$ rpki-client -vvf repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft File: 74017DA6C3B6935388C1ADE6008FB78FAC671213.mft (raw, json) Hash identifier: ZFmIAlWZJN1qbSoQv2xOTsrJTDMvQjcWLvad1QcbJeE= Subject key identifier: 29:13:B8:44:35:FF:8B:21:AC:9B:94:56:AC:40:03:BA:B1:CF:2A:2D Authority key identifier: 74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 Certificate issuer: /CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Certificate serial: 712AD049D94F1D4EF7DA7BE55ED2BD1156462C0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft Manifest number: 0142 Signing time: Sun 08 Jun 2025 07:11:54 +0000 Manifest this update: Sun 08 Jun 2025 07:06:54 +0000 Manifest next update: Wed 11 Jun 2025 18:56:54 +0000 Files and hashes: 1: 74017DA6C3B6935388C1ADE6008FB78FAC671213.crl (hash: B6ETEhyGPGaH7cxXNyzf+UvcSKA53UdTrogB2qnIVS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:2a:d0:49:d9:4f:1d:4e:f7:da:7b:e5:5e:d2:bd:11:56:46:2c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Validity Not Before: Jun 8 07:06:54 2025 GMT Not After : Jun 11 18:56:54 2025 GMT Subject: CN=2913B84435FF8B21AC9B9456AC4003BAB1CF2A2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a8:f4:92:3e:ff:74:b3:9b:93:0e:5b:c9:f6: d5:2a:6a:41:56:2e:d9:07:b9:33:bb:b7:b9:c2:23: 1a:16:3a:43:58:ed:0d:cd:20:7d:c8:14:e3:4c:c8: eb:d4:4a:22:da:a1:b7:49:02:5c:e5:69:f7:6b:14: fe:59:4b:fa:96:9a:65:b8:f9:de:d2:0c:3c:dc:82: f3:73:b3:e5:c1:cb:03:e0:ac:05:dc:48:a2:20:f9: 85:92:61:a6:21:a6:a0:2b:01:77:de:7c:10:64:a9: 5a:c7:80:ce:c0:de:1b:97:78:cf:6d:f7:30:e3:f5: fc:9c:28:7b:5d:e0:8b:65:7b:0f:9a:90:ee:c7:91: 89:2a:d8:89:f2:55:83:86:eb:c1:c6:3b:4e:d8:d4: 70:0a:84:2b:95:12:5c:41:f1:e7:f7:9b:44:63:dd: ba:a7:c4:17:3a:e2:3f:9d:89:bc:7c:5f:0f:ba:d9: 3a:8d:c0:58:c7:9a:a6:c5:11:1e:11:e1:91:52:09: 21:78:bf:46:ca:5e:2b:fe:be:c7:63:c5:cf:eb:36: 2d:bf:e6:1c:39:fb:13:74:cd:d1:6f:cc:55:7c:57: 2d:4f:00:ac:42:28:c3:a7:67:8d:22:45:f9:e8:17: 3b:46:f5:70:83:d1:f3:db:a3:58:81:0f:02:de:fa: 2e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:13:B8:44:35:FF:8B:21:AC:9B:94:56:AC:40:03:BA:B1:CF:2A:2D X509v3 Authority Key Identifier: keyid:74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:35:5f:5a:e9:4b:85:1a:6c:65:c0:df:5e:92:79:e3:7e:e2: e5:73:df:9d:63:52:f5:28:ac:00:19:6e:de:55:75:bd:0f:f1: 70:b8:a1:98:0f:cf:3a:be:27:4c:57:24:70:80:f2:68:38:4d: 83:0c:0b:a9:22:8b:72:41:70:6a:a8:f3:41:f0:fc:f2:e4:bf: 3a:62:50:f9:64:3e:dc:5e:2e:f7:1a:2c:1b:43:48:af:1a:41: c9:4c:7a:08:dc:96:31:a6:e7:b9:24:2a:8b:61:31:cc:52:93: 0c:f8:82:ec:0b:4f:e2:83:71:8e:0a:67:ab:1b:96:86:09:d6: 5e:4a:c1:8e:e1:75:44:7c:6f:11:98:36:38:c4:c9:64:b6:18: f2:25:6f:9f:05:f5:72:21:dc:6a:9c:3b:33:24:b0:f7:0c:11: ce:bf:9a:78:9f:5b:64:b8:f6:d4:7b:6e:6a:23:97:c9:af:33: 77:4d:72:96:73:87:94:b7:81:e4:a0:3a:f3:bd:16:27:81:86: b3:0b:ae:10:2c:e5:6a:d5:74:b0:7f:2a:a0:cc:a9:e7:85:18: 6e:b1:90:5c:52:08:b3:b5:df:23:2a:59:ec:e1:93:cc:90:a2: 02:83:b0:f6:e5:e1:8c:20:84:28:b2:05:b3:6f:99:98:84:64: b3:78:97:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcSrQSdlPHU732nvlXtK9EVZGLAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZB QzY3MTIxMzAeFw0yNTA2MDgwNzA2NTRaFw0yNTA2MTExODU2NTRaMDMxMTAvBgNV BAMTKDI5MTNCODQ0MzVGRjhCMjFBQzlCOTQ1NkFDNDAwM0JBQjFDRjJBMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjqPSSPv90s5uTDlvJ9tUqakFW LtkHuTO7t7nCIxoWOkNY7Q3NIH3IFONMyOvUSiLaobdJAlzlafdrFP5ZS/qWmmW4 +d7SDDzcgvNzs+XBywPgrAXcSKIg+YWSYaYhpqArAXfefBBkqVrHgM7A3huXeM9t 9zDj9fycKHtd4Itlew+akO7HkYkq2InyVYOG68HGO07Y1HAKhCuVElxB8ef3m0Rj 3bqnxBc64j+dibx8Xw+62TqNwFjHmqbFER4R4ZFSCSF4v0bKXiv+vsdjxc/rNi2/ 5hw5+xN0zdFvzFV8Vy1PAKxCKMOnZ40iRfnoFztG9XCD0fPbo1iBDwLe+i4FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKRO4RDX/iyGsm5RWrEADurHPKi0wHwYDVR0j BBgwFoAUdAF9psO2k1OIwa3mAI+3j6xnEhMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2FkZWNkZC0yNTMzLTQ2MmQtYWNlMi1iYTRhN2EyY2E0YzMvMC83NDAxN0RBNkMz QjY5MzUzODhDMUFERTYwMDhGQjc4RkFDNjcxMjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZBQzY3 MTIxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNhZGVjZGQtMjUzMy00NjJkLWFj ZTItYmE0YTdhMmNhNGMzLzAvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3 OEZBQzY3MTIxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFk1X1rpS4UabGXA316SeeN+4uVz351jUvUo rAAZbt5Vdb0P8XC4oZgPzzq+J0xXJHCA8mg4TYMMC6kii3JBcGqo80Hw/PLkvzpi UPlkPtxeLvcaLBtDSK8aQclMegjcljGm57kkKothMcxSkwz4guwLT+KDcY4KZ6sb loYJ1l5KwY7hdUR8bxGYNjjEyWS2GPIlb58F9XIh3GqcOzMksPcMEc6/mnifW2S4 9tR7bmojl8mvM3dNcpZzh5S3geSgOvO9FieBhrMLrhAs5WrVdLB/KqDMqeeFGG6x kFxSCLO13yMqWezhk8yQogKDsPbl4YwghCiyBbNvmZiEZLN4l+8= -----END CERTIFICATE-----Generated at Sun Jun 8 23:27:17 2025 by rpki-client