$ rpki-client -vvf repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft File: C740DD931883C284135261B25A6958E80CDF63D2.mft (raw, json) Hash identifier: 3z3WwXEpTjDaPXe9Z8eG2vGb50G0ZSNZgzQXmYi4xOs= Subject key identifier: 2A:46:41:F4:E3:DF:D7:A2:6A:5D:C3:EB:81:BE:19:95:4A:2F:E3:8E Authority key identifier: C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2 Certificate issuer: /CN=C740DD931883C284135261B25A6958E80CDF63D2 Certificate serial: 5EA06D2CA1645F600E9E557B49CA11E2D342323B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft Manifest number: 01B4 Signing time: Fri 22 Aug 2025 10:31:47 +0000 Manifest this update: Fri 22 Aug 2025 10:26:47 +0000 Manifest next update: Mon 25 Aug 2025 21:05:47 +0000 Files and hashes: 1: C740DD931883C284135261B25A6958E80CDF63D2.crl (hash: 2iUivTbsz23HZ4Hc/MGRUrHarb+ty9ePPquuBdnu34Y=) 2: 3130332e3133392e3132312e302f32342d3234203d3e20313335363336.roa (hash: e/+fdrBlXeDfzPxhtNh66HWs6aVcjxIjkZ4W4qgvVgQ=) 3: 3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa (hash: GyuTjfSXg8CKV3wiOvbPNmUEDlW/pVUvbq70+NpobI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:a0:6d:2c:a1:64:5f:60:0e:9e:55:7b:49:ca:11:e2:d3:42:32:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C740DD931883C284135261B25A6958E80CDF63D2 Validity Not Before: Aug 22 10:26:47 2025 GMT Not After : Aug 25 21:05:47 2025 GMT Subject: CN=2A4641F4E3DFD7A26A5DC3EB81BE19954A2FE38E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c1:7c:98:e8:a2:75:e8:be:61:b1:e9:1f:49: 84:38:95:54:8c:3d:95:93:45:81:0a:fa:06:a2:eb: 23:be:0d:28:e6:ec:34:33:21:8c:17:1d:be:45:b3: 03:dd:33:12:10:c6:06:b6:56:4f:b1:7e:3b:84:06: 41:a3:b7:cd:48:65:d0:bc:aa:9e:a7:32:8f:ba:8c: 07:a4:50:b7:ef:f1:e7:a8:54:32:a2:f2:c4:40:3a: 64:bb:1f:f4:4c:7d:48:1c:5b:0a:39:5f:33:a3:d7: 18:71:fa:9c:39:d6:d8:98:12:66:27:0f:e6:03:c8: 5e:44:16:aa:5e:cc:e6:88:9f:bf:85:8d:6a:e3:f7: c8:8a:33:0b:f9:0b:3b:25:df:9b:3f:e9:25:1a:14: 88:50:a9:57:38:91:fd:7c:d0:c2:dc:4f:db:a3:26: 94:3d:61:3c:cd:2f:bf:35:cf:fd:e6:56:bb:57:f8: dc:35:3d:18:9e:78:4b:b2:4f:38:bc:b2:eb:b5:5e: 6d:f9:54:f3:f9:cd:75:60:9f:fd:4f:15:ec:36:81: 6d:9b:bf:ff:fc:31:01:e5:74:9b:a2:5f:58:93:d4: cd:dc:2f:3f:b9:f1:d2:d4:e0:9b:b6:7f:40:8a:d4: ab:78:d1:fb:2c:57:17:d0:0c:de:86:a5:af:43:c9: 98:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:46:41:F4:E3:DF:D7:A2:6A:5D:C3:EB:81:BE:19:95:4A:2F:E3:8E X509v3 Authority Key Identifier: keyid:C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:18:e7:0f:c9:65:13:44:97:3d:42:fa:c7:25:0e:de:a5:cf: 3d:6d:d8:7d:ff:3c:6f:6d:35:23:b3:8d:37:39:5c:47:1b:bf: d0:90:c9:90:ce:e7:a1:8f:70:16:65:dd:80:f7:da:30:00:50: 40:8c:4d:78:1b:48:bc:e4:c1:96:f4:bf:72:0d:78:bf:90:88: 40:2d:4c:40:ee:22:7b:3a:fe:95:ee:b7:95:c2:63:66:4c:e1: 24:85:28:dc:e2:34:3b:16:d6:46:13:7e:3c:ca:05:66:bc:b1: 0a:90:5f:51:a3:7a:b3:2e:bd:fd:f3:cc:3e:bb:dc:4c:2e:28: 86:83:c6:27:e5:f0:b7:55:7b:25:41:95:e1:7a:92:5c:f4:4c: 80:c0:d2:48:82:9e:80:e8:84:e5:93:ed:28:02:5c:59:3d:2f: 33:b6:9f:18:ec:73:ae:5a:57:3f:d9:b8:98:ff:de:12:fb:c3: 62:86:06:b0:37:9e:b7:e5:78:c8:9e:a1:5a:b0:04:d6:77:f0: 66:84:f6:d3:ef:36:28:18:f3:ef:45:2f:d4:96:f5:cd:5f:f9: 6a:f6:50:25:0c:df:82:df:3c:fd:b8:cf:b0:81:1e:d1:bb:ba: 8d:f1:b9:2b:8c:06:a4:3a:ee:3a:8c:e6:9d:d2:c2:1a:57:60: c3:57:77:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXqBtLKFkX2AOnlV7ScoR4tNCMjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4RTgw Q0RGNjNEMjAeFw0yNTA4MjIxMDI2NDdaFw0yNTA4MjUyMTA1NDdaMDMxMTAvBgNV BAMTKDJBNDY0MUY0RTNERkQ3QTI2QTVEQzNFQjgxQkUxOTk1NEEyRkUzOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0wXyY6KJ16L5hsekfSYQ4lVSM PZWTRYEK+gai6yO+DSjm7DQzIYwXHb5FswPdMxIQxga2Vk+xfjuEBkGjt81IZdC8 qp6nMo+6jAekULfv8eeoVDKi8sRAOmS7H/RMfUgcWwo5XzOj1xhx+pw51tiYEmYn D+YDyF5EFqpezOaIn7+FjWrj98iKMwv5Czsl35s/6SUaFIhQqVc4kf180MLcT9uj JpQ9YTzNL781z/3mVrtX+Nw1PRieeEuyTzi8suu1Xm35VPP5zXVgn/1PFew2gW2b v//8MQHldJuiX1iT1M3cLz+58dLU4Ju2f0CK1Kt40fssVxfQDN6Gpa9DyZhhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKkZB9OPf16JqXcPrgb4ZlUov444wHwYDVR0j BBgwFoAUx0DdkxiDwoQTUmGyWmlY6AzfY9IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDcxNDY2NS1jNjcwLTQ1MWUtYmRjYi05MDc0MjE5ZDU1Y2UvMC9DNzQwREQ5MzE4 ODNDMjg0MTM1MjYxQjI1QTY5NThFODBDREY2M0QyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4RTgwQ0RG NjNEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3MTQ2NjUtYzY3MC00NTFlLWJk Y2ItOTA3NDIxOWQ1NWNlLzAvQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4 RTgwQ0RGNjNEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMY5w/JZRNElz1C+sclDt6lzz1t2H3/PG9t NSOzjTc5XEcbv9CQyZDO56GPcBZl3YD32jAAUECMTXgbSLzkwZb0v3INeL+QiEAt TEDuIns6/pXut5XCY2ZM4SSFKNziNDsW1kYTfjzKBWa8sQqQX1GjerMuvf3zzD67 3EwuKIaDxifl8LdVeyVBleF6klz0TIDA0kiCnoDohOWT7SgCXFk9LzO2nxjsc65a Vz/ZuJj/3hL7w2KGBrA3nrfleMieoVqwBNZ38GaE9tPvNigY8+9FL9SW9c1f+Wr2 UCUM34LfPP24z7CBHtG7uo3xuSuMBqQ67jqM5p3SwhpXYMNXd00= -----END CERTIFICATE-----Generated at Sat Aug 23 12:46:08 2025 by rpki-client