$ rpki-client -vvf repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft File: 748B52A8C3E54FEB10B3067D1E130242894DB86F.mft (raw, json) Hash identifier: bw0tnJ3wTv2Olg1wU5NBfS42gs9FynRe9+hF+3+/8uk= Subject key identifier: A1:88:F2:42:B6:F7:E2:31:BA:7C:2A:B8:EA:2B:2E:2E:D1:DC:DE:F6 Authority key identifier: 74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F Certificate issuer: /CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Certificate serial: 29AF0C3DF21F10A132D4628FEA9BB2D07520861C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft Manifest number: 015F Signing time: Sun 01 Jun 2025 20:41:14 +0000 Manifest this update: Sun 01 Jun 2025 20:36:14 +0000 Manifest next update: Thu 05 Jun 2025 05:20:14 +0000 Files and hashes: 1: 748B52A8C3E54FEB10B3067D1E130242894DB86F.crl (hash: UvgcAbae+B2/5V3lx37gbwveJPQ4XbJoKymf8W2LnBk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 05:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:af:0c:3d:f2:1f:10:a1:32:d4:62:8f:ea:9b:b2:d0:75:20:86:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Validity Not Before: Jun 1 20:36:14 2025 GMT Not After : Jun 5 05:20:14 2025 GMT Subject: CN=A188F242B6F7E231BA7C2AB8EA2B2E2ED1DCDEF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b5:95:e6:76:13:c6:a8:e4:f8:dc:4c:57:dc: 44:ca:4f:b5:ac:2e:52:0a:0c:52:3e:d0:d9:9e:c8: f5:b5:b7:aa:7b:73:18:2d:d9:36:60:4b:5d:8e:10: 78:4a:ae:98:db:09:28:bf:8b:9f:b3:d3:aa:52:60: b2:1f:68:cf:a1:9a:61:5b:29:24:b7:a6:a1:d6:2d: 18:5e:b5:3d:5b:16:39:96:c0:cf:23:fc:f7:18:a7: f8:cf:9d:45:86:f5:98:15:45:cf:bc:c2:ad:cf:c6: f6:47:8c:8d:be:00:12:5c:aa:20:ce:1c:aa:57:e6: 98:d8:dc:0f:0d:91:5c:b8:6d:80:69:63:1c:4a:f9: 01:70:f5:65:d1:89:05:86:90:bd:92:51:4c:03:99: d6:cb:da:5b:1e:c7:a3:b2:fd:ea:8f:ec:2f:4a:ba: 8a:b4:30:be:77:a8:d0:bf:0c:cd:ea:00:85:59:fe: 01:0d:b6:69:8b:0e:a2:e7:9c:97:58:44:6f:60:ba: 39:7c:9d:86:2c:6f:a2:e0:bf:d7:f6:74:82:48:09: ad:a6:7f:e5:6d:12:3b:98:ac:a3:d7:5d:4f:f4:59: fb:b1:e2:de:4f:90:78:f5:5b:fd:20:84:69:51:9a: e5:92:fc:8b:20:6f:85:3b:68:ec:53:9d:0c:c1:75: 61:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:88:F2:42:B6:F7:E2:31:BA:7C:2A:B8:EA:2B:2E:2E:D1:DC:DE:F6 X509v3 Authority Key Identifier: keyid:74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:90:8e:18:2e:93:40:ef:2b:b9:4e:a8:35:bc:d9:d7:da:6b: cd:9f:d3:5c:e5:17:5e:47:ed:97:2f:9a:86:51:63:0b:79:59: bc:06:99:0b:aa:0a:3a:d9:e0:c5:00:2b:a0:f5:f3:00:92:7c: eb:65:2b:1b:0c:94:bf:29:4d:39:a4:66:b4:dd:11:06:ce:2c: f3:41:60:a9:d5:3e:de:72:b9:bc:f6:c8:8e:c9:34:1f:89:f8: 80:83:94:c4:7c:11:ec:60:00:18:33:7b:41:26:79:e6:74:68: e5:c2:ab:f6:c0:30:70:87:c7:9f:39:be:b2:b6:ec:72:ef:81: 33:e9:27:58:a8:4b:7f:fb:8b:f5:3e:a4:05:c1:da:32:da:8c: ee:39:4b:19:0e:63:fb:26:e8:1a:db:31:51:65:8d:61:69:10: d3:2e:38:25:58:af:ea:0b:27:e3:f2:34:b7:ea:27:0a:bf:d1: 1a:0d:d4:c9:a7:d5:ad:bd:bb:f5:05:8f:2f:76:74:4d:41:f1: b1:b4:4a:b3:77:eb:dc:d6:36:04:17:1e:3a:b3:dc:af:cc:4e: 1c:56:b0:7b:43:30:cb:16:06:22:e0:79:e8:b7:05:7b:ba:9d: 35:91:eb:e1:0a:6d:ea:ec:74:6f:88:6f:81:8a:e3:32:4b:90: 53:cf:7f:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKa8MPfIfEKEy1GKP6puy0HUghhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4 OTREQjg2RjAeFw0yNTA2MDEyMDM2MTRaFw0yNTA2MDUwNTIwMTRaMDMxMTAvBgNV BAMTKEExODhGMjQyQjZGN0UyMzFCQTdDMkFCOEVBMkIyRTJFRDFEQ0RFRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2tZXmdhPGqOT43ExX3ETKT7Ws LlIKDFI+0NmeyPW1t6p7cxgt2TZgS12OEHhKrpjbCSi/i5+z06pSYLIfaM+hmmFb KSS3pqHWLRhetT1bFjmWwM8j/PcYp/jPnUWG9ZgVRc+8wq3PxvZHjI2+ABJcqiDO HKpX5pjY3A8NkVy4bYBpYxxK+QFw9WXRiQWGkL2SUUwDmdbL2lsex6Oy/eqP7C9K uoq0ML53qNC/DM3qAIVZ/gENtmmLDqLnnJdYRG9gujl8nYYsb6Lgv9f2dIJICa2m f+VtEjuYrKPXXU/0Wfux4t5PkHj1W/0ghGlRmuWS/Isgb4U7aOxTnQzBdWHDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoYjyQrb34jG6fCq46isuLtHc3vYwHwYDVR0j BBgwFoAUdItSqMPlT+sQswZ9HhMCQolNuG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDNlOWNkNi1iOTBkLTRjOGUtYjBkNi0yMWE1NTI5ZjcyOTEvMC83NDhCNTJBOEMz RTU0RkVCMTBCMzA2N0QxRTEzMDI0Mjg5NERCODZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4OTRE Qjg2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzZTljZDYtYjkwZC00YzhlLWIw ZDYtMjFhNTUyOWY3MjkxLzAvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAy NDI4OTREQjg2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFiQjhguk0DvK7lOqDW82dfaa82f01zlF15H 7ZcvmoZRYwt5WbwGmQuqCjrZ4MUAK6D18wCSfOtlKxsMlL8pTTmkZrTdEQbOLPNB YKnVPt5yubz2yI7JNB+J+ICDlMR8EexgABgze0EmeeZ0aOXCq/bAMHCHx585vrK2 7HLvgTPpJ1ioS3/7i/U+pAXB2jLajO45SxkOY/sm6BrbMVFljWFpENMuOCVYr+oL J+PyNLfqJwq/0RoN1Mmn1a29u/UFjy92dE1B8bG0SrN369zWNgQXHjqz3K/MThxW sHtDMMsWBiLgeei3BXu6nTWR6+EKbersdG+Ib4GK4zJLkFPPf7w= -----END CERTIFICATE-----Generated at Tue Jun 3 23:13:17 2025 by rpki-client