$ rpki-client -vvf repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft File: 743D7544160232918AB5AB2CD90221B4C4E978E5.mft (raw, json) Hash identifier: tZWLAV7RwBlq1zDrYRYVuGZxmz48Ni5iJvNL8n8N4L8= Subject key identifier: A7:DA:6D:50:54:5D:2B:A9:2C:7D:1B:B0:D7:66:28:7A:0D:61:AA:F2 Authority key identifier: 74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5 Certificate issuer: /CN=743D7544160232918AB5AB2CD90221B4C4E978E5 Certificate serial: 512D8C6B82C119F323C8E552AD760653D30F8C18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft Manifest number: 018B Signing time: Fri 22 Aug 2025 22:51:02 +0000 Manifest this update: Fri 22 Aug 2025 22:46:02 +0000 Manifest next update: Tue 26 Aug 2025 05:48:02 +0000 Files and hashes: 1: 743D7544160232918AB5AB2CD90221B4C4E978E5.crl (hash: eI6tKPbxMCFaH9DhelylK8bULeHGlo0QrlkULoYnO8w=) 2: 3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa (hash: Z7Z02l6lwQScJffXxbcOwRM3DR/Zcud+xbv6JirEUW0=) 3: 3130332e38312e3235342e302f32342d3234203d3e20313530353533.roa (hash: E2z3KSns6iTpnPXpRNJQCkLuXAdqTPQfcSqYdPzsxRI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:2d:8c:6b:82:c1:19:f3:23:c8:e5:52:ad:76:06:53:d3:0f:8c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743D7544160232918AB5AB2CD90221B4C4E978E5 Validity Not Before: Aug 22 22:46:02 2025 GMT Not After : Aug 26 05:48:02 2025 GMT Subject: CN=A7DA6D50545D2BA92C7D1BB0D766287A0D61AAF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:67:ef:e0:69:82:ed:4e:9e:1b:42:37:b1:63: bf:d7:5e:c0:4f:9e:af:d1:36:ad:32:1c:ce:2c:cd: 4c:54:18:f4:e3:f2:8a:68:23:49:c6:3b:34:8b:7c: 87:78:99:6a:9d:db:89:46:59:8d:cf:85:b3:43:93: 06:3d:24:e1:c6:ab:65:66:f7:9b:b1:95:b1:0a:c3: be:e9:9f:b6:90:8d:27:b8:df:56:5e:c7:2f:ac:2b: f0:bc:19:b8:ff:87:b0:d6:6e:3d:df:17:96:9f:40: 30:a6:b9:f7:e5:12:c5:f6:e9:46:b5:9e:e5:e4:6a: ef:2c:4c:7e:78:26:4c:fb:3c:61:62:ad:64:ae:2a: 29:d1:d5:f7:b7:e7:b8:41:ec:2a:05:26:ca:fb:fc: 66:f7:75:11:fc:08:e1:5f:be:74:26:9b:7c:ad:e5: 1a:ea:8d:c4:a2:92:b7:73:a2:78:b7:93:19:32:e8: fb:67:37:5e:dd:0f:37:0e:77:13:15:20:72:07:d7: 5b:ff:fa:62:0a:ed:21:8c:31:e9:19:2e:48:b9:21: de:85:c3:9f:b9:f9:13:a6:01:b5:5a:a3:73:70:43: 5b:b2:ab:83:fb:32:69:b8:82:c9:e4:10:6f:39:22: 9d:7f:35:03:b5:30:5b:39:c0:ee:2e:2b:e4:6d:02: 35:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DA:6D:50:54:5D:2B:A9:2C:7D:1B:B0:D7:66:28:7A:0D:61:AA:F2 X509v3 Authority Key Identifier: keyid:74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:73:28:64:b6:f3:95:ec:4a:97:0e:7d:d7:be:ba:0d:66:72: 51:a8:4a:6c:32:be:1c:f6:f8:2f:78:cd:d5:73:ec:84:bd:15: 5c:55:1d:6c:00:d8:1c:8e:7b:6d:f9:da:8f:5d:69:25:c1:da: f9:77:da:a8:f2:cd:19:b4:3f:cf:70:58:c4:ae:29:3a:cf:8d: 89:96:1e:43:76:d4:18:4a:64:94:8f:0b:7b:c7:22:15:ff:81: c9:26:51:2e:ab:8b:99:22:06:e7:a8:e4:46:38:b2:7d:0f:38: 6f:0f:5b:d4:62:b8:73:13:4a:3c:63:72:00:af:5c:6a:7f:e1: 1a:68:18:0e:54:42:a0:26:f2:1f:11:2e:09:98:05:fe:b4:e9: 8a:fa:65:92:fb:ab:ad:88:54:2a:34:06:00:42:d7:79:91:fa: 63:99:99:02:28:2d:01:ab:ae:bf:64:12:08:f4:7d:9b:91:21: 1a:bc:d8:f8:af:b8:e3:0f:86:46:34:4e:c3:7c:fe:39:97:dc: 23:8a:e3:bb:52:71:dc:97:0d:18:30:95:33:68:0f:5f:e2:04: ca:d1:22:32:d6:96:9f:25:fe:ae:97:23:6a:67:c9:b8:b3:dd: 33:02:63:81:44:07:30:2a:d9:cf:63:a9:1e:db:09:bd:bf:90: 22:57:37:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUS2Ma4LBGfMjyOVSrXYGU9MPjBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIxQjRD NEU5NzhFNTAeFw0yNTA4MjIyMjQ2MDJaFw0yNTA4MjYwNTQ4MDJaMDMxMTAvBgNV BAMTKEE3REE2RDUwNTQ1RDJCQTkyQzdEMUJCMEQ3NjYyODdBMEQ2MUFBRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQZ+/gaYLtTp4bQjexY7/XXsBP nq/RNq0yHM4szUxUGPTj8opoI0nGOzSLfId4mWqd24lGWY3PhbNDkwY9JOHGq2Vm 95uxlbEKw77pn7aQjSe431Zexy+sK/C8Gbj/h7DWbj3fF5afQDCmufflEsX26Ua1 nuXkau8sTH54Jkz7PGFirWSuKinR1fe357hB7CoFJsr7/Gb3dRH8COFfvnQmm3yt 5RrqjcSikrdzoni3kxky6PtnN17dDzcOdxMVIHIH11v/+mIK7SGMMekZLki5Id6F w5+5+ROmAbVao3NwQ1uyq4P7Mmm4gsnkEG85Ip1/NQO1MFs5wO4uK+RtAjUJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp9ptUFRdK6ksfRuw12Yoeg1hqvIwHwYDVR0j BBgwFoAUdD11RBYCMpGKtass2QIhtMTpeOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGZkNDIzNC0xMzIzLTRmMGUtYjY4Ni0xZDcyYWNiODgwMjkvMC83NDNENzU0NDE2 MDIzMjkxOEFCNUFCMkNEOTAyMjFCNEM0RTk3OEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIxQjRDNEU5 NzhFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRmZDQyMzQtMTMyMy00ZjBlLWI2 ODYtMWQ3MmFjYjg4MDI5LzAvNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIx QjRDNEU5NzhFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpzKGS285XsSpcOfde+ug1mclGoSmwyvhz2 +C94zdVz7IS9FVxVHWwA2ByOe2352o9daSXB2vl32qjyzRm0P89wWMSuKTrPjYmW HkN21BhKZJSPC3vHIhX/gckmUS6ri5kiBueo5EY4sn0POG8PW9RiuHMTSjxjcgCv XGp/4RpoGA5UQqAm8h8RLgmYBf606Yr6ZZL7q62IVCo0BgBC13mR+mOZmQIoLQGr rr9kEgj0fZuRIRq82PivuOMPhkY0TsN8/jmX3COK47tScdyXDRgwlTNoD1/iBMrR IjLWlp8l/q6XI2pnybiz3TMCY4FEBzAq2c9jqR7bCb2/kCJXNwg= -----END CERTIFICATE-----Generated at Sat Aug 23 12:25:32 2025 by rpki-client