$ rpki-client -vvf repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft File: 748B52A8C3E54FEB10B3067D1E130242894DB86F.mft (raw, json) Hash identifier: hbLXPxCXYXiFhKNu4ikGPvu31ITN23wiKQxpS03SxgU= Subject key identifier: C5:AC:44:6D:10:D6:17:A7:DB:E2:FF:3C:19:5B:5C:78:13:39:F0:19 Authority key identifier: 74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F Certificate issuer: /CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Certificate serial: 6A60F0C22ABEB6D2CF81566A9848C68EEEA1B1F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft Manifest number: 01A3 Signing time: Sun 02 Nov 2025 16:41:17 +0000 Manifest this update: Sun 02 Nov 2025 16:36:17 +0000 Manifest next update: Wed 05 Nov 2025 20:14:17 +0000 Files and hashes: 1: 748B52A8C3E54FEB10B3067D1E130242894DB86F.crl (hash: w/ZbWwEW6/zxuGFfetm8RpTniMeMrgA+Np3iSV7CxKg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:14:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:60:f0:c2:2a:be:b6:d2:cf:81:56:6a:98:48:c6:8e:ee:a1:b1:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Validity Not Before: Nov 2 16:36:17 2025 GMT Not After : Nov 5 20:14:17 2025 GMT Subject: CN=C5AC446D10D617A7DBE2FF3C195B5C781339F019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3a:c0:e1:9f:41:63:a7:3b:c5:e1:d8:a8:69: 8d:0b:63:ba:84:d7:26:18:f6:60:e6:a6:4b:bc:89: 8d:1b:b7:00:22:4f:2a:2d:85:6c:89:58:ff:46:90: dc:e8:eb:5f:e5:f5:08:71:89:a0:a8:7f:07:fe:dd: 3f:9d:64:3c:05:89:21:6a:e2:78:e9:f0:cf:67:64: 3a:46:ad:1d:64:8b:5e:1a:fe:64:93:f8:a1:db:6b: a8:09:8a:40:e7:12:1d:b1:a0:35:0f:05:16:0b:7d: fd:b1:49:4b:0c:57:7b:bc:4c:a8:e2:5b:9e:89:4c: f8:3e:c7:c4:5c:94:fd:50:3f:5e:c2:78:6b:0e:48: 59:fa:57:cb:14:50:b9:0b:1f:45:89:58:36:dd:db: 38:33:83:ef:b5:13:c5:fd:94:f6:96:84:b0:09:b9: fc:b2:bc:d1:ff:f4:c7:8e:74:80:ba:17:16:06:35: 04:c4:e8:d0:f7:f3:a5:8a:71:31:60:a1:0a:a5:f2: 9a:69:0e:31:99:7b:52:af:21:e0:e7:dc:14:d8:ed: a7:61:31:46:1f:6d:8f:d8:ce:f3:8a:9a:a6:ea:93: 27:0e:dc:5b:92:da:9e:bd:42:53:72:9c:b2:19:f3: 29:3d:c0:59:fa:b7:c8:88:00:20:3e:92:a5:08:b7: a2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AC:44:6D:10:D6:17:A7:DB:E2:FF:3C:19:5B:5C:78:13:39:F0:19 X509v3 Authority Key Identifier: keyid:74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:ed:ba:40:5d:8d:72:ec:13:c8:0b:d6:2e:0d:83:5a:50:69: cc:40:c4:9e:da:30:09:f1:09:3f:c1:fb:cf:27:71:82:50:63: 4e:d6:6c:1e:bb:b7:15:7a:76:23:c7:d3:81:ec:0d:d7:76:c7: 1e:ff:f1:55:39:00:2c:52:8c:c4:97:6f:cc:43:d4:07:46:df: 92:42:90:00:78:7f:fd:9f:5e:17:7a:69:24:b8:67:05:b7:31: e7:b0:e2:00:46:a7:ab:9f:95:d2:1b:bf:4f:8c:bb:2f:c9:0c: 32:b9:a5:3e:44:1d:80:72:52:b6:c1:65:1d:4a:8b:0a:fe:c4: 06:be:83:1a:fa:99:24:77:53:5e:e1:c8:e7:43:96:f2:73:a7: c0:3d:c4:5e:dd:a6:0b:0f:22:cc:c7:cb:88:d5:70:60:ce:93: f4:3b:07:7f:3e:8c:08:dd:24:74:2c:ea:5c:6e:30:40:e8:53: 41:86:ec:85:4c:fc:ba:e6:33:33:9f:95:fa:d1:9e:f7:ef:12: 29:41:28:7a:f0:f2:be:17:49:04:f9:84:c4:1d:fe:36:04:96: eb:72:0f:20:67:b3:3b:d0:ee:35:ac:07:3d:d2:37:98:66:e6: 58:06:a5:a8:99:63:24:1e:a6:92:eb:9a:c7:cd:3a:0d:50:f8: 01:3f:4f:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUamDwwiq+ttLPgVZqmEjGju6hsfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4 OTREQjg2RjAeFw0yNTExMDIxNjM2MTdaFw0yNTExMDUyMDE0MTdaMDMxMTAvBgNV BAMTKEM1QUM0NDZEMTBENjE3QTdEQkUyRkYzQzE5NUI1Qzc4MTMzOUYwMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXOsDhn0FjpzvF4dioaY0LY7qE 1yYY9mDmpku8iY0btwAiTyothWyJWP9GkNzo61/l9QhxiaCofwf+3T+dZDwFiSFq 4njp8M9nZDpGrR1ki14a/mST+KHba6gJikDnEh2xoDUPBRYLff2xSUsMV3u8TKji W56JTPg+x8RclP1QP17CeGsOSFn6V8sUULkLH0WJWDbd2zgzg++1E8X9lPaWhLAJ ufyyvNH/9MeOdIC6FxYGNQTE6ND386WKcTFgoQql8pppDjGZe1KvIeDn3BTY7adh MUYfbY/YzvOKmqbqkycO3FuS2p69QlNynLIZ8yk9wFn6t8iIACA+kqUIt6K/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxaxEbRDWF6fb4v88GVtceBM58BkwHwYDVR0j BBgwFoAUdItSqMPlT+sQswZ9HhMCQolNuG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDNlOWNkNi1iOTBkLTRjOGUtYjBkNi0yMWE1NTI5ZjcyOTEvMC83NDhCNTJBOEMz RTU0RkVCMTBCMzA2N0QxRTEzMDI0Mjg5NERCODZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4OTRE Qjg2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzZTljZDYtYjkwZC00YzhlLWIw ZDYtMjFhNTUyOWY3MjkxLzAvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAy NDI4OTREQjg2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMntukBdjXLsE8gL1i4Ng1pQacxAxJ7aMAnx CT/B+88ncYJQY07WbB67txV6diPH04HsDdd2xx7/8VU5ACxSjMSXb8xD1AdG35JC kAB4f/2fXhd6aSS4ZwW3Meew4gBGp6ufldIbv0+Muy/JDDK5pT5EHYByUrbBZR1K iwr+xAa+gxr6mSR3U17hyOdDlvJzp8A9xF7dpgsPIszHy4jVcGDOk/Q7B38+jAjd JHQs6lxuMEDoU0GG7IVM/LrmMzOflfrRnvfvEilBKHrw8r4XSQT5hMQd/jYEluty DyBnszvQ7jWsBz3SN5hm5lgGpaiZYyQeppLrmsfNOg1Q+AE/T48= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:44 2025 by rpki-client