$ rpki-client -vvf repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft File: A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft (raw, json) Hash identifier: hQ2le5XJuwF2SAf8BwCXHtBjmSdeUY44nvy6lvKHxm8= Subject key identifier: 50:82:4D:A7:2D:5A:AA:C8:B1:D2:B1:45:61:FC:2F:65:8F:84:C3:A4 Authority key identifier: A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E Certificate issuer: /CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E Certificate serial: 02457074DB56E3E79D1ADC14728B92ED6BD47C86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft Manifest number: 01EC Signing time: Sun 20 Jul 2025 17:41:20 +0000 Manifest this update: Sun 20 Jul 2025 17:36:20 +0000 Manifest next update: Wed 23 Jul 2025 23:57:20 +0000 Files and hashes: 1: 3130332e3138332e39342e302f32342d3234203d3e20313439343132.roa (hash: /432ui2qmqLAqTG2YzJyGFJbPM4fOVIctbLjFQr3ZFs=) 2: A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl (hash: 2vADqFNCxIxJ0fzuCwQA87PjWICgBUz8Lm/rhdoRy3M=) 3: 3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa (hash: 5BGjTlG6kn0xa+zG7WIOf2FPOI4RcyC7jSjDUVIBLp8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 23:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:45:70:74:db:56:e3:e7:9d:1a:dc:14:72:8b:92:ed:6b:d4:7c:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E Validity Not Before: Jul 20 17:36:20 2025 GMT Not After : Jul 23 23:57:20 2025 GMT Subject: CN=50824DA72D5AAAC8B1D2B14561FC2F658F84C3A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:67:4a:84:9f:71:8b:50:15:24:2c:03:e9:61: 0b:71:07:96:1d:e0:a0:f2:98:b6:33:85:14:53:17: 27:0c:98:6e:0f:51:cd:40:22:d0:b8:e5:8c:0a:ba: 98:6f:33:63:26:a3:48:cf:73:da:86:6f:e4:c1:40: ac:1f:3c:9a:f7:15:c4:d3:fe:9b:0e:12:3b:97:39: 94:a5:3e:d0:ec:49:1b:c0:82:77:5f:4c:2c:30:2e: 48:7d:f7:f7:f9:8a:44:8b:bb:51:06:99:40:1a:f8: 68:af:8e:30:bf:b8:10:8c:ec:f4:e0:82:2f:5b:57: 67:f6:3d:e1:22:f1:4f:95:45:06:06:24:d2:17:a7: 01:ef:05:f6:6e:66:4b:af:e3:ed:c6:e7:06:40:c8: d9:0c:ae:b4:28:17:c4:e2:dc:32:b6:ed:25:f6:43: cd:84:b9:f9:9b:5f:49:55:ec:ac:a8:cf:7b:91:c1: bf:37:00:90:62:9a:e2:87:f1:4e:d8:37:be:60:3d: cc:67:2f:90:7b:98:00:99:b1:cd:dd:b9:c8:e0:b4: 63:94:7e:fd:8c:8c:5e:14:4b:8d:66:98:e5:9e:4f: 66:fa:3f:22:49:cf:35:0c:eb:06:8a:1f:bf:d7:2e: 2a:af:70:64:df:fa:e9:8e:19:07:13:d4:d2:76:9e: 38:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:82:4D:A7:2D:5A:AA:C8:B1:D2:B1:45:61:FC:2F:65:8F:84:C3:A4 X509v3 Authority Key Identifier: keyid:A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:04:74:29:f0:ee:98:02:e5:ac:89:cf:52:9d:17:5f:87:8a: aa:43:9e:ab:82:a4:39:8e:c9:ed:91:13:b8:3f:81:1a:b6:23: 7b:8f:98:c4:fc:25:3b:11:ce:7b:2f:f9:0f:17:d6:97:c4:85: 49:4d:bf:bf:93:5e:bb:ea:58:f8:ec:4d:dc:17:ba:ee:6c:99: f4:21:53:68:bc:0e:5d:e3:b5:b3:27:7f:50:ab:b2:1c:54:8d: f8:1d:4a:62:04:69:9d:a4:ff:0a:0e:f6:c3:d3:a7:2d:6f:12: 3f:25:67:32:3d:89:fa:6d:71:fb:f5:a0:0d:6e:77:78:c9:6d: 36:b3:74:4e:a2:77:ee:97:2d:6b:76:74:e0:26:35:6b:ff:82: 73:a7:c2:c1:eb:31:43:36:fb:1a:c3:dc:dc:6f:1f:fe:97:ad: cf:8d:55:10:38:f9:60:94:26:aa:09:07:6c:39:ad:4c:95:de: ec:a7:d2:d7:59:36:0f:d7:f9:04:60:55:27:72:a0:75:70:46: b1:61:a3:fc:31:87:37:e9:a9:d2:80:9f:08:61:9d:11:75:fd: 2d:0e:fc:b7:34:a4:24:32:cd:8b:4f:c1:a4:73:88:c6:ab:1d: 84:c5:df:87:59:54:bb:4a:80:53:54:79:a5:eb:4f:04:93:5b: 1e:21:5a:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAkVwdNtW4+edGtwUcouS7WvUfIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIyMkMz RUU5QzYwRTAeFw0yNTA3MjAxNzM2MjBaFw0yNTA3MjMyMzU3MjBaMDMxMTAvBgNV BAMTKDUwODI0REE3MkQ1QUFBQzhCMUQyQjE0NTYxRkMyRjY1OEY4NEMzQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMZ0qEn3GLUBUkLAPpYQtxB5Yd 4KDymLYzhRRTFycMmG4PUc1AItC45YwKuphvM2Mmo0jPc9qGb+TBQKwfPJr3FcTT /psOEjuXOZSlPtDsSRvAgndfTCwwLkh99/f5ikSLu1EGmUAa+GivjjC/uBCM7PTg gi9bV2f2PeEi8U+VRQYGJNIXpwHvBfZuZkuv4+3G5wZAyNkMrrQoF8Ti3DK27SX2 Q82EufmbX0lV7Kyoz3uRwb83AJBimuKH8U7YN75gPcxnL5B7mACZsc3ducjgtGOU fv2MjF4US41mmOWeT2b6PyJJzzUM6waKH7/XLiqvcGTf+umOGQcT1NJ2njjFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUIJNpy1aqsix0rFFYfwvZY+Ew6QwHwYDVR0j BBgwFoAUp0lmJAtkJ0uQ6+Bs4O4iLD7pxg4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGRjMTI4My0xY2UyLTQxYTUtYWZlNi1mMGJlMzFlOWIxMGQvMC9BNzQ5NjYyNDBC NjQyNzRCOTBFQkUwNkNFMEVFMjIyQzNFRTlDNjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIyMkMzRUU5 QzYwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBkYzEyODMtMWNlMi00MWE1LWFm ZTYtZjBiZTMxZTliMTBkLzAvQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIy MkMzRUU5QzYwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoEdCnw7pgC5ayJz1KdF1+HiqpDnquCpDmO ye2RE7g/gRq2I3uPmMT8JTsRznsv+Q8X1pfEhUlNv7+TXrvqWPjsTdwXuu5smfQh U2i8Dl3jtbMnf1CrshxUjfgdSmIEaZ2k/woO9sPTpy1vEj8lZzI9ifptcfv1oA1u d3jJbTazdE6id+6XLWt2dOAmNWv/gnOnwsHrMUM2+xrD3NxvH/6Xrc+NVRA4+WCU JqoJB2w5rUyV3uyn0tdZNg/X+QRgVSdyoHVwRrFho/wxhzfpqdKAnwhhnRF1/S0O /Lc0pCQyzYtPwaRziMarHYTF34dZVLtKgFNUeaXrTwSTWx4hWhE= -----END CERTIFICATE-----Generated at Mon Jul 21 18:05:46 2025 by rpki-client