$ rpki-client -vvf repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft File: 748B52A8C3E54FEB10B3067D1E130242894DB86F.mft (raw, json) Hash identifier: zZqsSuKtGMm9Dr1F8YjeZ1pfFaSrpPN8J1BzRAV6Vq4= Subject key identifier: A7:C9:8D:66:70:1A:27:8D:73:ED:F6:B2:0F:43:32:8B:DF:28:01:CC Authority key identifier: 74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F Certificate issuer: /CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Certificate serial: 62E3899510972D8CB34739A6300C56C2F7A1CF63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft Manifest number: 0165 Signing time: Sun 15 Jun 2025 09:01:13 +0000 Manifest this update: Sun 15 Jun 2025 08:56:13 +0000 Manifest next update: Wed 18 Jun 2025 20:58:13 +0000 Files and hashes: 1: 748B52A8C3E54FEB10B3067D1E130242894DB86F.crl (hash: /yJqx5fH3TJQqwo3G5mjnDsyFLjcadQ94QB+XJBYf4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 20:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:e3:89:95:10:97:2d:8c:b3:47:39:a6:30:0c:56:c2:f7:a1:cf:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Validity Not Before: Jun 15 08:56:13 2025 GMT Not After : Jun 18 20:58:13 2025 GMT Subject: CN=A7C98D66701A278D73EDF6B20F43328BDF2801CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:11:5a:ec:34:87:eb:1c:c3:5e:9a:78:b3:e9: e2:98:8f:e4:ad:29:c0:43:36:1d:4d:9a:80:37:6b: a3:9e:ea:05:60:0c:bb:7a:3f:94:84:8d:f9:47:16: 8c:24:66:23:0a:25:68:3b:15:4d:c5:d4:de:aa:7f: 19:b5:bb:7f:3a:79:da:18:da:30:74:8b:e6:96:65: 4e:77:83:f9:52:a3:21:51:22:a4:ed:57:71:a8:e1: 37:6f:76:2b:d8:39:26:89:30:54:ac:a5:f6:66:31: 6b:3a:3b:fe:07:ca:8c:f8:d4:9c:ba:95:ec:17:9c: 4b:42:33:b8:8a:9f:8b:f5:3b:6f:46:15:9b:fb:10: 52:bd:3b:20:22:fa:4f:74:7a:99:fb:6a:0a:c0:92: 70:78:fd:20:89:80:9d:dc:6d:0f:2f:16:68:61:8d: 06:d4:41:ec:3c:0c:0f:b4:d3:61:34:e4:37:ba:2e: e3:19:74:09:f8:71:3b:7e:04:ea:3d:2a:4b:6f:87: 03:27:1b:84:c4:e1:1d:6d:35:33:7f:e3:1d:a0:e8: 93:1e:c1:79:9b:20:e7:f6:a4:bc:4d:00:8f:73:6e: 21:8b:84:bd:f9:10:dd:ad:ee:e3:27:ba:6a:30:5b: d6:28:77:64:b2:63:17:24:2a:04:82:91:c1:0e:5f: 28:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C9:8D:66:70:1A:27:8D:73:ED:F6:B2:0F:43:32:8B:DF:28:01:CC X509v3 Authority Key Identifier: keyid:74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:5c:3a:d0:c9:14:a5:95:b6:db:60:2c:e0:bf:39:2c:6e:b2: 5a:23:78:3f:07:f7:31:d1:66:e2:ac:09:22:7b:5c:de:01:35: 79:61:0f:24:05:d9:32:62:be:61:1a:39:ce:49:4c:39:af:b5: ea:36:2c:f0:3d:5e:4b:b8:88:20:c7:66:ec:f0:cb:76:01:1d: eb:d1:7c:df:22:ed:24:bd:fd:98:0a:45:a4:6b:0a:b7:ea:62: 53:24:48:4c:36:13:aa:66:67:5d:f1:a5:43:2b:4b:a5:b8:b1: 52:f4:6f:2f:50:c7:1f:dc:68:c7:aa:30:a0:e9:f4:68:5b:af: b4:11:39:a9:91:d6:b6:43:63:b6:6e:21:d0:6f:88:03:ae:b9: e4:6a:4d:11:1f:10:cd:79:1e:7f:f3:7d:26:2b:60:73:7b:60: c4:64:5c:da:21:44:90:d5:7a:e2:e8:99:52:ee:ec:9e:06:4a: 14:03:77:7e:81:61:de:23:3e:e0:7a:16:cf:4c:49:ff:4b:ec: b0:b1:3b:35:3f:7c:82:7c:bb:1f:0d:af:d6:fd:5d:7b:1e:28: 8e:28:2f:a1:c2:49:69:80:99:7f:49:f9:9a:be:66:80:de:98: e1:74:85:1d:f5:1c:fd:f7:f8:8d:79:c4:92:35:06:47:fc:bf: c0:0d:20:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYuOJlRCXLYyzRzmmMAxWwvehz2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4 OTREQjg2RjAeFw0yNTA2MTUwODU2MTNaFw0yNTA2MTgyMDU4MTNaMDMxMTAvBgNV BAMTKEE3Qzk4RDY2NzAxQTI3OEQ3M0VERjZCMjBGNDMzMjhCREYyODAxQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCEVrsNIfrHMNemniz6eKYj+St KcBDNh1NmoA3a6Oe6gVgDLt6P5SEjflHFowkZiMKJWg7FU3F1N6qfxm1u386edoY 2jB0i+aWZU53g/lSoyFRIqTtV3Go4TdvdivYOSaJMFSspfZmMWs6O/4Hyoz41Jy6 lewXnEtCM7iKn4v1O29GFZv7EFK9OyAi+k90epn7agrAknB4/SCJgJ3cbQ8vFmhh jQbUQew8DA+002E05De6LuMZdAn4cTt+BOo9KktvhwMnG4TE4R1tNTN/4x2g6JMe wXmbIOf2pLxNAI9zbiGLhL35EN2t7uMnumowW9Yod2SyYxckKgSCkcEOXyifAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp8mNZnAaJ41z7fayD0Myi98oAcwwHwYDVR0j BBgwFoAUdItSqMPlT+sQswZ9HhMCQolNuG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDNlOWNkNi1iOTBkLTRjOGUtYjBkNi0yMWE1NTI5ZjcyOTEvMC83NDhCNTJBOEMz RTU0RkVCMTBCMzA2N0QxRTEzMDI0Mjg5NERCODZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4OTRE Qjg2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzZTljZDYtYjkwZC00YzhlLWIw ZDYtMjFhNTUyOWY3MjkxLzAvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAy NDI4OTREQjg2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVcOtDJFKWVtttgLOC/OSxuslojeD8H9zHR ZuKsCSJ7XN4BNXlhDyQF2TJivmEaOc5JTDmvteo2LPA9Xku4iCDHZuzwy3YBHevR fN8i7SS9/ZgKRaRrCrfqYlMkSEw2E6pmZ13xpUMrS6W4sVL0by9Qxx/caMeqMKDp 9Ghbr7QROamR1rZDY7ZuIdBviAOuueRqTREfEM15Hn/zfSYrYHN7YMRkXNohRJDV euLomVLu7J4GShQDd36BYd4jPuB6Fs9MSf9L7LCxOzU/fIJ8ux8Nr9b9XXseKI4o L6HCSWmAmX9J+Zq+ZoDemOF0hR31HP33+I15xJI1Bkf8v8ANIOM= -----END CERTIFICATE-----Generated at Mon Jun 16 04:36:42 2025 by rpki-client