$ rpki-client -vvf repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft File: 74D4F2785CA261D018C909BA622D8244292BCB3E.mft (raw, json) Hash identifier: zTit/hAj8Ldccp7/KUpzXmS18mC6xCMF3rq7Y91BHSM= Subject key identifier: 8D:2B:7B:D5:8F:25:50:A4:FA:57:B6:2B:ED:CF:8E:31:54:4B:0F:8B Authority key identifier: 74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E Certificate issuer: /CN=74D4F2785CA261D018C909BA622D8244292BCB3E Certificate serial: 4C0C9C1156A4D0D120CD47CFAA6BD4F66DB48BBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft Manifest number: 0357 Signing time: Mon 20 Oct 2025 08:51:37 +0000 Manifest this update: Mon 20 Oct 2025 08:46:37 +0000 Manifest next update: Thu 23 Oct 2025 12:29:37 +0000 Files and hashes: 1: 3130332e3130332e3134342e302f32342d3234203d3e20313336383631.roa (hash: qaTsYAuDwYq3vmdm+MP/d1P3xUHxCKcLJsCvSBVNIeQ=) 2: 3130332e3130332e3134362e302f32342d3234203d3e20313336383631.roa (hash: gj/8lggfR8myqoNqzBWaOnMDIVL5S0r8bZN2DAfp+nY=) 3: 323430313a663563303a3a2f33322d3438203d3e20313336383631.roa (hash: EZvYjhUqWVWt3m8BlTlpwuqAgPj6OBoR83LID+/r3xw=) 4: 3130332e3130332e3134352e302f32342d3234203d3e20313336383631.roa (hash: u6oloP9Y8JGAma8cxbntxH8WmfQY01P9oCREk7+XMxs=) 5: 3130332e3130332e3134372e302f32342d3234203d3e20313336383631.roa (hash: GRVghrICNAdxouBIwXYTRSPY6doN9zN/lvPgtUZIKw0=) 6: 74D4F2785CA261D018C909BA622D8244292BCB3E.crl (hash: 0pwhraolDBkZT1okPvjcz/skCcKomIBoNRMh2sRDklY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:0c:9c:11:56:a4:d0:d1:20:cd:47:cf:aa:6b:d4:f6:6d:b4:8b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74D4F2785CA261D018C909BA622D8244292BCB3E Validity Not Before: Oct 20 08:46:37 2025 GMT Not After : Oct 23 12:29:37 2025 GMT Subject: CN=8D2B7BD58F2550A4FA57B62BEDCF8E31544B0F8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:63:3e:f6:8e:6d:a7:62:8f:be:8b:31:ba:42: 54:f5:68:3a:bf:7c:04:ca:5f:96:c1:8e:36:a7:ba: f9:71:45:b1:a6:67:db:7b:e7:8a:28:57:b2:98:a7: 07:35:ed:c7:7c:4b:93:0f:77:58:f0:1c:20:70:78: b1:6a:19:0f:8e:52:40:c3:00:9a:3b:2a:d3:cc:0e: 52:46:95:39:97:53:e7:2b:f7:82:28:c1:af:db:24: 19:5d:7a:a9:66:34:69:ff:c4:fb:0e:ed:a0:5a:d1: f3:ed:93:86:1f:69:0c:62:3f:0e:57:b4:f5:a4:f3: be:40:85:5e:90:83:d6:d3:47:2a:cc:57:c7:b1:fa: 00:27:07:a8:c7:16:c1:69:3f:56:b6:96:9c:e4:46: 55:68:51:d1:68:77:ab:a8:25:10:93:9d:bd:b0:46: 96:fb:7d:f0:9d:77:98:05:47:8a:7d:ba:7f:42:18: ef:1d:2e:49:a0:39:d8:2e:d2:2d:fd:77:19:1b:ef: 65:54:28:20:75:f1:ff:45:63:a3:d1:26:31:8a:8e: e2:e1:03:ee:1f:cc:fd:c1:e0:1b:64:95:84:2d:d1: bd:e3:bf:65:4c:b7:6f:b0:19:70:96:d0:5a:8d:71: f1:b6:3b:8a:a1:13:71:a6:b0:b3:0f:a2:00:f3:93: f0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2B:7B:D5:8F:25:50:A4:FA:57:B6:2B:ED:CF:8E:31:54:4B:0F:8B X509v3 Authority Key Identifier: keyid:74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ba:91:5b:33:c8:fa:97:56:9a:7e:26:64:d2:2c:b1:ea:03: d0:43:2b:3c:f5:fd:76:7f:33:25:bd:65:47:02:f0:ad:bf:16: f5:ac:dd:a8:46:cd:b4:43:f5:e6:fc:ba:63:0b:8b:cb:b3:aa: e4:ab:30:23:21:5a:ff:39:98:a6:4e:e3:b2:b6:53:2f:14:ca: 12:29:1b:0b:92:bb:63:4e:a3:1a:90:ba:ec:53:ee:ed:51:25: eb:76:d3:bf:19:2c:c5:3b:d4:8f:85:37:53:a5:53:8b:be:12: c6:5e:4f:30:6d:29:18:30:8e:b6:65:62:b3:5e:17:3f:86:ad: 2d:98:af:12:bb:8e:f7:31:4a:ea:17:14:f5:e7:f5:9f:6f:6c: 27:91:47:46:a8:94:7b:c3:a3:eb:ce:70:97:2f:e5:b5:24:47: 06:77:e8:7f:65:61:c7:5c:f2:27:6c:6c:ec:f0:cc:41:5b:b4: af:cb:e4:6c:e6:72:2e:69:e4:8f:7a:21:bf:3a:e6:2b:b0:d6: 45:5f:0e:2d:64:af:e1:d2:af:1b:5f:76:1c:09:54:09:dc:be: a7:a6:df:4b:a5:40:6e:1e:1d:81:1e:95:05:0b:1a:ca:48:af: dc:b4:3d:dc:1a:0d:77:d0:f4:53:1c:e6:4c:bd:1c:6f:0a:fa: f8:8d:28:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTAycEVak0NEgzUfPqmvU9m20i7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzRENEYyNzg1Q0EyNjFEMDE4QzkwOUJBNjIyRDgyNDQy OTJCQ0IzRTAeFw0yNTEwMjAwODQ2MzdaFw0yNTEwMjMxMjI5MzdaMDMxMTAvBgNV BAMTKDhEMkI3QkQ1OEYyNTUwQTRGQTU3QjYyQkVEQ0Y4RTMxNTQ0QjBGOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Yz72jm2nYo++izG6QlT1aDq/ fATKX5bBjjanuvlxRbGmZ9t754ooV7KYpwc17cd8S5MPd1jwHCBweLFqGQ+OUkDD AJo7KtPMDlJGlTmXU+cr94Iowa/bJBldeqlmNGn/xPsO7aBa0fPtk4YfaQxiPw5X tPWk875AhV6Qg9bTRyrMV8ex+gAnB6jHFsFpP1a2lpzkRlVoUdFod6uoJRCTnb2w Rpb7ffCdd5gFR4p9un9CGO8dLkmgOdgu0i39dxkb72VUKCB18f9FY6PRJjGKjuLh A+4fzP3B4BtklYQt0b3jv2VMt2+wGXCW0FqNcfG2O4qhE3GmsLMPogDzk/C5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjSt71Y8lUKT6V7Yr7c+OMVRLD4swHwYDVR0j BBgwFoAUdNTyeFyiYdAYyQm6Yi2CRCkryz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmVhNzdiNS04OGY3LTQwODUtYjMzMS05NzUwMjRjZDA0NmQvMC83NEQ0RjI3ODVD QTI2MUQwMThDOTA5QkE2MjJEODI0NDI5MkJDQjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzRENEYyNzg1Q0EyNjFEMDE4QzkwOUJBNjIyRDgyNDQyOTJC Q0IzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJlYTc3YjUtODhmNy00MDg1LWIz MzEtOTc1MDI0Y2QwNDZkLzAvNzRENEYyNzg1Q0EyNjFEMDE4QzkwOUJBNjIyRDgy NDQyOTJCQ0IzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+6kVszyPqXVpp+JmTSLLHqA9BDKzz1/XZ/ MyW9ZUcC8K2/FvWs3ahGzbRD9eb8umMLi8uzquSrMCMhWv85mKZO47K2Uy8UyhIp GwuSu2NOoxqQuuxT7u1RJet2078ZLMU71I+FN1OlU4u+EsZeTzBtKRgwjrZlYrNe Fz+GrS2YrxK7jvcxSuoXFPXn9Z9vbCeRR0aolHvDo+vOcJcv5bUkRwZ36H9lYcdc 8idsbOzwzEFbtK/L5Gzmci5p5I96Ib865iuw1kVfDi1kr+HSrxtfdhwJVAncvqem 30ulQG4eHYEelQULGspIr9y0PdwaDXfQ9FMc5ky9HG8K+viNKN4= -----END CERTIFICATE-----Generated at Mon Oct 20 15:50:14 2025 by rpki-client