$ rpki-client -vvf repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft File: 749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft (raw, json) Hash identifier: vem8WfRjy0ljGGRsyPgDv3lqbVFhzMgKPdwNrluVo1s= Subject key identifier: A1:32:67:9A:87:CF:A4:A7:37:8F:7C:3A:CD:8B:CC:96:15:3D:2B:9B Authority key identifier: 74:9E:8F:6C:5F:22:D1:8A:70:B6:82:F8:6C:65:EC:D3:EA:27:63:5C Certificate issuer: /CN=749E8F6C5F22D18A70B682F86C65ECD3EA27635C Certificate serial: 0950B6D9869E1AA5DE181A2C2968E2F1EC031DD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft Manifest number: 0205 Signing time: Sat 06 Sep 2025 16:11:56 +0000 Manifest this update: Sat 06 Sep 2025 16:06:56 +0000 Manifest next update: Wed 10 Sep 2025 03:19:56 +0000 Files and hashes: 1: 323030313a6466333a333438303a3a2f34382d3438203d3e20313430343433.roa (hash: VaGZ2rtQiVhlvvEqhey8VuIsjUW/H1CymqkYlv2nCyM=) 2: 749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl (hash: dm8Yo8YwDRqbIaHLGmrgRROH1696/ryoUgILApS6YIo=) 3: 3130332e3134392e3137362e302f32332d3233203d3e20313430343433.roa (hash: D6ZQ1Nszopc+tjvvlk9LxeInARJoQa1nF2ZqxR2uBQM=) 4: 3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa (hash: u/HGXTKlzUVzN3BHvIbNac6O5D491LLOLOhh0HKRChM=) 5: 3130332e3134392e3137372e302f32342d3234203d3e20313430343433.roa (hash: q3nnfuFQ9fllwu5vaDMWKT58tFIU7r2iWutM+FFs7uM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 03:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:50:b6:d9:86:9e:1a:a5:de:18:1a:2c:29:68:e2:f1:ec:03:1d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749E8F6C5F22D18A70B682F86C65ECD3EA27635C Validity Not Before: Sep 6 16:06:56 2025 GMT Not After : Sep 10 03:19:56 2025 GMT Subject: CN=A132679A87CFA4A7378F7C3ACD8BCC96153D2B9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d0:c5:2a:2b:45:37:5d:1e:03:c7:60:be:c4: c6:e5:4f:3d:64:4d:19:57:b6:6d:c6:42:ef:2e:02: 1e:78:50:14:6c:9a:67:97:fa:61:80:53:36:df:e6: b7:c5:37:e6:7b:5f:4f:3f:66:25:87:65:08:f0:4f: c9:bf:27:85:55:93:6c:cc:34:c8:e7:c5:26:db:06: aa:63:33:c3:02:62:d9:2f:95:20:ba:ec:2d:17:d4: 96:a6:5f:b8:c4:ae:ee:b7:5d:72:24:02:be:13:6f: 53:8c:ce:a7:00:26:bb:1b:e4:c5:23:a9:2f:96:d5: 99:cc:b4:0d:2c:25:b4:48:85:78:e4:d1:a6:b6:76: 38:1d:0e:10:07:18:72:75:00:4c:7d:22:40:1c:3e: fd:e3:ae:fb:41:0e:25:71:97:e6:7e:b1:e8:ae:f5: 7c:4f:74:3b:f0:98:b0:bd:4a:34:31:4d:ce:62:6b: e5:9f:25:22:3f:2b:2e:66:04:37:b2:55:1e:24:01: f4:e6:65:24:e8:be:3c:00:35:15:43:dc:2d:c9:bc: f0:b3:42:76:80:f5:88:66:58:e8:d8:22:f4:d1:2b: 05:5c:d8:c5:4e:cb:ad:13:97:16:91:00:91:f9:b0: 5a:25:a2:8f:70:10:aa:94:f4:5d:97:06:41:33:d6: ae:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:32:67:9A:87:CF:A4:A7:37:8F:7C:3A:CD:8B:CC:96:15:3D:2B:9B X509v3 Authority Key Identifier: keyid:74:9E:8F:6C:5F:22:D1:8A:70:B6:82:F8:6C:65:EC:D3:EA:27:63:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:33:dc:05:eb:57:71:c7:1e:02:6d:ba:49:28:d9:0c:2b:50: d8:3f:3c:0a:07:5d:85:40:c5:dc:ae:f4:20:c4:43:6e:6b:9e: 49:40:a7:6a:93:da:a7:12:89:fe:73:4a:77:97:e8:4e:68:b5: 0d:a5:ef:17:d9:c9:b4:82:c7:88:c4:1b:ee:c3:72:e3:97:13: ff:bd:4f:1a:d3:c9:26:4e:7f:2c:ae:99:f6:1a:7e:70:b3:9d: df:0c:ca:88:32:5c:2d:77:b6:e4:a3:89:d4:16:3b:6f:4c:c8: db:ad:46:2e:02:7b:cf:18:f5:a0:2e:a2:d9:e6:82:7b:68:f3: d2:bd:d8:ff:ef:41:23:4f:18:96:54:a8:e0:06:6b:eb:58:ba: 31:a0:3e:81:ea:f2:cf:e4:32:8c:e8:6f:32:ec:3a:84:94:60: a3:24:25:e7:24:c2:44:e8:7d:d2:09:f3:8a:cd:e8:02:a6:17: 78:bf:31:b6:06:3f:24:e1:3b:cb:59:4e:16:eb:b5:bb:76:c6: 5d:ff:f1:e3:e1:96:db:5c:2d:45:27:80:ff:90:db:f0:8b:3e: 34:3d:1d:cd:2b:18:23:e6:c8:8e:59:0d:95:7a:08:93:3c:46: 3b:b3:b3:55:da:e7:18:b2:5a:99:24:8f:29:a1:ab:c7:d7:c8: e3:c4:58:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCVC22YaeGqXeGBosKWji8ewDHdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVDRDNF QTI3NjM1QzAeFw0yNTA5MDYxNjA2NTZaFw0yNTA5MTAwMzE5NTZaMDMxMTAvBgNV BAMTKEExMzI2NzlBODdDRkE0QTczNzhGN0MzQUNEOEJDQzk2MTUzRDJCOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc0MUqK0U3XR4Dx2C+xMblTz1k TRlXtm3GQu8uAh54UBRsmmeX+mGAUzbf5rfFN+Z7X08/ZiWHZQjwT8m/J4VVk2zM NMjnxSbbBqpjM8MCYtkvlSC67C0X1JamX7jEru63XXIkAr4Tb1OMzqcAJrsb5MUj qS+W1ZnMtA0sJbRIhXjk0aa2djgdDhAHGHJ1AEx9IkAcPv3jrvtBDiVxl+Z+seiu 9XxPdDvwmLC9SjQxTc5ia+WfJSI/Ky5mBDeyVR4kAfTmZSTovjwANRVD3C3JvPCz QnaA9YhmWOjYIvTRKwVc2MVOy60TlxaRAJH5sFoloo9wEKqU9F2XBkEz1q6xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoTJnmofPpKc3j3w6zYvMlhU9K5swHwYDVR0j BBgwFoAUdJ6PbF8i0YpwtoL4bGXs0+onY1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWU4ZGIzOC02M2E4LTQxM2MtYTlmNi1jYzIyM2FmYTRhNzUvMC83NDlFOEY2QzVG MjJEMThBNzBCNjgyRjg2QzY1RUNEM0VBMjc2MzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVDRDNFQTI3 NjM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFlOGRiMzgtNjNhOC00MTNjLWE5 ZjYtY2MyMjNhZmE0YTc1LzAvNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVD RDNFQTI3NjM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEz3AXrV3HHHgJtukko2QwrUNg/PAoHXYVA xdyu9CDEQ25rnklAp2qT2qcSif5zSneX6E5otQ2l7xfZybSCx4jEG+7DcuOXE/+9 TxrTySZOfyyumfYafnCznd8MyogyXC13tuSjidQWO29MyNutRi4Ce88Y9aAuotnm gnto89K92P/vQSNPGJZUqOAGa+tYujGgPoHq8s/kMozobzLsOoSUYKMkJeckwkTo fdIJ84rN6AKmF3i/MbYGPyThO8tZThbrtbt2xl3/8ePhlttcLUUngP+Q2/CLPjQ9 Hc0rGCPmyI5ZDZV6CJM8Rjuzs1Xa5xiyWpkkjymhq8fXyOPEWOU= -----END CERTIFICATE-----Generated at Tue Sep 9 02:27:17 2025 by rpki-client