$ rpki-client -vvf repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft File: 74017DA6C3B6935388C1ADE6008FB78FAC671213.mft (raw, json) Hash identifier: bEbcJ6LtaY5csRbbp7xZCKEOSJuubYJGuojfO031x64= Subject key identifier: BA:72:FF:C5:28:20:1F:6C:C2:74:6A:B2:1B:5F:7C:AE:3F:1D:98:62 Authority key identifier: 74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 Certificate issuer: /CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Certificate serial: 45D3AC888CB4A4E18A614625C0792A6DECD26048 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft Manifest number: 014E Signing time: Sat 05 Jul 2025 11:01:51 +0000 Manifest this update: Sat 05 Jul 2025 10:56:51 +0000 Manifest next update: Tue 08 Jul 2025 21:40:51 +0000 Files and hashes: 1: 74017DA6C3B6935388C1ADE6008FB78FAC671213.crl (hash: ZyVrl8IiX4/D/TSyVpCR02VOmIsEX0A1D4cGgS70IgY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 21:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d3:ac:88:8c:b4:a4:e1:8a:61:46:25:c0:79:2a:6d:ec:d2:60:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Validity Not Before: Jul 5 10:56:51 2025 GMT Not After : Jul 8 21:40:51 2025 GMT Subject: CN=BA72FFC528201F6CC2746AB21B5F7CAE3F1D9862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6a:73:49:c6:61:65:c5:51:a2:fb:ba:63:46: 31:66:b0:62:a2:dd:4c:6b:b5:e8:a1:36:6a:a0:4c: 85:3b:43:b3:1f:0c:63:8f:cd:1a:41:47:82:0a:63: 0f:db:ca:d8:4a:e7:c0:f8:8f:fc:d2:8b:38:06:01: 39:06:a2:c2:ed:82:2d:42:54:8c:0b:90:7f:28:81: c0:3a:3e:4a:e0:fb:00:28:0e:3d:3e:73:3d:0c:e3: d0:ae:a0:c7:85:31:9a:96:34:24:32:25:ff:e7:12: f3:d6:2f:39:52:f2:a5:7a:73:44:ca:78:b8:ec:ad: 11:0e:11:29:14:11:88:2b:f6:80:ad:04:47:a1:5e: f0:5c:b6:16:07:de:59:59:8e:10:a2:af:3e:60:a1: cb:26:9c:22:3d:b0:d3:0f:71:f9:b2:a4:73:70:39: 73:cf:30:80:7d:22:57:0d:a6:32:d3:51:96:db:db: 6b:c1:15:d5:6b:88:aa:e7:aa:f3:28:56:00:45:7e: 76:2b:37:20:9e:d6:70:56:dc:18:8c:29:0a:c8:ca: d3:92:3e:dc:de:c0:a2:48:1c:d1:68:cf:42:2a:f7: 99:af:91:58:92:43:89:28:d4:63:91:bc:07:0c:2a: 3c:83:78:f1:22:34:3b:60:a4:d2:47:81:bd:29:16: 14:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:72:FF:C5:28:20:1F:6C:C2:74:6A:B2:1B:5F:7C:AE:3F:1D:98:62 X509v3 Authority Key Identifier: keyid:74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:46:b0:59:59:5a:a5:4a:fe:64:56:98:8a:4f:a4:3c:07:60: c9:e6:c9:da:06:08:90:6d:f0:1e:09:b2:b5:01:9b:5f:8f:e4: aa:9c:e8:ba:5d:df:1e:9c:7c:9f:75:e8:de:a2:75:47:34:cd: 5f:f6:bf:12:75:b0:11:8c:24:37:4a:f6:1e:5e:ca:c2:8e:9a: af:79:06:65:49:51:4d:73:7c:6b:77:35:d8:6f:d0:89:dc:db: a4:38:35:fa:da:2e:5f:aa:8d:c6:dc:08:bb:06:20:67:bb:1b: 9b:86:85:e0:91:7b:a9:c9:0e:30:76:ac:97:7d:1b:58:ca:e1: a8:02:98:69:f3:ba:ce:10:51:51:5a:8f:1a:4d:e2:69:7b:e1: 5a:8f:39:26:6c:91:f3:43:94:61:a7:d3:9a:9f:55:29:59:9e: 41:c3:e8:96:f4:ba:02:05:1f:94:ab:17:1a:83:c1:6e:89:99: 40:5a:2c:62:72:09:c6:f7:be:f2:28:f2:63:05:68:ce:f0:7d: 3b:8e:e6:59:c8:c8:4d:b9:72:57:b8:c7:80:0a:1b:33:cb:06: da:b8:03:ff:b8:c5:95:a2:15:7d:d5:a9:5c:3c:92:60:db:0f: da:bb:35:dc:e0:d9:7c:27:10:b4:9f:d4:5e:e6:ec:f4:67:45: 79:37:ea:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURdOsiIy0pOGKYUYlwHkqbezSYEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZB QzY3MTIxMzAeFw0yNTA3MDUxMDU2NTFaFw0yNTA3MDgyMTQwNTFaMDMxMTAvBgNV BAMTKEJBNzJGRkM1MjgyMDFGNkNDMjc0NkFCMjFCNUY3Q0FFM0YxRDk4NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8anNJxmFlxVGi+7pjRjFmsGKi 3UxrteihNmqgTIU7Q7MfDGOPzRpBR4IKYw/bythK58D4j/zSizgGATkGosLtgi1C VIwLkH8ogcA6Pkrg+wAoDj0+cz0M49CuoMeFMZqWNCQyJf/nEvPWLzlS8qV6c0TK eLjsrREOESkUEYgr9oCtBEehXvBcthYH3llZjhCirz5gocsmnCI9sNMPcfmypHNw OXPPMIB9IlcNpjLTUZbb22vBFdVriKrnqvMoVgBFfnYrNyCe1nBW3BiMKQrIytOS PtzewKJIHNFoz0Iq95mvkViSQ4ko1GORvAcMKjyDePEiNDtgpNJHgb0pFhSXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUunL/xSggH2zCdGqyG198rj8dmGIwHwYDVR0j BBgwFoAUdAF9psO2k1OIwa3mAI+3j6xnEhMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2FkZWNkZC0yNTMzLTQ2MmQtYWNlMi1iYTRhN2EyY2E0YzMvMC83NDAxN0RBNkMz QjY5MzUzODhDMUFERTYwMDhGQjc4RkFDNjcxMjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZBQzY3 MTIxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNhZGVjZGQtMjUzMy00NjJkLWFj ZTItYmE0YTdhMmNhNGMzLzAvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3 OEZBQzY3MTIxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhGsFlZWqVK/mRWmIpPpDwHYMnmydoGCJBt 8B4JsrUBm1+P5Kqc6Lpd3x6cfJ916N6idUc0zV/2vxJ1sBGMJDdK9h5eysKOmq95 BmVJUU1zfGt3Ndhv0Inc26Q4NfraLl+qjcbcCLsGIGe7G5uGheCRe6nJDjB2rJd9 G1jK4agCmGnzus4QUVFajxpN4ml74VqPOSZskfNDlGGn05qfVSlZnkHD6Jb0ugIF H5SrFxqDwW6JmUBaLGJyCcb3vvIo8mMFaM7wfTuO5lnIyE25cle4x4AKGzPLBtq4 A/+4xZWiFX3VqVw8kmDbD9q7Ndzg2XwnELSf1F7m7PRnRXk36jc= -----END CERTIFICATE-----Generated at Sat Jul 5 21:04:05 2025 by rpki-client