$ rpki-client -vvf repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft File: 67749A065BBCF1E57768F4207E1B2FE788604D47.mft (raw, json) Hash identifier: pBWIau36Y5bU+sCrlUp2my2Q/dM94dQeKBPao6LQx8A= Subject key identifier: 29:18:11:96:47:34:35:77:5C:B3:22:2D:0B:CB:61:CD:4B:0D:E7:00 Authority key identifier: 67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47 Certificate issuer: /CN=67749A065BBCF1E57768F4207E1B2FE788604D47 Certificate serial: 7A014D97FA8B16AF6FF8B3AF59A0B844AAC7D5CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft Manifest number: 017F Signing time: Sat 18 Oct 2025 20:51:10 +0000 Manifest this update: Sat 18 Oct 2025 20:46:10 +0000 Manifest next update: Wed 22 Oct 2025 00:39:10 +0000 Files and hashes: 1: 67749A065BBCF1E57768F4207E1B2FE788604D47.crl (hash: wo02Bm2/fFd/jt8k0wyyMYvYQL8GREIMWQ655vtuo2g=) 2: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: DrfxLIvnXV7Zd1k+L6FjxK0p1QfF/z3NuqgLUILzqc8=) 3: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: tIbwoMZK41wfJ142ETUMWiif6nOoigy0JRS2kkbypRw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:01:4d:97:fa:8b:16:af:6f:f8:b3:af:59:a0:b8:44:aa:c7:d5:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67749A065BBCF1E57768F4207E1B2FE788604D47 Validity Not Before: Oct 18 20:46:10 2025 GMT Not After : Oct 22 00:39:10 2025 GMT Subject: CN=29181196473435775CB3222D0BCB61CD4B0DE700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:81:f7:f2:0c:ff:95:e3:45:65:41:1c:df:b3: 15:e2:df:33:05:44:4a:08:07:f2:e4:6e:de:e8:d4: 5a:8c:2f:26:ff:63:d1:ec:35:61:73:96:92:fb:4e: 73:5c:ba:7e:5e:f2:19:df:2b:c9:9f:2a:65:f9:0f: db:d2:42:5d:95:fa:1b:5d:7d:41:68:71:28:bd:46: e5:96:38:0c:3e:b8:13:27:43:c0:f5:8b:34:4f:0a: c6:96:a7:f2:a6:53:e2:32:83:48:a5:cd:09:2b:77: 52:62:80:2b:55:2a:8f:60:b6:69:d1:64:79:57:86: 49:70:63:9a:cb:ea:94:fe:c5:10:54:48:5d:f2:72: b9:92:28:b0:00:21:7a:c8:42:00:d2:3c:0e:f0:a3: 91:72:bb:f2:08:0b:6a:d1:27:b5:08:36:aa:76:2a: c2:d6:dd:70:9c:d0:14:ea:b3:38:1a:3e:92:8f:eb: 3c:ed:3b:b6:43:ab:67:62:d4:75:e7:f4:4c:3f:99: a7:fd:bd:7a:fa:de:88:e6:2b:f9:45:e0:9a:3a:04: b5:c5:6f:14:b5:a5:d5:64:54:f0:84:1b:48:24:29: 3d:ee:14:4a:32:f7:74:a6:79:9c:bf:e2:b0:97:47: d0:73:ba:4b:00:58:c7:1b:7c:31:c2:06:0a:76:b6: 2b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:18:11:96:47:34:35:77:5C:B3:22:2D:0B:CB:61:CD:4B:0D:E7:00 X509v3 Authority Key Identifier: keyid:67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:1b:45:56:59:61:a3:a8:ee:55:64:b4:2c:86:a4:e9:c5:2d: 81:03:89:f0:cc:2b:13:d3:8f:0d:0b:69:e5:dc:5f:ee:45:da: 06:c0:d9:28:2b:f9:61:65:a0:24:d0:65:a6:95:db:e9:55:b6: 2f:58:2d:88:c0:ea:e8:03:45:31:3a:e0:d3:8a:1e:76:dc:b3: 36:d6:f8:41:8c:90:d2:20:84:78:27:87:e5:30:e0:28:19:00: 44:46:6a:0e:74:94:49:f2:9f:1a:06:d6:d5:0b:f9:c9:76:ab: 9f:40:a4:89:36:c4:9a:3b:fa:d9:bf:e4:32:e2:15:91:ee:b5: 07:3e:ec:ee:28:f3:29:fe:9d:64:a2:e2:35:02:e8:4b:cd:66: 7c:57:48:18:17:eb:bf:22:4f:89:d9:60:cd:63:08:d5:13:d3: a5:68:bc:9f:66:16:d4:43:22:af:73:03:c8:e1:55:64:b8:32: dc:7d:9b:f4:f5:a6:da:15:1b:f0:f7:e3:bc:c0:15:31:31:9c: 49:e1:68:b1:23:08:c1:c4:95:e7:58:c7:df:c3:f8:53:4c:77: a0:18:89:8d:16:73:a4:d5:e7:1e:44:7f:ca:48:1c:13:06:45: 2d:53:f3:f2:ec:23:a0:13:22:c4:7f:f7:ff:a0:5b:66:a0:46: a2:31:3d:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUegFNl/qLFq9v+LOvWaC4RKrH1cowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJGRTc4 ODYwNEQ0NzAeFw0yNTEwMTgyMDQ2MTBaFw0yNTEwMjIwMDM5MTBaMDMxMTAvBgNV BAMTKDI5MTgxMTk2NDczNDM1Nzc1Q0IzMjIyRDBCQ0I2MUNENEIwREU3MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6gffyDP+V40VlQRzfsxXi3zMF REoIB/Lkbt7o1FqMLyb/Y9HsNWFzlpL7TnNcun5e8hnfK8mfKmX5D9vSQl2V+htd fUFocSi9RuWWOAw+uBMnQ8D1izRPCsaWp/KmU+Iyg0ilzQkrd1JigCtVKo9gtmnR ZHlXhklwY5rL6pT+xRBUSF3ycrmSKLAAIXrIQgDSPA7wo5Fyu/IIC2rRJ7UINqp2 KsLW3XCc0BTqszgaPpKP6zztO7ZDq2di1HXn9Ew/maf9vXr63ojmK/lF4Jo6BLXF bxS1pdVkVPCEG0gkKT3uFEoy93SmeZy/4rCXR9BzuksAWMcbfDHCBgp2tiuRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKRgRlkc0NXdcsyItC8thzUsN5wAwHwYDVR0j BBgwFoAUZ3SaBlu88eV3aPQgfhsv54hgTUcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTE1N2NlZC1lODJjLTQzMzQtOTAzYS1jY2NiYmU5Y2ZlODkvMC82Nzc0OUEwNjVC QkNGMUU1Nzc2OEY0MjA3RTFCMkZFNzg4NjA0RDQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJGRTc4ODYw NEQ0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkxNTdjZWQtZTgyYy00MzM0LTkw M2EtY2NjYmJlOWNmZTg5LzAvNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJG RTc4ODYwNEQ0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQbRVZZYaOo7lVktCyGpOnFLYEDifDMKxPT jw0LaeXcX+5F2gbA2Sgr+WFloCTQZaaV2+lVti9YLYjA6ugDRTE64NOKHnbcszbW +EGMkNIghHgnh+Uw4CgZAERGag50lEnynxoG1tUL+cl2q59ApIk2xJo7+tm/5DLi FZHutQc+7O4o8yn+nWSi4jUC6EvNZnxXSBgX678iT4nZYM1jCNUT06VovJ9mFtRD Iq9zA8jhVWS4Mtx9m/T1ptoVG/D347zAFTExnEnhaLEjCMHEledYx9/D+FNMd6AY iY0Wc6TV5x5Ef8pIHBMGRS1T8/LsI6ATIsR/9/+gW2agRqIxPSQ= -----END CERTIFICATE-----Generated at Mon Oct 20 20:57:03 2025 by rpki-client