$ rpki-client -vvf repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft File: 749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft (raw, json) Hash identifier: fdER/lW4u8qWGHlVQWRnAuiMbLHL/TE9L9z7ZGF6ALE= Subject key identifier: 5C:E8:9E:F6:B6:E2:A5:09:FE:C1:FC:6E:D8:ED:22:3A:F3:02:86:3D Authority key identifier: 74:9E:8F:6C:5F:22:D1:8A:70:B6:82:F8:6C:65:EC:D3:EA:27:63:5C Certificate issuer: /CN=749E8F6C5F22D18A70B682F86C65ECD3EA27635C Certificate serial: 78FEABB77757F16DB59F7B17E2AABA6EB8BAE1B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft Manifest number: 01F0 Signing time: Sun 20 Jul 2025 20:32:05 +0000 Manifest this update: Sun 20 Jul 2025 20:27:05 +0000 Manifest next update: Thu 24 Jul 2025 07:03:05 +0000 Files and hashes: 1: 323030313a6466333a333438303a3a2f34382d3438203d3e20313430343433.roa (hash: VaGZ2rtQiVhlvvEqhey8VuIsjUW/H1CymqkYlv2nCyM=) 2: 3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa (hash: u/HGXTKlzUVzN3BHvIbNac6O5D491LLOLOhh0HKRChM=) 3: 749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl (hash: ld276G2Fa49GcFNrmNjCLa0FOzxUMQiu8A5WZ/L9IYE=) 4: 3130332e3134392e3137372e302f32342d3234203d3e20313430343433.roa (hash: q3nnfuFQ9fllwu5vaDMWKT58tFIU7r2iWutM+FFs7uM=) 5: 3130332e3134392e3137362e302f32332d3233203d3e20313430343433.roa (hash: D6ZQ1Nszopc+tjvvlk9LxeInARJoQa1nF2ZqxR2uBQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 07:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:fe:ab:b7:77:57:f1:6d:b5:9f:7b:17:e2:aa:ba:6e:b8:ba:e1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749E8F6C5F22D18A70B682F86C65ECD3EA27635C Validity Not Before: Jul 20 20:27:05 2025 GMT Not After : Jul 24 07:03:05 2025 GMT Subject: CN=5CE89EF6B6E2A509FEC1FC6ED8ED223AF302863D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a1:5e:74:5c:c0:a3:aa:1e:64:3b:ff:10:c6: 62:48:87:55:d5:70:7a:58:f2:b9:11:b0:99:f0:af: 76:4c:60:4a:fa:bd:7e:ee:1a:57:d1:e7:e0:07:5e: 8b:83:df:6d:4c:94:a5:2a:87:a6:6c:db:70:d2:47: c5:ce:81:d4:47:e1:32:01:0a:e4:69:e8:62:0e:2a: 9a:f8:6a:df:48:b3:4d:65:a1:76:41:2f:7f:ce:6f: 71:8b:fe:1c:ce:93:a8:41:d4:0b:4b:04:34:27:1e: 77:3a:04:7e:4d:38:20:0c:68:1d:2f:e3:f9:e7:67: d6:d6:d8:e3:cb:8b:aa:36:d5:a6:bb:d2:0e:8f:ed: 0d:ad:63:79:a7:9e:66:14:3d:f5:a8:48:48:43:7e: 72:ed:62:07:8b:c8:0f:f4:c1:a5:8e:6e:1a:df:c7: ae:64:9e:58:ef:1d:e2:2f:f2:05:99:36:52:29:67: 4c:1b:09:18:5a:8f:69:92:b3:d0:af:b4:69:2c:95: c2:dc:cb:2a:4a:9e:eb:95:0f:7f:25:23:b9:24:02: 45:53:75:29:57:10:3a:ac:1e:fe:80:61:28:f8:2c: 55:69:82:79:9a:8e:76:77:54:34:f8:a7:ec:ef:bc: c2:46:fb:b4:97:41:cb:aa:58:b5:71:b0:d5:dc:da: c8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E8:9E:F6:B6:E2:A5:09:FE:C1:FC:6E:D8:ED:22:3A:F3:02:86:3D X509v3 Authority Key Identifier: keyid:74:9E:8F:6C:5F:22:D1:8A:70:B6:82:F8:6C:65:EC:D3:EA:27:63:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:28:98:24:fe:cf:31:46:b4:6b:6d:03:24:93:58:32:4c:b4: d1:85:b3:cd:67:bc:42:b3:71:79:ea:df:24:48:83:4c:aa:96: 3f:c2:9d:f6:ea:38:28:79:9a:f4:50:ea:44:9e:ae:74:c3:16: 4c:76:69:ec:0d:a2:ef:cf:30:63:0d:70:42:9b:ee:d3:4d:e8: 01:3a:35:65:89:08:51:2f:ce:1d:d2:fb:27:01:63:95:81:c8: af:66:e9:ff:fc:7a:d8:f5:b7:2b:19:a6:03:14:66:6b:9b:62: e2:76:0e:6b:69:71:e3:86:52:eb:19:84:c3:06:7c:58:45:41: fb:a7:66:83:60:a2:6c:b8:a3:55:19:4d:ab:6d:ab:b5:b0:64: 23:4d:71:a0:48:0c:8c:ce:7d:79:90:7e:1c:66:54:ed:1e:8e: 3c:c8:e1:37:2c:9a:02:da:35:a7:3f:94:b1:70:d6:87:72:2c: c2:c0:bf:10:86:ca:9f:5a:d0:10:73:46:f4:aa:ec:c6:6e:64: 78:d5:0f:cd:89:1c:3c:57:a3:68:53:33:b9:90:82:ae:cc:87: f0:08:f2:c2:4c:ba:98:87:58:97:05:84:81:b3:e6:79:1d:1c: b3:35:e7:f7:dd:f0:70:ad:fe:9b:d8:8e:0a:45:96:3d:f5:43: 83:d2:7c:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeP6rt3dX8W21n3sX4qq6bri64bAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVDRDNF QTI3NjM1QzAeFw0yNTA3MjAyMDI3MDVaFw0yNTA3MjQwNzAzMDVaMDMxMTAvBgNV BAMTKDVDRTg5RUY2QjZFMkE1MDlGRUMxRkM2RUQ4RUQyMjNBRjMwMjg2M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3oV50XMCjqh5kO/8QxmJIh1XV cHpY8rkRsJnwr3ZMYEr6vX7uGlfR5+AHXouD321MlKUqh6Zs23DSR8XOgdRH4TIB CuRp6GIOKpr4at9Is01loXZBL3/Ob3GL/hzOk6hB1AtLBDQnHnc6BH5NOCAMaB0v 4/nnZ9bW2OPLi6o21aa70g6P7Q2tY3mnnmYUPfWoSEhDfnLtYgeLyA/0waWObhrf x65knljvHeIv8gWZNlIpZ0wbCRhaj2mSs9CvtGkslcLcyypKnuuVD38lI7kkAkVT dSlXEDqsHv6AYSj4LFVpgnmajnZ3VDT4p+zvvMJG+7SXQcuqWLVxsNXc2sjtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXOie9rbipQn+wfxu2O0iOvMChj0wHwYDVR0j BBgwFoAUdJ6PbF8i0YpwtoL4bGXs0+onY1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWU4ZGIzOC02M2E4LTQxM2MtYTlmNi1jYzIyM2FmYTRhNzUvMC83NDlFOEY2QzVG MjJEMThBNzBCNjgyRjg2QzY1RUNEM0VBMjc2MzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVDRDNFQTI3 NjM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFlOGRiMzgtNjNhOC00MTNjLWE5 ZjYtY2MyMjNhZmE0YTc1LzAvNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVD RDNFQTI3NjM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEomCT+zzFGtGttAySTWDJMtNGFs81nvEKz cXnq3yRIg0yqlj/CnfbqOCh5mvRQ6kSernTDFkx2aewNou/PMGMNcEKb7tNN6AE6 NWWJCFEvzh3S+ycBY5WByK9m6f/8etj1tysZpgMUZmubYuJ2DmtpceOGUusZhMMG fFhFQfunZoNgomy4o1UZTattq7WwZCNNcaBIDIzOfXmQfhxmVO0ejjzI4TcsmgLa Nac/lLFw1odyLMLAvxCGyp9a0BBzRvSq7MZuZHjVD82JHDxXo2hTM7mQgq7Mh/AI 8sJMupiHWJcFhIGz5nkdHLM15/fd8HCt/pvYjgpFlj31Q4PSfCw= -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:42 2025 by rpki-client