$ rpki-client -vvf repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft File: 748B52A8C3E54FEB10B3067D1E130242894DB86F.mft (raw, json) Hash identifier: wqTxZr7AIvTP8/8FtGHGXvsRzkHOC/4GkEmiN9dEFBw= Subject key identifier: D0:DA:E1:15:33:BB:19:E6:7F:D6:48:F4:FC:F6:6C:05:6B:32:FF:42 Authority key identifier: 74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F Certificate issuer: /CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Certificate serial: 2E63A42D2CF369BF361B1E3DFD6A4FF94C6162DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft Manifest number: 0174 Signing time: Sat 19 Jul 2025 14:51:15 +0000 Manifest this update: Sat 19 Jul 2025 14:46:15 +0000 Manifest next update: Wed 23 Jul 2025 02:01:15 +0000 Files and hashes: 1: 748B52A8C3E54FEB10B3067D1E130242894DB86F.crl (hash: P8l00DK4tTNsFls5eapZQLyIfYrXxC8GHrvzxbNbKnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 02:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:63:a4:2d:2c:f3:69:bf:36:1b:1e:3d:fd:6a:4f:f9:4c:61:62:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Validity Not Before: Jul 19 14:46:15 2025 GMT Not After : Jul 23 02:01:15 2025 GMT Subject: CN=D0DAE11533BB19E67FD648F4FCF66C056B32FF42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:75:2a:17:95:21:80:cb:1f:45:39:2c:08:e3: 98:07:48:ff:39:94:f4:93:97:4b:bd:82:e6:90:90: f2:93:b2:ea:f4:6b:ad:ce:fa:fe:79:3e:2a:e8:c2: 37:f3:ac:31:39:7a:f4:2b:db:ad:05:c7:88:5b:2e: e7:42:02:e7:e1:74:f2:9a:7e:81:34:3f:da:e6:4d: 98:dd:d4:49:96:b9:a7:1a:f6:32:b5:a7:01:d9:ab: ce:67:fb:9a:19:ea:05:06:88:49:c7:91:f3:65:47: 84:9f:85:41:19:d3:04:39:85:c1:c8:cd:b3:c2:87: 84:af:4d:23:78:89:c9:dc:7a:b2:af:e5:ed:19:88: a7:3f:34:84:15:92:e0:8e:7d:2e:31:7e:0b:04:2a: c9:5f:09:0a:81:5d:cc:14:cc:86:d1:14:33:66:37: 20:ee:6c:df:37:37:e9:0f:c4:28:01:80:8f:19:3b: b9:8f:b0:16:ae:f3:88:f3:8a:b0:b0:4c:d0:27:fb: 7d:4f:01:9e:30:d5:a0:ea:69:28:da:2c:ab:ec:a2: 79:73:79:c7:fb:9d:b0:56:c9:75:4c:3d:98:9b:5d: a1:ed:bc:7b:4a:12:e4:ac:60:4e:c8:6f:cf:2e:c6: 96:ad:60:f1:a8:d9:50:63:02:c1:72:d7:eb:bc:43: 6a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DA:E1:15:33:BB:19:E6:7F:D6:48:F4:FC:F6:6C:05:6B:32:FF:42 X509v3 Authority Key Identifier: keyid:74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:5e:23:81:38:44:bf:37:cd:44:e1:ac:69:68:ae:8a:3c:7e: f2:2f:ab:e3:ab:61:7e:3b:ad:fc:5f:75:bb:5b:01:eb:da:c3: 99:43:0a:c9:0e:08:13:13:45:56:66:59:49:76:74:48:27:f2: 0a:fe:5f:26:c0:f5:ae:c9:b9:80:41:47:05:1b:4d:17:dc:bd: 57:e7:dc:f9:cc:da:7d:3b:71:18:b3:d7:07:ec:7a:49:03:2c: 50:65:ba:79:a4:1a:f8:30:9d:2d:bc:c0:d7:0e:d3:de:f0:d3: 25:7c:10:13:91:4c:50:74:8a:a6:76:75:10:21:2d:cf:c5:76: 39:02:cf:cb:a2:38:ec:c9:d5:56:90:10:c7:73:a2:ca:50:8a: a5:c8:05:94:3a:a5:9b:f3:b0:fc:f7:ec:fb:bc:57:71:09:10: 7e:3d:61:de:6c:ff:ba:9b:4e:55:51:8b:75:c9:96:bb:96:39: 78:96:cf:d6:cd:02:ed:13:82:66:66:39:e7:8b:01:6a:ae:4a: c0:da:ec:a1:bf:76:d2:ae:00:7a:c6:e5:4a:9a:e0:ac:76:7e: d4:db:e0:2d:36:00:d4:ce:eb:8f:4f:f9:68:b8:77:13:da:21: c7:a1:2e:87:c0:f9:bc:f8:b1:68:96:6a:1b:d2:a5:f0:59:1f: f4:43:63:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULmOkLSzzab82Gx49/WpP+UxhYtwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4 OTREQjg2RjAeFw0yNTA3MTkxNDQ2MTVaFw0yNTA3MjMwMjAxMTVaMDMxMTAvBgNV BAMTKEQwREFFMTE1MzNCQjE5RTY3RkQ2NDhGNEZDRjY2QzA1NkIzMkZGNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzdSoXlSGAyx9FOSwI45gHSP85 lPSTl0u9guaQkPKTsur0a63O+v55PirowjfzrDE5evQr260Fx4hbLudCAufhdPKa foE0P9rmTZjd1EmWuaca9jK1pwHZq85n+5oZ6gUGiEnHkfNlR4SfhUEZ0wQ5hcHI zbPCh4SvTSN4icncerKv5e0ZiKc/NIQVkuCOfS4xfgsEKslfCQqBXcwUzIbRFDNm NyDubN83N+kPxCgBgI8ZO7mPsBau84jzirCwTNAn+31PAZ4w1aDqaSjaLKvsonlz ecf7nbBWyXVMPZibXaHtvHtKEuSsYE7Ib88uxpatYPGo2VBjAsFy1+u8Q2qZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0NrhFTO7GeZ/1kj0/PZsBWsy/0IwHwYDVR0j BBgwFoAUdItSqMPlT+sQswZ9HhMCQolNuG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDNlOWNkNi1iOTBkLTRjOGUtYjBkNi0yMWE1NTI5ZjcyOTEvMC83NDhCNTJBOEMz RTU0RkVCMTBCMzA2N0QxRTEzMDI0Mjg5NERCODZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4OTRE Qjg2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzZTljZDYtYjkwZC00YzhlLWIw ZDYtMjFhNTUyOWY3MjkxLzAvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAy NDI4OTREQjg2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJeI4E4RL83zUThrGloroo8fvIvq+OrYX47 rfxfdbtbAevaw5lDCskOCBMTRVZmWUl2dEgn8gr+XybA9a7JuYBBRwUbTRfcvVfn 3PnM2n07cRiz1wfsekkDLFBlunmkGvgwnS28wNcO097w0yV8EBORTFB0iqZ2dRAh Lc/FdjkCz8uiOOzJ1VaQEMdzospQiqXIBZQ6pZvzsPz37Pu8V3EJEH49Yd5s/7qb TlVRi3XJlruWOXiWz9bNAu0TgmZmOeeLAWquSsDa7KG/dtKuAHrG5Uqa4Kx2ftTb 4C02ANTO649P+Wi4dxPaIcehLofA+bz4sWiWahvSpfBZH/RDYxA= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:14 2025 by rpki-client