$ rpki-client -vvf repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft File: 74017DA6C3B6935388C1ADE6008FB78FAC671213.mft (raw, json) Hash identifier: oEr3bdjDbJnzI+2gJxjTece7AoNYLn7HPuBmFAmU0Ig= Subject key identifier: 5F:61:50:3D:D7:34:47:83:76:8B:1F:1B:95:25:C3:AB:6E:5F:23:22 Authority key identifier: 74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 Certificate issuer: /CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Certificate serial: 3C912B7B0F3CF46BB41DF5AD595459F9017D10A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft Manifest number: 017E Signing time: Mon 20 Oct 2025 18:51:52 +0000 Manifest this update: Mon 20 Oct 2025 18:46:52 +0000 Manifest next update: Thu 23 Oct 2025 23:22:52 +0000 Files and hashes: 1: 74017DA6C3B6935388C1ADE6008FB78FAC671213.crl (hash: ngrs8t2z82IXo8a4b4IxBBtftCKhKwURUBKhVehzhJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 23:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:91:2b:7b:0f:3c:f4:6b:b4:1d:f5:ad:59:54:59:f9:01:7d:10:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Validity Not Before: Oct 20 18:46:52 2025 GMT Not After : Oct 23 23:22:52 2025 GMT Subject: CN=5F61503DD7344783768B1F1B9525C3AB6E5F2322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9b:fe:67:f6:ff:8e:34:8a:66:50:9c:b0:f1: eb:32:39:59:70:fe:5d:cc:81:b1:8a:79:39:77:23: 1a:8d:91:a5:66:0e:14:df:a9:80:70:9a:94:a7:25: 3d:3f:09:84:35:f2:9e:28:d2:bd:64:97:15:b6:5c: 7c:76:b8:85:b7:2a:6c:67:52:1c:22:3a:6f:8d:c2: e1:58:6f:9b:f5:ac:84:f2:25:de:98:05:01:5e:70: 36:cd:5a:0a:db:e1:54:9b:50:e3:21:46:91:a4:5b: 35:7f:cc:b2:fc:61:a3:73:44:51:48:12:d9:45:f3: 51:78:33:43:f0:27:d7:67:9a:cc:a4:60:85:ca:5c: 90:06:74:dd:46:f9:5c:56:0b:16:56:9d:a2:43:19: 9f:59:85:73:66:cf:b1:29:ed:1f:ad:2f:10:96:6c: 59:b7:09:30:3f:20:30:4c:9a:30:ad:10:7a:dd:36: 4a:91:c8:2e:f3:34:6e:34:1a:dd:b2:78:f8:82:0b: 90:1b:08:08:d7:ca:fe:8d:8a:3a:68:a7:7f:b0:d8: 92:da:7c:a1:73:c0:37:22:cc:17:d5:00:17:1c:23: c1:c9:83:bb:62:f7:ca:cb:1a:5a:15:a0:05:0d:80: c0:f5:3b:43:d7:f2:fa:fb:7c:2c:1f:b3:58:9b:8f: 57:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:61:50:3D:D7:34:47:83:76:8B:1F:1B:95:25:C3:AB:6E:5F:23:22 X509v3 Authority Key Identifier: keyid:74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:15:55:5e:14:f4:9a:b3:c8:a3:c8:bc:68:e3:94:91:1f:ea: 92:f6:2b:0f:e5:8f:f7:ed:52:5c:32:23:17:39:c1:b8:0f:0d: 33:5a:08:a1:08:88:87:81:79:2c:56:85:ef:e1:6b:68:59:6f: c2:45:ef:6d:b4:56:87:c2:65:59:e4:8a:c7:d1:3c:2f:26:a3: 20:0b:42:33:07:21:e4:54:cd:bc:9f:1f:58:b5:3e:4c:ba:ec: 18:cd:2a:9c:15:3f:ce:4f:cb:10:31:51:2c:fa:d9:93:c5:93: ff:f7:9f:bf:19:84:2f:d5:46:e8:26:3b:6f:bc:f1:c3:43:e5: 2b:86:35:69:4c:92:60:0f:1c:48:89:bf:81:92:b2:ce:ec:2f: 2f:34:63:22:bd:cb:ef:59:7f:93:4c:d4:0e:ec:27:86:ce:47: 24:bc:7a:e5:04:60:98:a5:83:51:ad:54:90:41:c8:97:f5:e0: e3:f9:21:f4:3a:0e:47:e4:c6:9b:58:22:8a:28:18:df:a5:67: f5:12:78:f6:29:1b:c4:8a:c1:4c:2a:03:ef:0d:4c:8d:63:be: 9d:d3:bc:f7:ff:ad:2b:51:46:2d:f0:43:9e:fb:38:21:46:5c: 67:af:28:77:a0:4b:74:da:d3:f7:11:41:bb:3a:4d:46:69:49: 30:39:9e:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPJErew889Gu0HfWtWVRZ+QF9EKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZB QzY3MTIxMzAeFw0yNTEwMjAxODQ2NTJaFw0yNTEwMjMyMzIyNTJaMDMxMTAvBgNV BAMTKDVGNjE1MDNERDczNDQ3ODM3NjhCMUYxQjk1MjVDM0FCNkU1RjIzMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfm/5n9v+ONIpmUJyw8esyOVlw /l3MgbGKeTl3IxqNkaVmDhTfqYBwmpSnJT0/CYQ18p4o0r1klxW2XHx2uIW3Kmxn UhwiOm+NwuFYb5v1rITyJd6YBQFecDbNWgrb4VSbUOMhRpGkWzV/zLL8YaNzRFFI EtlF81F4M0PwJ9dnmsykYIXKXJAGdN1G+VxWCxZWnaJDGZ9ZhXNmz7Ep7R+tLxCW bFm3CTA/IDBMmjCtEHrdNkqRyC7zNG40Gt2yePiCC5AbCAjXyv6Nijpop3+w2JLa fKFzwDcizBfVABccI8HJg7ti98rLGloVoAUNgMD1O0PX8vr7fCwfs1ibj1cTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX2FQPdc0R4N2ix8blSXDq25fIyIwHwYDVR0j BBgwFoAUdAF9psO2k1OIwa3mAI+3j6xnEhMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2FkZWNkZC0yNTMzLTQ2MmQtYWNlMi1iYTRhN2EyY2E0YzMvMC83NDAxN0RBNkMz QjY5MzUzODhDMUFERTYwMDhGQjc4RkFDNjcxMjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZBQzY3 MTIxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNhZGVjZGQtMjUzMy00NjJkLWFj ZTItYmE0YTdhMmNhNGMzLzAvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3 OEZBQzY3MTIxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIVVV4U9JqzyKPIvGjjlJEf6pL2Kw/lj/ft UlwyIxc5wbgPDTNaCKEIiIeBeSxWhe/ha2hZb8JF7220VofCZVnkisfRPC8moyAL QjMHIeRUzbyfH1i1Pky67BjNKpwVP85PyxAxUSz62ZPFk//3n78ZhC/VRugmO2+8 8cND5SuGNWlMkmAPHEiJv4GSss7sLy80YyK9y+9Zf5NM1A7sJ4bORyS8euUEYJil g1GtVJBByJf14OP5IfQ6DkfkxptYIoooGN+lZ/USePYpG8SKwUwqA+8NTI1jvp3T vPf/rStRRi3wQ577OCFGXGevKHegS3Ta0/cRQbs6TUZpSTA5npo= -----END CERTIFICATE-----Generated at Tue Oct 21 13:25:05 2025 by rpki-client