$ rpki-client -vvf repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft File: 75890247E178C40DD3F9A5968202F684AEB89D9A.mft (raw, json) Hash identifier: NELXOXfEXv0yWRH7akTTafJ+eDa+A7dcBQ4OJWdXTlg= Subject key identifier: 43:38:72:C6:D8:27:98:EC:47:B9:E3:2C:7B:26:A8:A6:EE:6D:A6:80 Authority key identifier: 75:89:02:47:E1:78:C4:0D:D3:F9:A5:96:82:02:F6:84:AE:B8:9D:9A Certificate issuer: /CN=75890247E178C40DD3F9A5968202F684AEB89D9A Certificate serial: 4A28ACFF2CD306FEC3992FA37D8BA41D884ADFFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft Manifest number: 01B9 Signing time: Sun 20 Jul 2025 10:40:58 +0000 Manifest this update: Sun 20 Jul 2025 10:35:58 +0000 Manifest next update: Wed 23 Jul 2025 19:59:58 +0000 Files and hashes: 1: 75890247E178C40DD3F9A5968202F684AEB89D9A.crl (hash: QD+OJ74NnrAzLSaeUezyZKqazwtA9gaJDWPaolzbPoI=) 2: 3130332e33392e36382e302f32342d3234203d3e20313530323730.roa (hash: +j7LagtiA8DZoXzNOV4ipiXaXeq17wIoKxvndY1v7cs=) 3: 3130332e33392e36382e302f32332d3233203d3e20313530323730.roa (hash: CO1KR0PabLd3Qy7I6WrYIHY7Dj4uJDchoSP1DaEOrpM=) 4: 3130332e33392e36392e302f32342d3234203d3e20313530323730.roa (hash: 2/IQ6Ol+BPKlBTSwA7bwjnQdrR+Nl265+bbA++Kn4Bk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.crl rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 19:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:28:ac:ff:2c:d3:06:fe:c3:99:2f:a3:7d:8b:a4:1d:88:4a:df:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75890247E178C40DD3F9A5968202F684AEB89D9A Validity Not Before: Jul 20 10:35:58 2025 GMT Not After : Jul 23 19:59:58 2025 GMT Subject: CN=433872C6D82798EC47B9E32C7B26A8A6EE6DA680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8b:f0:0b:76:51:b3:a4:eb:f3:a4:92:78:2c: 60:03:a9:e2:07:42:0a:c6:f1:56:6e:69:09:03:20: ba:5c:b0:e1:05:dc:45:40:47:90:da:57:ad:51:6f: 52:6d:cb:6a:78:96:fa:99:d5:c4:ad:fe:3b:6f:d8: 4d:d5:c9:ae:69:1e:bd:06:be:69:7c:5f:52:35:25: c7:be:8c:1c:aa:7a:f5:2a:01:a4:d2:dc:6a:02:1d: a6:05:1b:99:81:b7:73:1b:7b:b1:f7:b1:f7:cb:5f: fe:df:f6:3b:cb:90:4b:59:7c:70:80:26:dc:19:64: db:74:d9:c3:1e:3c:50:2c:2c:42:a3:df:c5:93:0b: 54:1d:47:d3:28:6c:77:96:b1:2a:00:f4:12:0f:df: 7b:8f:fb:0e:da:f8:2f:63:bb:ab:c1:7f:9b:ab:d5: 13:12:13:e3:e0:87:bb:7d:9b:3d:71:ab:31:5f:75: ff:73:b9:79:ed:ba:da:c9:90:63:c5:2a:79:3e:63: 31:1b:07:dc:df:9c:08:38:56:b3:62:7e:f3:c1:09: d7:42:2e:34:c1:5d:cf:29:87:79:5d:05:3e:d3:05: c8:b6:be:7f:a7:c3:d9:e3:a6:bf:28:3e:68:cb:00: 57:d9:f4:ab:20:7c:10:5c:2c:5b:43:02:13:7a:0a: 88:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:38:72:C6:D8:27:98:EC:47:B9:E3:2C:7B:26:A8:A6:EE:6D:A6:80 X509v3 Authority Key Identifier: keyid:75:89:02:47:E1:78:C4:0D:D3:F9:A5:96:82:02:F6:84:AE:B8:9D:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:0a:ac:21:82:46:20:bd:31:e8:7a:32:26:56:d1:07:43:95: 4c:a0:25:06:44:27:83:da:10:29:f0:91:90:e4:e8:57:7c:4a: 5f:d0:cf:ad:20:a5:e0:f6:83:9e:e3:5f:14:6f:16:76:46:e6: fc:33:52:69:c2:09:94:f4:ec:5e:c2:6b:c4:89:7b:f6:e0:27: b1:54:ca:80:ff:1b:60:23:bb:cb:0d:24:e6:6d:b3:23:6b:44: a3:15:fa:0e:34:14:b5:f8:f3:f5:b9:45:ab:27:9e:2b:fb:f8: 55:67:54:4d:95:39:cd:f9:40:9f:c6:08:2c:a1:8f:ff:b4:3b: 81:63:f8:27:39:f5:bc:e3:31:1d:eb:88:96:10:a9:86:10:de: e9:7d:a0:b9:b7:21:47:7f:66:c2:cf:d9:77:a4:4c:b2:a5:8f: cc:5e:d4:47:cd:7e:00:01:82:04:cb:c6:60:1f:83:7a:c6:89: 85:a4:85:da:80:a3:2d:0d:90:6f:bc:a3:fd:1f:9b:7f:1a:97: fb:5a:1a:53:6d:b4:e0:b1:b2:55:ca:64:a7:13:c6:ba:56:ed: fa:2a:18:bf:93:4d:f5:c5:49:6c:50:ab:4d:69:e9:a4:26:ce: 5f:0a:dd:fa:7a:56:78:93:7e:d9:b4:ce:ed:8a:70:7b:a7:c8: 32:eb:d8:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSiis/yzTBv7DmS+jfYukHYhK3/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU4OTAyNDdFMTc4QzQwREQzRjlBNTk2ODIwMkY2ODRB RUI4OUQ5QTAeFw0yNTA3MjAxMDM1NThaFw0yNTA3MjMxOTU5NThaMDMxMTAvBgNV BAMTKDQzMzg3MkM2RDgyNzk4RUM0N0I5RTMyQzdCMjZBOEE2RUU2REE2ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0i/ALdlGzpOvzpJJ4LGADqeIH QgrG8VZuaQkDILpcsOEF3EVAR5DaV61Rb1Jty2p4lvqZ1cSt/jtv2E3Vya5pHr0G vml8X1I1Jce+jByqevUqAaTS3GoCHaYFG5mBt3Mbe7H3sffLX/7f9jvLkEtZfHCA JtwZZNt02cMePFAsLEKj38WTC1QdR9MobHeWsSoA9BIP33uP+w7a+C9ju6vBf5ur 1RMSE+Pgh7t9mz1xqzFfdf9zuXntutrJkGPFKnk+YzEbB9zfnAg4VrNifvPBCddC LjTBXc8ph3ldBT7TBci2vn+nw9njpr8oPmjLAFfZ9KsgfBBcLFtDAhN6CoizAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQzhyxtgnmOxHueMseyaopu5tpoAwHwYDVR0j BBgwFoAUdYkCR+F4xA3T+aWWggL2hK64nZowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjI2YmU3Yi0yZTI4LTQ5NTAtYWE0Yy0yMTg1ZTY0N2RiM2YvMC83NTg5MDI0N0Ux NzhDNDBERDNGOUE1OTY4MjAyRjY4NEFFQjg5RDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU4OTAyNDdFMTc4QzQwREQzRjlBNTk2ODIwMkY2ODRBRUI4 OUQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIyNmJlN2ItMmUyOC00OTUwLWFh NGMtMjE4NWU2NDdkYjNmLzAvNzU4OTAyNDdFMTc4QzQwREQzRjlBNTk2ODIwMkY2 ODRBRUI4OUQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkKrCGCRiC9Meh6MiZW0QdDlUygJQZEJ4Pa ECnwkZDk6Fd8Sl/Qz60gpeD2g57jXxRvFnZG5vwzUmnCCZT07F7Ca8SJe/bgJ7FU yoD/G2Aju8sNJOZtsyNrRKMV+g40FLX48/W5Rasnniv7+FVnVE2VOc35QJ/GCCyh j/+0O4Fj+Cc59bzjMR3riJYQqYYQ3ul9oLm3IUd/ZsLP2XekTLKlj8xe1EfNfgAB ggTLxmAfg3rGiYWkhdqAoy0NkG+8o/0fm38al/taGlNttOCxslXKZKcTxrpW7foq GL+TTfXFSWxQq01p6aQmzl8K3fp6VniTftm0zu2KcHunyDLr2Fw= -----END CERTIFICATE-----Generated at Sun Jul 20 21:27:23 2025 by rpki-client