$ rpki-client -vvf repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft File: A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft (raw, json) Hash identifier: 6SNImrq3KoBZ0BvQLzcLENTMzfe2L6SK06m4PpR5EdI= Subject key identifier: 78:3A:18:F7:76:B7:F0:22:31:43:FF:1E:38:65:D7:ED:67:3D:EA:BE Authority key identifier: A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E Certificate issuer: /CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E Certificate serial: 5DEC240300E725BF6DC97F2F08095FC941176598 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft Manifest number: 01F4 Signing time: Thu 07 Aug 2025 13:31:21 +0000 Manifest this update: Thu 07 Aug 2025 13:26:21 +0000 Manifest next update: Sun 10 Aug 2025 19:41:21 +0000 Files and hashes: 1: 3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa (hash: 5BGjTlG6kn0xa+zG7WIOf2FPOI4RcyC7jSjDUVIBLp8=) 2: 3130332e3138332e39342e302f32342d3234203d3e20313439343132.roa (hash: /432ui2qmqLAqTG2YzJyGFJbPM4fOVIctbLjFQr3ZFs=) 3: A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl (hash: y5h2uoqk3XaLp/fhSTGYjibhLs5a/orzcl78pDdDAHg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 19:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ec:24:03:00:e7:25:bf:6d:c9:7f:2f:08:09:5f:c9:41:17:65:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E Validity Not Before: Aug 7 13:26:21 2025 GMT Not After : Aug 10 19:41:21 2025 GMT Subject: CN=783A18F776B7F0223143FF1E3865D7ED673DEABE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1b:ee:c0:45:a5:f5:8b:23:7c:cc:57:dd:c9: f6:2e:f7:4a:08:35:f5:1a:b4:dc:2a:e5:9f:90:33: 2f:7d:17:5c:92:50:ec:d9:d2:64:a7:a9:ba:97:4d: b0:da:e0:26:80:dc:75:c3:ad:49:09:81:a4:24:95: 18:b7:9a:31:aa:12:fa:72:69:0a:64:9f:2d:64:0e: 0f:74:ce:4a:9d:88:0d:46:0c:88:78:cc:3f:ad:98: af:81:28:62:f5:35:0d:47:32:cf:95:18:3c:5d:b8: 42:5b:f8:e0:b9:72:3a:7b:ec:27:b0:f8:10:42:c1: e8:46:b3:97:6c:4d:47:45:ff:5d:55:0b:3a:f8:a4: 6c:de:ba:3d:77:1f:f6:d8:67:e4:54:c3:9d:07:ba: aa:df:1a:91:31:f1:60:e0:ed:80:86:57:0a:13:1a: 09:51:e3:10:4f:de:18:50:a1:f8:a1:90:54:00:9f: 04:7e:22:44:1a:b8:b3:d3:e5:f1:ba:1a:aa:ce:aa: 6a:69:51:69:68:e3:76:4a:98:fa:40:31:61:30:7c: 8f:f7:81:58:8e:92:72:87:dc:c1:5f:71:7b:1e:5b: b6:e2:e2:2a:9e:4d:b7:13:3c:c3:a3:bf:22:9d:84: e3:34:9a:70:e8:98:8d:a4:85:bb:51:07:5a:fa:71: 98:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3A:18:F7:76:B7:F0:22:31:43:FF:1E:38:65:D7:ED:67:3D:EA:BE X509v3 Authority Key Identifier: keyid:A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:1c:f6:06:9a:f1:cc:e3:1f:6a:84:e8:b1:60:6e:81:c0:6a: 4e:4e:1b:e3:0a:7d:cc:70:a5:ac:7d:89:75:96:d9:4b:48:71: 4d:b4:12:03:19:9e:9d:2b:34:07:0b:7b:5c:d1:82:ad:21:94: c9:a6:87:98:53:ed:4b:f4:e7:1e:66:92:21:f5:64:f7:84:a4: 3e:bb:3f:f7:63:87:d1:82:bb:c6:f6:4b:f3:11:3d:32:04:b5: 97:26:2b:0a:c9:de:9a:3c:74:64:e3:0b:b2:c7:87:dd:7f:6d: 1d:8f:24:d4:65:bd:81:1a:eb:08:49:93:ca:77:42:fb:17:b4: 60:92:e1:f0:3e:58:df:20:c8:16:0e:42:18:8f:03:e6:cd:10: 6a:7b:21:62:e4:b7:2a:11:48:87:30:ea:83:84:a7:6e:ef:bc: 3d:15:1c:69:3c:a1:d3:6b:77:e9:da:54:29:24:38:5e:2b:61: b6:5f:1b:54:b9:c8:23:e1:a2:64:0c:69:ba:5d:76:2e:5c:d4: 46:57:5e:0e:03:a9:08:32:08:f2:bd:9d:dd:98:0b:54:ac:fc: ee:ef:f6:c3:13:68:b1:e0:28:7f:bc:5e:fb:ed:e1:13:48:33: 10:f8:e3:16:03:f3:d4:f8:12:5d:d4:bc:1a:1d:32:23:ea:6c: d9:97:4e:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXewkAwDnJb9tyX8vCAlfyUEXZZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIyMkMz RUU5QzYwRTAeFw0yNTA4MDcxMzI2MjFaFw0yNTA4MTAxOTQxMjFaMDMxMTAvBgNV BAMTKDc4M0ExOEY3NzZCN0YwMjIzMTQzRkYxRTM4NjVEN0VENjczREVBQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuG+7ARaX1iyN8zFfdyfYu90oI NfUatNwq5Z+QMy99F1ySUOzZ0mSnqbqXTbDa4CaA3HXDrUkJgaQklRi3mjGqEvpy aQpkny1kDg90zkqdiA1GDIh4zD+tmK+BKGL1NQ1HMs+VGDxduEJb+OC5cjp77Cew +BBCwehGs5dsTUdF/11VCzr4pGzeuj13H/bYZ+RUw50HuqrfGpEx8WDg7YCGVwoT GglR4xBP3hhQofihkFQAnwR+IkQauLPT5fG6GqrOqmppUWlo43ZKmPpAMWEwfI/3 gViOknKH3MFfcXseW7bi4iqeTbcTPMOjvyKdhOM0mnDomI2khbtRB1r6cZgfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeDoY93a38CIxQ/8eOGXX7Wc96r4wHwYDVR0j BBgwFoAUp0lmJAtkJ0uQ6+Bs4O4iLD7pxg4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGRjMTI4My0xY2UyLTQxYTUtYWZlNi1mMGJlMzFlOWIxMGQvMC9BNzQ5NjYyNDBC NjQyNzRCOTBFQkUwNkNFMEVFMjIyQzNFRTlDNjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIyMkMzRUU5 QzYwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBkYzEyODMtMWNlMi00MWE1LWFm ZTYtZjBiZTMxZTliMTBkLzAvQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIy MkMzRUU5QzYwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKYc9gaa8czjH2qE6LFgboHAak5OG+MKfcxw pax9iXWW2UtIcU20EgMZnp0rNAcLe1zRgq0hlMmmh5hT7Uv05x5mkiH1ZPeEpD67 P/djh9GCu8b2S/MRPTIEtZcmKwrJ3po8dGTjC7LHh91/bR2PJNRlvYEa6whJk8p3 QvsXtGCS4fA+WN8gyBYOQhiPA+bNEGp7IWLktyoRSIcw6oOEp27vvD0VHGk8odNr d+naVCkkOF4rYbZfG1S5yCPhomQMabpddi5c1EZXXg4DqQgyCPK9nd2YC1Ss/O7v 9sMTaLHgKH+8Xvvt4RNIMxD44xYD89T4El3UvBodMiPqbNmXTtA= -----END CERTIFICATE-----Generated at Fri Aug 8 12:48:45 2025 by rpki-client