$ rpki-client -vvf repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft File: 749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft (raw, json) Hash identifier: XjsDkWhxA7hz7l0dmSVX0eVg9dLltkvTAES5D8MyGow= Subject key identifier: 07:18:32:1B:46:7C:94:AF:19:B3:FB:BF:07:D1:0C:52:B6:AC:41:61 Authority key identifier: 74:9E:8F:6C:5F:22:D1:8A:70:B6:82:F8:6C:65:EC:D3:EA:27:63:5C Certificate issuer: /CN=749E8F6C5F22D18A70B682F86C65ECD3EA27635C Certificate serial: 4F23DF1B8C85574989E7DF875FC67300F064B99A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft Manifest number: 01DB Signing time: Tue 03 Jun 2025 04:22:51 +0000 Manifest this update: Tue 03 Jun 2025 04:17:51 +0000 Manifest next update: Fri 06 Jun 2025 08:22:51 +0000 Files and hashes: 1: 3130332e3134392e3137372e302f32342d3234203d3e20313430343433.roa (hash: q3nnfuFQ9fllwu5vaDMWKT58tFIU7r2iWutM+FFs7uM=) 2: 3130332e3134392e3137362e302f32332d3233203d3e20313430343433.roa (hash: D6ZQ1Nszopc+tjvvlk9LxeInARJoQa1nF2ZqxR2uBQM=) 3: 749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl (hash: cx/1+p1xk2MV/pF6y38JBe5Oa0o5AypXlSn9GYNqEOM=) 4: 323030313a6466333a333438303a3a2f34382d3438203d3e20313430343433.roa (hash: VaGZ2rtQiVhlvvEqhey8VuIsjUW/H1CymqkYlv2nCyM=) 5: 3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa (hash: u/HGXTKlzUVzN3BHvIbNac6O5D491LLOLOhh0HKRChM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 08:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:23:df:1b:8c:85:57:49:89:e7:df:87:5f:c6:73:00:f0:64:b9:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749E8F6C5F22D18A70B682F86C65ECD3EA27635C Validity Not Before: Jun 3 04:17:51 2025 GMT Not After : Jun 6 08:22:51 2025 GMT Subject: CN=0718321B467C94AF19B3FBBF07D10C52B6AC4161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:aa:14:94:cd:34:d6:a5:72:21:ea:93:12:e9: 6d:2f:40:e2:22:4a:78:fd:7e:fd:a5:8e:25:8c:4c: 95:98:7f:43:60:12:9c:f4:a2:cc:c0:95:10:e3:e9: 08:c1:77:a8:59:b0:a7:5d:86:f2:b6:6a:94:12:31: f1:23:ab:b5:9e:d6:32:13:e5:a1:82:d7:5e:2a:f3: 7b:f3:9f:a8:6e:38:83:47:cf:ee:4d:c8:dc:8c:81: 0c:0b:b9:60:74:05:3e:b0:2d:19:bb:08:7c:ee:0e: eb:83:23:f7:4c:75:cf:eb:a0:5a:40:80:93:56:c3: 72:53:b0:18:db:69:aa:65:7a:c8:6e:65:c9:bc:4d: 38:36:fa:06:2b:b3:22:ad:d6:cd:eb:4d:da:37:a8: 47:ee:a8:bf:de:68:f6:d4:dc:e5:60:5e:1a:93:0e: 10:29:d3:cf:8b:a3:c3:2c:99:4d:27:9c:ca:7a:c2: ca:36:4d:3d:ed:aa:89:4e:56:60:38:7b:9e:1f:e7: fe:e1:6c:b2:f9:54:f7:0e:51:23:1e:22:a2:ef:a5: 8c:d0:36:ee:8d:95:c1:e5:b0:d1:93:06:68:a7:61: 4a:a4:49:d3:9f:f7:08:c9:86:e2:a5:16:5b:69:07: 3c:49:90:1e:4b:47:4c:fd:2b:cf:dc:1d:16:90:7f: c3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:18:32:1B:46:7C:94:AF:19:B3:FB:BF:07:D1:0C:52:B6:AC:41:61 X509v3 Authority Key Identifier: keyid:74:9E:8F:6C:5F:22:D1:8A:70:B6:82:F8:6C:65:EC:D3:EA:27:63:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:94:5d:5a:2e:8a:d0:82:91:e2:ad:0e:e8:ed:b9:15:53:0a: 95:59:d5:07:dd:35:00:bd:de:ee:22:d4:f4:60:b1:1c:66:db: a9:34:8b:e9:b4:7f:74:b2:19:2c:84:03:b2:ac:0a:bf:8b:56: c5:b8:97:b6:39:f2:95:e0:b7:52:66:41:c7:ab:d1:03:a6:fc: 31:ec:7f:39:2b:4d:e4:22:c1:49:a6:73:66:58:d3:fa:a9:88: 6d:80:00:33:c8:60:05:c9:7a:c9:e6:f5:9e:cb:a8:c8:c6:c6: 57:41:b9:cd:72:86:c7:57:35:95:d2:de:a0:85:f6:b0:6f:ed: 0f:74:3a:dc:26:78:a5:a3:18:a7:d4:19:f5:de:f4:49:10:df: 37:d3:d2:02:17:dc:8a:f6:21:b4:1f:ae:e4:81:4e:15:dd:08: e4:4b:48:45:1f:2a:13:26:a7:8a:d7:e5:72:ff:aa:e5:4f:1b: 7d:3a:7e:b5:23:ec:54:60:45:61:78:c2:41:1f:fd:1d:53:a5: a2:5c:6a:9b:17:75:e5:75:3f:40:41:dd:8f:89:e1:8b:bc:b9: 08:24:58:9a:d5:d2:47:47:14:7c:24:5a:d4:d0:53:b1:49:af: 61:a0:8f:86:2b:dd:1a:e8:62:d6:3e:f3:77:76:5f:f3:59:5f: ca:64:7e:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTyPfG4yFV0mJ59+HX8ZzAPBkuZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVDRDNF QTI3NjM1QzAeFw0yNTA2MDMwNDE3NTFaFw0yNTA2MDYwODIyNTFaMDMxMTAvBgNV BAMTKDA3MTgzMjFCNDY3Qzk0QUYxOUIzRkJCRjA3RDEwQzUyQjZBQzQxNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoqhSUzTTWpXIh6pMS6W0vQOIi Snj9fv2ljiWMTJWYf0NgEpz0oszAlRDj6QjBd6hZsKddhvK2apQSMfEjq7We1jIT 5aGC114q83vzn6huOINHz+5NyNyMgQwLuWB0BT6wLRm7CHzuDuuDI/dMdc/roFpA gJNWw3JTsBjbaapleshuZcm8TTg2+gYrsyKt1s3rTdo3qEfuqL/eaPbU3OVgXhqT DhAp08+Lo8MsmU0nnMp6wso2TT3tqolOVmA4e54f5/7hbLL5VPcOUSMeIqLvpYzQ Nu6NlcHlsNGTBminYUqkSdOf9wjJhuKlFltpBzxJkB5LR0z9K8/cHRaQf8MNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBxgyG0Z8lK8Zs/u/B9EMUrasQWEwHwYDVR0j BBgwFoAUdJ6PbF8i0YpwtoL4bGXs0+onY1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWU4ZGIzOC02M2E4LTQxM2MtYTlmNi1jYzIyM2FmYTRhNzUvMC83NDlFOEY2QzVG MjJEMThBNzBCNjgyRjg2QzY1RUNEM0VBMjc2MzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVDRDNFQTI3 NjM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFlOGRiMzgtNjNhOC00MTNjLWE5 ZjYtY2MyMjNhZmE0YTc1LzAvNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVD RDNFQTI3NjM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmUXVouitCCkeKtDujtuRVTCpVZ1QfdNQC9 3u4i1PRgsRxm26k0i+m0f3SyGSyEA7KsCr+LVsW4l7Y58pXgt1JmQcer0QOm/DHs fzkrTeQiwUmmc2ZY0/qpiG2AADPIYAXJesnm9Z7LqMjGxldBuc1yhsdXNZXS3qCF 9rBv7Q90OtwmeKWjGKfUGfXe9EkQ3zfT0gIX3Ir2IbQfruSBThXdCORLSEUfKhMm p4rX5XL/quVPG306frUj7FRgRWF4wkEf/R1TpaJcapsXdeV1P0BB3Y+J4Yu8uQgk WJrV0kdHFHwkWtTQU7FJr2Ggj4Yr3RroYtY+83d2X/NZX8pkfug= -----END CERTIFICATE-----Generated at Tue Jun 3 23:34:44 2025 by rpki-client