$ rpki-client -vvf repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft File: C740DD931883C284135261B25A6958E80CDF63D2.mft (raw, json) Hash identifier: AFtvad5SBMFaFcGWA8LGTJGJ5Q3IqA0Ogs2KPuY2Plc= Subject key identifier: 3D:F2:C2:60:68:79:09:76:61:6C:DB:C4:49:F0:C5:5A:21:28:D4:86 Authority key identifier: C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2 Certificate issuer: /CN=C740DD931883C284135261B25A6958E80CDF63D2 Certificate serial: 09025E47F23FCD5CD819C8017B6316B5A208E97D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft Manifest number: 01D6 Signing time: Fri 07 Nov 2025 11:21:46 +0000 Manifest this update: Fri 07 Nov 2025 11:16:45 +0000 Manifest next update: Mon 10 Nov 2025 20:32:45 +0000 Files and hashes: 1: C740DD931883C284135261B25A6958E80CDF63D2.crl (hash: HaFCYOu6spCaUvh2jxWGxy3iFV8KwQQqZXYLpBvNcsI=) 2: 3130332e3133392e3132312e302f32342d3234203d3e20313335363336.roa (hash: e/+fdrBlXeDfzPxhtNh66HWs6aVcjxIjkZ4W4qgvVgQ=) 3: 3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa (hash: GyuTjfSXg8CKV3wiOvbPNmUEDlW/pVUvbq70+NpobI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 14:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:02:5e:47:f2:3f:cd:5c:d8:19:c8:01:7b:63:16:b5:a2:08:e9:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C740DD931883C284135261B25A6958E80CDF63D2 Validity Not Before: Nov 7 11:16:45 2025 GMT Not After : Nov 10 20:32:45 2025 GMT Subject: CN=3DF2C26068790976616CDBC449F0C55A2128D486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1a:c3:1e:3f:b6:ab:0e:7a:44:05:c9:fc:0f: 18:71:f9:46:bd:35:da:d9:c4:82:a9:78:0b:d9:88: 04:35:94:56:6e:7a:1a:61:ef:aa:96:d5:87:cb:13: 94:0a:35:fb:6c:cd:65:bc:5e:07:49:c9:0d:b6:e1: 0b:97:6f:fd:ff:89:b5:c2:54:dc:25:78:5e:ba:e1: b6:b0:e1:f7:ea:28:c5:93:a7:48:15:a0:94:a7:a4: 92:17:c7:51:18:b8:e4:d1:e8:fe:f8:f3:b5:bf:b5: 46:e1:be:c8:2c:f4:15:bf:a5:93:8e:5f:77:e8:b0: 49:cb:5e:65:63:2d:f2:43:ef:3a:9b:5a:b1:d5:0a: 23:05:95:f1:05:c8:6f:6b:24:5b:c8:6d:23:a0:29: b4:3e:aa:b3:c9:d4:c6:39:75:c0:b9:93:4d:d2:60: 35:42:35:89:9a:6c:91:0f:38:33:26:f0:76:31:4a: d3:d4:b2:1a:45:cc:2a:14:b9:da:8f:1d:fa:70:c1: 28:d0:77:c4:16:49:0d:dd:4a:0f:0e:c9:e4:61:1a: ed:fa:ce:26:90:e7:95:f3:93:53:b2:e8:2f:de:cd: c6:43:04:7b:ad:21:4a:f5:06:e6:90:0f:54:8f:d5: c7:3e:e7:c5:aa:0c:ba:ad:b2:55:16:f0:79:87:ac: 4b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F2:C2:60:68:79:09:76:61:6C:DB:C4:49:F0:C5:5A:21:28:D4:86 X509v3 Authority Key Identifier: keyid:C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:52:20:4a:d6:86:f5:56:76:19:7e:a2:e3:cf:6a:1f:77:07: b4:53:a3:39:28:28:90:f7:e1:94:c4:17:f8:40:a1:94:fb:d0: 19:72:15:2f:7d:c0:06:61:33:5c:fc:20:9e:aa:63:c1:2b:bf: 48:c5:fe:d2:b4:85:34:d8:b1:44:7f:dd:c8:35:85:8a:f0:d6: e0:4d:be:69:78:ba:ff:30:8e:cd:61:6b:1a:71:6b:d9:91:71: 7c:73:89:d7:1b:0e:57:d0:f6:61:bf:c1:0e:b4:71:f3:b4:83: 26:43:2b:4c:47:af:ba:dd:66:99:b7:b0:5c:8f:bb:aa:1e:aa: 78:b0:68:f1:05:96:01:11:28:17:6a:b5:66:ef:41:98:33:10: c1:79:ae:21:7b:4a:3b:42:d2:dd:ee:b1:74:ad:b6:67:a7:14: 0a:28:47:64:78:cd:f0:7d:25:e7:ed:d2:36:19:ab:7b:aa:61: 49:07:1a:39:7c:a9:4f:3e:e7:58:a3:4f:aa:06:94:bb:1c:8a: 61:ca:85:f0:0d:26:64:59:14:57:df:9a:fa:9e:8d:c8:cd:37: 5c:2b:2f:33:36:fc:30:c2:d4:2d:d4:7a:1f:c8:be:2c:63:01: 00:78:7b:df:a8:83:b2:db:da:f1:fe:b0:e9:46:15:73:24:4d: 39:7c:71:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCQJeR/I/zVzYGcgBe2MWtaII6X0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4RTgw Q0RGNjNEMjAeFw0yNTExMDcxMTE2NDVaFw0yNTExMTAyMDMyNDVaMDMxMTAvBgNV BAMTKDNERjJDMjYwNjg3OTA5NzY2MTZDREJDNDQ5RjBDNTVBMjEyOEQ0ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYGsMeP7arDnpEBcn8Dxhx+Ua9 NdrZxIKpeAvZiAQ1lFZuehph76qW1YfLE5QKNftszWW8XgdJyQ224QuXb/3/ibXC VNwleF664baw4ffqKMWTp0gVoJSnpJIXx1EYuOTR6P7487W/tUbhvsgs9BW/pZOO X3fosEnLXmVjLfJD7zqbWrHVCiMFlfEFyG9rJFvIbSOgKbQ+qrPJ1MY5dcC5k03S YDVCNYmabJEPODMm8HYxStPUshpFzCoUudqPHfpwwSjQd8QWSQ3dSg8OyeRhGu36 ziaQ55Xzk1Oy6C/ezcZDBHutIUr1BuaQD1SP1cc+58WqDLqtslUW8HmHrEtJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPfLCYGh5CXZhbNvESfDFWiEo1IYwHwYDVR0j BBgwFoAUx0DdkxiDwoQTUmGyWmlY6AzfY9IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDcxNDY2NS1jNjcwLTQ1MWUtYmRjYi05MDc0MjE5ZDU1Y2UvMC9DNzQwREQ5MzE4 ODNDMjg0MTM1MjYxQjI1QTY5NThFODBDREY2M0QyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4RTgwQ0RG NjNEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3MTQ2NjUtYzY3MC00NTFlLWJk Y2ItOTA3NDIxOWQ1NWNlLzAvQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4 RTgwQ0RGNjNEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMhSIErWhvVWdhl+ouPPah93B7RTozkoKJD3 4ZTEF/hAoZT70BlyFS99wAZhM1z8IJ6qY8Erv0jF/tK0hTTYsUR/3cg1hYrw1uBN vml4uv8wjs1haxpxa9mRcXxzidcbDlfQ9mG/wQ60cfO0gyZDK0xHr7rdZpm3sFyP u6oeqniwaPEFlgERKBdqtWbvQZgzEMF5riF7SjtC0t3usXSttmenFAooR2R4zfB9 Jeft0jYZq3uqYUkHGjl8qU8+51ijT6oGlLscimHKhfANJmRZFFffmvqejcjNN1wr LzM2/DDC1C3Ueh/IvixjAQB4e9+og7Lb2vH+sOlGFXMkTTl8cQY= -----END CERTIFICATE-----Generated at Fri Nov 7 13:25:37 2025 by rpki-client