$ rpki-client -vvf repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft File: 74D4F2785CA261D018C909BA622D8244292BCB3E.mft (raw, json) Hash identifier: niEfMw7iwvDo48R99RC5zeLTvZZv58WVCYItNq/I2XE= Subject key identifier: F8:A8:E2:B7:13:27:9A:B7:9A:AD:D0:69:C8:A6:17:71:6B:42:87:33 Authority key identifier: 74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E Certificate issuer: /CN=74D4F2785CA261D018C909BA622D8244292BCB3E Certificate serial: 60D92B9AE7C72B6E476F8925F201389F46E4D786 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft Manifest number: 0342 Signing time: Wed 03 Sep 2025 11:01:37 +0000 Manifest this update: Wed 03 Sep 2025 10:56:37 +0000 Manifest next update: Sat 06 Sep 2025 18:12:37 +0000 Files and hashes: 1: 3130332e3130332e3134352e302f32342d3234203d3e20313336383631.roa (hash: u6oloP9Y8JGAma8cxbntxH8WmfQY01P9oCREk7+XMxs=) 2: 323430313a663563303a3a2f33322d3438203d3e20313336383631.roa (hash: EZvYjhUqWVWt3m8BlTlpwuqAgPj6OBoR83LID+/r3xw=) 3: 3130332e3130332e3134372e302f32342d3234203d3e20313336383631.roa (hash: GRVghrICNAdxouBIwXYTRSPY6doN9zN/lvPgtUZIKw0=) 4: 3130332e3130332e3134362e302f32342d3234203d3e20313336383631.roa (hash: gj/8lggfR8myqoNqzBWaOnMDIVL5S0r8bZN2DAfp+nY=) 5: 74D4F2785CA261D018C909BA622D8244292BCB3E.crl (hash: mspX/OAT4zNSUf3ZK9hU/VBeqIWDgn37NBLEWTJJb90=) 6: 3130332e3130332e3134342e302f32342d3234203d3e20313336383631.roa (hash: qaTsYAuDwYq3vmdm+MP/d1P3xUHxCKcLJsCvSBVNIeQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 18:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d9:2b:9a:e7:c7:2b:6e:47:6f:89:25:f2:01:38:9f:46:e4:d7:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74D4F2785CA261D018C909BA622D8244292BCB3E Validity Not Before: Sep 3 10:56:37 2025 GMT Not After : Sep 6 18:12:37 2025 GMT Subject: CN=F8A8E2B713279AB79AADD069C8A617716B428733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:11:9b:7d:fd:35:39:a7:6c:e6:67:d0:40:0f: 4d:8e:1f:eb:8c:cd:c0:85:02:dc:2a:04:d7:81:62: 53:2a:6f:43:5d:6c:74:47:5b:72:20:ab:6c:f0:df: 88:97:86:e0:62:5c:ab:4b:ab:87:09:bb:8a:55:51: e6:6c:7f:47:08:bb:16:64:76:a3:86:25:1f:9b:9d: 52:14:4c:3f:f9:3e:49:da:e7:80:77:76:7c:c0:61: b3:28:b1:ae:a2:68:f1:fb:b7:08:3f:d8:47:f3:33: 35:1d:a9:55:f9:56:1f:eb:c7:fd:a4:59:bb:07:7d: 93:72:e2:11:6f:89:53:23:5c:ae:9e:27:01:72:76: 86:0b:db:48:6d:62:70:26:58:e9:93:6d:2e:f1:96: d5:cf:0e:51:f2:7d:0a:8f:a3:6e:ba:70:3d:8c:e2: 7e:aa:67:23:9e:1c:3f:b9:e3:b2:d6:f6:8a:fd:e1: 43:c2:3a:67:96:d3:44:29:18:a1:e1:13:eb:95:cd: 44:e6:a9:0e:e7:17:69:c7:2f:8c:63:e1:11:bd:0f: 5f:1f:50:1a:76:2d:5f:9f:df:b1:ea:1b:62:69:bc: c8:72:ee:93:f9:cc:57:3b:53:d6:44:73:f9:e3:ba: 0d:5f:df:d8:b1:67:64:70:1b:51:6b:f2:69:3c:eb: d2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A8:E2:B7:13:27:9A:B7:9A:AD:D0:69:C8:A6:17:71:6B:42:87:33 X509v3 Authority Key Identifier: keyid:74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:8b:a9:96:54:93:5b:63:d6:f8:2d:5e:d0:30:9a:72:ec:1b: cb:26:33:78:1b:2c:a5:9e:8a:b5:18:e9:63:08:7f:23:6d:55: c7:6a:d0:aa:1a:f9:8e:39:58:b9:43:a4:26:39:b3:e4:4a:69: b0:49:83:5e:b5:99:f0:88:80:3b:aa:01:b7:43:56:67:ed:22: cf:37:40:24:7d:62:34:f3:dd:e9:28:e7:36:4a:ae:50:80:db: db:de:7f:3f:64:d9:4b:de:87:23:6e:1a:4c:76:50:aa:e8:b2: cc:0d:ab:04:0c:43:04:04:39:3f:b1:d6:18:ce:85:59:f8:36: a1:67:8e:4b:a1:c7:23:97:68:21:a0:d8:37:d5:36:8c:a8:1a: d4:83:d6:3e:f5:65:51:41:4f:6a:f7:e6:01:63:88:df:62:c0: a0:e2:5c:94:d3:3f:9d:04:17:3a:d5:6c:6a:73:44:b9:4f:ee: 0d:ed:5d:14:e6:20:c2:cf:15:72:7f:ce:1e:17:cb:e8:64:16: 8e:cd:69:26:56:73:28:cd:82:3e:96:39:25:96:de:42:0d:80: 93:11:13:7b:a9:03:2c:ce:02:6d:1a:44:ea:c4:71:eb:93:ac: 3f:f0:28:32:eb:0a:92:42:cf:15:b1:17:0a:de:e6:ea:30:b9: c9:34:9f:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYNkrmufHK25Hb4kl8gE4n0bk14YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzRENEYyNzg1Q0EyNjFEMDE4QzkwOUJBNjIyRDgyNDQy OTJCQ0IzRTAeFw0yNTA5MDMxMDU2MzdaFw0yNTA5MDYxODEyMzdaMDMxMTAvBgNV BAMTKEY4QThFMkI3MTMyNzlBQjc5QUFERDA2OUM4QTYxNzcxNkI0Mjg3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEEZt9/TU5p2zmZ9BAD02OH+uM zcCFAtwqBNeBYlMqb0NdbHRHW3Igq2zw34iXhuBiXKtLq4cJu4pVUeZsf0cIuxZk dqOGJR+bnVIUTD/5Pkna54B3dnzAYbMosa6iaPH7twg/2EfzMzUdqVX5Vh/rx/2k WbsHfZNy4hFviVMjXK6eJwFydoYL20htYnAmWOmTbS7xltXPDlHyfQqPo266cD2M 4n6qZyOeHD+547LW9or94UPCOmeW00QpGKHhE+uVzUTmqQ7nF2nHL4xj4RG9D18f UBp2LV+f37HqG2JpvMhy7pP5zFc7U9ZEc/njug1f39ixZ2RwG1Fr8mk869JZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+KjitxMnmreardBpyKYXcWtChzMwHwYDVR0j BBgwFoAUdNTyeFyiYdAYyQm6Yi2CRCkryz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmVhNzdiNS04OGY3LTQwODUtYjMzMS05NzUwMjRjZDA0NmQvMC83NEQ0RjI3ODVD QTI2MUQwMThDOTA5QkE2MjJEODI0NDI5MkJDQjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzRENEYyNzg1Q0EyNjFEMDE4QzkwOUJBNjIyRDgyNDQyOTJC Q0IzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJlYTc3YjUtODhmNy00MDg1LWIz MzEtOTc1MDI0Y2QwNDZkLzAvNzRENEYyNzg1Q0EyNjFEMDE4QzkwOUJBNjIyRDgy NDQyOTJCQ0IzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+LqZZUk1tj1vgtXtAwmnLsG8smM3gbLKWe irUY6WMIfyNtVcdq0Koa+Y45WLlDpCY5s+RKabBJg161mfCIgDuqAbdDVmftIs83 QCR9YjTz3eko5zZKrlCA29vefz9k2UvehyNuGkx2UKrosswNqwQMQwQEOT+x1hjO hVn4NqFnjkuhxyOXaCGg2DfVNoyoGtSD1j71ZVFBT2r35gFjiN9iwKDiXJTTP50E FzrVbGpzRLlP7g3tXRTmIMLPFXJ/zh4Xy+hkFo7NaSZWcyjNgj6WOSWW3kINgJMR E3upAyzOAm0aROrEceuTrD/wKDLrCpJCzxWxFwre5uowuck0n7k= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:17 2025 by rpki-client