$ rpki-client -vvf repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft File: A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft (raw, json) Hash identifier: 0udrCiWzZo0SEI4HP7iiXsSkHt8Q0vF5XIxpVTWlJk8= Subject key identifier: CC:05:1E:BA:5A:45:31:63:50:9C:09:FC:B1:D4:93:DB:3D:FE:B4:94 Authority key identifier: A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E Certificate issuer: /CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E Certificate serial: 045E11A8C0E0099EBA8B1AA8EAD8C9CB9F5E4C74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft Manifest number: 0200 Signing time: Wed 03 Sep 2025 20:01:53 +0000 Manifest this update: Wed 03 Sep 2025 19:56:53 +0000 Manifest next update: Sun 07 Sep 2025 04:47:53 +0000 Files and hashes: 1: A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl (hash: LwHxh08zyi+9cN6qaHAk7WlCdQAG00gH7vIjJssHIDA=) 2: 3130332e3138332e39342e302f32342d3234203d3e20313439343132.roa (hash: /432ui2qmqLAqTG2YzJyGFJbPM4fOVIctbLjFQr3ZFs=) 3: 3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa (hash: 5BGjTlG6kn0xa+zG7WIOf2FPOI4RcyC7jSjDUVIBLp8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 04:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5e:11:a8:c0:e0:09:9e:ba:8b:1a:a8:ea:d8:c9:cb:9f:5e:4c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E Validity Not Before: Sep 3 19:56:53 2025 GMT Not After : Sep 7 04:47:53 2025 GMT Subject: CN=CC051EBA5A453163509C09FCB1D493DB3DFEB494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7a:94:a9:a0:4c:28:51:fc:21:9a:55:80:05: 58:13:61:7d:74:27:ee:3c:bd:da:31:66:14:a3:17: f3:40:bd:6d:44:ec:e4:1b:72:43:a5:b9:2f:66:bc: 34:7b:f5:76:00:73:78:c4:ef:19:c5:32:ee:4c:0d: c1:88:14:5b:ff:5f:40:02:7b:d6:8f:f7:25:08:81: 46:f2:2d:62:e6:ad:e9:bc:60:4c:f4:dd:09:ea:4e: 7e:78:87:d2:6f:da:45:ca:44:73:5f:fc:a5:15:cd: 6e:8d:c9:5f:27:87:d3:f0:9b:ce:e6:f8:03:14:e1: b5:bd:ed:59:ac:9b:1f:7a:79:2d:2d:ec:e0:cc:4a: 5b:ab:30:8c:8f:31:3a:cb:83:e3:ac:6d:84:67:3b: 63:9d:3f:8f:53:44:7e:16:3f:80:8e:40:10:ec:b9: 24:44:fd:a4:6b:38:a6:1f:16:28:01:66:73:b1:1d: 1c:c3:f0:38:cf:0b:b3:df:30:6b:d7:c3:31:d3:10: 2c:89:2e:de:1d:4a:fe:7f:79:2f:f4:90:3c:bf:14: 64:a6:d8:46:82:a7:dd:ae:ad:d2:c7:64:90:95:a3: 16:3e:09:68:94:1b:45:16:b2:00:f4:d6:92:40:57: 24:7c:d9:00:bd:e5:c2:be:75:31:84:a3:c7:b0:5e: 4f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:05:1E:BA:5A:45:31:63:50:9C:09:FC:B1:D4:93:DB:3D:FE:B4:94 X509v3 Authority Key Identifier: keyid:A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:62:00:bb:3a:e1:f3:79:a7:41:03:df:92:6f:2f:37:92:99: 09:a8:3b:0e:42:a6:f9:90:1d:da:b3:51:17:7d:05:44:ea:6d: e8:ab:27:41:ef:a0:52:32:4a:4c:c5:a8:55:39:ea:bb:63:ba: e1:b9:ae:6e:2d:ba:e8:af:c6:e7:83:42:11:43:9d:01:eb:8d: 07:a1:69:f6:9d:b4:90:c5:a0:f7:95:d6:b9:c9:07:4c:ed:cc: 28:0b:43:f0:b2:4d:fe:07:77:e5:d3:ba:aa:d2:87:9d:6a:71: dd:9a:ce:4f:d0:7d:96:26:5f:0f:ef:b4:f9:8d:9f:18:34:49: 21:5b:e4:25:18:90:e2:52:88:d2:86:7a:30:6f:eb:b6:60:08: 21:32:9f:62:c6:2c:f6:1b:18:04:d9:07:98:02:a4:7d:d2:c9: 59:e8:80:c2:06:95:df:db:7b:77:d8:b4:38:13:87:51:b2:42: fc:e2:c0:d4:79:0c:d2:04:2c:b4:20:fc:4f:3f:3f:94:7d:05: 79:b9:9a:31:31:e4:db:fe:ed:ec:87:95:6e:db:88:ca:29:1f: 4b:00:af:f0:46:0b:96:72:77:87:59:38:d8:71:02:af:5d:24: 07:ca:ff:f0:08:37:10:dc:ac:dc:97:71:59:1a:ca:42:e1:a4: 63:b9:81:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBF4RqMDgCZ66ixqo6tjJy59eTHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIyMkMz RUU5QzYwRTAeFw0yNTA5MDMxOTU2NTNaFw0yNTA5MDcwNDQ3NTNaMDMxMTAvBgNV BAMTKENDMDUxRUJBNUE0NTMxNjM1MDlDMDlGQ0IxRDQ5M0RCM0RGRUI0OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhepSpoEwoUfwhmlWABVgTYX10 J+48vdoxZhSjF/NAvW1E7OQbckOluS9mvDR79XYAc3jE7xnFMu5MDcGIFFv/X0AC e9aP9yUIgUbyLWLmrem8YEz03QnqTn54h9Jv2kXKRHNf/KUVzW6NyV8nh9Pwm87m +AMU4bW97Vmsmx96eS0t7ODMSlurMIyPMTrLg+OsbYRnO2OdP49TRH4WP4COQBDs uSRE/aRrOKYfFigBZnOxHRzD8DjPC7PfMGvXwzHTECyJLt4dSv5/eS/0kDy/FGSm 2EaCp92urdLHZJCVoxY+CWiUG0UWsgD01pJAVyR82QC95cK+dTGEo8ewXk99AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzAUeulpFMWNQnAn8sdST2z3+tJQwHwYDVR0j BBgwFoAUp0lmJAtkJ0uQ6+Bs4O4iLD7pxg4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGRjMTI4My0xY2UyLTQxYTUtYWZlNi1mMGJlMzFlOWIxMGQvMC9BNzQ5NjYyNDBC NjQyNzRCOTBFQkUwNkNFMEVFMjIyQzNFRTlDNjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIyMkMzRUU5 QzYwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBkYzEyODMtMWNlMi00MWE1LWFm ZTYtZjBiZTMxZTliMTBkLzAvQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIy MkMzRUU5QzYwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFiALs64fN5p0ED35JvLzeSmQmoOw5CpvmQ HdqzURd9BUTqbeirJ0HvoFIySkzFqFU56rtjuuG5rm4tuuivxueDQhFDnQHrjQeh afadtJDFoPeV1rnJB0ztzCgLQ/CyTf4Hd+XTuqrSh51qcd2azk/QfZYmXw/vtPmN nxg0SSFb5CUYkOJSiNKGejBv67ZgCCEyn2LGLPYbGATZB5gCpH3SyVnogMIGld/b e3fYtDgTh1GyQvziwNR5DNIELLQg/E8/P5R9BXm5mjEx5Nv+7eyHlW7biMopH0sA r/BGC5Zyd4dZONhxAq9dJAfK//AINxDcrNyXcVkaykLhpGO5ges= -----END CERTIFICATE-----Generated at Fri Sep 5 10:29:35 2025 by rpki-client