$ rpki-client -vvf repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft File: 748B52A8C3E54FEB10B3067D1E130242894DB86F.mft (raw, json) Hash identifier: QkOEpwmZA9630Ks4jxpfQUpxi92SJqTEyWnZOIs5meI= Subject key identifier: A9:2F:8F:07:C9:D9:CD:AF:C5:CE:2B:5F:CF:9A:F8:2B:8E:79:CE:81 Authority key identifier: 74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F Certificate issuer: /CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Certificate serial: 20AB2869E3CFA2CFF062AA82B9D025998E922086 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft Manifest number: 017C Signing time: Wed 06 Aug 2025 01:11:16 +0000 Manifest this update: Wed 06 Aug 2025 01:06:16 +0000 Manifest next update: Sat 09 Aug 2025 08:19:16 +0000 Files and hashes: 1: 748B52A8C3E54FEB10B3067D1E130242894DB86F.crl (hash: XDQ+DfjYOalEtOuz5yRpjzvNQrn1fqzg6TgDJVj/sEs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 08:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ab:28:69:e3:cf:a2:cf:f0:62:aa:82:b9:d0:25:99:8e:92:20:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Validity Not Before: Aug 6 01:06:16 2025 GMT Not After : Aug 9 08:19:16 2025 GMT Subject: CN=A92F8F07C9D9CDAFC5CE2B5FCF9AF82B8E79CE81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6c:d0:06:6c:69:a6:86:e6:61:43:d7:9b:59: 7c:05:9e:d8:67:bc:92:67:97:37:53:dc:2f:33:2a: 1c:d3:09:e8:24:4a:6f:89:79:d0:fd:b4:0c:07:6e: cc:06:c3:6b:3e:80:c0:35:d9:02:12:3d:8d:6f:eb: e9:17:d4:4a:85:1f:b7:c2:2d:dc:9a:f3:d6:fa:2f: c5:dd:0e:8d:4f:52:57:d1:6f:cf:58:ce:5f:30:dd: 1d:0d:db:29:9a:53:87:18:3c:e0:a9:8e:bc:8b:2e: 25:b1:db:25:c6:35:3c:b1:e9:98:c1:c5:1a:b6:6d: 69:5f:1d:2c:c4:05:2a:ef:21:ba:dc:44:c8:68:49: 2d:87:62:5c:4d:e7:f3:be:dd:05:58:41:dd:09:05: fa:35:fa:b8:c7:4c:09:35:29:cb:83:8d:63:4e:6b: c6:8d:19:fb:a5:f5:08:b8:80:6c:51:7f:06:8a:08: c3:01:eb:74:0c:41:b4:c4:5e:7a:33:ba:22:f3:3d: 12:75:76:13:6c:fd:36:6c:1d:74:18:6b:b8:6d:be: b8:94:ff:47:da:73:0c:f6:2e:dd:98:8f:91:d4:a7: 5e:e5:e2:b7:39:4c:65:fa:63:84:85:ea:5b:e1:17: c7:a3:43:ec:d4:f1:8f:16:76:2a:98:fb:f3:e6:fe: 50:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2F:8F:07:C9:D9:CD:AF:C5:CE:2B:5F:CF:9A:F8:2B:8E:79:CE:81 X509v3 Authority Key Identifier: keyid:74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c9:9d:d1:b1:27:a8:8a:2a:a5:7a:67:11:a3:a9:08:35:0f: 7a:1d:09:af:83:4d:31:7d:9e:4d:8b:ff:c7:cc:2b:d9:41:25: ae:a4:fe:d1:8e:5a:2e:2c:20:ad:8d:d5:40:9d:c6:6e:3c:50: 33:4d:ce:c8:ac:00:23:aa:f0:89:5a:c6:39:ac:a1:6a:a9:c6: f8:76:3c:f0:c2:25:bd:1e:37:02:ec:77:4c:0e:85:b2:47:bf: a6:27:4c:08:96:79:6c:40:e7:ca:34:4c:c9:ec:78:1c:98:91: 87:64:d7:ab:9c:d8:22:e9:35:29:d9:99:f6:ac:82:1a:75:6b: 3a:4c:da:a5:aa:a8:36:4f:15:ea:e4:16:10:ae:71:b4:b9:46: 08:19:ea:c0:64:69:d3:09:9e:36:68:14:c8:53:06:a0:f5:57: d9:8c:36:d6:a0:33:49:c1:92:09:dc:eb:28:44:16:b6:07:e9: dc:0f:6e:19:e1:af:81:8c:b4:69:c0:a8:f8:31:3b:16:43:83: ce:09:e0:7f:14:d2:df:94:82:fd:0b:32:d2:cc:cc:06:b1:c6: 64:e2:0b:e8:ec:6f:78:05:b5:62:4c:75:0d:28:c6:9b:46:31: 97:e7:68:81:0c:dd:6c:ca:3c:09:0c:5a:da:7e:2e:04:63:3b: 10:45:a6:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIKsoaePPos/wYqqCudAlmY6SIIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4 OTREQjg2RjAeFw0yNTA4MDYwMTA2MTZaFw0yNTA4MDkwODE5MTZaMDMxMTAvBgNV BAMTKEE5MkY4RjA3QzlEOUNEQUZDNUNFMkI1RkNGOUFGODJCOEU3OUNFODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/bNAGbGmmhuZhQ9ebWXwFnthn vJJnlzdT3C8zKhzTCegkSm+JedD9tAwHbswGw2s+gMA12QISPY1v6+kX1EqFH7fC Ldya89b6L8XdDo1PUlfRb89Yzl8w3R0N2ymaU4cYPOCpjryLLiWx2yXGNTyx6ZjB xRq2bWlfHSzEBSrvIbrcRMhoSS2HYlxN5/O+3QVYQd0JBfo1+rjHTAk1KcuDjWNO a8aNGful9Qi4gGxRfwaKCMMB63QMQbTEXnozuiLzPRJ1dhNs/TZsHXQYa7htvriU /0facwz2Lt2Yj5HUp17l4rc5TGX6Y4SF6lvhF8ejQ+zU8Y8WdiqY+/Pm/lCXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqS+PB8nZza/Fzitfz5r4K455zoEwHwYDVR0j BBgwFoAUdItSqMPlT+sQswZ9HhMCQolNuG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDNlOWNkNi1iOTBkLTRjOGUtYjBkNi0yMWE1NTI5ZjcyOTEvMC83NDhCNTJBOEMz RTU0RkVCMTBCMzA2N0QxRTEzMDI0Mjg5NERCODZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4OTRE Qjg2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzZTljZDYtYjkwZC00YzhlLWIw ZDYtMjFhNTUyOWY3MjkxLzAvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAy NDI4OTREQjg2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/JndGxJ6iKKqV6ZxGjqQg1D3odCa+DTTF9 nk2L/8fMK9lBJa6k/tGOWi4sIK2N1UCdxm48UDNNzsisACOq8IlaxjmsoWqpxvh2 PPDCJb0eNwLsd0wOhbJHv6YnTAiWeWxA58o0TMnseByYkYdk16uc2CLpNSnZmfas ghp1azpM2qWqqDZPFerkFhCucbS5RggZ6sBkadMJnjZoFMhTBqD1V9mMNtagM0nB kgnc6yhEFrYH6dwPbhnhr4GMtGnAqPgxOxZDg84J4H8U0t+Ugv0LMtLMzAaxxmTi C+jsb3gFtWJMdQ0oxptGMZfnaIEM3WzKPAkMWtp+LgRjOxBFppU= -----END CERTIFICATE-----Generated at Wed Aug 6 09:23:41 2025 by rpki-client