$ rpki-client -vvf repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft File: 74017DA6C3B6935388C1ADE6008FB78FAC671213.mft (raw, json) Hash identifier: EyXgofucoKcx79Rx7LubhdSD2ZQVcQgEFVJxX1F/rUE= Subject key identifier: AA:10:39:C7:DA:C6:D5:9A:E8:17:6F:35:DA:EA:BA:6E:9A:0D:DA:F9 Authority key identifier: 74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 Certificate issuer: /CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Certificate serial: 6C352A419BCC51B9CFC5756DE7F44DE06F8F1D8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft Manifest number: 0169 Signing time: Wed 03 Sep 2025 09:51:52 +0000 Manifest this update: Wed 03 Sep 2025 09:46:52 +0000 Manifest next update: Sat 06 Sep 2025 10:14:52 +0000 Files and hashes: 1: 74017DA6C3B6935388C1ADE6008FB78FAC671213.crl (hash: 0Ol9UR+8+WEHJ1fNYCqg35V77rLI+eRmXp/yK4PEsVY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 10:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:35:2a:41:9b:cc:51:b9:cf:c5:75:6d:e7:f4:4d:e0:6f:8f:1d:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Validity Not Before: Sep 3 09:46:52 2025 GMT Not After : Sep 6 10:14:52 2025 GMT Subject: CN=AA1039C7DAC6D59AE8176F35DAEABA6E9A0DDAF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3a:c1:18:eb:e3:57:e3:a0:96:7e:14:7e:97: db:7e:e7:50:eb:ce:f4:64:60:68:a2:03:ce:c1:c4: 4a:78:57:d8:60:95:a3:c3:11:75:56:32:d5:63:c0: ae:05:7c:d9:90:cf:4a:78:06:0e:4d:4e:ad:5a:88: d2:7d:70:52:73:06:15:25:57:ee:94:00:14:2a:a2: fe:1b:97:9f:4f:a7:e9:47:25:28:5c:93:38:c6:4b: 10:47:68:17:4b:7f:07:40:e2:5d:42:e5:85:96:e7: 38:2a:27:92:1a:ef:6d:24:fc:0d:67:56:7a:74:d3: 21:78:da:ca:e4:5a:97:7f:f7:ca:8b:a5:24:1c:25: 92:53:26:3a:c5:24:18:08:87:2b:39:32:06:ef:ee: bb:37:51:7a:dc:3e:f0:8c:16:e5:05:1d:34:33:f6: a5:92:55:dd:cf:c5:78:8d:e4:71:99:59:88:08:16: 07:78:a5:3d:3d:41:40:1b:0e:9a:9e:0f:29:c6:64: 6f:81:d0:88:91:28:fe:dd:8a:af:98:61:82:d3:62: 00:9d:9e:0e:22:b6:75:2e:3c:23:44:06:f8:c7:85: 20:26:b2:40:f1:8c:33:d1:f1:9e:b8:f5:91:cf:21: 64:81:25:e4:a0:35:22:c7:ff:de:c4:90:d0:54:83: ac:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:10:39:C7:DA:C6:D5:9A:E8:17:6F:35:DA:EA:BA:6E:9A:0D:DA:F9 X509v3 Authority Key Identifier: keyid:74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b0:84:d7:ff:74:df:b1:0e:fe:2b:d0:d1:a8:a1:e5:b0:e2: 51:8e:e1:e2:df:42:47:08:2a:04:a1:a9:2e:df:8e:0a:1b:26: c0:d4:2e:73:c6:6c:e0:1e:06:36:2e:53:25:c2:16:7d:00:26: 35:04:ac:f9:de:45:f0:fa:95:63:0d:3c:63:d9:f5:c2:ff:62: 2e:cd:2b:03:3d:54:f5:17:3e:23:c8:db:fe:b3:ba:ab:61:90: ba:86:1b:e5:32:da:f7:88:1e:52:fd:17:13:ec:49:3e:49:9d: ec:9f:c7:6f:3c:96:dc:a5:2b:3b:80:7e:bb:06:8a:78:70:bb: 16:ea:18:53:3b:8c:69:3c:21:2c:e3:f3:e8:d9:bc:fa:fa:d3: 52:a5:49:3f:b5:75:92:63:29:e3:bd:43:4b:31:eb:e5:4a:fa: 9d:f7:a8:8b:23:f3:8e:06:b4:0e:d3:71:a4:f7:19:1c:fd:23: 76:16:f1:4d:a1:c1:d6:f7:b1:14:ba:fc:76:95:e0:88:99:c5: 54:e8:3b:ed:bb:d0:9a:69:9b:7b:01:c1:9c:50:82:de:31:de: 7b:ca:f4:90:07:e8:c0:5b:6d:90:71:38:4d:9e:c7:25:8f:6f: ea:60:36:bf:02:66:b5:fd:9e:7b:50:a9:de:84:20:d0:63:15: 5d:ef:50:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbDUqQZvMUbnPxXVt5/RN4G+PHYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZB QzY3MTIxMzAeFw0yNTA5MDMwOTQ2NTJaFw0yNTA5MDYxMDE0NTJaMDMxMTAvBgNV BAMTKEFBMTAzOUM3REFDNkQ1OUFFODE3NkYzNURBRUFCQTZFOUEwRERBRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiOsEY6+NX46CWfhR+l9t+51Dr zvRkYGiiA87BxEp4V9hglaPDEXVWMtVjwK4FfNmQz0p4Bg5NTq1aiNJ9cFJzBhUl V+6UABQqov4bl59Pp+lHJShckzjGSxBHaBdLfwdA4l1C5YWW5zgqJ5Ia720k/A1n Vnp00yF42srkWpd/98qLpSQcJZJTJjrFJBgIhys5Mgbv7rs3UXrcPvCMFuUFHTQz 9qWSVd3PxXiN5HGZWYgIFgd4pT09QUAbDpqeDynGZG+B0IiRKP7diq+YYYLTYgCd ng4itnUuPCNEBvjHhSAmskDxjDPR8Z649ZHPIWSBJeSgNSLH/97EkNBUg6zxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqhA5x9rG1ZroF2812uq6bpoN2vkwHwYDVR0j BBgwFoAUdAF9psO2k1OIwa3mAI+3j6xnEhMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2FkZWNkZC0yNTMzLTQ2MmQtYWNlMi1iYTRhN2EyY2E0YzMvMC83NDAxN0RBNkMz QjY5MzUzODhDMUFERTYwMDhGQjc4RkFDNjcxMjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZBQzY3 MTIxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNhZGVjZGQtMjUzMy00NjJkLWFj ZTItYmE0YTdhMmNhNGMzLzAvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3 OEZBQzY3MTIxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJuwhNf/dN+xDv4r0NGooeWw4lGO4eLfQkcI KgShqS7fjgobJsDULnPGbOAeBjYuUyXCFn0AJjUErPneRfD6lWMNPGPZ9cL/Yi7N KwM9VPUXPiPI2/6zuqthkLqGG+Uy2veIHlL9FxPsST5Jneyfx288ltylKzuAfrsG inhwuxbqGFM7jGk8ISzj8+jZvPr601KlST+1dZJjKeO9Q0sx6+VK+p33qIsj844G tA7TcaT3GRz9I3YW8U2hwdb3sRS6/HaV4IiZxVToO+270Jppm3sBwZxQgt4x3nvK 9JAH6MBbbZBxOE2exyWPb+pgNr8CZrX9nntQqd6EINBjFV3vUOc= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:18 2025 by rpki-client