$ rpki-client -vvf repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft File: C740DD931883C284135261B25A6958E80CDF63D2.mft (raw, json) Hash identifier: mvXqz1nGqmgazMMpTZMH4zfzTB/puSeaZLh1Dk6Dmuc= Subject key identifier: D6:BE:C4:F7:F5:C4:19:2B:AD:CF:99:8A:C4:A6:07:B8:0A:12:D7:5F Authority key identifier: C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2 Certificate issuer: /CN=C740DD931883C284135261B25A6958E80CDF63D2 Certificate serial: 2375C2322BEE434630399D0D751BD1EBE3B56EF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft Manifest number: 01A6 Signing time: Wed 23 Jul 2025 16:31:43 +0000 Manifest this update: Wed 23 Jul 2025 16:26:43 +0000 Manifest next update: Sat 26 Jul 2025 19:53:43 +0000 Files and hashes: 1: C740DD931883C284135261B25A6958E80CDF63D2.crl (hash: Sje5RV8Fm5s6UlNysJPXL/bHRociM2HYdcsO4ID+dcI=) 2: 3130332e3133392e3132312e302f32342d3234203d3e20313335363336.roa (hash: e/+fdrBlXeDfzPxhtNh66HWs6aVcjxIjkZ4W4qgvVgQ=) 3: 3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa (hash: MogNaCj5sk3XJEpkfUEURE+ZZFPXBmpIW01mKoDb4Uw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 19:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:75:c2:32:2b:ee:43:46:30:39:9d:0d:75:1b:d1:eb:e3:b5:6e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C740DD931883C284135261B25A6958E80CDF63D2 Validity Not Before: Jul 23 16:26:43 2025 GMT Not After : Jul 26 19:53:43 2025 GMT Subject: CN=D6BEC4F7F5C4192BADCF998AC4A607B80A12D75F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:02:dd:df:a8:78:f8:0a:cb:49:8c:6a:d0:77: fc:68:4b:2d:98:b6:1c:4f:07:08:f1:1b:1e:0e:ff: 55:29:3f:92:50:ac:35:4d:8d:01:e2:ef:aa:2c:7f: fe:c3:06:21:55:54:d2:a6:cf:c5:5d:0f:95:fa:89: 49:e9:b5:e7:46:b4:61:62:a1:a2:09:80:51:97:9c: b7:8b:e0:bb:51:ec:0d:ee:4d:7f:63:2b:b1:5c:0e: b3:d8:53:43:65:2a:2c:a3:5b:a5:ce:2a:fb:bb:fe: fb:70:0c:9a:5f:ca:a9:d8:1f:3b:81:41:14:da:05: c1:ce:fd:b5:fc:d0:33:23:f3:c0:c7:0d:28:50:f4: 7e:d4:53:10:71:92:f6:1f:4c:25:8a:20:d7:92:c0: fd:83:71:71:76:66:00:dc:89:c2:89:14:e9:9c:36: 16:6b:41:05:a7:9b:4d:74:ef:37:3e:43:e5:66:60: 87:72:93:93:85:c6:f6:a0:6e:e5:f0:55:91:4c:af: 74:e3:69:55:60:8e:c5:d0:b4:73:8e:bd:c2:ab:51: ef:bd:5a:c5:c2:f6:81:8a:55:4b:23:ab:66:d3:e5: ae:20:c3:79:56:ff:b4:35:f6:0e:87:b2:f1:01:49: 07:3c:74:25:cd:09:f6:3a:0c:3f:bf:93:41:df:c8: 8c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BE:C4:F7:F5:C4:19:2B:AD:CF:99:8A:C4:A6:07:B8:0A:12:D7:5F X509v3 Authority Key Identifier: keyid:C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:03:77:18:61:28:92:de:64:35:dd:7d:a2:74:3d:de:b7:65: 42:fe:ca:81:80:b1:e4:cf:0a:c6:6d:fc:70:3d:c8:50:e9:a6: ec:b2:16:ff:7a:e1:89:2c:d7:87:af:7a:cb:76:f2:d8:c0:cf: c5:6d:ca:c8:89:a6:9e:5b:33:64:5e:9a:5d:b4:9b:90:c8:e6: a8:f6:1e:d6:2d:83:e1:bc:46:11:4f:eb:83:32:f3:a2:71:c4: 1d:42:d8:3f:b4:a4:de:24:ad:6e:ab:a9:8d:30:66:23:b2:34: 3d:5f:b4:cc:9f:f8:86:40:08:3e:81:f7:ef:9d:80:94:bb:9f: c0:88:07:cb:73:bd:14:d9:5a:74:00:87:0b:e5:fe:d9:1c:90: 3c:21:03:d2:6b:e7:4b:3e:b8:66:19:7f:91:67:a4:81:f3:dd: bf:6f:27:b9:ca:88:25:f5:2d:de:1a:56:31:98:e6:97:3b:c4: 55:03:c4:08:8f:5c:d5:ba:03:0a:ff:a4:62:8c:a5:09:87:c0: 8e:95:d9:3d:8c:05:e2:df:99:5a:a6:46:81:4b:72:1b:a4:7a: e6:5d:0b:f8:f8:aa:f4:21:64:1b:38:64:3c:48:f3:fd:c3:fa: 10:8a:35:41:fe:2f:73:cd:47:03:0b:6d:cd:8a:7b:a1:ed:4c: 5d:d2:96:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI3XCMivuQ0YwOZ0NdRvR6+O1bvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4RTgw Q0RGNjNEMjAeFw0yNTA3MjMxNjI2NDNaFw0yNTA3MjYxOTUzNDNaMDMxMTAvBgNV BAMTKEQ2QkVDNEY3RjVDNDE5MkJBRENGOTk4QUM0QTYwN0I4MEExMkQ3NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEAt3fqHj4CstJjGrQd/xoSy2Y thxPBwjxGx4O/1UpP5JQrDVNjQHi76osf/7DBiFVVNKmz8VdD5X6iUnptedGtGFi oaIJgFGXnLeL4LtR7A3uTX9jK7FcDrPYU0NlKiyjW6XOKvu7/vtwDJpfyqnYHzuB QRTaBcHO/bX80DMj88DHDShQ9H7UUxBxkvYfTCWKINeSwP2DcXF2ZgDcicKJFOmc NhZrQQWnm0107zc+Q+VmYIdyk5OFxvagbuXwVZFMr3TjaVVgjsXQtHOOvcKrUe+9 WsXC9oGKVUsjq2bT5a4gw3lW/7Q19g6HsvEBSQc8dCXNCfY6DD+/k0HfyIxtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1r7E9/XEGSutz5mKxKYHuAoS118wHwYDVR0j BBgwFoAUx0DdkxiDwoQTUmGyWmlY6AzfY9IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDcxNDY2NS1jNjcwLTQ1MWUtYmRjYi05MDc0MjE5ZDU1Y2UvMC9DNzQwREQ5MzE4 ODNDMjg0MTM1MjYxQjI1QTY5NThFODBDREY2M0QyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4RTgwQ0RG NjNEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3MTQ2NjUtYzY3MC00NTFlLWJk Y2ItOTA3NDIxOWQ1NWNlLzAvQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4 RTgwQ0RGNjNEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM8DdxhhKJLeZDXdfaJ0Pd63ZUL+yoGAseTP CsZt/HA9yFDppuyyFv964Yks14evest28tjAz8VtysiJpp5bM2Reml20m5DI5qj2 HtYtg+G8RhFP64My86JxxB1C2D+0pN4krW6rqY0wZiOyND1ftMyf+IZACD6B9++d gJS7n8CIB8tzvRTZWnQAhwvl/tkckDwhA9Jr50s+uGYZf5FnpIHz3b9vJ7nKiCX1 Ld4aVjGY5pc7xFUDxAiPXNW6Awr/pGKMpQmHwI6V2T2MBeLfmVqmRoFLchukeuZd C/j4qvQhZBs4ZDxI8/3D+hCKNUH+L3PNRwMLbc2Ke6HtTF3Slss= -----END CERTIFICATE-----Generated at Thu Jul 24 17:19:33 2025 by rpki-client