$ rpki-client -vvf repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft File: 74017DA6C3B6935388C1ADE6008FB78FAC671213.mft (raw, json) Hash identifier: 3GN0OkyxokpMaAG2+5mYORDWMh+Vc0qsE1Kx2ivF2U0= Subject key identifier: 4F:C8:28:17:6C:8E:59:02:F9:BA:4D:29:A0:AC:8B:30:CB:21:34:CD Authority key identifier: 74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 Certificate issuer: /CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Certificate serial: 203E60618FBF4684930E31284975E0A3870DD3A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft Manifest number: 0164 Signing time: Sat 23 Aug 2025 07:01:54 +0000 Manifest this update: Sat 23 Aug 2025 06:56:54 +0000 Manifest next update: Tue 26 Aug 2025 11:04:54 +0000 Files and hashes: 1: 74017DA6C3B6935388C1ADE6008FB78FAC671213.crl (hash: yGd/F6t9mJRt1AVW81Mk7oWAVjBWihHhnnLxnMr+vug=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3e:60:61:8f:bf:46:84:93:0e:31:28:49:75:e0:a3:87:0d:d3:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Validity Not Before: Aug 23 06:56:54 2025 GMT Not After : Aug 26 11:04:54 2025 GMT Subject: CN=4FC828176C8E5902F9BA4D29A0AC8B30CB2134CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:39:38:44:32:37:47:12:85:da:ae:62:d4:eb: 5d:3d:69:8a:1a:03:46:5d:e8:1e:86:72:44:b0:33: 17:fe:49:80:e3:39:4a:c1:f3:58:d5:03:a4:3f:c0: c5:0f:c2:e6:a6:49:fe:c2:21:bc:c9:d0:63:9b:7a: b8:58:ec:4c:ad:7b:15:55:9e:0e:95:dc:cd:83:ff: 74:49:f9:ed:52:7d:00:82:cc:b7:03:1d:dd:58:85: 28:ce:ce:16:54:c4:c4:7a:54:cb:e4:32:da:42:b2: a2:be:5e:fb:a7:0b:d1:e5:89:d5:d5:b4:5f:3e:d3: 51:b6:32:79:54:06:64:be:db:51:c6:fb:69:9c:1b: e2:14:1f:23:af:59:8a:a0:96:5a:77:db:e8:a3:db: 0f:f0:da:4c:7f:6f:57:fd:3d:13:a9:88:3a:96:6f: 14:74:a8:f4:93:21:27:e3:84:b3:b4:10:ae:81:33: 4d:41:65:59:89:43:48:56:99:d9:d0:45:04:64:5b: 19:f7:cd:1a:db:c8:cb:9f:00:56:36:ac:ed:8a:5d: 8c:13:d5:d2:37:b3:3f:f6:78:30:28:e8:d5:d4:6b: e8:fe:d9:30:d6:4d:8c:70:1e:ed:4c:5c:92:6e:46: 3f:ab:85:a9:36:97:fd:9c:14:3b:36:03:6e:bb:8d: a6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C8:28:17:6C:8E:59:02:F9:BA:4D:29:A0:AC:8B:30:CB:21:34:CD X509v3 Authority Key Identifier: keyid:74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:56:88:ec:52:03:62:78:82:96:cd:f6:68:34:d1:82:40:20: a5:f6:06:c2:8a:ea:7f:62:2b:3c:cb:71:47:2d:27:02:64:29: f5:4f:44:76:5f:d6:9d:3b:42:e7:2c:46:f7:60:6d:f8:17:bb: 34:1b:85:f8:b3:aa:fc:04:cc:be:a9:41:da:4f:7c:40:52:c0: 88:76:7e:2a:a0:58:c7:07:df:40:b3:d4:c4:a0:5b:d3:f7:c0: 50:60:ae:bf:67:51:19:53:f6:db:5a:d9:bd:cc:b6:d1:0f:ca: d0:d1:26:46:46:00:61:4b:7d:ce:46:6b:a7:56:d0:a9:0b:bf: 41:f5:35:cf:cf:04:9c:29:68:02:27:c3:35:e9:a2:30:c8:06: 12:c9:20:e5:e3:8a:ae:f8:3f:03:22:ac:82:f1:62:1e:ec:55: 84:af:f1:10:f7:ae:7e:51:bb:da:e6:72:38:c3:27:bb:11:e8: 93:1d:d8:cd:d8:15:55:67:4c:27:0e:46:db:db:43:d4:bb:4f: 77:8b:90:e2:64:d6:cc:a7:41:94:eb:da:62:61:48:66:15:48: 19:de:6c:c5:f9:f1:32:2f:1d:99:71:f0:6b:95:e4:71:c2:d9: 2b:af:f2:c5:f9:86:0b:b0:fb:7f:79:6a:78:7e:d5:63:93:0e: 20:e8:69:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUID5gYY+/RoSTDjEoSXXgo4cN06kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZB QzY3MTIxMzAeFw0yNTA4MjMwNjU2NTRaFw0yNTA4MjYxMTA0NTRaMDMxMTAvBgNV BAMTKDRGQzgyODE3NkM4RTU5MDJGOUJBNEQyOUEwQUM4QjMwQ0IyMTM0Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdOThEMjdHEoXarmLU6109aYoa A0Zd6B6GckSwMxf+SYDjOUrB81jVA6Q/wMUPwuamSf7CIbzJ0GOberhY7EytexVV ng6V3M2D/3RJ+e1SfQCCzLcDHd1YhSjOzhZUxMR6VMvkMtpCsqK+XvunC9HlidXV tF8+01G2MnlUBmS+21HG+2mcG+IUHyOvWYqgllp32+ij2w/w2kx/b1f9PROpiDqW bxR0qPSTISfjhLO0EK6BM01BZVmJQ0hWmdnQRQRkWxn3zRrbyMufAFY2rO2KXYwT 1dI3sz/2eDAo6NXUa+j+2TDWTYxwHu1MXJJuRj+rhak2l/2cFDs2A267jabbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT8goF2yOWQL5uk0poKyLMMshNM0wHwYDVR0j BBgwFoAUdAF9psO2k1OIwa3mAI+3j6xnEhMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2FkZWNkZC0yNTMzLTQ2MmQtYWNlMi1iYTRhN2EyY2E0YzMvMC83NDAxN0RBNkMz QjY5MzUzODhDMUFERTYwMDhGQjc4RkFDNjcxMjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZBQzY3 MTIxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNhZGVjZGQtMjUzMy00NjJkLWFj ZTItYmE0YTdhMmNhNGMzLzAvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3 OEZBQzY3MTIxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtWiOxSA2J4gpbN9mg00YJAIKX2BsKK6n9i KzzLcUctJwJkKfVPRHZf1p07QucsRvdgbfgXuzQbhfizqvwEzL6pQdpPfEBSwIh2 fiqgWMcH30Cz1MSgW9P3wFBgrr9nURlT9tta2b3MttEPytDRJkZGAGFLfc5Ga6dW 0KkLv0H1Nc/PBJwpaAInwzXpojDIBhLJIOXjiq74PwMirILxYh7sVYSv8RD3rn5R u9rmcjjDJ7sR6JMd2M3YFVVnTCcORtvbQ9S7T3eLkOJk1synQZTr2mJhSGYVSBne bMX58TIvHZlx8GuV5HHC2Suv8sX5hguw+395anh+1WOTDiDoadM= -----END CERTIFICATE-----Generated at Sat Aug 23 12:34:27 2025 by rpki-client