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4RTgwQ0RG NjNEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3MTQ2NjUtYzY3MC00NTFlLWJk Y2ItOTA3NDIxOWQ1NWNlLzAvQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4 RTgwQ0RGNjNEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM02E43UDxZSCYxPgTGsvLDP28BeJFa1swXt UdCPgHppNa43KWaE/LXOuIov3d/Y5rVhnYBhjJrzcJxPmNVYYb2PZkJctpsz8aKc R/MD7axMqTmiodJHn87dwK0NH9sPxWKuqPjULTzpsvbodt3lgUM3rVw75oJ7OqGQ kxv8FVR2aR0rHVpk37VPSq/3U7Ol3lqPSwALoo4HDMWL4snwSZcpnb+N3iRSnx3z 4vhRbKiYoZyfYgfDWim53GaykZUCdzGK29Hi0yBGGn76RYBSgvqMLbEhf/Xe8oZM RvyF2gg/u8aq9auNo4xd6sxs/I044eCDDFAJeHDtYH0bZuk+SSQ= -----END CERTIFICATE-----Generated at Tue Nov 4 08:23:26 2025 by rpki-client