$ rpki-client -vvf repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft File: C740DD931883C284135261B25A6958E80CDF63D2.mft (raw, json) Hash identifier: d2a0Yu1KwVjokBZRqduo00T234rxSRWQpcYwnQpcZ/E= Subject key identifier: A6:61:CE:D4:88:E1:0C:DC:D2:FC:6D:64:9F:FC:48:F1:33:E9:34:2D Authority key identifier: C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2 Certificate issuer: /CN=C740DD931883C284135261B25A6958E80CDF63D2 Certificate serial: 2B26A9DFC0F0809B35E80ABF505D066AD5FC922C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft Manifest number: 0196 Signing time: Wed 18 Jun 2025 01:31:43 +0000 Manifest this update: Wed 18 Jun 2025 01:26:43 +0000 Manifest next update: Sat 21 Jun 2025 13:09:43 +0000 Files and hashes: 1: 3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa (hash: MogNaCj5sk3XJEpkfUEURE+ZZFPXBmpIW01mKoDb4Uw=) 2: 3130332e3133392e3132312e302f32342d3234203d3e20313335363336.roa (hash: e/+fdrBlXeDfzPxhtNh66HWs6aVcjxIjkZ4W4qgvVgQ=) 3: C740DD931883C284135261B25A6958E80CDF63D2.crl (hash: rFpUusYjioCIhRpCWUiex5PyGCcaZH0osMMUSww1FqA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 12:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:26:a9:df:c0:f0:80:9b:35:e8:0a:bf:50:5d:06:6a:d5:fc:92:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C740DD931883C284135261B25A6958E80CDF63D2 Validity Not Before: Jun 18 01:26:43 2025 GMT Not After : Jun 21 13:09:43 2025 GMT Subject: CN=A661CED488E10CDCD2FC6D649FFC48F133E9342D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:03:e2:fb:33:5d:98:cf:45:37:ed:d7:92:cd: 49:09:05:f8:4d:b7:e6:f4:67:2c:06:49:31:ed:51: 8e:f8:a1:65:fb:a4:21:c3:28:42:d1:20:a0:95:13: b8:d9:80:25:13:bf:a6:ad:ac:0c:7c:52:84:15:dd: fa:51:c1:e3:02:ec:5c:63:17:5b:fb:49:79:66:22: 29:23:22:80:31:bc:c6:04:fa:41:3d:b5:51:83:e5: 58:13:ae:74:02:79:0e:a1:4b:c8:57:10:be:2a:11: a7:10:14:c9:ca:95:e5:83:df:e3:7f:b0:0a:2e:46: 9d:eb:8c:a6:b8:1e:44:56:07:97:fc:89:49:36:0a: e4:1f:c3:29:32:d8:c8:5a:af:b5:97:6d:c1:8f:cc: 71:00:01:d4:e5:76:d3:6a:aa:db:ba:f8:0c:e9:53: 67:39:4f:25:2c:11:df:f9:65:55:83:8d:cb:32:e0: dd:6b:09:fa:0a:ba:1e:c2:06:ad:f1:81:b9:b8:7c: b1:c4:b9:5e:b3:f2:aa:bc:dd:9f:6a:54:96:fb:8b: b9:c2:c7:9a:d2:78:92:a6:3e:d5:db:53:f6:71:8f: b4:be:e2:7f:74:02:bd:89:55:b2:5a:2c:56:5f:3a: 87:02:f3:12:4d:18:39:ef:1f:42:13:82:81:64:fd: 81:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:61:CE:D4:88:E1:0C:DC:D2:FC:6D:64:9F:FC:48:F1:33:E9:34:2D X509v3 Authority Key Identifier: keyid:C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c7:61:1e:f0:c0:fd:44:46:b0:ea:0c:87:bd:29:0e:41:9c: 43:a5:cd:26:f6:70:69:d4:fd:c7:4c:35:fa:cd:be:eb:c8:50: 1f:fe:b4:ec:9d:43:cd:8a:b4:37:db:7b:96:23:34:75:a2:d6: d2:ae:43:45:2e:f9:1f:56:65:db:02:5c:1c:bb:5d:95:f5:ad: 0f:ae:31:e6:68:68:39:db:21:34:0d:14:c3:d5:7b:30:4b:1d: cd:0c:29:9a:ca:1d:2b:53:2d:06:65:e3:c3:3e:9a:73:4a:89: 70:a5:77:a9:bc:b3:e0:6c:7f:5f:79:b8:89:d0:b0:ce:ad:b8: be:18:35:58:5a:4c:4a:72:77:aa:aa:ea:46:bf:3b:32:0a:05: 5b:a0:45:29:ee:f0:e8:2f:74:69:de:83:42:34:3b:c4:83:8c: 2b:7a:3a:f7:8d:a8:ad:a8:3b:75:84:bc:81:9c:cb:6b:98:c1: 7f:c1:c2:f2:a3:33:f5:ec:a2:07:39:16:49:97:4e:4d:b3:9a: 83:c1:5e:34:11:79:8b:7d:0b:39:c7:23:42:9d:f9:2a:6d:ad: cf:46:3e:a0:f2:7c:0c:39:fb:e2:48:01:c8:b9:63:04:c5:7f: 9f:9b:1d:4b:58:71:f1:80:93:2a:69:7c:50:5b:c4:6e:05:38: 3d:a6:d9:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKyap38DwgJs16Aq/UF0GatX8kiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4RTgw Q0RGNjNEMjAeFw0yNTA2MTgwMTI2NDNaFw0yNTA2MjExMzA5NDNaMDMxMTAvBgNV BAMTKEE2NjFDRUQ0ODhFMTBDRENEMkZDNkQ2NDlGRkM0OEYxMzNFOTM0MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0A+L7M12Yz0U37deSzUkJBfhN t+b0ZywGSTHtUY74oWX7pCHDKELRIKCVE7jZgCUTv6atrAx8UoQV3fpRweMC7Fxj F1v7SXlmIikjIoAxvMYE+kE9tVGD5VgTrnQCeQ6hS8hXEL4qEacQFMnKleWD3+N/ sAouRp3rjKa4HkRWB5f8iUk2CuQfwyky2Mhar7WXbcGPzHEAAdTldtNqqtu6+Azp U2c5TyUsEd/5ZVWDjcsy4N1rCfoKuh7CBq3xgbm4fLHEuV6z8qq83Z9qVJb7i7nC x5rSeJKmPtXbU/Zxj7S+4n90Ar2JVbJaLFZfOocC8xJNGDnvH0ITgoFk/YGhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpmHO1IjhDNzS/G1kn/xI8TPpNC0wHwYDVR0j BBgwFoAUx0DdkxiDwoQTUmGyWmlY6AzfY9IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDcxNDY2NS1jNjcwLTQ1MWUtYmRjYi05MDc0MjE5ZDU1Y2UvMC9DNzQwREQ5MzE4 ODNDMjg0MTM1MjYxQjI1QTY5NThFODBDREY2M0QyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4RTgwQ0RG NjNEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3MTQ2NjUtYzY3MC00NTFlLWJk Y2ItOTA3NDIxOWQ1NWNlLzAvQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4 RTgwQ0RGNjNEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/HYR7wwP1ERrDqDIe9KQ5BnEOlzSb2cGnU /cdMNfrNvuvIUB/+tOydQ82KtDfbe5YjNHWi1tKuQ0Uu+R9WZdsCXBy7XZX1rQ+u MeZoaDnbITQNFMPVezBLHc0MKZrKHStTLQZl48M+mnNKiXCld6m8s+Bsf195uInQ sM6tuL4YNVhaTEpyd6qq6ka/OzIKBVugRSnu8OgvdGneg0I0O8SDjCt6OveNqK2o O3WEvIGcy2uYwX/BwvKjM/Xsogc5FkmXTk2zmoPBXjQReYt9CznHI0Kd+Sptrc9G PqDyfAw5++JIAci5YwTFf5+bHUtYcfGAkyppfFBbxG4FOD2m2ck= -----END CERTIFICATE-----Generated at Wed Jun 18 21:15:35 2025 by rpki-client