$ rpki-client -vvf repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft File: C740DD931883C284135261B25A6958E80CDF63D2.mft (raw, json) Hash identifier: sA0fgoLj1CKngkcoizPSaeyXcHWF5HgDbi25UzspYB0= Subject key identifier: AF:80:90:DC:83:DB:7F:69:81:A6:E2:AC:02:91:9E:ED:BA:2F:57:FB Authority key identifier: C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2 Certificate issuer: /CN=C740DD931883C284135261B25A6958E80CDF63D2 Certificate serial: 5B217957DDE8E4528D0C82D3B3195185F83A337E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft Manifest number: 019C Signing time: Tue 01 Jul 2025 13:41:41 +0000 Manifest this update: Tue 01 Jul 2025 13:36:41 +0000 Manifest next update: Sat 05 Jul 2025 00:02:41 +0000 Files and hashes: 1: C740DD931883C284135261B25A6958E80CDF63D2.crl (hash: Oybal8RNxRtv+tw8DjHd6H44SorcLeScsmgzSQKMmwY=) 2: 3130332e3133392e3132312e302f32342d3234203d3e20313335363336.roa (hash: e/+fdrBlXeDfzPxhtNh66HWs6aVcjxIjkZ4W4qgvVgQ=) 3: 3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa (hash: MogNaCj5sk3XJEpkfUEURE+ZZFPXBmpIW01mKoDb4Uw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 15:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:21:79:57:dd:e8:e4:52:8d:0c:82:d3:b3:19:51:85:f8:3a:33:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C740DD931883C284135261B25A6958E80CDF63D2 Validity Not Before: Jul 1 13:36:41 2025 GMT Not After : Jul 5 00:02:41 2025 GMT Subject: CN=AF8090DC83DB7F6981A6E2AC02919EEDBA2F57FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e2:e5:f7:a6:41:d8:d9:60:37:9d:8e:b0:3e: 18:1f:9a:e6:6d:d1:25:75:bb:97:89:e5:2d:01:c7: dd:a3:13:33:c3:fd:5c:33:a1:d0:21:4c:a9:4c:b8: 94:63:11:b5:30:f5:fa:43:6d:00:68:ec:13:3d:5c: 73:47:69:db:c1:77:68:d6:78:aa:1f:78:89:36:2b: 4a:51:ee:c5:2c:4b:9e:d3:f9:f8:ca:9f:d0:43:29: a6:c4:8d:1a:cb:68:d4:8d:04:58:17:61:e9:1f:7b: 30:e1:62:9d:04:d6:f4:38:3c:96:b5:08:90:d7:80: c9:d9:e5:b9:4d:c8:70:cb:f5:ee:5e:3f:c9:8c:a2: 01:d2:6e:91:09:42:25:b0:de:b7:18:bd:3d:bc:74: 41:fd:94:7f:6b:f3:79:9a:d7:54:a6:0a:54:21:06: e3:c1:29:f9:56:08:7d:bc:53:61:2c:a0:45:51:b4: 7c:89:18:0a:5c:f2:05:a1:9a:51:64:16:82:4c:fb: ed:76:09:8e:03:7f:fa:ff:9f:3d:c7:75:48:ee:c4: a4:92:09:b7:4c:0d:2b:e4:ba:f2:d8:81:a7:ce:b0: b0:7a:ce:6d:be:03:1c:a6:1a:b3:f4:3f:35:9a:a6: 51:b1:dc:73:3d:27:c7:08:3c:cc:4a:78:e8:8c:fd: cc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:80:90:DC:83:DB:7F:69:81:A6:E2:AC:02:91:9E:ED:BA:2F:57:FB X509v3 Authority Key Identifier: keyid:C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:12:93:85:9f:1b:02:9d:a9:ae:62:69:80:60:45:54:8a:8e: 4b:f1:73:e9:64:94:82:21:13:25:92:46:17:38:07:f8:8f:84: 46:37:22:14:bc:fe:37:e4:56:6a:60:b3:af:5c:d7:e4:8a:e6: 62:d7:e9:2c:bb:9c:1c:1e:03:e3:6c:2b:6c:2a:08:cc:b2:5b: 07:bd:ed:95:7e:21:7d:7f:fe:a9:e8:26:d8:4a:cb:57:b7:82: 42:b6:f0:6f:14:45:3b:b6:3a:54:85:54:fb:bf:87:84:f7:df: 70:56:1b:7c:3c:e3:68:e7:da:45:80:69:bf:a4:b7:e2:a5:28: 6a:86:b6:18:08:fe:25:d5:9e:bf:85:00:10:56:ce:a8:63:87: 4c:66:21:21:5d:59:1c:92:86:03:34:de:be:6e:25:cb:ec:4a: 1e:60:b6:ea:c8:df:3e:df:2c:95:8a:99:12:73:70:3e:a7:67: 9c:02:b4:17:f4:f1:2d:b4:1c:b5:5e:b6:67:5f:12:1c:d9:5c: ce:d1:27:fd:ab:a3:ef:b0:a3:6d:93:cf:0f:33:35:d8:65:b8: d9:f7:cc:2a:50:17:64:02:a2:ff:6c:96:d6:df:bc:c6:0f:8a: 96:45:db:a9:33:53:58:38:07:96:13:8c:78:fd:08:32:8e:3f: 93:a1:8f:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWyF5V93o5FKNDILTsxlRhfg6M34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4RTgw Q0RGNjNEMjAeFw0yNTA3MDExMzM2NDFaFw0yNTA3MDUwMDAyNDFaMDMxMTAvBgNV BAMTKEFGODA5MERDODNEQjdGNjk4MUE2RTJBQzAyOTE5RUVEQkEyRjU3RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw4uX3pkHY2WA3nY6wPhgfmuZt 0SV1u5eJ5S0Bx92jEzPD/VwzodAhTKlMuJRjEbUw9fpDbQBo7BM9XHNHadvBd2jW eKofeIk2K0pR7sUsS57T+fjKn9BDKabEjRrLaNSNBFgXYekfezDhYp0E1vQ4PJa1 CJDXgMnZ5blNyHDL9e5eP8mMogHSbpEJQiWw3rcYvT28dEH9lH9r83ma11SmClQh BuPBKflWCH28U2EsoEVRtHyJGApc8gWhmlFkFoJM++12CY4Df/r/nz3HdUjuxKSS CbdMDSvkuvLYgafOsLB6zm2+AxymGrP0PzWaplGx3HM9J8cIPMxKeOiM/czNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr4CQ3IPbf2mBpuKsApGe7bovV/swHwYDVR0j BBgwFoAUx0DdkxiDwoQTUmGyWmlY6AzfY9IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDcxNDY2NS1jNjcwLTQ1MWUtYmRjYi05MDc0MjE5ZDU1Y2UvMC9DNzQwREQ5MzE4 ODNDMjg0MTM1MjYxQjI1QTY5NThFODBDREY2M0QyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4RTgwQ0RG NjNEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3MTQ2NjUtYzY3MC00NTFlLWJk Y2ItOTA3NDIxOWQ1NWNlLzAvQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4 RTgwQ0RGNjNEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANASk4WfGwKdqa5iaYBgRVSKjkvxc+lklIIh EyWSRhc4B/iPhEY3IhS8/jfkVmpgs69c1+SK5mLX6Sy7nBweA+NsK2wqCMyyWwe9 7ZV+IX1//qnoJthKy1e3gkK28G8URTu2OlSFVPu/h4T333BWG3w842jn2kWAab+k t+KlKGqGthgI/iXVnr+FABBWzqhjh0xmISFdWRyShgM03r5uJcvsSh5gturI3z7f LJWKmRJzcD6nZ5wCtBf08S20HLVetmdfEhzZXM7RJ/2ro++wo22Tzw8zNdhluNn3 zCpQF2QCov9sltbfvMYPipZF26kzU1g4B5YTjHj9CDKOP5Ohjyk= -----END CERTIFICATE-----Generated at Wed Jul 2 02:12:28 2025 by rpki-client